$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0b942b1-f707-49a5-a5e3-a15e7ff9794d.roa File: a0b942b1-f707-49a5-a5e3-a15e7ff9794d.roa (raw, json) Hash identifier: 9Y7H2rxMoKFCBg0RwurSvfaOszen5OQ3fP+kU39S70Y= Subject key identifier: A2:99:6F:B2:7C:FF:E9:49:69:69:AC:BC:B5:95:B6:63:8C:D8:B2:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 82915391158646D6833A2B5B20E88DA5957886 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0b942b1-f707-49a5-a5e3-a15e7ff9794d.roa Signing time: Tue 12 Nov 2024 00:00:00 +0000 ROA not before: Tue 12 Nov 2024 00:00:00 +0000 ROA not after: Tue 17 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 56.151.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82:91:53:91:15:86:46:d6:83:3a:2b:5b:20:e8:8d:a5:95:78:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 12 00:00:00 2024 GMT Not After : Dec 17 23:59:59 2024 GMT Subject: serialNumber=2548aedc464ffbdbf664a8270dc5a6c32857732f7ee5b1e4e09c6a921197c74d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5d:0e:79:e6:8a:3f:50:7e:37:1a:26:9c:14: 27:e8:97:6e:4e:63:ba:5a:14:a5:1a:8d:f3:bd:b6: 4a:e1:42:47:f0:03:05:3b:17:ff:c7:c6:54:0e:4b: 63:f8:5b:98:74:f8:8d:f5:8b:0f:23:df:15:58:1b: 81:53:8e:cd:34:99:b8:a3:2c:ef:38:8a:00:4d:9d: 46:69:39:3d:df:4a:96:68:c9:af:e6:6a:8c:ba:b8: 8f:70:d7:89:21:81:6d:16:c0:84:01:ae:c4:6a:51: d1:cd:60:72:77:19:46:3d:46:9a:2a:22:76:22:bd: 11:de:8e:5f:6d:86:27:fb:a4:d9:22:62:3c:83:32: 69:9f:e4:c2:e9:32:b7:50:82:8f:90:43:db:5a:53: 2d:8b:e7:f0:39:45:92:8b:30:00:32:15:bf:b9:a7: 33:66:ab:8e:bc:0d:67:ec:d0:2e:2b:bb:4e:96:3e: 66:b4:1d:33:09:1c:d4:24:65:f3:e3:ff:f6:71:7d: e1:82:1d:e5:0b:0e:37:52:81:ef:f3:61:2b:37:66: 99:80:ea:d4:6c:c8:ae:74:43:a1:1e:4f:8c:0a:3e: 94:14:b9:af:50:32:0e:0b:dd:8a:38:59:f9:81:b3: 10:23:42:39:66:41:2f:a1:f7:0d:e8:fa:03:80:c2: 9b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:99:6F:B2:7C:FF:E9:49:69:69:AC:BC:B5:95:B6:63:8C:D8:B2:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0b942b1-f707-49a5-a5e3-a15e7ff9794d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.151.0.0/16 Signature Algorithm: sha256WithRSAEncryption ae:95:f4:35:1a:1d:66:3d:64:4e:f1:61:02:75:ff:5d:0c:0e: a6:c4:e0:d6:a5:10:2f:0a:28:4c:20:f0:2f:90:8f:a4:61:bf: de:d0:29:39:53:4a:64:7c:d2:1b:2f:04:23:c5:ae:e1:9b:9b: 55:60:88:42:d3:47:67:bd:cc:68:a2:ea:b9:f0:89:ce:21:b5: 54:19:27:20:aa:6f:7c:19:f9:22:08:79:dd:4d:77:01:fd:e5: 45:49:66:87:ed:f6:e3:31:8f:2c:a5:87:a8:14:82:ab:6e:72: 21:9b:42:13:e9:57:7c:67:55:e1:53:45:5c:3f:6b:7f:89:0d: 7b:06:c3:f0:89:88:b4:53:94:5e:36:e0:09:93:42:e3:2b:48: 25:48:0a:c8:26:17:39:0a:cf:bf:d3:ff:5f:f4:13:17:17:ed: f7:bb:22:a6:a8:b8:a3:58:e9:93:e3:3c:a5:99:e5:65:b3:94: 2d:49:fd:b9:9e:43:f1:ea:df:b9:52:08:04:2d:0f:0a:35:f1: 68:00:32:f7:12:c9:25:68:2b:42:ca:36:e8:43:4f:61:81:61: 9d:2b:13:bd:98:83:54:81:71:ce:4c:fb:6c:92:d5:31:98:20: 67:58:37:ef:2b:78:3d:23:a7:5c:71:0d:52:51:38:a8:12:52: fb:0c:6b:cb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAIKRU5EVhkbWgzorWyDojaWVeIYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTEyMDAwMDAwWhcNMjQxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTQ4YWVkYzQ2NGZmYmRiZjY2NGE4MjcwZGM1YTZjMzI4 NTc3MzJmN2VlNWIxZTRlMDljNmE5MjExOTdjNzRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVXQ555oo/UH43GiacFCfol25OY7paFKUajfO9tkrhQkfw AwU7F//HxlQOS2P4W5h0+I31iw8j3xVYG4FTjs00mbijLO84igBNnUZpOT3fSpZo ya/maoy6uI9w14khgW0WwIQBrsRqUdHNYHJ3GUY9RpoqInYivRHejl9thif7pNki YjyDMmmf5MLpMrdQgo+QQ9taUy2L5/A5RZKLMAAyFb+5pzNmq468DWfs0C4ru06W Pma0HTMJHNQkZfPj//ZxfeGCHeULDjdSge/zYSs3ZpmA6tRsyK50Q6EeT4wKPpQU ua9QMg4L3Yo4WfmBsxAjQjlmQS+h9w3o+gOAwpvDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUoplvsnz/6Ulpaay8tZW2Y4zYsmEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwYjk0MmIxLWY3MDctNDlhNS1hNWUzLWExNWU3ZmY5Nzk0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4lzANBgkqhkiG9w0BAQsFAAOCAQEArpX0NRodZj1kTvFhAnX/XQwOpsTg 1qUQLwooTCDwL5CPpGG/3tApOVNKZHzSGy8EI8Wu4ZubVWCIQtNHZ73MaKLqufCJ ziG1VBknIKpvfBn5Igh53U13Af3lRUlmh+324zGPLKWHqBSCq25yIZtCE+lXfGdV 4VNFXD9rf4kNewbD8ImItFOUXjbgCZNC4ytIJUgKyCYXOQrPv9P/X/QTFxft97si pqi4o1jpk+M8pZnlZbOULUn9uZ5D8erfuVIIBC0PCjXxaAAy9xLJJWgrQso26ENP YYFhnSsTvZiDVIFxzkz7bJLVMZggZ1g37yt4PSOnXHENUlE4qBJS+wxryw== -----END CERTIFICATE-----Generated at Sun Nov 24 02:35:41 2024 by rpki-client on console-fra.rpki-client.org