$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e187c-88a8-41ad-918d-6d6c9508c20e.roa File: d39e187c-88a8-41ad-918d-6d6c9508c20e.roa (raw, json) Hash identifier: 0B9pwVQADs6otiEBCc0tO1Ao/yb+jjMnvZ99DlxjpWU= Subject key identifier: 47:4F:92:57:10:9F:53:9B:36:95:FB:71:4E:8D:4F:CB:FE:F9:04:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 06D8A85FC97565EA7770678E2DE06412874A2A03 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e187c-88a8-41ad-918d-6d6c9508c20e.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 76.223.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d8:a8:5f:c9:75:65:ea:77:70:67:8e:2d:e0:64:12:87:4a:2a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=36e47f69ca272100cf1d73702551781e2fa7c19ad94e65bc30e058ce3775ae97, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:bb:32:95:aa:ad:99:c3:f9:03:2a:ce:84: 52:f9:7e:3f:8c:68:59:0c:0c:27:7b:d2:e2:1c:bd: 5e:c8:76:dc:d2:8e:28:57:e3:13:1f:b0:36:90:2d: a6:b3:f7:14:8e:86:5f:98:9d:de:3e:83:a8:ae:28: 5f:00:ee:f8:c1:3f:2e:14:da:05:28:16:ac:77:2e: e6:71:7c:4d:44:48:bb:a8:46:e4:9c:d7:07:df:9d: 9e:cb:c4:6b:8d:f3:28:14:c1:a8:89:06:29:d6:25: fa:b1:54:38:dc:dc:41:b5:5b:c6:e9:b3:5f:4e:bf: 8f:42:65:6e:1e:aa:90:53:f9:5b:7c:53:1d:a2:e3: ca:1a:9f:6c:77:c6:e5:f0:a3:bd:59:95:85:8e:1b: 00:29:20:3e:1c:73:72:fb:9b:75:c6:4c:32:03:ad: 58:c5:f1:a7:74:d9:70:1f:f8:68:9e:77:19:a9:2f: 60:9a:c7:eb:ba:c4:6e:1a:c1:60:5f:8d:92:aa:71: 78:e6:0d:be:18:c0:3a:91:c4:d4:a2:49:52:c9:18: e9:3e:05:f0:31:1b:7b:6b:43:30:6b:74:7b:c1:49: 77:83:f2:b4:ef:7e:ca:77:39:4a:3f:67:f1:aa:f5: f6:55:4a:0f:e3:3e:88:28:d5:2a:55:a9:6b:50:0a: 0d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4F:92:57:10:9F:53:9B:36:95:FB:71:4E:8D:4F:CB:FE:F9:04:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e187c-88a8-41ad-918d-6d6c9508c20e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.136.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:64:be:b1:76:71:34:fd:63:fe:d5:dc:79:d9:93:88:28:94: 39:71:17:b0:b1:73:26:8b:0b:7e:08:d9:56:f3:80:83:68:04: 87:b8:7d:eb:16:66:8a:ee:34:7d:8a:08:f7:c7:15:b4:ff:33: 57:f3:6f:3a:4f:1f:87:91:3c:a0:14:a9:d8:2a:17:21:6c:52: 2f:33:70:18:3a:21:cb:49:8a:c0:14:6a:67:f7:0c:03:7c:ce: 3e:73:82:92:a5:e5:17:55:63:9e:38:7a:c0:b8:f2:f8:69:b1: 09:f6:de:03:93:66:ab:6f:f6:3a:4c:54:09:2b:6a:00:4d:5e: f2:a9:9b:b5:6a:92:cb:cd:d2:46:bd:51:03:8d:f8:aa:66:68: 84:46:d5:5f:f8:57:b6:e8:e6:1d:1d:dd:6c:6f:ae:7c:33:5e: e7:45:99:eb:0f:75:d2:26:04:f9:22:c3:e7:cc:41:08:6c:5a: dc:83:d3:f8:ae:9c:d6:a1:d0:22:a0:dc:82:bd:3c:e4:a9:61: fa:22:41:db:78:a0:9e:56:7c:3d:60:23:d4:99:ed:80:7a:57: e8:23:37:c9:16:40:92:31:a1:35:b3:fd:bf:40:5b:0a:ef:f0: 30:76:84:9f:ee:8b:45:bc:b2:e7:ec:06:20:4c:ed:ad:04:24: e3:61:70:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBtioX8l1Zep3cGeOLeBkEodKKgMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmU0N2Y2OWNhMjcyMTAwY2YxZDczNzAyNTUxNzgxZTJm YTdjMTlhZDk0ZTY1YmMzMGUwNThjZTM3NzVhZTk3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjT7sylaqtmcP5AyrOhFL5fj+MaFkMDCd70uIcvV7IdtzS jihX4xMfsDaQLaaz9xSOhl+Ynd4+g6iuKF8A7vjBPy4U2gUoFqx3LuZxfE1ESLuo RuSc1wffnZ7LxGuN8ygUwaiJBinWJfqxVDjc3EG1W8bps19Ov49CZW4eqpBT+Vt8 Ux2i48oan2x3xuXwo71ZlYWOGwApID4cc3L7m3XGTDIDrVjF8ad02XAf+Giedxmp L2Cax+u6xG4awWBfjZKqcXjmDb4YwDqRxNSiSVLJGOk+BfAxG3trQzBrdHvBSXeD 8rTvfsp3OUo/Z/Gq9fZVSg/jPogo1SpVqWtQCg3nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUR0+SVxCfU5s2lftxTo1Py/75BNEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QzOWUxODdjLTg4YTgtNDFhZC05MThkLTZkNmM5NTA4YzIwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANM34gwDQYJKoZIhvcNAQELBQADggEBAIpkvrF2cTT9Y/7V3HnZk4golDlx F7CxcyaLC34I2VbzgINoBIe4fesWZoruNH2KCPfHFbT/M1fzbzpPH4eRPKAUqdgq FyFsUi8zcBg6IctJisAUamf3DAN8zj5zgpKl5RdVY544esC48vhpsQn23gOTZqtv 9jpMVAkragBNXvKpm7VqksvN0ka9UQON+KpmaIRG1V/4V7bo5h0d3WxvrnwzXudF mesPddImBPkiw+fMQQhsWtyD0/iunNah0CKg3IK9POSpYfoiQdt4oJ5WfD1gI9SZ 7YB6V+gjN8kWQJIxoTWz/b9AWwrv8DB2hJ/ui0W8sufsBiBM7a0EJONhcEw= -----END CERTIFICATE-----Generated at Sun Nov 24 02:35:54 2024 by rpki-client on console-fra.rpki-client.org