$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf11bfde-f711-4186-bc9f-037019eca6c4.roa File: bf11bfde-f711-4186-bc9f-037019eca6c4.roa (raw, json) Hash identifier: OEWiwAYsEcWZizia+G/D0kTwoXN//UUTA0vthsXxsig= Subject key identifier: 1C:D4:0D:10:11:45:0F:44:28:A6:41:84:F3:E1:BC:A9:C2:D1:48:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 409497D317C8C90DAE553E3ED8E3DA15F013DC67 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf11bfde-f711-4186-bc9f-037019eca6c4.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.164.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:94:97:d3:17:c8:c9:0d:ae:55:3e:3e:d8:e3:da:15:f0:13:dc:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=eab41ef5febb5b618ed7ece09097254011dd67a7f114db0133ee5d3318a2ee6a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:21:e4:2e:bc:5a:4b:26:1e:c3:90:a4:75:b9: c2:bb:fe:c3:c3:37:f4:ed:27:ab:ca:cc:49:c2:b0: d5:48:61:2d:aa:73:c7:36:58:60:31:7a:e3:68:e8: 37:10:47:ec:7a:0f:c4:33:4a:10:2e:7f:fc:d3:d2: cd:18:79:2e:0f:97:88:40:8b:30:42:d8:8c:01:5a: 7f:65:5b:86:18:ad:ec:c8:0d:37:cd:6e:b5:f7:21: 37:3f:f6:6c:9c:cb:56:88:a2:dd:d8:62:01:fc:28: 64:92:a3:1a:ea:8a:59:06:30:f5:72:49:4a:5a:f5: 29:d5:b6:0f:bb:64:bd:97:59:6f:e9:e4:94:20:24: 58:46:7c:72:ae:67:f7:e0:e3:20:eb:d1:0b:0b:0c: bc:e1:02:56:40:73:dd:75:5e:20:15:37:07:c2:49: 5b:66:1c:ff:01:13:44:18:03:b7:06:29:e9:d4:93: 80:c7:67:9f:41:5b:f1:6e:33:65:01:05:c0:4a:5a: 4a:3e:04:18:42:28:de:5b:1f:50:21:67:19:6a:5e: 54:91:81:be:1a:4e:46:19:3f:44:b7:6c:76:c0:47: b9:fc:3a:de:ec:8e:6c:40:9e:e5:72:ab:0d:dd:9e: 7a:4a:f8:89:82:9e:f1:2c:af:12:05:85:e1:e9:65: 30:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D4:0D:10:11:45:0F:44:28:A6:41:84:F3:E1:BC:A9:C2:D1:48:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf11bfde-f711-4186-bc9f-037019eca6c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.164.0.0/16 Signature Algorithm: sha256WithRSAEncryption ad:5a:ca:26:95:77:a9:ee:32:1a:61:d9:4a:c9:3c:ff:f9:be: a0:97:4b:7b:54:07:b8:19:21:08:17:69:65:09:76:33:ec:e0: 1b:86:93:1b:36:87:7c:5f:2b:c9:30:83:e8:ac:18:bd:85:07: 19:8b:33:9f:40:5c:fa:f6:94:1f:c0:48:f2:23:7c:d1:9e:9f: 47:da:3d:d5:0e:f8:65:72:e9:9e:db:18:3d:ee:7f:1f:74:a0: 8b:a1:c6:6f:6a:f8:b8:97:3b:b6:3a:1c:4d:3f:71:a2:6d:50: 64:60:c9:f6:96:df:38:1a:4b:05:fe:62:0e:9e:64:69:0b:1d: 8e:ad:55:c9:0c:8b:da:c8:5e:6c:fb:6e:8a:7e:bc:84:bc:3d: ee:4a:e9:6e:da:a2:9f:d1:3a:03:d1:fb:81:50:1a:9b:34:7c: 1a:8e:a9:15:59:d3:ad:7d:d4:51:a2:9f:53:4f:44:72:db:04: 1c:40:3f:c3:2d:09:04:bc:67:70:32:aa:33:2b:8f:be:ce:43: 6d:64:41:8f:5f:6e:0c:e8:af:3c:0a:0a:25:bf:87:b6:70:91: 85:66:de:21:0e:a3:bc:47:8e:d1:29:83:b8:7a:18:0f:86:ad: f9:ca:5c:bb:26:54:86:a2:df:a5:15:bf:59:c2:c9:5a:00:bb: 87:69:ac:8a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQJSX0xfIyQ2uVT4+2OPaFfAT3GcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYWI0MWVmNWZlYmI1YjYxOGVkN2VjZTA5MDk3MjU0MDEx ZGQ2N2E3ZjExNGRiMDEzM2VlNWQzMzE4YTJlZTZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYIeQuvFpLJh7DkKR1ucK7/sPDN/TtJ6vKzEnCsNVIYS2q c8c2WGAxeuNo6DcQR+x6D8QzShAuf/zT0s0YeS4Pl4hAizBC2IwBWn9lW4YYrezI DTfNbrX3ITc/9mycy1aIot3YYgH8KGSSoxrqilkGMPVySUpa9SnVtg+7ZL2XWW/p 5JQgJFhGfHKuZ/fg4yDr0QsLDLzhAlZAc911XiAVNwfCSVtmHP8BE0QYA7cGKenU k4DHZ59BW/FuM2UBBcBKWko+BBhCKN5bH1AhZxlqXlSRgb4aTkYZP0S3bHbAR7n8 Ot7sjmxAnuVyqw3dnnpK+ImCnvEsrxIFheHpZTDHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUHNQNEBFFD0QopkGE8+G8qcLRSHkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmMTFiZmRlLWY3MTEtNDE4Ni1iYzlmLTAzNzAxOWVjYTZjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQpDANBgkqhkiG9w0BAQsFAAOCAQEArVrKJpV3qe4yGmHZSsk8//m+oJdL e1QHuBkhCBdpZQl2M+zgG4aTGzaHfF8ryTCD6KwYvYUHGYszn0Bc+vaUH8BI8iN8 0Z6fR9o91Q74ZXLpntsYPe5/H3Sgi6HGb2r4uJc7tjocTT9xom1QZGDJ9pbfOBpL Bf5iDp5kaQsdjq1VyQyL2shebPtuin68hLw97krpbtqin9E6A9H7gVAamzR8Go6p FVnTrX3UUaKfU09EctsEHEA/wy0JBLxncDKqMyuPvs5DbWRBj19uDOivPAoKJb+H tnCRhWbeIQ6jvEeO0SmDuHoYD4at+cpcuyZUhqLfpRW/WcLJWgC7h2msig== -----END CERTIFICATE-----Generated at Fri Nov 22 04:03:09 2024 by rpki-client on console-ams.rpki-client.org