$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cee6354e-41ef-4112-a320-44e3d6df32e6.roa File: cee6354e-41ef-4112-a320-44e3d6df32e6.roa (raw, json) Hash identifier: 5gciV/x8nkcrzxX/E4CLaRD98gc3S39JFjqm/SFsSL4= Subject key identifier: 3D:C7:4D:E7:23:22:00:F3:16:EF:0A:84:67:C5:78:4E:93:E1:B3:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1028E2B2B7BEFEDF5C8A2977900A0964904F922C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cee6354e-41ef-4112-a320-44e3d6df32e6.roa Signing time: Fri 01 Nov 2024 00:00:00 +0000 ROA not before: Fri 01 Nov 2024 00:00:00 +0000 ROA not after: Fri 06 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 130.186.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:28:e2:b2:b7:be:fe:df:5c:8a:29:77:90:0a:09:64:90:4f:92:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 1 00:00:00 2024 GMT Not After : Dec 6 23:59:59 2024 GMT Subject: serialNumber=4afde147a3524a7756ebde50d7118d407f4df54b0972d6357e1bdd2f076661fc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:e8:ac:22:27:4b:41:eb:f2:4d:50:2d:c8: 35:50:5e:df:6f:26:fb:78:68:a4:0e:68:09:ac:ba: d0:b8:5a:f1:e3:0b:02:4f:c8:78:4c:08:26:84:91: 4e:00:22:f4:d3:36:96:8a:85:06:d8:d9:31:b1:9d: 7a:c5:dd:c0:fe:70:46:7a:98:6a:91:d9:f9:10:ab: d4:1b:9d:62:47:21:fb:00:f5:fb:ee:89:bd:be:01: b6:b2:e2:71:1a:23:e1:f4:89:18:51:ff:d4:51:d0: 66:fc:cb:0a:1e:07:1c:b2:96:79:1f:91:6f:86:0e: 1b:4c:f8:9e:6b:b5:33:30:e2:46:aa:f0:9e:e8:89: 53:ef:bc:d3:b0:f3:a0:82:ca:c5:dc:08:e1:7c:c8: 0f:13:23:c5:5b:e7:bf:d6:83:cf:93:ae:44:1e:ba: 4b:93:1b:70:76:2f:2f:90:45:ea:ae:a8:bd:d9:63: 17:79:a0:d2:33:48:59:1f:48:80:66:77:18:96:01: e6:65:80:55:f4:f7:d1:26:13:e9:5c:76:52:cd:0a: 73:74:38:72:60:ac:86:a3:71:c5:a3:8f:7e:bb:6d: 7d:e2:5c:ae:33:7c:c7:d6:e7:a9:94:05:24:50:c8: e6:22:56:ee:ca:e7:65:6e:12:cd:82:7d:82:96:3a: ac:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C7:4D:E7:23:22:00:F3:16:EF:0A:84:67:C5:78:4E:93:E1:B3:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cee6354e-41ef-4112-a320-44e3d6df32e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.186.128.0/17 Signature Algorithm: sha256WithRSAEncryption 04:05:0f:92:9b:db:36:49:af:6e:96:dd:3e:3a:54:da:22:73: d7:34:76:22:23:08:97:cf:86:79:3e:02:cf:65:c8:74:8d:89: 12:a3:95:38:1d:f4:50:af:30:74:e3:c7:19:50:c2:b6:ab:61: 97:11:db:5a:87:06:16:ee:4d:98:90:d9:28:40:97:27:87:70: 0d:35:2b:d3:72:18:d1:c6:22:e1:26:b6:b0:54:b7:bf:c1:a5: 4a:62:d0:ad:c6:38:9e:92:9e:bc:09:1d:2d:9f:ba:cc:e2:4f: e8:a0:72:d1:c4:dd:81:3c:a5:74:77:b7:38:48:5a:90:92:41: 94:a1:b2:b5:39:9a:5f:85:1f:f7:8f:cc:fc:a8:02:0a:9c:4c: 59:d9:a9:e9:a8:07:f5:4a:a1:e6:49:5d:fd:c7:36:72:ab:5f: 40:38:4c:80:a7:05:d2:c5:3c:90:0a:33:ad:11:b5:29:94:38: 16:6b:8f:25:96:41:8a:d3:ac:1c:55:60:a6:41:40:b9:75:5c: 85:6c:d6:07:87:aa:67:bc:6d:68:70:a5:83:1b:d6:f4:5c:37: 47:33:cf:24:6d:5d:a3:f3:ed:c0:42:c9:34:9e:c4:e1:1e:75: 99:32:da:df:80:79:d9:a5:30:17:74:79:26:4c:d5:61:66:d3: 5a:fe:21:db -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUECjisre+/t9ciil3kAoJZJBPkiwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAxMDAwMDAwWhcNMjQxMjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWZkZTE0N2EzNTI0YTc3NTZlYmRlNTBkNzExOGQ0MDdm NGRmNTRiMDk3MmQ2MzU3ZTFiZGQyZjA3NjY2MWZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDExuisIidLQevyTVAtyDVQXt9vJvt4aKQOaAmsutC4WvHj CwJPyHhMCCaEkU4AIvTTNpaKhQbY2TGxnXrF3cD+cEZ6mGqR2fkQq9QbnWJHIfsA 9fvuib2+Abay4nEaI+H0iRhR/9RR0Gb8ywoeBxyylnkfkW+GDhtM+J5rtTMw4kaq 8J7oiVPvvNOw86CCysXcCOF8yA8TI8Vb57/Wg8+TrkQeukuTG3B2Ly+QRequqL3Z Yxd5oNIzSFkfSIBmdxiWAeZlgFX099EmE+lcdlLNCnN0OHJgrIajccWjj367bX3i XK4zfMfW56mUBSRQyOYiVu7K52VuEs2CfYKWOqxzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPcdN5yMiAPMW7wqEZ8V4TpPhs20wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlZTYzNTRlLTQxZWYtNDExMi1hMzIwLTQ0ZTNkNmRmMzJlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeCuoAwDQYJKoZIhvcNAQELBQADggEBAAQFD5Kb2zZJr26W3T46VNoic9c0 diIjCJfPhnk+As9lyHSNiRKjlTgd9FCvMHTjxxlQwrarYZcR21qHBhbuTZiQ2ShA lyeHcA01K9NyGNHGIuEmtrBUt7/BpUpi0K3GOJ6SnrwJHS2fusziT+igctHE3YE8 pXR3tzhIWpCSQZShsrU5ml+FH/ePzPyoAgqcTFnZqemoB/VKoeZJXf3HNnKrX0A4 TICnBdLFPJAKM60RtSmUOBZrjyWWQYrTrBxVYKZBQLl1XIVs1geHqme8bWhwpYMb 1vRcN0czzyRtXaPz7cBCyTSexOEedZky2t+AedmlMBd0eSZM1WFm01r+Ids= -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:31 2024 by rpki-client on console-fra.rpki-client.org