$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd5e1c4c-6663-4e6f-8aad-07b76a2a6802.roa File: cd5e1c4c-6663-4e6f-8aad-07b76a2a6802.roa (raw, json) Hash identifier: cbU9e0FxUpFjFOY0l7ZL7UFbDOOs8fb0h56Za06ysw4= Subject key identifier: FC:9D:8B:74:BA:92:62:10:77:A7:F0:FE:D9:A8:C8:EB:EB:10:16:6B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0A2117FF8C7E1597183F2210C77FE813BD0F16ED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd5e1c4c-6663-4e6f-8aad-07b76a2a6802.roa Signing time: Sat 23 Nov 2024 00:00:00 +0000 ROA not before: Sat 23 Nov 2024 00:00:00 +0000 ROA not after: Sat 28 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 134.127.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:21:17:ff:8c:7e:15:97:18:3f:22:10:c7:7f:e8:13:bd:0f:16:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 23 00:00:00 2024 GMT Not After : Dec 28 23:59:59 2024 GMT Subject: serialNumber=7a9284f9b3d731025fefaa4c5c96913150bb401982f13a462dff99ef3bd49fab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:0a:b5:2b:d3:f1:ff:e3:d6:ba:33:25:cb: a8:64:06:b1:08:cd:3b:7e:49:00:0c:c0:01:d5:3a: fc:e7:15:13:95:e8:26:fb:8a:69:63:12:19:93:6a: 7f:67:8b:0d:5f:ac:47:33:1f:d1:8b:15:98:40:e9: 41:6c:51:41:4d:e7:32:4d:fd:82:2b:f4:f7:35:d2: 01:08:83:21:f4:1d:fd:ce:1c:0f:c6:58:f1:25:18: af:d3:d3:98:e5:a2:f3:b1:dc:6b:62:d6:fd:c5:90: 7e:ba:11:0a:76:fc:b0:6b:c2:74:b9:c3:55:b8:ba: c8:29:48:a5:61:c6:76:cc:8f:9d:06:5c:df:49:99: 0a:13:a1:8e:14:f6:e4:1a:e8:aa:62:62:bd:71:a8: 7d:1f:97:94:44:18:b7:50:7a:81:1b:18:45:e5:5e: 3b:b4:6d:f8:4b:9a:f9:ae:66:67:1c:de:6a:4c:f4: 33:4d:3e:64:5b:15:1e:3f:b6:3a:47:fd:14:70:2b: b9:12:0b:d4:ff:de:a8:d0:1c:5e:bf:f3:d2:23:8f: b3:e6:07:ee:19:b8:8a:be:81:ad:34:0c:19:63:47: ac:c5:45:72:62:91:c6:2c:a5:cf:1f:9b:f5:82:8b: 9b:27:07:23:f6:de:7d:44:bc:a0:86:9a:12:ff:3e: 5f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9D:8B:74:BA:92:62:10:77:A7:F0:FE:D9:A8:C8:EB:EB:10:16:6B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd5e1c4c-6663-4e6f-8aad-07b76a2a6802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.127.0.0/16 Signature Algorithm: sha256WithRSAEncryption 59:4d:4e:47:e1:05:3d:74:fa:4c:ae:3e:9f:02:29:b9:f5:80: c4:33:bd:cd:a0:e0:25:7c:11:94:bb:60:11:e2:66:fe:37:12: e7:eb:ef:2d:29:4c:b2:08:8f:a6:5d:35:05:8f:8d:1e:33:c5: da:ad:67:60:b7:96:ba:dd:3f:07:d5:be:4a:be:31:d9:30:e3: b6:1b:f3:c6:23:c9:d7:da:ee:38:84:23:d0:a7:5b:7b:2a:df: 78:56:22:bc:97:3e:0c:17:a5:f0:b1:ba:57:f5:c8:d7:ad:3b: a3:e2:54:da:7b:bb:e9:37:b7:dd:97:e5:11:30:da:c9:a4:1b: a7:98:fe:c7:bf:5f:5f:84:4f:60:fb:62:2b:13:57:3c:b0:15: a8:79:5a:6b:74:fe:b9:1d:4f:2a:66:28:39:3e:1a:4f:67:9a: 09:42:9d:0c:a8:11:f5:45:04:15:e3:fa:a4:05:0b:cf:60:0f: bc:b5:89:f8:0c:03:4f:58:06:c5:c3:72:75:29:a1:0e:04:06: d9:ae:c4:db:9a:69:8d:f7:da:ee:f7:8f:a6:ff:43:2f:65:56: 22:e2:06:98:ae:6b:2f:d4:7a:f6:31:68:0a:29:0c:ce:cc:df: f1:b9:e9:3a:73:9d:cb:ab:ff:3a:ee:1c:7e:d0:97:8c:c0:0c: f1:54:9d:d5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCiEX/4x+FZcYPyIQx3/oE70PFu0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTIzMDAwMDAwWhcNMjQxMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTkyODRmOWIzZDczMTAyNWZlZmFhNGM1Yzk2OTEzMTUw YmI0MDE5ODJmMTNhNDYyZGZmOTllZjNiZDQ5ZmFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY2wq1K9Px/+PWujMly6hkBrEIzTt+SQAMwAHVOvznFROV 6Cb7imljEhmTan9niw1frEczH9GLFZhA6UFsUUFN5zJN/YIr9Pc10gEIgyH0Hf3O HA/GWPElGK/T05jlovOx3Gti1v3FkH66EQp2/LBrwnS5w1W4usgpSKVhxnbMj50G XN9JmQoToY4U9uQa6KpiYr1xqH0fl5REGLdQeoEbGEXlXju0bfhLmvmuZmcc3mpM 9DNNPmRbFR4/tjpH/RRwK7kSC9T/3qjQHF6/89Ijj7PmB+4ZuIq+ga00DBljR6zF RXJikcYspc8fm/WCi5snByP23n1EvKCGmhL/Pl9fAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/J2LdLqSYhB3p/D+2ajI6+sQFmswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkNWUxYzRjLTY2NjMtNGU2Zi04YWFkLTA3Yjc2YTJhNjgwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCGfzANBgkqhkiG9w0BAQsFAAOCAQEAWU1OR+EFPXT6TK4+nwIpufWAxDO9 zaDgJXwRlLtgEeJm/jcS5+vvLSlMsgiPpl01BY+NHjPF2q1nYLeWut0/B9W+Sr4x 2TDjthvzxiPJ19ruOIQj0KdbeyrfeFYivJc+DBel8LG6V/XI1607o+JU2nu76Te3 3ZflETDayaQbp5j+x79fX4RPYPtiKxNXPLAVqHlaa3T+uR1PKmYoOT4aT2eaCUKd DKgR9UUEFeP6pAULz2APvLWJ+AwDT1gGxcNydSmhDgQG2a7E25ppjffa7vePpv9D L2VWIuIGmK5rL9R69jFoCikMzszf8bnpOnOdy6v/Ou4cftCXjMAM8VSd1Q== -----END CERTIFICATE-----Generated at Mon Nov 25 02:58:06 2024 by rpki-client on console-fra.rpki-client.org