$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7bb6e4c-a07d-4ba4-a79f-9643d565f70d.roa File: b7bb6e4c-a07d-4ba4-a79f-9643d565f70d.roa (raw, json) Hash identifier: gwvl7Ld6urBgtsljpwPQyQDV+eKqY6GI05CTrz8jf9U= Subject key identifier: D1:82:4C:C5:5B:3E:FA:58:2E:DF:18:C6:23:95:B9:D2:5B:17:50:40 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 712D22EC18274A074496D16D1413CE96418B0647 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7bb6e4c-a07d-4ba4-a79f-9643d565f70d.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 99.87.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2d:22:ec:18:27:4a:07:44:96:d1:6d:14:13:ce:96:41:8b:06:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=312a3fafbe9ad674e941a5773b34661023033e8da41549faf26bc02c0897fd39, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:bf:26:e7:fb:6f:e1:83:36:ca:0c:b2:20: 71:b1:90:73:07:62:77:34:a3:b3:18:c7:d5:35:bc: ad:9c:ae:c9:d1:a1:b2:e4:e3:56:76:24:21:a1:39: 68:35:a8:a1:76:0a:3b:7c:b8:86:a3:d1:1b:82:07: 80:c8:48:7f:d2:c3:1c:21:be:8b:ae:ea:01:a7:c7: e1:73:91:75:30:51:80:35:25:f5:20:05:6f:0d:19: eb:5c:f6:d7:7d:23:08:2e:4f:cf:e6:dd:de:bc:a8: 97:9a:db:71:72:cf:79:a6:9b:cd:e0:2c:29:20:2f: 96:ef:92:f8:12:49:61:77:f3:1b:04:14:d5:96:dc: bc:c0:d6:fc:e2:19:93:c0:0d:af:83:29:e4:99:ae: fd:97:95:fc:78:11:58:15:92:b5:38:e5:db:5d:97: 7f:8b:0c:73:18:4f:fe:95:e5:d4:e4:c2:48:4b:b0: a0:bf:79:a4:9a:a8:c3:ef:7e:9c:d8:26:49:7b:13: 37:2c:38:65:52:70:2c:63:fb:d9:19:ce:50:c7:57: 68:f4:20:28:7e:6e:38:52:b7:ae:9e:ff:e7:0b:a4: 3c:b2:1a:73:f6:33:31:ba:3a:59:d3:0e:32:0b:94: 52:94:72:5d:cd:2e:93:b6:3b:a4:d1:31:c6:1c:ca: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:82:4C:C5:5B:3E:FA:58:2E:DF:18:C6:23:95:B9:D2:5B:17:50:40 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7bb6e4c-a07d-4ba4-a79f-9643d565f70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.87.0.0/17 Signature Algorithm: sha256WithRSAEncryption 8c:5f:17:4c:1d:4b:36:c0:91:46:d9:b7:12:4e:3e:61:64:2c: ec:9d:80:78:e4:5a:19:09:3c:62:96:05:e8:9c:9a:3a:a3:42: 74:b6:19:c9:d4:fc:51:82:12:8b:e5:a2:ca:b3:2f:12:2d:05: 02:05:0d:23:e6:eb:b5:30:ce:e3:67:74:6e:6c:46:4b:d7:30: f4:60:e4:81:46:e1:f3:f7:51:85:f3:ce:68:33:fc:d3:5b:51: a7:72:2a:a2:c2:aa:f3:b1:70:1a:28:0f:96:21:91:9b:dd:07: b5:57:8a:2c:f4:d6:16:65:fa:6e:7c:bb:37:56:69:ce:49:5e: d7:13:24:a0:84:b1:fc:43:d6:b8:9a:2b:dc:0c:7b:9a:de:67: 80:91:33:42:e8:c7:56:73:d2:99:4b:53:c5:9d:a9:ab:74:2f: 9f:27:6f:cc:77:ab:ad:c7:7c:06:d5:eb:cf:2a:b7:ce:12:d3: 61:c4:7d:72:71:15:5e:a7:3f:96:b7:46:f0:cf:84:6f:31:ec: 40:98:d8:a8:71:a8:6e:27:4e:f7:70:07:bc:e7:97:fb:82:09: 73:3f:24:78:7f:64:74:d4:eb:57:6a:5b:34:69:7e:68:a5:a4: a0:5a:ff:be:b0:92:17:aa:3e:81:48:e3:aa:1d:f4:12:4f:0f: 3b:4c:6b:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcS0i7BgnSgdEltFtFBPOlkGLBkcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTJhM2ZhZmJlOWFkNjc0ZTk0MWE1NzczYjM0NjYxMDIz MDMzZThkYTQxNTQ5ZmFmMjZiYzAyYzA4OTdmZDM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKG78m5/tv4YM2ygyyIHGxkHMHYnc0o7MYx9U1vK2crsnR obLk41Z2JCGhOWg1qKF2Cjt8uIaj0RuCB4DISH/Swxwhvouu6gGnx+FzkXUwUYA1 JfUgBW8NGetc9td9IwguT8/m3d68qJea23Fyz3mmm83gLCkgL5bvkvgSSWF38xsE FNWW3LzA1vziGZPADa+DKeSZrv2Xlfx4EVgVkrU45dtdl3+LDHMYT/6V5dTkwkhL sKC/eaSaqMPvfpzYJkl7EzcsOGVScCxj+9kZzlDHV2j0ICh+bjhSt66e/+cLpDyy GnP2MzG6OlnTDjILlFKUcl3NLpO2O6TRMcYcyneLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0YJMxVs++lgu3xjGI5W50lsXUEAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3YmI2ZTRjLWEwN2QtNGJhNC1hNzlmLTk2NDNkNTY1ZjcwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdjVwAwDQYJKoZIhvcNAQELBQADggEBAIxfF0wdSzbAkUbZtxJOPmFkLOyd gHjkWhkJPGKWBeicmjqjQnS2GcnU/FGCEovlosqzLxItBQIFDSPm67UwzuNndG5s RkvXMPRg5IFG4fP3UYXzzmgz/NNbUadyKqLCqvOxcBooD5YhkZvdB7VXiiz01hZl +m58uzdWac5JXtcTJKCEsfxD1riaK9wMe5reZ4CRM0Lox1Zz0plLU8Wdqat0L58n b8x3q63HfAbV688qt84S02HEfXJxFV6nP5a3RvDPhG8x7ECY2KhxqG4nTvdwB7zn l/uCCXM/JHh/ZHTU61dqWzRpfmilpKBa/76wkheqPoFI46od9BJPDztMa8Y= -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:25 2024 by rpki-client on console-fra.rpki-client.org