$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5caf06f-d425-438f-835b-c9ff05011e40.roa File: b5caf06f-d425-438f-835b-c9ff05011e40.roa (raw, json) Hash identifier: mHI6EslMkR+aY+qO2CwMRICl0IfecWcv0P3LJsDu7sM= Subject key identifier: C8:28:28:0F:84:D3:D5:92:A4:4B:64:C7:9A:CD:5B:7D:C4:07:70:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 314911B3F161E8FA9F7585D6046BE9723083D371 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5caf06f-d425-438f-835b-c9ff05011e40.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:49:11:b3:f1:61:e8:fa:9f:75:85:d6:04:6b:e9:72:30:83:d3:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=9350d690a73415ce768f97c13413b7bfc319994f32f5b153f9089914f6da11d5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:a2:4f:44:15:f8:58:da:0d:40:d4:75:50: 6c:fa:04:b6:e5:01:1c:7e:6d:71:42:e7:52:ab:49: f9:3b:46:52:d0:1b:b7:41:29:4a:b8:5c:89:d7:90: 96:52:25:91:0a:07:e3:30:e6:df:d9:21:36:b2:4d: f4:bf:03:86:b6:1e:80:ae:28:d8:1c:ad:4c:af:e3: ef:ef:97:e4:f3:53:8e:9a:c9:f0:57:cb:39:3a:a2: 1a:63:e5:19:a9:d4:57:11:0e:86:3b:ee:be:12:de: dd:f5:77:78:1a:60:0a:08:da:75:7b:93:a0:e4:fe: a5:20:67:b2:d2:e4:11:e9:b9:94:c4:2a:c7:f2:69: da:2e:c0:8b:59:15:60:54:62:36:cd:27:e1:19:17: b4:c1:ad:48:ea:02:df:cc:46:6b:23:84:e5:da:f4: 97:33:f6:8b:88:98:f2:8b:ef:0e:c6:8a:8b:25:43: 99:f6:00:7c:03:ac:4c:ac:0e:a0:13:9f:5d:6b:e4: da:15:e7:fa:be:88:6f:47:e5:d7:a6:a3:7b:72:ca: aa:52:a1:92:88:ca:13:19:8d:d3:78:fc:3c:15:7b: 57:07:2b:70:c1:1f:42:ae:cc:55:16:35:a0:60:4b: 08:f0:50:15:04:dc:d9:15:ae:20:96:4f:78:e9:db: b1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:28:28:0F:84:D3:D5:92:A4:4B:64:C7:9A:CD:5B:7D:C4:07:70:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5caf06f-d425-438f-835b-c9ff05011e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.128.0/23 Signature Algorithm: sha256WithRSAEncryption 42:51:e9:0a:52:a3:6a:68:bc:4e:58:14:cc:cc:2c:44:69:26: 2c:db:d9:f9:5c:0f:17:51:b7:5a:38:b2:55:a0:f7:59:eb:ee: 22:c8:35:70:f4:a0:4e:aa:b9:fb:f4:8e:e6:2b:6c:00:8c:92: cf:05:f5:1b:9b:32:db:a9:80:86:88:71:10:a6:f7:69:5d:b4: 00:1b:0c:cc:35:24:43:83:c2:06:a5:4f:c3:2f:36:7d:35:f2: b6:58:4f:ff:ef:af:11:39:79:12:bf:35:fd:eb:d8:22:30:11: 68:cb:17:c7:01:f1:87:01:44:5e:62:ad:c2:34:5c:cf:0c:e9: f8:b3:3b:33:e9:6b:81:48:ca:8c:ef:03:2c:ec:5c:68:fc:42: 4a:90:d1:2d:c2:e9:f7:83:03:0f:36:c6:aa:01:26:fe:8d:f3: 4e:74:ba:d1:c8:d4:c6:04:88:87:8e:55:df:34:b3:3f:f5:f8: 69:b7:71:a5:82:81:d7:70:3b:f7:c6:fa:4d:3b:88:c3:d6:19: 31:0f:89:cf:92:f3:ed:45:32:de:29:e8:ec:5b:54:aa:de:c3: f0:37:1f:42:4a:58:5f:c8:fb:e5:3a:a4:34:73:35:8b:86:cc: 0e:f8:38:b4:8f:80:23:b9:c7:59:0b:77:cd:2b:ae:01:7f:6d: b4:20:e2:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMUkRs/Fh6PqfdYXWBGvpcjCD03EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzUwZDY5MGE3MzQxNWNlNzY4Zjk3YzEzNDEzYjdiZmMz MTk5OTRmMzJmNWIxNTNmOTA4OTkxNGY2ZGExMWQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh4qJPRBX4WNoNQNR1UGz6BLblARx+bXFC51KrSfk7RlLQ G7dBKUq4XInXkJZSJZEKB+Mw5t/ZITayTfS/A4a2HoCuKNgcrUyv4+/vl+TzU46a yfBXyzk6ohpj5Rmp1FcRDoY77r4S3t31d3gaYAoI2nV7k6Dk/qUgZ7LS5BHpuZTE KsfyadouwItZFWBUYjbNJ+EZF7TBrUjqAt/MRmsjhOXa9Jcz9ouImPKL7w7Giosl Q5n2AHwDrEysDqATn11r5NoV5/q+iG9H5demo3tyyqpSoZKIyhMZjdN4/DwVe1cH K3DBH0KuzFUWNaBgSwjwUBUE3NkVriCWT3jp27HLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyCgoD4TT1ZKkS2THms1bfcQHcC8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1Y2FmMDZmLWQ0MjUtNDM4Zi04MzViLWM5ZmYwNTAxMWU0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEoAwDQYJKoZIhvcNAQELBQADggEBAEJR6QpSo2povE5YFMzMLERpJizb 2flcDxdRt1o4slWg91nr7iLINXD0oE6qufv0juYrbACMks8F9RubMtupgIaIcRCm 92ldtAAbDMw1JEODwgalT8MvNn018rZYT//vrxE5eRK/Nf3r2CIwEWjLF8cB8YcB RF5ircI0XM8M6fizOzPpa4FIyozvAyzsXGj8QkqQ0S3C6feDAw82xqoBJv6N8050 utHI1MYEiIeOVd80sz/1+Gm3caWCgddwO/fG+k07iMPWGTEPic+S8+1FMt4p6Oxb VKrew/A3H0JKWF/I++U6pDRzNYuGzA74OLSPgCO5x1kLd80rrgF/bbQg4hY= -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:24 2024 by rpki-client on console-fra.rpki-client.org