$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da8f35a6-102b-4d28-9265-351c84cfc25e.roa File: da8f35a6-102b-4d28-9265-351c84cfc25e.roa (raw, json) Hash identifier: FoIh2LK+YoJILse6lQr9nDgpD3CCAcpCYZ8jaulirvk= Subject key identifier: 02:F7:72:00:A5:8C:1C:C1:60:9D:63:87:BF:E3:CC:2C:36:BD:A4:56 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0916AB958E9740C05D358651704D8D18402924BD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da8f35a6-102b-4d28-9265-351c84cfc25e.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 19047 IP address blocks: 70.130.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:16:ab:95:8e:97:40:c0:5d:35:86:51:70:4d:8d:18:40:29:24:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=f5bcc7a37c78e8f30f1294c8cc154cb0b29e1c7f2aedd65718f1772ee74a5dcb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:49:43:68:c3:f0:8d:9f:ff:2c:6d:95:bd:7b: 47:ff:85:0d:fd:33:a5:2c:e3:4d:21:53:1d:03:5c: 0a:2b:33:99:aa:b5:45:db:fa:74:76:e0:d2:a0:3c: 18:6b:56:7a:c5:2e:72:a8:19:a0:0e:51:80:b0:3b: 23:35:0c:69:b5:ed:42:2e:5b:78:9f:ee:60:7f:97: 88:3a:73:1f:dd:b7:8d:b8:e4:60:97:36:55:90:cb: fc:c4:d7:de:aa:4c:0b:8d:18:32:e8:b0:9c:94:47: 45:1c:d7:4d:de:fa:f2:39:88:65:b9:01:e1:1b:c1: bf:30:e4:25:59:39:45:2f:82:95:b4:94:25:0c:75: af:6f:e5:68:4b:46:07:82:51:f1:bd:86:73:a1:7b: 0a:42:fa:83:93:12:05:29:e7:33:59:2c:4b:b8:25: c9:55:db:51:04:5d:25:50:9a:a7:41:35:10:a5:a1: c5:1a:0b:0b:1d:db:12:cb:0f:c5:d6:ef:43:ff:42: 52:bc:d9:4c:a4:45:a3:67:89:ea:c2:7a:a7:12:11: ff:11:d8:8e:4f:ad:9c:4f:08:a0:eb:34:56:d3:56: c7:1e:7d:62:81:34:06:5e:61:3a:85:a5:5a:04:95: 95:05:84:ce:3f:cd:8b:d6:9d:a7:fb:fc:8e:6c:9a: 0c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F7:72:00:A5:8C:1C:C1:60:9D:63:87:BF:E3:CC:2C:36:BD:A4:56 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da8f35a6-102b-4d28-9265-351c84cfc25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.130.218.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:25:cf:b7:1d:5f:f8:b0:b8:9b:0d:f0:57:5b:ab:f5:ab:0f: b3:23:49:7f:f5:50:9a:19:c5:a4:f0:2f:15:3a:25:5a:e7:08: cf:33:56:b1:a3:91:c3:01:a2:4f:7f:52:3a:03:22:fc:a4:81: 0e:4e:29:06:33:81:aa:54:e6:19:af:94:68:69:37:48:98:3e: c4:0e:46:3f:6e:cf:4f:bf:aa:e2:6c:76:9c:f3:32:4f:40:58: 84:62:75:13:c7:3b:ec:a3:c5:0f:ce:87:7a:9b:2a:96:2c:dc: 2c:44:93:9a:9d:c7:4c:f6:0c:89:77:e8:42:09:a6:24:e5:2a: 2f:ad:68:49:be:e9:b7:06:fe:e0:68:4a:52:b7:47:5b:56:de: 02:16:8f:f8:37:cd:f4:3b:63:b5:0e:85:1e:a0:7d:4d:83:9f: 0d:24:ec:64:44:f5:fa:58:31:58:c3:10:e6:2d:2f:e5:e2:d2: 37:00:54:12:10:93:66:24:4e:a2:c3:b5:e8:fb:61:e1:88:ee: f4:b8:a1:fb:09:b7:2e:67:9b:7b:b8:08:33:a1:86:47:8a:df: 10:df:b5:e4:3d:5a:82:e9:3b:f2:99:30:ad:75:55:d8:90:95: 2f:ab:7c:52:b2:07:ba:d2:d8:d7:de:0d:42:7e:81:f7:36:a6: 8b:e7:2b:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCRarlY6XQMBdNYZRcE2NGEApJL0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNWJjYzdhMzdjNzhlOGYzMGYxMjk0YzhjYzE1NGNiMGIy OWUxYzdmMmFlZGQ2NTcxOGYxNzcyZWU3NGE1ZGNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkSUNow/CNn/8sbZW9e0f/hQ39M6Us400hUx0DXAorM5mq tUXb+nR24NKgPBhrVnrFLnKoGaAOUYCwOyM1DGm17UIuW3if7mB/l4g6cx/dt424 5GCXNlWQy/zE196qTAuNGDLosJyUR0Uc103e+vI5iGW5AeEbwb8w5CVZOUUvgpW0 lCUMda9v5WhLRgeCUfG9hnOhewpC+oOTEgUp5zNZLEu4JclV21EEXSVQmqdBNRCl ocUaCwsd2xLLD8XW70P/QlK82UykRaNnierCeqcSEf8R2I5PrZxPCKDrNFbTVsce fWKBNAZeYTqFpVoElZUFhM4/zYvWnaf7/I5smgyRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAvdyAKWMHMFgnWOHv+PMLDa9pFYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhOGYzNWE2LTEwMmItNGQyOC05MjY1LTM1MWM4NGNmYzI1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABGgtowDQYJKoZIhvcNAQELBQADggEBAJ4lz7cdX/iwuJsN8Fdbq/WrD7Mj SX/1UJoZxaTwLxU6JVrnCM8zVrGjkcMBok9/UjoDIvykgQ5OKQYzgapU5hmvlGhp N0iYPsQORj9uz0+/quJsdpzzMk9AWIRidRPHO+yjxQ/Oh3qbKpYs3CxEk5qdx0z2 DIl36EIJpiTlKi+taEm+6bcG/uBoSlK3R1tW3gIWj/g3zfQ7Y7UOhR6gfU2Dnw0k 7GRE9fpYMVjDEOYtL+Xi0jcAVBIQk2YkTqLDtej7YeGI7vS4ofsJty5nm3u4CDOh hkeK3xDfteQ9WoLpO/KZMK11VdiQlS+rfFKyB7rS2NfeDUJ+gfc2povnK7s= -----END CERTIFICATE-----Generated at Fri Nov 22 04:03:17 2024 by rpki-client on console-ams.rpki-client.org