$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a740bdf5-4421-4ea8-bb60-33d4cd558809.roa File: a740bdf5-4421-4ea8-bb60-33d4cd558809.roa (raw, json) Hash identifier: /3Q2O0W/YS/1vtfiiAqwCFXHU/mfC/py8mwyCeFa6wc= Subject key identifier: C4:AF:D8:57:AA:E0:CD:E6:04:98:0B:FB:7C:91:60:35:FA:95:72:C7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 47440D6AA6E253707B5BF50D46782C2DEA76B571 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a740bdf5-4421-4ea8-bb60-33d4cd558809.roa Signing time: Wed 13 Nov 2024 00:00:00 +0000 ROA not before: Wed 13 Nov 2024 00:00:00 +0000 ROA not after: Wed 18 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 150.247.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:44:0d:6a:a6:e2:53:70:7b:5b:f5:0d:46:78:2c:2d:ea:76:b5:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 13 00:00:00 2024 GMT Not After : Dec 18 23:59:59 2024 GMT Subject: serialNumber=37aeb1abfdea7dc936182934eec4dca2f358d830292a5bc9d20c25f9e0e4f3f2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:a4:d5:3c:b3:a5:9c:85:d0:19:5b:78:15: c7:90:93:1b:05:5f:53:e5:f7:9c:1c:41:a6:d0:77: c9:a7:79:da:04:d5:d2:55:5b:02:96:a8:dd:ef:b1: 74:26:e7:a9:e6:50:f2:e3:67:b7:83:3e:dd:53:ae: ba:d2:3f:16:82:99:d1:e3:35:78:19:9a:c7:63:08: 0a:30:bc:a8:80:ba:c3:d3:96:0b:77:2c:ce:5f:8e: 8a:8f:bc:5c:56:e9:0f:b9:39:e4:79:9f:6f:c7:f6: d8:1c:43:83:0b:0b:b7:b3:eb:d3:6a:bb:a9:c0:e3: 28:28:dc:46:a8:9f:20:56:1f:86:48:b6:da:8b:bc: 52:70:ba:c4:5d:17:d7:a9:25:46:35:35:8e:50:2a: aa:07:11:66:e9:11:16:6f:e6:37:95:78:49:56:75: 8b:02:9f:60:d7:5f:18:0b:21:41:d3:11:a1:25:88: c6:2d:de:45:f9:dc:c6:c0:91:41:48:b3:64:c7:dd: cc:a5:38:80:f8:65:c9:b4:20:14:b6:0a:e0:12:e4: 8b:58:c3:c8:df:9a:fc:90:c1:fb:9d:9f:ad:10:39: be:50:07:4b:df:d3:5c:fd:10:12:c9:3a:bc:18:e8: 8d:17:10:9d:52:e8:90:34:90:38:4f:03:f1:09:a5: 68:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AF:D8:57:AA:E0:CD:E6:04:98:0B:FB:7C:91:60:35:FA:95:72:C7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a740bdf5-4421-4ea8-bb60-33d4cd558809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.247.32.0/20 Signature Algorithm: sha256WithRSAEncryption c1:e3:93:12:94:e7:81:3a:24:d3:71:6c:89:e3:86:e1:e1:c1: fd:ce:24:82:81:78:67:9c:20:c9:48:2a:ce:47:16:fa:4b:a3: bd:4b:dd:06:46:dd:f4:7d:7a:62:10:87:cb:b9:50:ac:37:28: 15:f4:ff:f4:78:4e:78:90:59:27:09:f6:68:b6:65:2b:5a:e8: d9:61:05:0c:96:4a:44:54:0b:2b:ed:e1:b5:ec:25:f2:57:37: 4e:63:40:be:18:de:fa:de:73:70:58:69:3f:01:2d:76:03:54: e7:d0:23:53:72:67:73:b2:e6:c6:9f:33:22:b3:6e:25:d5:06: 8a:e4:e1:0c:09:89:2d:53:c8:89:1f:85:d4:10:c1:f2:06:3c: 12:cc:ef:ed:4f:6a:15:50:89:a8:dc:1a:01:2e:2e:db:63:30: cc:ee:5f:ff:92:9b:78:79:b9:66:81:1a:e6:f0:79:34:a7:9c: 46:eb:d3:95:11:cd:49:a1:8d:1f:30:de:65:91:2f:79:81:78: 16:4c:d2:6f:32:d9:f7:1e:ce:c4:8e:84:8e:ff:1b:08:81:fc: 0f:9a:3a:e2:84:e7:ff:08:f7:98:0e:95:41:38:84:54:04:c3: 7c:e0:e9:b0:f3:28:3d:95:4d:a7:0b:55:0f:3e:d2:39:30:b0: 38:9c:0f:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR0QNaqbiU3B7W/UNRngsLep2tXEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTEzMDAwMDAwWhcNMjQxMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzN2FlYjFhYmZkZWE3ZGM5MzYxODI5MzRlZWM0ZGNhMmYz NThkODMwMjkyYTViYzlkMjBjMjVmOWUwZTRmM2YyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCflqTVPLOlnIXQGVt4FceQkxsFX1Pl95wcQabQd8mnedoE 1dJVWwKWqN3vsXQm56nmUPLjZ7eDPt1TrrrSPxaCmdHjNXgZmsdjCAowvKiAusPT lgt3LM5fjoqPvFxW6Q+5OeR5n2/H9tgcQ4MLC7ez69Nqu6nA4ygo3EaonyBWH4ZI ttqLvFJwusRdF9epJUY1NY5QKqoHEWbpERZv5jeVeElWdYsCn2DXXxgLIUHTEaEl iMYt3kX53MbAkUFIs2TH3cylOID4Zcm0IBS2CuAS5ItYw8jfmvyQwfudn60QOb5Q B0vf01z9EBLJOrwY6I0XEJ1S6JA0kDhPA/EJpWhVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxK/YV6rgzeYEmAv7fJFgNfqVcscwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E3NDBiZGY1LTQ0MjEtNGVhOC1iYjYwLTMzZDRjZDU1ODgwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASW9yAwDQYJKoZIhvcNAQELBQADggEBAMHjkxKU54E6JNNxbInjhuHhwf3O JIKBeGecIMlIKs5HFvpLo71L3QZG3fR9emIQh8u5UKw3KBX0//R4TniQWScJ9mi2 ZSta6NlhBQyWSkRUCyvt4bXsJfJXN05jQL4Y3vrec3BYaT8BLXYDVOfQI1NyZ3Oy 5safMyKzbiXVBork4QwJiS1TyIkfhdQQwfIGPBLM7+1PahVQiajcGgEuLttjMMzu X/+Sm3h5uWaBGubweTSnnEbr05URzUmhjR8w3mWRL3mBeBZM0m8y2fcezsSOhI7/ GwiB/A+aOuKE5/8I95gOlUE4hFQEw3zg6bDzKD2VTacLVQ8+0jkwsDicD1o= -----END CERTIFICATE-----Generated at Fri Nov 22 04:03:02 2024 by rpki-client on console-ams.rpki-client.org