$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd50ac23-8310-4042-9002-5a1c0a3020c1.roa File: bd50ac23-8310-4042-9002-5a1c0a3020c1.roa (raw, json) Hash identifier: 50ixBgYFAqjvzVZQyhu5KNcm5PUsWQRyRusMXwGDDck= Subject key identifier: B8:85:7C:3D:1F:33:AE:29:1E:F5:77:53:82:E6:3D:B0:B0:F8:D1:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1BA4E5599C3C02BD285C040D213A5C84A3A783FD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd50ac23-8310-4042-9002-5a1c0a3020c1.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 192.189.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a4:e5:59:9c:3c:02:bd:28:5c:04:0d:21:3a:5c:84:a3:a7:83:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=e44dc2c2b401233bcb2acf8bfd407673bb3c5598900aefd4ae268372859e0a12, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:31:ab:d9:4a:61:10:7e:58:77:6b:a5:ac: 20:e8:5c:ad:11:d3:24:51:31:69:57:1a:40:dd:df: db:a9:b8:bf:0b:47:54:2d:04:ee:c7:b4:cf:a9:d5: f4:aa:9a:32:de:b1:7e:fa:54:39:e8:68:1f:b6:33: 3a:b3:73:6e:6e:35:8d:b7:f6:f3:10:fb:62:2f:82: 7c:97:e9:fb:2c:2c:9e:bb:45:17:4d:1c:63:56:62: 93:28:79:ae:33:44:da:27:7e:20:4f:2c:da:c7:2a: 72:5a:ee:ba:7c:b1:a1:f4:96:0d:21:a7:dc:b5:64: c3:64:4f:57:c1:ad:c3:35:d2:7f:e9:d3:a1:6f:4c: cf:8d:5b:94:50:e3:8e:8a:f7:db:59:4f:30:6b:20: 6e:55:da:53:6b:ce:df:96:39:9f:59:d7:05:17:f8: 75:11:67:54:b7:52:65:fe:38:2d:8c:5e:e1:d0:bb: ec:4d:1f:61:68:30:64:57:ac:6a:36:72:97:b3:cb: e8:44:d7:cf:06:90:c7:34:26:1e:aa:48:de:25:3e: d2:13:cf:a3:94:50:83:bb:5e:ab:f5:ad:8b:81:bf: 7e:08:eb:99:1d:f7:15:a2:d5:1d:e8:92:11:57:5f: 7c:36:b5:2b:9f:d2:08:31:a6:18:69:72:f3:40:de: 61:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:85:7C:3D:1F:33:AE:29:1E:F5:77:53:82:E6:3D:B0:B0:F8:D1:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd50ac23-8310-4042-9002-5a1c0a3020c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.189.198.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:e0:78:7b:e8:e6:f9:6f:9b:d1:6b:61:82:c6:9f:18:77:a4: bc:8e:a0:76:c2:5b:9e:f7:c4:71:14:83:59:85:35:17:31:9a: 79:ae:d7:51:43:36:7f:23:2e:7e:26:d2:d0:1f:67:87:29:8e: df:bb:30:8c:66:92:ee:2a:9b:cf:97:59:6d:0e:1f:f6:3b:70: 6b:9e:e2:aa:52:a5:9a:bf:ac:6f:e2:bd:7b:4c:b3:b9:1b:0c: bc:0b:55:34:7c:36:85:c8:33:03:5d:fd:b9:e8:c7:1b:41:43: 05:58:f5:5d:26:70:c5:a3:30:99:9d:b3:b2:27:14:16:7b:f0: 91:4a:4a:2e:7f:5b:6d:f9:ce:dc:ae:b4:d8:1a:0c:dd:71:50: 0e:f7:d4:0a:59:04:88:46:37:8b:65:a7:9b:38:09:7a:33:01: d8:bf:0e:a6:69:e7:42:00:3a:28:d2:fe:29:3d:ca:7c:1e:48: 96:94:df:d2:61:3b:bb:68:17:d7:78:2d:09:7e:3b:0d:97:83: d4:72:97:aa:4e:15:1e:38:48:67:ea:9a:86:9c:3d:43:ed:6e: 8b:9a:97:de:8f:c8:72:1f:3c:6e:e1:ab:81:7d:65:e9:2b:6c: c5:ae:0c:40:12:45:a0:74:69:45:89:5e:d9:e5:be:06:69:30: 33:eb:45:11 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG6TlWZw8Ar0oXAQNITpchKOng/0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDRkYzJjMmI0MDEyMzNiY2IyYWNmOGJmZDQwNzY3M2Ji M2M1NTk4OTAwYWVmZDRhZTI2ODM3Mjg1OWUwYTEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3VTGr2UphEH5Yd2ulrCDoXK0R0yRRMWlXGkDd39upuL8L R1QtBO7HtM+p1fSqmjLesX76VDnoaB+2Mzqzc25uNY239vMQ+2IvgnyX6fssLJ67 RRdNHGNWYpMoea4zRNonfiBPLNrHKnJa7rp8saH0lg0hp9y1ZMNkT1fBrcM10n/p 06FvTM+NW5RQ446K99tZTzBrIG5V2lNrzt+WOZ9Z1wUX+HURZ1S3UmX+OC2MXuHQ u+xNH2FoMGRXrGo2cpezy+hE188GkMc0Jh6qSN4lPtITz6OUUIO7Xqv1rYuBv34I 65kd9xWi1R3okhFXX3w2tSuf0ggxphhpcvNA3mHBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuIV8PR8zrike9XdTguY9sLD40WEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkNTBhYzIzLTgzMTAtNDA0Mi05MDAyLTVhMWMwYTMwMjBjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAvcYwDQYJKoZIhvcNAQELBQADggEBAErgeHvo5vlvm9FrYYLGnxh3pLyO oHbCW573xHEUg1mFNRcxmnmu11FDNn8jLn4m0tAfZ4cpjt+7MIxmku4qm8+XWW0O H/Y7cGue4qpSpZq/rG/ivXtMs7kbDLwLVTR8NoXIMwNd/bnoxxtBQwVY9V0mcMWj MJmds7InFBZ78JFKSi5/W235ztyutNgaDN1xUA731ApZBIhGN4tlp5s4CXozAdi/ DqZp50IAOijS/ik9ynweSJaU39JhO7toF9d4LQl+Ow2Xg9Ryl6pOFR44SGfqmoac PUPtboual96PyHIfPG7hq4F9ZekrbMWuDEASRaB0aUWJXtnlvgZpMDPrRRE= -----END CERTIFICATE-----Generated at Fri Nov 22 01:34:27 2024 by rpki-client on console-ams.rpki-client.org