$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca48b82b-e983-4e4d-aa24-fb9d58241093.roa File: ca48b82b-e983-4e4d-aa24-fb9d58241093.roa (raw, json) Hash identifier: g5bi/lvirG+8FQsl+hswDG8AD3t7wAyElmYz/HF9z9o= Subject key identifier: E4:C7:88:F9:34:DB:F4:C4:6A:C4:4E:E9:9E:F2:24:7F:F7:CA:83:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 426CD8FBBF0D342E704024342DC8048D36A0B887 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca48b82b-e983-4e4d-aa24-fb9d58241093.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 99.87.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6c:d8:fb:bf:0d:34:2e:70:40:24:34:2d:c8:04:8d:36:a0:b8:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=0b9b4ba5613098f22cbe34e05a16f9c80b70ed836a83bffcbb1d9ea55974c029, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:d6:ee:71:42:f8:9b:de:b7:88:dd:5e:52: 94:3c:ba:23:26:c8:a9:2c:a0:5d:26:ca:f7:19:06: f5:8a:bf:03:e8:86:72:94:8a:7f:6e:cb:92:9f:ed: 61:c9:6e:43:35:78:3a:69:83:49:21:06:a6:5c:e1: e3:e9:71:f5:43:bb:91:a2:87:33:84:f1:7b:50:63: 87:2e:bb:a1:37:20:fa:3a:4f:e2:54:7a:d2:ee:21: d4:1d:98:0c:32:87:42:85:63:65:ca:95:6a:d4:88: 63:65:5f:7a:3e:2c:29:e8:7e:16:f1:73:ed:44:c8: b2:8d:21:03:b1:b7:df:18:7f:a0:e0:97:74:29:0b: 3c:5c:92:b0:d2:3a:89:48:69:10:18:17:bc:ba:fb: e8:55:8d:45:78:02:33:4c:d1:2f:db:20:96:7d:79: 7b:e6:5c:e7:7b:2f:a2:e0:7f:2f:74:5a:d3:96:81: 00:59:0a:73:4f:8c:be:56:41:6c:18:a7:9a:55:d0: 35:f0:89:33:d8:cf:13:76:4c:9b:d1:11:b6:58:0d: c4:77:f1:44:24:d3:52:35:60:0f:ab:25:48:83:dc: 8e:ef:70:c1:b1:ac:2b:50:4a:c8:6a:13:d5:78:18: 74:da:0d:76:32:ac:2e:c9:d9:54:ee:62:f4:73:de: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C7:88:F9:34:DB:F4:C4:6A:C4:4E:E9:9E:F2:24:7F:F7:CA:83:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca48b82b-e983-4e4d-aa24-fb9d58241093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.87.0.0/17 Signature Algorithm: sha256WithRSAEncryption 35:be:0a:be:db:95:63:68:64:ff:de:f7:3a:7c:30:dd:da:0f: df:db:87:0e:68:11:52:75:17:d4:dd:40:5c:4f:62:0a:00:a1: 85:09:22:33:02:15:36:0f:f7:49:9c:33:6b:93:2b:8d:ab:7f: 9e:a8:e6:95:7a:ab:45:07:fe:88:7f:ba:b5:d0:fb:16:26:75: ec:6a:cd:f9:27:eb:d7:67:11:8d:f2:79:8c:79:12:df:74:8e: df:b2:19:31:1d:6f:0d:d3:fa:53:b7:ee:b6:3f:85:5b:b4:0d: 79:9f:20:ac:8a:24:e9:a3:78:dd:29:02:f2:f6:ec:b4:27:06: 4f:c8:19:c6:57:02:39:c7:16:09:12:65:28:14:83:f8:d0:94: 21:0b:37:e8:b3:9a:61:28:c4:91:e5:90:ce:88:1f:de:bb:25: cd:5a:5b:75:87:f9:82:81:26:43:15:69:cc:29:9c:af:8d:12: cf:20:84:1f:fd:5f:09:89:de:46:4c:37:0b:0b:7c:3b:29:1a: 60:70:04:3d:4e:d8:ea:f2:dc:49:ca:39:93:db:d7:95:12:5d: fb:3c:59:b4:8e:17:1a:e8:78:4a:3b:05:d6:9f:a6:50:03:69: 87:ea:54:25:de:b2:f9:ce:6e:a3:fc:7f:a4:7e:22:27:d0:7b: 80:31:dc:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQmzY+78NNC5wQCQ0LcgEjTaguIcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjliNGJhNTYxMzA5OGYyMmNiZTM0ZTA1YTE2ZjljODBi NzBlZDgzNmE4M2JmZmNiYjFkOWVhNTU5NzRjMDI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtA9bucUL4m963iN1eUpQ8uiMmyKksoF0myvcZBvWKvwPo hnKUin9uy5Kf7WHJbkM1eDppg0khBqZc4ePpcfVDu5GihzOE8XtQY4cuu6E3IPo6 T+JUetLuIdQdmAwyh0KFY2XKlWrUiGNlX3o+LCnofhbxc+1EyLKNIQOxt98Yf6Dg l3QpCzxckrDSOolIaRAYF7y6++hVjUV4AjNM0S/bIJZ9eXvmXOd7L6Lgfy90WtOW gQBZCnNPjL5WQWwYp5pV0DXwiTPYzxN2TJvREbZYDcR38UQk01I1YA+rJUiD3I7v cMGxrCtQSshqE9V4GHTaDXYyrC7J2VTuYvRz3ijfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5MeI+TTb9MRqxE7pnvIkf/fKg8MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhNDhiODJiLWU5ODMtNGU0ZC1hYTI0LWZiOWQ1ODI0MTA5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdjVwAwDQYJKoZIhvcNAQELBQADggEBADW+Cr7blWNoZP/e9zp8MN3aD9/b hw5oEVJ1F9TdQFxPYgoAoYUJIjMCFTYP90mcM2uTK42rf56o5pV6q0UH/oh/urXQ +xYmdexqzfkn69dnEY3yeYx5Et90jt+yGTEdbw3T+lO37rY/hVu0DXmfIKyKJOmj eN0pAvL27LQnBk/IGcZXAjnHFgkSZSgUg/jQlCELN+izmmEoxJHlkM6IH967Jc1a W3WH+YKBJkMVacwpnK+NEs8ghB/9XwmJ3kZMNwsLfDspGmBwBD1O2Ory3EnKOZPb 15USXfs8WbSOFxroeEo7BdafplADaYfqVCXesvnObqP8f6R+IifQe4Ax3OA= -----END CERTIFICATE-----Generated at Sun Nov 24 02:35:52 2024 by rpki-client on console-fra.rpki-client.org