$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b04470dc-ca11-4c7b-95c5-44918c6af8c8.roa File: b04470dc-ca11-4c7b-95c5-44918c6af8c8.roa (raw, json) Hash identifier: pjeD6o3Xkx8CTQKUxJ9rsydXjGsbHKA4Nen2Z7/iJqg= Subject key identifier: 6B:27:76:1A:FC:14:61:DE:42:73:DF:79:A8:FB:81:FA:9F:BB:96:C5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17E190C90AEDC45D148049502866F163F8F3D41A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b04470dc-ca11-4c7b-95c5-44918c6af8c8.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 65.0.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e1:90:c9:0a:ed:c4:5d:14:80:49:50:28:66:f1:63:f8:f3:d4:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=dbd1516e5fd0543bcdd65f4bc15c5e1b1aae4b15fe6187f2a8d1e91806113e75, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c0:f4:1e:f1:4d:c5:50:23:7b:c8:df:0f:f8: 2e:93:13:48:8d:40:44:58:52:e6:6e:6f:24:6c:f6: 3e:66:03:e9:a9:ee:73:c8:9b:b4:1f:49:11:45:9e: 3f:66:33:b9:ec:00:cf:2e:8e:43:bc:1c:3c:4e:c3: d4:ea:e4:a8:ee:04:f2:3c:be:1e:80:f5:20:61:9a: 95:ed:8e:99:10:32:d7:53:65:f2:c7:7b:0b:3e:76: d4:a1:3e:52:ba:fe:b2:6c:c7:6b:b4:40:71:33:13: ec:c0:d8:d1:57:b9:6d:9f:24:cb:bd:ab:54:84:72: be:8c:8d:5c:ff:cd:46:74:10:1f:e8:42:cd:44:df: 30:a8:04:7a:06:69:4e:9e:e6:f5:b4:41:5b:51:75: 6c:c0:87:2a:2f:97:20:91:91:08:ca:b2:40:c0:36: 6a:42:1c:76:e2:f0:55:94:38:5d:0e:47:e3:e7:19: 98:d0:e5:b4:b5:80:54:13:8e:61:08:8b:0e:8a:eb: 0a:af:d5:5c:83:3a:3e:3a:d0:94:3d:5b:83:77:52: 74:88:32:a9:16:33:e9:e6:de:9e:11:11:77:38:5f: c9:ff:e5:55:52:e6:9a:4a:6f:ea:5d:23:7a:95:d8: 6a:77:24:03:0a:e9:56:70:ba:50:d0:55:ea:ca:0a: f5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:27:76:1A:FC:14:61:DE:42:73:DF:79:A8:FB:81:FA:9F:BB:96:C5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b04470dc-ca11-4c7b-95c5-44918c6af8c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.0.0.0/14 Signature Algorithm: sha256WithRSAEncryption bb:13:a2:ae:1e:36:c3:35:8c:6e:85:e9:d4:4e:e1:33:ac:de: d8:f4:cc:9e:11:0e:d8:0d:86:14:f3:2d:87:84:83:a9:c9:63: d7:94:81:af:f5:ab:62:95:53:4d:22:0d:0b:10:f6:b0:bd:a9: 5f:bf:ce:51:6c:64:c6:58:dd:b6:f4:d9:42:84:66:fa:70:f7: d2:a7:52:cd:9b:c9:fc:f3:c9:e0:6d:83:d8:43:26:56:b2:26: 73:a6:d2:54:2f:cd:ae:74:2a:55:cd:e5:da:08:2b:94:c1:a1: 85:5f:3f:30:fe:bc:60:8c:51:0a:0c:2f:76:08:a6:a6:e0:25: c7:11:8f:16:b7:46:31:e5:de:44:93:0e:cd:45:6f:13:8a:4e: c3:2a:92:fd:5b:ec:ef:58:aa:95:c8:9b:67:24:c9:a0:03:21: 25:6b:f0:06:8f:84:96:e2:d9:6d:4b:0f:2c:77:45:4b:0b:91: 3d:02:43:82:07:4f:36:d1:97:20:d2:93:b6:f6:73:8f:ed:8e: 8a:8f:8e:17:31:d7:aa:60:77:fc:36:df:b5:78:28:56:3b:bc: 33:85:96:9a:64:c0:89:2f:7d:b1:0d:1d:77:05:c8:2e:f5:6b: 21:19:69:16:3d:74:29:0b:81:44:3d:d3:c5:48:28:b6:13:f7: 94:02:e6:1c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUF+GQyQrtxF0UgElQKGbxY/jz1BowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmQxNTE2ZTVmZDA1NDNiY2RkNjVmNGJjMTVjNWUxYjFh YWU0YjE1ZmU2MTg3ZjJhOGQxZTkxODA2MTEzZTc1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjwPQe8U3FUCN7yN8P+C6TE0iNQERYUuZubyRs9j5mA+mp 7nPIm7QfSRFFnj9mM7nsAM8ujkO8HDxOw9Tq5KjuBPI8vh6A9SBhmpXtjpkQMtdT ZfLHews+dtShPlK6/rJsx2u0QHEzE+zA2NFXuW2fJMu9q1SEcr6MjVz/zUZ0EB/o Qs1E3zCoBHoGaU6e5vW0QVtRdWzAhyovlyCRkQjKskDANmpCHHbi8FWUOF0OR+Pn GZjQ5bS1gFQTjmEIiw6K6wqv1VyDOj460JQ9W4N3UnSIMqkWM+nm3p4REXc4X8n/ 5VVS5ppKb+pdI3qV2Gp3JAMK6VZwulDQVerKCvX3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUayd2GvwUYd5Cc995qPuB+p+7lsUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwNDQ3MGRjLWNhMTEtNGM3Yi05NWM1LTQ0OTE4YzZhZjhjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwJBADANBgkqhkiG9w0BAQsFAAOCAQEAuxOirh42wzWMboXp1E7hM6ze2PTM nhEO2A2GFPMth4SDqclj15SBr/WrYpVTTSINCxD2sL2pX7/OUWxkxljdtvTZQoRm +nD30qdSzZvJ/PPJ4G2D2EMmVrImc6bSVC/NrnQqVc3l2ggrlMGhhV8/MP68YIxR CgwvdgimpuAlxxGPFrdGMeXeRJMOzUVvE4pOwyqS/Vvs71iqlcibZyTJoAMhJWvw Bo+EluLZbUsPLHdFSwuRPQJDggdPNtGXINKTtvZzj+2Oio+OFzHXqmB3/DbftXgo Vju8M4WWmmTAiS99sQ0ddwXILvVrIRlpFj10KQuBRD3TxUgothP3lALmHA== -----END CERTIFICATE-----Generated at Sun Nov 24 02:35:45 2024 by rpki-client on console-fra.rpki-client.org