$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5e652df-e1f4-472c-9222-12d13a11ae0e.roa File: a5e652df-e1f4-472c-9222-12d13a11ae0e.roa (raw, json) Hash identifier: BzzW4DgvoaLrXpr2h6NhlwC1s1ZaDb6PaIL71v5D8tk= Subject key identifier: 8B:25:95:84:54:09:7E:B8:50:3A:5F:FF:3F:26:52:B4:95:C1:9E:93 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 153A6563A59F2EB46C92E95E58676D49C957031A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5e652df-e1f4-472c-9222-12d13a11ae0e.roa Signing time: Mon 02 Dec 2024 00:00:00 +0000 ROA not before: Mon 02 Dec 2024 00:00:00 +0000 ROA not after: Mon 06 Jan 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.192.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3a:65:63:a5:9f:2e:b4:6c:92:e9:5e:58:67:6d:49:c9:57:03:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 2 00:00:00 2024 GMT Not After : Jan 6 23:59:59 2025 GMT Subject: serialNumber=71924a247a94807bd70c410965116476bf69902d3c107df7c1cdf6597232a694, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:4b:ec:9b:3e:35:ed:9e:05:3f:95:9c:78: c8:9a:60:1e:1c:99:e5:3b:62:66:34:22:2a:07:ea: ac:76:b3:06:b7:ab:9e:25:63:52:9b:25:b6:75:69: 0c:d0:f6:1e:00:5f:77:23:da:4f:19:f9:0c:a8:b6: 2b:fb:07:a0:03:74:e0:6c:2e:0a:eb:76:64:e6:07: af:10:b4:3c:1c:4c:7f:53:fe:62:be:c7:d0:50:9b: 56:c0:c9:19:60:10:d2:dd:2d:9b:f7:8c:b5:4e:05: ca:b7:a3:18:b7:b4:90:b8:84:c4:fc:c6:c5:b8:8c: ca:6d:ab:45:88:0d:0d:ab:9c:a7:dc:c9:56:3e:42: c4:e7:b8:f9:b8:26:ce:41:22:18:94:d3:7b:08:2a: be:ec:05:85:b8:97:4d:0a:04:a7:4d:58:c9:cb:57: 56:dc:55:bc:14:e0:0a:c3:35:8b:4e:22:a8:5f:dd: a0:21:fa:d3:04:bf:5e:0f:80:90:13:07:3e:5b:f9: 95:31:69:14:8e:d1:5c:bc:6a:41:d7:d1:93:45:f3: 5a:9a:d1:bf:c3:7a:a2:0f:d9:10:16:84:df:55:e6: 10:74:54:e4:ff:0c:9d:2f:75:c8:48:de:48:a1:57: 60:a3:ef:75:9e:7c:1a:91:3f:b5:a0:1f:ef:52:8c: e3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:25:95:84:54:09:7E:B8:50:3A:5F:FF:3F:26:52:B4:95:C1:9E:93 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5e652df-e1f4-472c-9222-12d13a11ae0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.192.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:7d:17:b4:f2:3b:8d:68:13:68:a6:09:54:a8:6b:93:cc:95: 8e:7a:03:53:84:0d:f5:2d:a8:5d:db:a2:69:07:72:53:8f:eb: 33:fd:d1:1f:4f:dd:19:6e:fc:e3:2d:47:80:53:ac:d4:22:58: 85:50:7b:f1:d9:72:c4:7e:e8:70:42:95:c2:e4:69:08:ff:66: a6:dd:77:94:52:ba:97:59:2b:1a:da:d6:75:4f:b8:86:7a:ca: e0:43:fe:45:d4:c4:72:87:b1:80:30:ee:b5:b1:23:b6:a2:fa: 58:86:00:75:04:f2:27:75:69:c8:66:2d:27:69:ce:0f:26:63: 1a:0d:74:e8:07:d2:d9:ff:24:7e:bd:08:d2:ac:99:1e:e0:10: f1:b6:0c:dc:f0:5f:a2:d0:3c:3c:d4:e2:3f:ad:3e:62:e4:80: 0f:95:25:c3:49:b2:28:0b:8a:0d:ab:f4:96:93:61:cb:12:df: e0:1e:9a:5f:39:25:3e:e4:4b:fb:e9:be:a9:16:8d:ce:3b:e7: 11:76:f3:20:dd:e9:f6:e4:35:73:dd:6d:4e:84:47:02:76:07: 90:10:14:97:11:25:a3:db:cf:98:bf:cf:65:55:0c:50:23:55: 35:6a:94:2a:44:7c:37:3e:ab:ed:e5:a9:3b:80:79:50:2d:8c: 59:44:34:f9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFTplY6WfLrRskuleWGdtSclXAxowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjAyMDAwMDAwWhcNMjUwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTkyNGEyNDdhOTQ4MDdiZDcwYzQxMDk2NTExNjQ3NmJm Njk5MDJkM2MxMDdkZjdjMWNkZjY1OTcyMzJhNjk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2ZEvsmz417Z4FP5WceMiaYB4cmeU7YmY0IioH6qx2swa3 q54lY1KbJbZ1aQzQ9h4AX3cj2k8Z+Qyotiv7B6ADdOBsLgrrdmTmB68QtDwcTH9T /mK+x9BQm1bAyRlgENLdLZv3jLVOBcq3oxi3tJC4hMT8xsW4jMptq0WIDQ2rnKfc yVY+QsTnuPm4Js5BIhiU03sIKr7sBYW4l00KBKdNWMnLV1bcVbwU4ArDNYtOIqhf 3aAh+tMEv14PgJATBz5b+ZUxaRSO0Vy8akHX0ZNF81qa0b/DeqIP2RAWhN9V5hB0 VOT/DJ0vdchI3kihV2Cj73WefBqRP7WgH+9SjOONAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiyWVhFQJfrhQOl//PyZStJXBnpMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1ZTY1MmRmLWUxZjQtNDcyYy05MjIyLTEyZDEzYTExYWUwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANwDANBgkqhkiG9w0BAQsFAAOCAQEADH0XtPI7jWgTaKYJVKhrk8yVjnoD U4QN9S2oXduiaQdyU4/rM/3RH0/dGW784y1HgFOs1CJYhVB78dlyxH7ocEKVwuRp CP9mpt13lFK6l1krGtrWdU+4hnrK4EP+RdTEcoexgDDutbEjtqL6WIYAdQTyJ3Vp yGYtJ2nODyZjGg106AfS2f8kfr0I0qyZHuAQ8bYM3PBfotA8PNTiP60+YuSAD5Ul w0myKAuKDav0lpNhyxLf4B6aXzklPuRL++m+qRaNzjvnEXbzIN3p9uQ1c91tToRH AnYHkBAUlxElo9vPmL/PZVUMUCNVNWqUKkR8Nz6r7eWpO4B5UC2MWUQ0+Q== -----END CERTIFICATE-----Generated at Thu Dec 26 01:23:38 2024 by rpki-client on console-fra.rpki-client.org