$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1f5582-c5a7-4af1-b3e9-c22f6e35593e.roa File: ba1f5582-c5a7-4af1-b3e9-c22f6e35593e.roa (raw, json) Hash identifier: 0whVIf3NYH2Fx3X+gK6jrRgOVWYKV/XTLhOVf/JVsss= Subject key identifier: AA:76:A7:A5:C8:8F:75:36:58:10:62:88:0A:18:F6:51:09:64:BE:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 365E5DE28A0028DE369786913EF9BDDAA6E68245 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1f5582-c5a7-4af1-b3e9-c22f6e35593e.roa Signing time: Tue 12 Nov 2024 00:00:00 +0000 ROA not before: Tue 12 Nov 2024 00:00:00 +0000 ROA not after: Tue 17 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 56.225.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:5e:5d:e2:8a:00:28:de:36:97:86:91:3e:f9:bd:da:a6:e6:82:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 12 00:00:00 2024 GMT Not After : Dec 17 23:59:59 2024 GMT Subject: serialNumber=d2ce8945c4f63ea5617af858981e0a47c2701afc899afd35c8e7b4959e623912, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0d:42:f4:b5:38:61:1e:c8:c1:68:17:c3:af: 09:6a:56:fa:e9:dd:dd:0c:bf:a5:51:54:0c:9e:85: 1b:24:8d:b5:15:71:dd:06:76:15:71:98:cd:21:ca: e2:80:40:d9:80:60:0a:73:45:f1:53:5a:3e:30:d4: 8a:d5:b8:ca:46:31:4e:b7:6e:3d:d3:dc:3c:22:a2: cb:12:f2:25:a7:99:d6:eb:20:83:ba:9c:7b:d8:62: ac:b9:36:de:aa:52:2d:ef:6d:bc:93:fb:cf:c2:3b: c2:4b:36:20:3c:38:8b:b2:51:1a:fa:50:d8:bf:53: b0:51:f2:ba:fa:90:9f:c9:c4:2f:5a:a1:0b:ed:7d: e0:91:37:1b:21:85:66:ca:00:b7:c8:6a:7f:f5:ee: 0e:76:b3:59:a8:ad:4f:ea:1c:f5:4a:84:89:b4:3f: f3:3d:b9:10:77:1c:3c:a2:e1:2e:7f:8f:d3:dd:9a: ea:50:26:58:d1:53:fc:85:19:2b:27:85:03:ae:d9: 84:c7:34:5b:81:2c:5b:8a:d3:f6:77:c5:a6:83:c9: 5c:74:ca:98:6b:31:5a:31:a2:9f:20:8c:18:3e:08: a0:e6:ff:8a:e7:84:76:e7:65:5f:b4:01:66:3e:f8: 88:7b:93:0e:58:7f:3d:d7:01:3d:48:7d:5b:f0:ac: bc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:76:A7:A5:C8:8F:75:36:58:10:62:88:0A:18:F6:51:09:64:BE:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1f5582-c5a7-4af1-b3e9-c22f6e35593e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.225.0.0/16 Signature Algorithm: sha256WithRSAEncryption 06:db:b4:35:08:01:8d:86:25:c6:08:39:88:f5:5e:89:f5:3e: 48:ba:5e:e9:9c:71:ef:43:be:b2:eb:bb:5c:26:73:37:38:b6: 4b:21:d0:24:0d:ba:fb:60:2c:c2:bf:04:5b:8e:1f:df:74:ab: e9:5b:a9:c7:a9:b9:15:13:26:77:0b:56:91:2a:92:bd:fb:03: c2:15:23:4f:43:65:a8:13:f1:af:b8:64:fc:20:ea:42:29:11: 0a:13:60:8a:57:11:0f:ab:e7:cf:24:1e:1d:c1:f5:89:e5:12: 15:bd:68:95:4f:eb:fa:57:e7:a3:e7:28:b8:56:36:55:e1:8c: a4:25:b7:97:75:f2:e9:7d:92:4e:26:e8:f6:b4:2f:41:b1:8a: 59:3f:47:bb:80:7a:a6:6f:7f:16:ea:c0:7f:61:b3:13:fb:da: 66:a5:2c:85:d1:3a:04:2e:bf:21:ef:75:c6:09:0b:ca:5c:ad: 0d:e2:04:95:f4:3c:8a:6d:39:c1:38:05:98:cb:14:d2:64:18: bb:37:db:91:74:84:40:a0:b8:51:b0:9e:8e:84:7a:ea:67:ad: ce:06:45:b4:93:51:a8:07:a6:b3:40:fc:3d:9f:8d:63:8b:ac: 94:b6:04:e9:28:27:88:60:8d:3c:10:8b:fd:a1:f6:94:55:0e: e9:ac:c4:78 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNl5d4ooAKN42l4aRPvm92qbmgkUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTEyMDAwMDAwWhcNMjQxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMmNlODk0NWM0ZjYzZWE1NjE3YWY4NTg5ODFlMGE0N2My NzAxYWZjODk5YWZkMzVjOGU3YjQ5NTllNjIzOTEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWDUL0tThhHsjBaBfDrwlqVvrp3d0Mv6VRVAyehRskjbUV cd0GdhVxmM0hyuKAQNmAYApzRfFTWj4w1IrVuMpGMU63bj3T3DwiossS8iWnmdbr IIO6nHvYYqy5Nt6qUi3vbbyT+8/CO8JLNiA8OIuyURr6UNi/U7BR8rr6kJ/JxC9a oQvtfeCRNxshhWbKALfIan/17g52s1morU/qHPVKhIm0P/M9uRB3HDyi4S5/j9Pd mupQJljRU/yFGSsnhQOu2YTHNFuBLFuK0/Z3xaaDyVx0yphrMVoxop8gjBg+CKDm /4rnhHbnZV+0AWY++Ih7kw5Yfz3XAT1IfVvwrLxDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUqnanpciPdTZYEGKIChj2UQlkvmkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhMWY1NTgyLWM1YTctNGFmMS1iM2U5LWMyMmY2ZTM1NTkzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA44TANBgkqhkiG9w0BAQsFAAOCAQEABtu0NQgBjYYlxgg5iPVeifU+SLpe 6Zxx70O+suu7XCZzNzi2SyHQJA26+2Aswr8EW44f33Sr6Vupx6m5FRMmdwtWkSqS vfsDwhUjT0NlqBPxr7hk/CDqQikRChNgilcRD6vnzyQeHcH1ieUSFb1olU/r+lfn o+couFY2VeGMpCW3l3Xy6X2STibo9rQvQbGKWT9Hu4B6pm9/FurAf2GzE/vaZqUs hdE6BC6/Ie91xgkLylytDeIElfQ8im05wTgFmMsU0mQYuzfbkXSEQKC4UbCejoR6 6metzgZFtJNRqAems0D8PZ+NY4uslLYE6SgniGCNPBCL/aH2lFUO6azEeA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:25 2024 by rpki-client on console-fra.rpki-client.org