$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a955f744-7817-40ef-8ef1-b52d455a5611.roa File: a955f744-7817-40ef-8ef1-b52d455a5611.roa (raw, json) Hash identifier: DSogrCQEmxoJzZoNFpeHwbnFrNj0jOAEwaaFoxXwM2Q= Subject key identifier: 25:23:EE:6B:25:A3:10:83:E4:2D:2A:F0:16:64:10:CC:AA:4D:AE:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51E50A36AAFA3B8CA856AE7684901AF3BB90DDB7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a955f744-7817-40ef-8ef1-b52d455a5611.roa Signing time: Wed 06 Nov 2024 00:00:00 +0000 ROA not before: Wed 06 Nov 2024 00:00:00 +0000 ROA not after: Wed 11 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e5:0a:36:aa:fa:3b:8c:a8:56:ae:76:84:90:1a:f3:bb:90:dd:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 6 00:00:00 2024 GMT Not After : Dec 11 23:59:59 2024 GMT Subject: serialNumber=5ca50fab176467870f439405ef7fcec5dd9035d1440e31c67c6fcbf0c2ba0240, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:b5:2a:de:62:1f:35:93:4b:95:cf:ac:ec: 61:8d:de:fd:94:79:46:b5:8e:fe:65:bd:26:ce:27: 8b:5f:d4:78:4e:4c:2f:16:b1:f9:62:e1:4d:b3:d1: 8c:8e:47:96:8f:4f:25:62:fc:b6:f3:c0:22:e0:e2: 37:59:97:f7:d5:2e:b9:3d:73:85:3b:67:b0:9f:d0: 07:fc:a5:58:66:4f:92:cf:25:69:e7:e6:7d:18:c7: 5c:41:27:71:35:0c:1b:ba:d1:83:f6:d1:44:ed:74: 3f:1c:35:18:7f:53:dc:07:1d:21:78:2c:9f:78:28: d1:b6:5a:66:da:79:f2:88:fb:3c:cf:12:d0:17:6b: f4:65:ca:cb:99:f0:63:4f:1d:0c:01:4d:08:84:c7: a4:33:df:6e:b2:38:99:f4:cc:9f:ac:7d:46:47:a6: 1d:34:68:7e:56:bd:7c:7a:3b:ac:39:69:8d:a1:74: 50:4f:4d:7d:9a:ed:eb:0f:29:89:75:40:f9:6f:f6: b8:21:e9:10:cd:a3:08:31:8a:9f:a4:c0:55:33:a5: 4d:46:c2:4f:36:7b:1e:85:13:7e:7f:2d:f9:d6:47: 1f:1b:41:d5:77:b2:74:dc:bb:7e:8c:b7:b3:71:7e: 80:8e:d7:c4:d1:71:6e:2b:64:d4:69:c8:44:b0:b5: ab:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:23:EE:6B:25:A3:10:83:E4:2D:2A:F0:16:64:10:CC:AA:4D:AE:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a955f744-7817-40ef-8ef1-b52d455a5611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.56.0/21 Signature Algorithm: sha256WithRSAEncryption 39:ca:93:e3:a1:5d:a5:18:46:26:60:67:62:b2:a4:d3:91:36: 60:84:41:73:f8:2b:aa:0e:e8:a3:d3:dd:94:45:61:ae:3d:38: 3b:b4:a8:62:b6:99:2e:59:1c:84:e1:65:96:f6:db:f8:5f:5b: 4e:5b:7c:a7:d7:d6:16:f3:cc:97:94:32:40:53:1a:02:27:2c: c0:3e:41:59:0d:11:2d:a5:65:76:e9:a4:f8:1c:77:9a:0c:11: 28:7f:bc:a1:fd:8c:60:39:b3:7e:61:e1:05:a7:56:36:fd:0b: c6:a3:7f:23:9e:46:41:3f:34:24:80:d6:8c:8a:00:63:b1:fd: 1d:5e:f1:21:51:1e:d3:64:1e:9b:f0:68:4c:e7:b7:34:a2:cd: a4:95:04:a3:2a:d7:3e:af:a9:06:a0:c6:56:71:25:45:22:e5: a4:23:c7:8b:76:ad:cc:94:d1:05:d5:5e:c5:7f:06:66:89:ba: 9b:0c:fa:2a:6e:22:5e:c6:ee:7b:86:6f:1f:3b:d4:88:c6:cd: 9a:17:5b:17:3e:4f:0f:22:f1:15:2f:f7:6f:77:39:c5:40:09: 9c:cd:ab:8a:27:b0:e1:52:c9:a2:54:0a:69:7e:94:c5:f6:4f: 19:53:22:0f:d8:37:89:17:28:94:47:55:e1:f1:df:82:c3:c3: 90:9d:2d:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUeUKNqr6O4yoVq52hJAa87uQ3bcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA2MDAwMDAwWhcNMjQxMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Y2E1MGZhYjE3NjQ2Nzg3MGY0Mzk0MDVlZjdmY2VjNWRk OTAzNWQxNDQwZTMxYzY3YzZmY2JmMGMyYmEwMjQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8o7Uq3mIfNZNLlc+s7GGN3v2UeUa1jv5lvSbOJ4tf1HhO TC8Wsfli4U2z0YyOR5aPTyVi/LbzwCLg4jdZl/fVLrk9c4U7Z7Cf0Af8pVhmT5LP JWnn5n0Yx1xBJ3E1DBu60YP20UTtdD8cNRh/U9wHHSF4LJ94KNG2WmbaefKI+zzP EtAXa/RlysuZ8GNPHQwBTQiEx6Qz326yOJn0zJ+sfUZHph00aH5WvXx6O6w5aY2h dFBPTX2a7esPKYl1QPlv9rgh6RDNowgxip+kwFUzpU1Gwk82ex6FE35/LfnWRx8b QdV3snTcu36Mt7NxfoCO18TRcW4rZNRpyESwtauFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJSPuayWjEIPkLSrwFmQQzKpNrhswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E5NTVmNzQ0LTc4MTctNDBlZi04ZWYxLWI1MmQ0NTVhNTYxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjTTgwDQYJKoZIhvcNAQELBQADggEBADnKk+OhXaUYRiZgZ2KypNORNmCE QXP4K6oO6KPT3ZRFYa49ODu0qGK2mS5ZHIThZZb22/hfW05bfKfX1hbzzJeUMkBT GgInLMA+QVkNES2lZXbppPgcd5oMESh/vKH9jGA5s35h4QWnVjb9C8ajfyOeRkE/ NCSA1oyKAGOx/R1e8SFRHtNkHpvwaEzntzSizaSVBKMq1z6vqQagxlZxJUUi5aQj x4t2rcyU0QXVXsV/BmaJupsM+ipuIl7G7nuGbx871IjGzZoXWxc+Tw8i8RUv9293 OcVACZzNq4onsOFSyaJUCml+lMX2TxlTIg/YN4kXKJRHVeHx34LDw5CdLa8= -----END CERTIFICATE-----Generated at Fri Nov 22 01:34:22 2024 by rpki-client on console-ams.rpki-client.org