$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2b4043e-bd7b-4569-909f-36c617544f6f.roa File: d2b4043e-bd7b-4569-909f-36c617544f6f.roa (raw, json) Hash identifier: inXJfNWY90dFdQ2h0oeIV+Lz6H32h88FDtK23bPXnPU= Subject key identifier: 3D:7B:E5:89:D1:78:AB:08:DD:12:C1:8C:19:6B:1B:B1:D7:34:8C:33 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35C8606ABAB5FD00BFC5CD95367E3C7A4459AC25 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2b4043e-bd7b-4569-909f-36c617544f6f.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 99.77.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c8:60:6a:ba:b5:fd:00:bf:c5:cd:95:36:7e:3c:7a:44:59:ac:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=bc442567a5b2f21c36a30450060ab2a5c38ca258cfa2c4d13fe5082e0c44471f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:83:95:59:eb:2a:26:1f:0c:cf:f1:ac:bc:9e: 6c:ea:46:3b:20:4e:9b:22:b1:8a:4a:87:3c:93:ef: e5:18:e7:11:94:60:27:e8:78:78:3d:89:9e:f2:2a: ba:ed:52:17:b7:8f:c1:d2:64:fe:cf:5d:4e:e5:18: 7f:e1:d9:07:c6:09:9f:05:23:c8:c4:2f:cb:7c:66: 6e:e3:10:97:84:71:c4:26:69:d9:72:93:78:e5:e6: 0c:b8:29:b6:be:e9:a3:dc:04:bc:10:6d:8e:66:72: 77:de:c6:46:3a:97:8d:11:eb:0e:f0:29:73:0c:be: 9d:24:c9:e3:08:71:ea:fb:f7:91:77:32:f1:9b:92: 13:86:0e:aa:4b:f4:5c:4f:69:d8:78:52:e5:df:a6: e5:fa:9c:a5:ad:4d:37:63:cd:c7:e0:d1:df:d9:53: b1:86:bf:d1:66:99:b7:05:35:85:f0:ae:31:dc:74: 20:50:c5:88:30:d1:f4:2c:ac:9b:60:0a:69:86:3e: a6:0e:f6:5e:b4:0c:f9:64:01:2f:7b:1a:de:9a:11: 46:19:da:45:2b:b1:a0:06:b0:cb:87:b9:d6:1e:4a: a2:2b:b3:90:f4:94:11:2b:92:80:47:9f:1d:c4:b8: 4b:fe:85:3f:ff:fd:04:04:bd:f2:f8:a2:63:70:5c: b5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7B:E5:89:D1:78:AB:08:DD:12:C1:8C:19:6B:1B:B1:D7:34:8C:33 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2b4043e-bd7b-4569-909f-36c617544f6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.129.0/24 Signature Algorithm: sha256WithRSAEncryption be:da:de:12:f0:2b:f5:d2:15:c7:dd:dc:fe:24:62:e4:a9:9e: d5:37:dd:ce:c9:2a:90:be:56:43:9e:3c:66:ec:d0:d7:33:83: 10:c0:ae:4d:b0:73:ab:7a:40:02:1d:54:d9:20:36:c7:82:96: d7:2c:ae:21:00:c4:cb:8b:74:f9:2b:1e:e9:c7:de:8f:09:70: 37:74:be:9a:02:93:8d:39:16:60:34:42:ea:8f:6b:dc:63:55: d1:dd:d5:6f:e4:00:e7:0b:06:99:85:fb:67:93:e6:41:8e:3c: 5d:b3:23:77:58:de:50:cd:50:13:8e:3d:fa:65:79:6e:1f:e6: ee:6b:00:ba:00:99:0d:87:0f:8a:3e:e8:97:28:e4:6a:3c:d5: b7:a3:cc:8b:99:d3:06:d9:82:63:44:c7:ef:5d:0a:40:72:85: 26:fa:2f:2e:9f:e0:b8:78:6e:28:c3:c7:34:e7:c1:94:a7:41: fd:e6:41:27:08:2b:79:e9:fe:2b:8c:f7:77:e8:dc:94:96:0d: 02:9b:06:77:48:88:04:55:ee:59:f7:c0:7d:d6:b8:57:f3:48: 7b:55:f9:27:04:d5:af:db:0f:08:1d:f8:c6:b3:ab:c8:b4:75: a8:3b:d7:99:d1:de:b3:d9:49:ba:a8:51:cf:0e:5c:39:ec:e1: 70:3b:44:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNchgarq1/QC/xc2VNn48ekRZrCUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzQ0MjU2N2E1YjJmMjFjMzZhMzA0NTAwNjBhYjJhNWMz OGNhMjU4Y2ZhMmM0ZDEzZmU1MDgyZTBjNDQ0NzFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJg5VZ6yomHwzP8ay8nmzqRjsgTpsisYpKhzyT7+UY5xGU YCfoeHg9iZ7yKrrtUhe3j8HSZP7PXU7lGH/h2QfGCZ8FI8jEL8t8Zm7jEJeEccQm adlyk3jl5gy4Kba+6aPcBLwQbY5mcnfexkY6l40R6w7wKXMMvp0kyeMIcer795F3 MvGbkhOGDqpL9FxPadh4UuXfpuX6nKWtTTdjzcfg0d/ZU7GGv9FmmbcFNYXwrjHc dCBQxYgw0fQsrJtgCmmGPqYO9l60DPlkAS97Gt6aEUYZ2kUrsaAGsMuHudYeSqIr s5D0lBErkoBHnx3EuEv+hT///QQEvfL4omNwXLVLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPXvlidF4qwjdEsGMGWsbsdc0jDMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QyYjQwNDNlLWJkN2ItNDU2OS05MDlmLTM2YzYxNzU0NGY2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTYEwDQYJKoZIhvcNAQELBQADggEBAL7a3hLwK/XSFcfd3P4kYuSpntU3 3c7JKpC+VkOePGbs0NczgxDArk2wc6t6QAIdVNkgNseCltcsriEAxMuLdPkrHunH 3o8JcDd0vpoCk405FmA0QuqPa9xjVdHd1W/kAOcLBpmF+2eT5kGOPF2zI3dY3lDN UBOOPfpleW4f5u5rALoAmQ2HD4o+6Jco5Go81bejzIuZ0wbZgmNEx+9dCkByhSb6 Ly6f4Lh4bijDxzTnwZSnQf3mQScIK3np/iuM93fo3JSWDQKbBndIiARV7ln3wH3W uFfzSHtV+ScE1a/bDwgd+Mazq8i0dag715nR3rPZSbqoUc8OXDns4XA7RLM= -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:32 2024 by rpki-client on console-fra.rpki-client.org