$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd2f1276-50a0-498a-9e31-2382c3e5ee1c.roa File: bd2f1276-50a0-498a-9e31-2382c3e5ee1c.roa (raw, json) Hash identifier: rpHonJnmb2Oh2ABByYWNizr7QMSRhdDsaEE6PaWEioA= Subject key identifier: 9E:78:1B:9B:C1:8E:5D:4B:7D:F3:83:93:E3:B4:25:6C:30:68:9E:4E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BA10C282053E4618EF76789A823D70885439DAF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd2f1276-50a0-498a-9e31-2382c3e5ee1c.roa Signing time: Tue 12 Nov 2024 00:00:00 +0000 ROA not before: Tue 12 Nov 2024 00:00:00 +0000 ROA not after: Tue 17 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 56.103.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a1:0c:28:20:53:e4:61:8e:f7:67:89:a8:23:d7:08:85:43:9d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 12 00:00:00 2024 GMT Not After : Dec 17 23:59:59 2024 GMT Subject: serialNumber=263e837cf7a845cdd67bf7d44b7488abc22efadb0e94e346d0f98bf90568e1d8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:21:c2:23:93:b8:26:73:81:24:14:9b:6b: e8:bf:8e:99:24:e2:cf:4b:ee:9b:c9:a4:8b:5a:71: 68:a2:5e:40:6a:10:63:31:b5:1b:86:d6:4c:e6:da: bc:b2:35:6c:a5:f5:53:62:8b:d5:63:e0:e8:58:51: 02:6a:aa:e5:30:24:da:98:26:7b:79:9e:74:3e:5d: ce:43:1b:77:19:09:0d:9f:e8:8d:ee:c3:05:fd:7e: be:40:d6:97:f8:97:8e:40:20:35:77:2f:95:6c:00: 3e:be:9f:a8:27:c0:ff:1f:bc:38:44:3d:0a:72:63: 40:bc:01:c1:e7:b1:28:f7:54:b9:e3:93:a0:a2:d1: 72:2d:66:7f:35:ca:8a:3f:e3:c1:2e:bd:13:a0:ae: 49:e1:ff:71:44:d3:01:25:d6:46:da:ce:72:b8:c1: 5f:be:f9:e3:48:50:44:6a:52:ef:a9:78:29:65:5b: 17:25:d4:ae:e2:8f:93:e5:6f:27:f1:ec:50:77:d0: 85:b6:60:62:b3:bb:e7:ae:8c:c4:29:b3:c0:01:17: dd:7b:d8:2c:f8:04:ab:f1:59:10:5f:08:66:43:73: 67:ac:47:91:53:6c:6d:4a:a3:08:19:da:85:00:8f: 38:17:48:89:0a:c1:cb:ea:45:41:c4:d1:a0:79:f7: db:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:78:1B:9B:C1:8E:5D:4B:7D:F3:83:93:E3:B4:25:6C:30:68:9E:4E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd2f1276-50a0-498a-9e31-2382c3e5ee1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption af:04:11:47:2b:8b:78:d1:40:62:41:23:78:58:69:64:6c:24: c4:86:22:4e:93:8c:e9:4c:64:70:de:31:8e:08:ba:0a:b2:c9: b1:49:e1:bc:ab:6d:50:a8:a4:ec:05:73:e5:c7:0a:67:24:9c: b1:36:26:eb:65:54:07:b5:13:59:9a:51:c2:7b:75:cc:9a:9d: 48:ec:ee:00:03:98:b7:ab:5d:14:65:ac:bc:4a:2a:9c:5b:ca: 8f:57:b1:53:e9:91:e5:04:77:24:b0:a6:e2:cc:05:14:bd:3f: 4d:40:14:11:38:2a:30:9c:cd:ab:92:bf:69:22:04:07:6e:b7: 8b:1e:0d:00:e1:f8:88:83:6b:5a:83:fb:88:a1:c7:02:7d:ea: 3c:c8:9a:f3:25:2d:9d:c7:0f:8b:5b:a6:91:1b:26:69:c1:3b: cd:d8:68:e8:56:9c:0c:45:02:d4:ae:ae:ee:6c:ec:58:a9:06: ca:e6:e7:0d:c6:0d:a8:cc:d5:fa:00:90:d2:b7:14:7e:f4:5f: ec:95:d8:b5:9f:e6:d7:e1:9d:6b:92:63:32:8b:1a:c6:9c:91: b7:3e:51:00:75:c2:b3:b6:2c:4b:2e:cf:9c:f2:76:55:fe:b1: e2:99:b9:99:b8:d6:a2:38:63:1a:99:5b:07:52:6c:a0:49:9b: d2:a9:52:40 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUC6EMKCBT5GGO92eJqCPXCIVDna8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTEyMDAwMDAwWhcNMjQxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjNlODM3Y2Y3YTg0NWNkZDY3YmY3ZDQ0Yjc0ODhhYmMy MmVmYWRiMGU5NGUzNDZkMGY5OGJmOTA1NjhlMWQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8hiHCI5O4JnOBJBSba+i/jpkk4s9L7pvJpItacWiiXkBq EGMxtRuG1kzm2ryyNWyl9VNii9Vj4OhYUQJqquUwJNqYJnt5nnQ+Xc5DG3cZCQ2f 6I3uwwX9fr5A1pf4l45AIDV3L5VsAD6+n6gnwP8fvDhEPQpyY0C8AcHnsSj3VLnj k6Ci0XItZn81yoo/48EuvROgrknh/3FE0wEl1kbaznK4wV+++eNIUERqUu+peCll Wxcl1K7ij5Plbyfx7FB30IW2YGKzu+eujMQps8ABF9172Cz4BKvxWRBfCGZDc2es R5FTbG1KowgZ2oUAjzgXSIkKwcvqRUHE0aB599s9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUnngbm8GOXUt984OT47QlbDBonk4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkMmYxMjc2LTUwYTAtNDk4YS05ZTMxLTIzODJjM2U1ZWUxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4ZzANBgkqhkiG9w0BAQsFAAOCAQEArwQRRyuLeNFAYkEjeFhpZGwkxIYi TpOM6UxkcN4xjgi6CrLJsUnhvKttUKik7AVz5ccKZyScsTYm62VUB7UTWZpRwnt1 zJqdSOzuAAOYt6tdFGWsvEoqnFvKj1exU+mR5QR3JLCm4swFFL0/TUAUETgqMJzN q5K/aSIEB263ix4NAOH4iINrWoP7iKHHAn3qPMia8yUtnccPi1umkRsmacE7zdho 6FacDEUC1K6u7mzsWKkGyubnDcYNqMzV+gCQ0rcUfvRf7JXYtZ/m1+Gda5JjMosa xpyRtz5RAHXCs7YsSy7PnPJ2Vf6x4pm5mbjWojhjGplbB1JsoEmb0qlSQA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:03:08 2024 by rpki-client on console-ams.rpki-client.org