$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4cb954b-ca4c-4450-8eca-b1fb96cef189.roa File: e4cb954b-ca4c-4450-8eca-b1fb96cef189.roa (raw, json) Hash identifier: LliQv3PHqlUFgh2C74HUjpwc3r3IxbekTs6TW08NPL8= Subject key identifier: F8:35:4B:DA:28:CA:15:13:11:0E:D6:4C:4B:FE:64:E5:4B:60:C6:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 589CB5E96CC17F4A48347AFD18550E67AA308F29 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4cb954b-ca4c-4450-8eca-b1fb96cef189.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 76.241.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:9c:b5:e9:6c:c1:7f:4a:48:34:7a:fd:18:55:0e:67:aa:30:8f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=02b96d6a2f90454b1537ff2fb78a3015d1eb461b89807fd10187c630db8be3b7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:87:0a:10:9f:a8:ed:80:5b:de:92:e5:3b: c0:af:a1:4c:94:17:4c:9b:af:61:e4:fa:1c:e9:26: 70:bc:a7:1d:d9:31:4c:15:c1:fd:6a:44:9f:8e:9e: d8:1a:8d:f3:86:2c:ae:02:14:cb:1f:07:46:17:cf: 64:07:bd:5f:69:85:9b:68:6c:a4:2b:49:90:8e:1b: bc:27:71:9f:57:d6:1f:17:18:42:43:cc:2a:4e:72: b8:ff:1c:93:b3:80:28:e9:1e:5a:83:af:73:b5:71: fa:a8:31:8c:ed:d3:a0:bd:ac:0f:0f:35:c0:e9:37: 59:eb:e9:22:eb:f9:49:61:7d:ce:ff:a9:d2:1f:7c: b5:05:0a:45:ce:59:63:5e:ab:4d:34:76:35:d2:62: bb:58:cd:4a:57:97:6c:97:dc:ab:0b:3b:c2:c3:ed: c7:1e:a2:63:11:4a:28:c0:81:cd:5c:df:af:0e:61: 5f:e7:e7:ec:fa:46:f9:26:26:57:d2:d7:92:c0:5a: 2f:ef:6a:0d:fe:df:f9:85:e8:91:b6:40:d1:60:9e: a2:38:69:b2:12:80:5f:13:a2:33:37:d3:37:53:e7: 53:b6:0a:a9:af:6d:03:72:18:cf:30:23:9b:f7:85: 2a:85:33:42:74:c2:7a:1b:12:9e:46:1b:fe:95:27: 56:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:35:4B:DA:28:CA:15:13:11:0E:D6:4C:4B:FE:64:E5:4B:60:C6:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4cb954b-ca4c-4450-8eca-b1fb96cef189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.241.64.0/18 Signature Algorithm: sha256WithRSAEncryption 94:c0:01:66:a8:97:21:25:e9:48:7c:53:c0:d6:44:09:60:bc: e0:20:51:67:fa:c1:f9:28:d4:7b:fc:b6:85:0b:fd:60:39:79: 24:1c:d0:c5:29:04:67:35:77:52:b7:d7:7c:48:7d:64:fd:8f: 6d:19:f4:89:43:72:e2:23:8b:c0:06:5a:0d:4b:16:10:20:dc: d9:fb:78:15:43:07:97:4b:f5:c3:89:6b:69:34:61:ea:10:b5: 07:59:76:c2:2d:9a:bb:7a:df:8f:6a:f5:72:63:68:5a:6e:72: 43:d4:0d:95:17:61:3d:52:1d:86:d2:88:7c:a9:3a:37:97:df: e0:86:29:28:21:9a:90:55:88:5f:f1:63:a9:bc:7e:c1:e2:89: ff:a1:ec:43:9c:83:fc:4a:c0:98:9f:c3:6d:db:3b:f4:c4:35: 07:6a:78:7f:6e:57:68:16:af:43:6e:69:fd:b0:39:6d:14:f2: 07:2d:44:d6:7d:8d:42:55:71:56:c0:3d:8c:cb:ba:3d:76:e3: 69:a0:d1:a4:09:cf:a0:7a:ce:5c:e6:d3:bf:ce:7b:af:dc:d1: 89:f8:22:1d:29:f9:af:61:72:fa:30:39:aa:41:7e:ad:30:b6: 03:cd:8e:2c:3f:4f:e6:3f:d1:40:9b:cc:f8:a0:3b:13:16:48: 39:6f:6b:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWJy16WzBf0pINHr9GFUOZ6owjykwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMmI5NmQ2YTJmOTA0NTRiMTUzN2ZmMmZiNzhhMzAxNWQx ZWI0NjFiODk4MDdmZDEwMTg3YzYzMGRiOGJlM2I3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5SYcKEJ+o7YBb3pLlO8CvoUyUF0ybr2Hk+hzpJnC8px3Z MUwVwf1qRJ+OntgajfOGLK4CFMsfB0YXz2QHvV9phZtobKQrSZCOG7wncZ9X1h8X GEJDzCpOcrj/HJOzgCjpHlqDr3O1cfqoMYzt06C9rA8PNcDpN1nr6SLr+Ulhfc7/ qdIffLUFCkXOWWNeq000djXSYrtYzUpXl2yX3KsLO8LD7cceomMRSijAgc1c368O YV/n5+z6RvkmJlfS15LAWi/vag3+3/mF6JG2QNFgnqI4abISgF8TojM30zdT51O2 CqmvbQNyGM8wI5v3hSqFM0J0wnobEp5GG/6VJ1bXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+DVL2ijKFRMRDtZMS/5k5UtgxnEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U0Y2I5NTRiLWNhNGMtNDQ1MC04ZWNhLWIxZmI5NmNlZjE4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZM8UAwDQYJKoZIhvcNAQELBQADggEBAJTAAWaolyEl6Uh8U8DWRAlgvOAg UWf6wfko1Hv8toUL/WA5eSQc0MUpBGc1d1K313xIfWT9j20Z9IlDcuIji8AGWg1L FhAg3Nn7eBVDB5dL9cOJa2k0YeoQtQdZdsItmrt6349q9XJjaFpuckPUDZUXYT1S HYbSiHypOjeX3+CGKSghmpBViF/xY6m8fsHiif+h7EOcg/xKwJifw23bO/TENQdq eH9uV2gWr0Nuaf2wOW0U8gctRNZ9jUJVcVbAPYzLuj1242mg0aQJz6B6zlzm07/O e6/c0Yn4Ih0p+a9hcvowOapBfq0wtgPNjiw/T+Y/0UCbzPigOxMWSDlva+0= -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:37 2024 by rpki-client on console-fra.rpki-client.org