$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b00bc71c-3be6-4518-afcf-bc7faa0b4931.roa File: b00bc71c-3be6-4518-afcf-bc7faa0b4931.roa (raw, json) Hash identifier: 4tqzfVpUuMpUPnbKccyyMjDiZ5cBJ/HkY2KEk2RsIMo= Subject key identifier: 71:88:8F:D7:58:6A:79:87:94:00:D9:DE:93:FE:8B:EC:2C:5C:31:7D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44109DD4AF3A0166494D73D57D7A78C3136FED18 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b00bc71c-3be6-4518-afcf-bc7faa0b4931.roa Signing time: Fri 22 Nov 2024 00:00:00 +0000 ROA not before: Fri 22 Nov 2024 00:00:00 +0000 ROA not after: Fri 27 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 16.199.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:10:9d:d4:af:3a:01:66:49:4d:73:d5:7d:7a:78:c3:13:6f:ed:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 00:00:00 2024 GMT Not After : Dec 27 23:59:59 2024 GMT Subject: serialNumber=2c8101dc632d3289d4fdc358f49cbbc6ca1a1f5bbea7db7ea72b23a217f5c6f0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:32:a5:f8:35:fa:82:2a:d7:ce:15:1b:9e:62: 1f:c6:69:98:19:92:46:e8:c6:f3:50:ab:a6:9f:41: 7b:5c:7c:27:27:5e:80:11:1d:bd:9d:47:27:f0:86: ef:90:82:fc:27:96:18:dc:15:8f:9a:05:6c:10:a1: 62:73:1a:aa:34:35:4f:a0:2e:c0:e3:2f:f4:58:95: 6b:87:3d:76:8e:cb:9f:57:d9:d5:1b:a4:9c:00:dc: 15:66:5b:01:1d:6a:39:25:39:26:da:7f:6d:eb:10: 11:50:85:eb:68:03:34:41:75:ae:e5:10:99:44:f8: 20:2d:9f:cb:9c:bf:81:e9:d7:48:1e:9e:65:2d:69: 9f:35:30:da:58:02:f2:ff:c2:19:64:ae:3e:87:06: 48:5d:b1:e4:be:8c:74:51:19:d8:d8:dc:3b:93:51: f4:e8:bc:6a:10:96:55:48:d9:94:63:59:ac:e1:92: 02:17:2a:76:39:2d:7c:b3:80:78:93:09:40:af:6b: f4:07:52:c4:9b:87:e3:c5:fd:0e:fb:e0:13:0c:1a: 75:b1:10:59:bf:ad:d7:f9:2b:3a:29:25:ff:49:49: 27:85:cf:3d:4f:ff:51:47:43:40:fb:9e:fd:e5:a0: 5a:35:c7:d7:fd:ef:7b:bc:b9:62:49:bf:e1:f3:e5: 4b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:88:8F:D7:58:6A:79:87:94:00:D9:DE:93:FE:8B:EC:2C:5C:31:7D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b00bc71c-3be6-4518-afcf-bc7faa0b4931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.199.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2e:a2:06:ca:fb:92:52:26:5f:89:24:f6:6d:d2:54:07:7c:ab: d0:dd:01:a3:cc:da:c7:49:3c:d5:92:98:1e:8d:8c:a5:9e:f9: 08:56:59:7f:5a:d5:29:9e:f3:66:37:48:de:77:75:5d:10:6f: 9f:22:48:b9:3d:3d:a9:ff:39:c0:3c:18:f3:3d:83:74:1a:c7: 55:6e:78:4b:54:68:a0:aa:bd:25:0c:78:da:2a:ce:b6:b9:18: f2:fe:93:91:4c:19:a6:5c:2c:9e:30:5e:37:3e:fd:b3:56:e0: 27:1b:99:e5:0f:6d:fb:f8:42:87:5c:bd:5c:d1:da:27:4a:9d: 93:ac:04:14:c9:0f:fb:07:37:7e:d6:42:73:24:6e:40:67:1e: 07:1a:e5:64:82:70:78:da:6e:85:78:e0:ca:50:8e:f3:31:d5: 6d:56:75:c8:06:f6:ec:60:89:78:3b:ca:23:da:97:09:76:a3: f5:fc:d4:54:79:5d:b2:9a:d4:43:81:99:dc:90:fc:88:40:46: 48:57:19:12:1d:7c:e6:dd:49:07:81:11:a7:a3:92:10:c1:3c: f7:2d:eb:11:1b:c1:61:e5:8e:ca:de:57:bf:51:0e:3d:4c:94: f1:4b:a4:e5:78:0e:1a:b3:ae:f7:c6:e7:9e:5e:4b:68:96:ef: 70:17:0e:cb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURBCd1K86AWZJTXPVfXp4wxNv7RgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTIyMDAwMDAwWhcNMjQxMjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzgxMDFkYzYzMmQzMjg5ZDRmZGMzNThmNDljYmJjNmNh MWExZjViYmVhN2RiN2VhNzJiMjNhMjE3ZjVjNmYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaMqX4NfqCKtfOFRueYh/GaZgZkkboxvNQq6afQXtcfCcn XoARHb2dRyfwhu+QgvwnlhjcFY+aBWwQoWJzGqo0NU+gLsDjL/RYlWuHPXaOy59X 2dUbpJwA3BVmWwEdajklOSbaf23rEBFQhetoAzRBda7lEJlE+CAtn8ucv4Hp10ge nmUtaZ81MNpYAvL/whlkrj6HBkhdseS+jHRRGdjY3DuTUfTovGoQllVI2ZRjWazh kgIXKnY5LXyzgHiTCUCva/QHUsSbh+PF/Q774BMMGnWxEFm/rdf5KzopJf9JSSeF zz1P/1FHQ0D7nv3loFo1x9f973u8uWJJv+Hz5Uv1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUcYiP11hqeYeUANnek/6L7CxcMX0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwMGJjNzFjLTNiZTYtNDUxOC1hZmNmLWJjN2ZhYTBiNDkzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQxzANBgkqhkiG9w0BAQsFAAOCAQEALqIGyvuSUiZfiST2bdJUB3yr0N0B o8zax0k81ZKYHo2MpZ75CFZZf1rVKZ7zZjdI3nd1XRBvnyJIuT09qf85wDwY8z2D dBrHVW54S1RooKq9JQx42irOtrkY8v6TkUwZplwsnjBeNz79s1bgJxuZ5Q9t+/hC h1y9XNHaJ0qdk6wEFMkP+wc3ftZCcyRuQGceBxrlZIJweNpuhXjgylCO8zHVbVZ1 yAb27GCJeDvKI9qXCXaj9fzUVHldsprUQ4GZ3JD8iEBGSFcZEh185t1JB4ERp6OS EME89y3rERvBYeWOyt5Xv1EOPUyU8Uuk5XgOGrOu98bnnl5LaJbvcBcOyw== -----END CERTIFICATE-----Generated at Sun Nov 24 03:17:26 2024 by rpki-client on console-ams.rpki-client.org