$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d137cbf3-b7ec-4133-a54c-708ebc2ae87a.roa File: d137cbf3-b7ec-4133-a54c-708ebc2ae87a.roa (raw, json) Hash identifier: 8MQ2ymPcvjeHXqvXcj18NS48lXzo2EQR7JUD63azJ/o= Subject key identifier: 00:2D:00:A3:F1:15:ED:09:22:1E:91:C4:6B:FF:C6:44:E0:9F:AC:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39A019ECC6FBC3F0A8F2960D0C17501B5D9627A9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d137cbf3-b7ec-4133-a54c-708ebc2ae87a.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.78.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a0:19:ec:c6:fb:c3:f0:a8:f2:96:0d:0c:17:50:1b:5d:96:27:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=88bcbf953a4e63e1d7ca8281185f65a149e0830e7b4674bd6a569dc5e85c4cab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1a:dd:0a:37:d8:58:a1:58:0f:c5:db:c8:fc: f2:9d:df:04:9a:56:43:11:8f:b1:2a:38:26:5a:08: 07:a4:81:d6:36:14:47:3e:de:7a:d7:e9:84:c8:04: ae:0c:3d:94:49:42:8a:eb:65:c6:41:ff:ef:32:a7: e6:2f:55:9b:f6:a5:a3:f5:3e:6f:c2:c3:15:ef:ea: 18:d2:de:a2:f6:ef:58:50:75:bd:80:e1:14:22:1d: cd:8f:75:59:a8:db:75:c6:12:ed:b3:a4:54:20:08: 4b:60:6f:bd:17:0a:92:63:f8:c0:62:33:99:e9:41: a5:b2:95:fb:11:a2:62:95:0b:98:16:dd:63:44:ec: 13:da:ad:ee:7f:c9:51:ad:74:cf:f8:68:60:da:34: 4c:bb:c9:77:59:1e:b5:0f:02:f6:1c:16:63:e2:58: 55:6e:3e:bb:4a:a7:d2:e4:17:bd:4d:eb:61:d9:63: 19:d5:25:1a:e6:e4:c9:d1:7e:cb:9b:9a:97:88:64: 44:b0:ff:02:42:8c:f9:d6:87:9a:1a:f9:8f:84:03: c1:81:ff:fd:74:69:5a:c6:1f:3a:94:be:13:4e:87: 55:37:50:a5:9a:49:2e:3d:77:a2:1c:d6:3b:9d:39: 75:a1:86:8d:85:f9:cf:fd:cf:5e:d8:96:32:0b:78: 48:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2D:00:A3:F1:15:ED:09:22:1E:91:C4:6B:FF:C6:44:E0:9F:AC:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d137cbf3-b7ec-4133-a54c-708ebc2ae87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.78.0.0/15 Signature Algorithm: sha256WithRSAEncryption 9c:1e:59:b7:3b:f8:06:7f:e1:71:df:69:f9:a7:fc:3b:87:77: ed:ec:04:6d:bb:5b:bf:c7:26:4c:72:eb:53:12:63:39:93:f6: 24:23:0d:95:75:3d:bd:3b:fb:ad:2a:ee:7e:55:83:71:18:41: f2:53:b3:0a:c8:1f:0c:4b:0f:63:7b:6a:7d:bd:38:7b:8e:64: 91:ac:db:5f:8c:85:1e:ea:8c:e0:37:6e:4a:7c:8e:34:2c:54: 73:d0:39:de:33:80:28:b6:f6:a2:36:0d:ee:26:4b:50:2f:97: 34:f1:55:67:53:53:23:97:d5:cf:a5:bb:15:08:3a:fd:e3:3a: cd:77:f2:69:91:76:1a:0d:eb:79:6e:ad:4a:bf:aa:5e:ae:68: 22:ad:ec:c5:25:db:d3:26:f7:94:c4:87:4e:20:6d:c5:c4:42: 4a:60:03:75:61:78:39:0c:51:00:c5:e4:b5:f0:3c:f2:3e:69: d9:8a:9f:66:fd:db:b2:a2:b9:11:e7:75:35:71:c3:74:2a:ee: 7c:83:5d:31:03:fc:8a:af:3d:fc:3a:0c:d9:63:77:4e:93:1c: 3b:42:e9:51:3f:04:e1:c5:98:7c:24:f6:85:17:ea:23:d8:aa: 8e:be:6d:f7:26:57:1a:00:9d:7e:df:49:cf:5a:c9:f3:5c:ed: bd:17:5b:b9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOaAZ7Mb7w/Co8pYNDBdQG12WJ6kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGJjYmY5NTNhNGU2M2UxZDdjYTgyODExODVmNjVhMTQ5 ZTA4MzBlN2I0Njc0YmQ2YTU2OWRjNWU4NWM0Y2FiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTGt0KN9hYoVgPxdvI/PKd3wSaVkMRj7EqOCZaCAekgdY2 FEc+3nrX6YTIBK4MPZRJQorrZcZB/+8yp+YvVZv2paP1Pm/CwxXv6hjS3qL271hQ db2A4RQiHc2PdVmo23XGEu2zpFQgCEtgb70XCpJj+MBiM5npQaWylfsRomKVC5gW 3WNE7BPare5/yVGtdM/4aGDaNEy7yXdZHrUPAvYcFmPiWFVuPrtKp9LkF71N62HZ YxnVJRrm5MnRfsubmpeIZESw/wJCjPnWh5oa+Y+EA8GB//10aVrGHzqUvhNOh1U3 UKWaSS49d6Ic1judOXWhho2F+c/9z17YljILeEg7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUAC0Ao/EV7QkiHpHEa//GROCfrBgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxMzdjYmYzLWI3ZWMtNDEzMy1hNTRjLTcwOGViYzJhZTg3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEQTjANBgkqhkiG9w0BAQsFAAOCAQEAnB5Ztzv4Bn/hcd9p+af8O4d37ewE bbtbv8cmTHLrUxJjOZP2JCMNlXU9vTv7rSruflWDcRhB8lOzCsgfDEsPY3tqfb04 e45kkazbX4yFHuqM4DduSnyONCxUc9A53jOAKLb2ojYN7iZLUC+XNPFVZ1NTI5fV z6W7FQg6/eM6zXfyaZF2Gg3reW6tSr+qXq5oIq3sxSXb0yb3lMSHTiBtxcRCSmAD dWF4OQxRAMXktfA88j5p2YqfZv3bsqK5Eed1NXHDdCrufINdMQP8iq89/DoM2WN3 TpMcO0LpUT8E4cWYfCT2hRfqI9iqjr5t9yZXGgCdft9Jz1rJ81ztvRdbuQ== -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:32 2024 by rpki-client on console-fra.rpki-client.org