$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd965ce8-8693-4e09-9995-bf06572029fb.roa File: bd965ce8-8693-4e09-9995-bf06572029fb.roa (raw, json) Hash identifier: FCO26C9VmnwoV9bO+DwsPN0ZhYJZUkKGjxmGkAZmnk8= Subject key identifier: 83:5A:03:CB:C5:70:54:11:FD:27:B3:62:BE:55:A5:F1:E7:BE:F1:E8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27B22F9F061FF3094DBDC0490992A92A1D7070A7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd965ce8-8693-4e09-9995-bf06572029fb.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 701 IP address blocks: 162.208.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b2:2f:9f:06:1f:f3:09:4d:bd:c0:49:09:92:a9:2a:1d:70:70:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=3a8f1702db00901dfeb51572d0d4e9a33630a9ef557682c5388a33beba84013a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a2:5a:36:bc:2f:ce:df:95:f4:83:75:a9:54: 7e:9d:10:b5:93:ad:04:bc:62:d9:aa:65:be:ed:96: b6:a9:f4:a5:88:75:eb:ae:24:9d:12:4a:59:68:fb: fe:22:ab:3b:69:52:65:ef:f9:22:33:30:ca:d2:29: fb:57:40:df:32:d4:66:db:d9:b6:c0:4e:10:60:55: a1:b9:b0:d8:51:84:6b:a5:f4:9a:2b:19:51:f7:2f: ae:45:dd:01:09:9a:2c:5e:eb:36:5e:03:00:a6:00: 32:07:63:50:e0:d1:68:45:0d:3c:a9:ae:b6:d4:fa: b8:eb:5f:3e:a3:ab:8a:bb:cf:12:4d:2c:05:bb:30: d1:82:5e:d9:0e:e1:b2:25:27:47:74:2c:d4:33:83: 9e:bb:cc:aa:3b:7d:d6:40:8d:0d:41:b7:44:39:35: 70:d7:a4:50:d9:07:7a:d1:aa:cf:c8:40:a9:80:40: 08:23:2a:fb:18:a7:f6:50:ac:00:fc:54:c6:d7:e2: a3:66:85:5d:a6:0d:ed:cc:98:eb:6d:82:06:42:b9: 37:28:2e:92:e2:ae:a2:1d:fe:37:a9:dd:d8:c6:ea: e3:f0:5c:fc:29:49:6e:1e:90:34:49:4b:49:5b:5e: 9f:60:43:31:8e:1a:f8:dc:9d:5c:ef:2c:41:cf:24: cd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5A:03:CB:C5:70:54:11:FD:27:B3:62:BE:55:A5:F1:E7:BE:F1:E8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd965ce8-8693-4e09-9995-bf06572029fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.208.123.0/24 Signature Algorithm: sha256WithRSAEncryption 97:d9:aa:1e:f5:9f:c4:ab:40:3e:51:87:89:b5:e3:4d:93:a6: f2:55:9d:09:6d:ad:be:70:a0:09:c7:4d:f0:d4:3b:0c:58:ad: 1e:0e:a9:28:f2:87:08:1a:0e:4e:17:a7:90:1a:50:59:a1:45: a1:70:f5:d5:19:d8:33:c1:cb:17:f6:8a:63:d3:00:39:13:6e: 9a:40:ad:b7:43:56:ed:e6:a3:44:b8:43:d8:0e:3f:7b:72:88: 67:37:fb:b4:d4:d5:36:3b:db:6d:12:cf:71:72:61:18:ee:07: 9b:38:c4:dc:1b:9a:29:12:cb:90:31:a5:af:35:a3:7b:5d:7e: 00:f3:35:c8:51:72:df:8e:ed:ba:be:e3:25:cf:bc:c7:9e:15: ff:1d:ed:a0:66:ee:ae:41:30:96:f5:55:a1:b0:60:1f:a2:93: 44:61:5d:1f:62:35:4f:94:e5:b0:d7:81:1e:1b:15:3a:22:20: be:61:70:3d:20:95:f1:60:ae:0a:12:d4:70:b4:cb:05:14:b6: 18:f9:04:5c:c9:5d:20:86:b0:d5:67:8f:89:d3:db:27:c9:31: 08:b3:98:ab:cb:4c:fd:13:78:1f:b0:99:d0:15:d3:a1:04:74: 72:36:d3:de:f2:99:4f:ca:62:5e:09:7f:22:6a:ab:35:ea:59: 8d:d2:85:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ7IvnwYf8wlNvcBJCZKpKh1wcKcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYThmMTcwMmRiMDA5MDFkZmViNTE1NzJkMGQ0ZTlhMzM2 MzBhOWVmNTU3NjgyYzUzODhhMzNiZWJhODQwMTNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXolo2vC/O35X0g3WpVH6dELWTrQS8YtmqZb7tlrap9KWI deuuJJ0SSllo+/4iqztpUmXv+SIzMMrSKftXQN8y1Gbb2bbAThBgVaG5sNhRhGul 9JorGVH3L65F3QEJmixe6zZeAwCmADIHY1Dg0WhFDTyprrbU+rjrXz6jq4q7zxJN LAW7MNGCXtkO4bIlJ0d0LNQzg567zKo7fdZAjQ1Bt0Q5NXDXpFDZB3rRqs/IQKmA QAgjKvsYp/ZQrAD8VMbX4qNmhV2mDe3MmOttggZCuTcoLpLirqId/jep3djG6uPw XPwpSW4ekDRJS0lbXp9gQzGOGvjcnVzvLEHPJM3fAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUg1oDy8VwVBH9J7NivlWl8ee+8egwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkOTY1Y2U4LTg2OTMtNGUwOS05OTk1LWJmMDY1NzIwMjlmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACi0HswDQYJKoZIhvcNAQELBQADggEBAJfZqh71n8SrQD5Rh4m1402TpvJV nQltrb5woAnHTfDUOwxYrR4OqSjyhwgaDk4Xp5AaUFmhRaFw9dUZ2DPByxf2imPT ADkTbppArbdDVu3mo0S4Q9gOP3tyiGc3+7TU1TY7220Sz3FyYRjuB5s4xNwbmikS y5Axpa81o3tdfgDzNchRct+O7bq+4yXPvMeeFf8d7aBm7q5BMJb1VaGwYB+ik0Rh XR9iNU+U5bDXgR4bFToiIL5hcD0glfFgrgoS1HC0ywUUthj5BFzJXSCGsNVnj4nT 2yfJMQizmKvLTP0TeB+wmdAV06EEdHI2097ymU/KYl4JfyJqqzXqWY3ShWM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:03:08 2024 by rpki-client on console-ams.rpki-client.org