$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afb08398-02e9-48a7-a6cb-ffebdcaa9554.roa File: afb08398-02e9-48a7-a6cb-ffebdcaa9554.roa (raw, json) Hash identifier: q+jCIUEiRC6V7PVbm5r0O/iXf4MCKaFZ9IedwHlMUVQ= Subject key identifier: 18:7F:2E:98:6E:FF:AE:AF:AA:75:FA:F1:57:87:DF:FE:BF:E2:25:34 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79B99ED44D85B9EB01C72D95221E096C1C80D998 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afb08398-02e9-48a7-a6cb-ffebdcaa9554.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.179.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b9:9e:d4:4d:85:b9:eb:01:c7:2d:95:22:1e:09:6c:1c:80:d9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=740dc143c152e7444210eb69c28f83a5465bcff0e23856bab77849f0dc55a7bc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:e4:8b:24:2b:fd:6a:f9:49:40:4b:1c:9b: 80:1f:bd:48:9a:64:bf:5d:24:d4:00:57:ee:0c:a0: b1:d1:11:c8:99:09:c1:64:e1:01:16:7a:7f:5a:71: e6:22:c2:82:cd:3a:b4:3f:bf:ee:9d:ef:7e:e9:c1: bc:96:d6:cd:57:aa:91:9c:78:aa:d7:18:16:59:be: 73:e9:6e:a2:ab:e1:78:b4:08:f3:18:7f:6c:13:82: 52:16:13:61:d9:d8:9a:c5:4b:07:4d:7f:52:58:12: ef:b4:a7:cc:87:f0:6b:f4:98:6a:85:e1:b4:df:f4: cc:d4:de:26:7a:8e:d7:0f:ab:db:9d:79:2d:f3:63: f3:c3:78:f3:2d:9a:06:9b:d2:17:88:58:6a:d7:0a: e4:64:36:82:ce:57:a6:a7:2f:43:33:1c:e7:b7:d7: 30:98:67:19:b1:75:e8:fc:9a:4b:94:6e:40:10:d5: 58:d5:16:de:8f:b5:57:8e:80:6d:57:32:8c:7e:a5: e3:96:c9:bc:13:1c:09:6c:81:b1:18:d9:47:e5:cc: 38:04:50:d7:69:5f:8b:3f:7a:88:93:3c:d6:d3:fc: ae:ad:87:64:95:89:37:b2:88:58:be:7d:4d:03:0a: 77:8f:de:6d:c7:33:94:d3:45:a4:ff:86:4c:ba:d8: b2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7F:2E:98:6E:FF:AE:AF:AA:75:FA:F1:57:87:DF:FE:BF:E2:25:34 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afb08398-02e9-48a7-a6cb-ffebdcaa9554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.179.0.0/16 Signature Algorithm: sha256WithRSAEncryption d0:d9:dc:64:51:a4:3d:90:7f:61:4b:22:ae:50:8f:75:5a:dd: 3c:4e:9c:8d:78:f3:fb:c1:99:3e:27:7e:24:9b:5e:81:7e:ce: 5c:ba:8b:88:91:ce:ee:08:a1:76:5b:8f:c2:25:78:47:93:47: 4d:1d:6d:3b:6e:cb:c9:73:05:8d:31:85:2b:04:96:51:ab:be: 04:d7:93:40:38:84:e1:c9:a2:6f:5b:f9:9d:7e:1e:47:11:44: fa:90:27:44:0c:5a:fe:8e:d6:d2:0d:c7:95:2f:a3:3f:73:20: 7b:8e:04:50:ff:7d:cb:ba:5f:d2:e7:db:02:da:c7:d4:28:a4: ff:4a:ba:1f:15:68:bb:9c:bd:7e:da:79:80:97:30:39:f7:76: 81:5a:d4:cf:7e:96:12:03:f7:26:db:05:ba:3f:ac:02:1b:44: 30:82:b6:1d:fc:e4:cc:94:3e:7c:80:65:74:a4:3c:68:1c:1e: a7:b4:12:42:38:6f:7a:f6:d6:a1:cc:06:69:ec:5e:22:64:1d: ea:85:16:14:7e:ac:de:e9:c6:53:7e:44:1a:95:4f:48:a3:08: 89:1f:7f:d0:fa:89:b8:52:78:21:79:03:e3:f0:04:93:f6:fa: fa:46:8c:c9:87:3e:6f:d5:1d:dc:0c:59:13:54:be:7e:dd:c8: 11:f4:2b:27 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUebme1E2FuesBxy2VIh4JbByA2ZgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDBkYzE0M2MxNTJlNzQ0NDIxMGViNjljMjhmODNhNTQ2 NWJjZmYwZTIzODU2YmFiNzc4NDlmMGRjNTVhN2JjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwNuSLJCv9avlJQEscm4AfvUiaZL9dJNQAV+4MoLHREciZ CcFk4QEWen9aceYiwoLNOrQ/v+6d737pwbyW1s1XqpGceKrXGBZZvnPpbqKr4Xi0 CPMYf2wTglIWE2HZ2JrFSwdNf1JYEu+0p8yH8Gv0mGqF4bTf9MzU3iZ6jtcPq9ud eS3zY/PDePMtmgab0heIWGrXCuRkNoLOV6anL0MzHOe31zCYZxmxdej8mkuUbkAQ 1VjVFt6PtVeOgG1XMox+peOWybwTHAlsgbEY2UflzDgEUNdpX4s/eoiTPNbT/K6t h2SViTeyiFi+fU0DCneP3m3HM5TTRaT/hky62LKtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUGH8umG7/rq+qdfrxV4ff/r/iJTQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmYjA4Mzk4LTAyZTktNDhhNy1hNmNiLWZmZWJkY2FhOTU1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQszANBgkqhkiG9w0BAQsFAAOCAQEA0NncZFGkPZB/YUsirlCPdVrdPE6c jXjz+8GZPid+JJtegX7OXLqLiJHO7gihdluPwiV4R5NHTR1tO27LyXMFjTGFKwSW Uau+BNeTQDiE4cmib1v5nX4eRxFE+pAnRAxa/o7W0g3HlS+jP3Mge44EUP99y7pf 0ufbAtrH1Cik/0q6HxVou5y9ftp5gJcwOfd2gVrUz36WEgP3JtsFuj+sAhtEMIK2 HfzkzJQ+fIBldKQ8aBwep7QSQjhvevbWocwGaexeImQd6oUWFH6s3unGU35EGpVP SKMIiR9/0PqJuFJ4IXkD4/AEk/b6+kaMyYc+b9Ud3AxZE1S+ft3IEfQrJw== -----END CERTIFICATE-----Generated at Fri Nov 22 04:03:05 2024 by rpki-client on console-ams.rpki-client.org