$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec5007e8-609d-493d-8fad-d5f5238eee46.roa File: ec5007e8-609d-493d-8fad-d5f5238eee46.roa (raw, json) Hash identifier: SjcPVcVWHPAJtDy3UasL8YNeaRoYAOw/YlzIqnQeL1o= Subject key identifier: D8:71:0C:C9:8B:46:86:DC:D4:BD:5F:2C:AD:F2:97:D7:69:46:96:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7BE33A0091B7CA9F70C918B1BC5E0696B70E8150 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec5007e8-609d-493d-8fad-d5f5238eee46.roa Signing time: Mon 04 Nov 2024 00:00:00 +0000 ROA not before: Mon 04 Nov 2024 00:00:00 +0000 ROA not after: Mon 09 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.133.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e3:3a:00:91:b7:ca:9f:70:c9:18:b1:bc:5e:06:96:b7:0e:81:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 4 00:00:00 2024 GMT Not After : Dec 9 23:59:59 2024 GMT Subject: serialNumber=9667e574812075df088491a9976c11438b4a4fdf66337cf02f190806e00eb113, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:ca:5d:b2:41:4a:a5:87:9a:a4:98:19:6b: 83:50:db:df:50:29:d9:96:43:b1:e7:68:01:89:28: 1f:8b:37:75:90:d9:19:f0:c4:92:d3:74:6d:46:f4: 70:be:ce:fe:90:a8:b0:2c:6a:46:3e:4e:ab:44:94: e2:c7:74:34:a7:58:26:e8:23:71:e8:43:8c:ad:c0: eb:a5:72:43:32:0e:07:08:a9:d3:f1:21:05:04:9f: 98:9e:8b:2a:90:ce:32:2a:3e:55:3e:98:03:11:6a: 92:68:7b:ee:32:d8:ca:4b:e1:a8:d7:d1:d3:99:30: 03:7b:01:52:35:c8:e9:4f:cb:89:30:91:7e:14:2a: 08:d2:20:4c:29:a2:64:44:e3:fd:52:ad:d8:ee:fd: ac:f5:b2:89:52:c1:c0:92:0b:2b:b1:de:8f:0b:0f: 25:eb:36:03:ce:cb:27:b1:37:71:ba:cb:02:71:2e: d2:aa:28:e5:d5:e8:a9:40:be:ea:cb:70:31:19:7c: da:e7:a5:19:a9:d8:16:d0:64:ac:a3:0e:f1:39:81: 89:51:2d:51:81:03:62:3a:ba:b9:95:5c:26:2d:b2: 3a:53:ce:fe:0c:5b:a7:b7:87:4e:df:59:59:82:e2: 4b:57:89:6e:47:f1:83:d3:b8:ce:e2:60:e2:ee:4a: 39:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:71:0C:C9:8B:46:86:DC:D4:BD:5F:2C:AD:F2:97:D7:69:46:96:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec5007e8-609d-493d-8fad-d5f5238eee46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.133.0.0/16 Signature Algorithm: sha256WithRSAEncryption a8:02:f7:4d:ff:51:8a:44:be:58:8f:dd:33:b6:41:ca:74:10: 9c:35:7d:ed:52:0d:79:79:70:78:68:f7:ea:c3:be:e4:8e:e0: 35:80:be:c2:0c:54:95:97:21:fc:20:c2:fb:ae:08:73:42:ac: 82:2d:a0:9c:39:42:47:a5:1f:0c:3b:57:85:66:fd:02:df:27: 8e:f5:2a:da:c1:82:d7:d9:d1:d5:65:8d:c2:4c:41:47:d2:d4: bd:de:e2:56:be:6f:aa:9b:89:db:8e:98:89:50:fc:69:ee:3f: d1:2e:04:bf:f1:e8:eb:d6:5d:9e:f7:2c:97:40:b4:b7:dc:5b: bb:ba:d1:e5:f1:85:12:71:a2:73:cf:a8:16:6f:df:6b:f6:fc: b2:e5:b2:64:07:38:6b:db:44:6f:20:1a:2d:59:a3:4c:ac:99: 32:da:60:73:f8:e1:6c:42:00:ee:1e:3d:23:77:9a:91:3f:4d: a4:71:60:7a:51:0b:f1:e5:f0:00:d4:09:8a:a7:7d:02:dc:b8: fa:2b:79:d2:eb:40:89:19:c0:47:37:f8:e2:d5:03:47:e7:a8: 91:1e:1c:1d:83:09:6a:59:4e:f8:6b:a7:1e:b4:2a:73:e1:5c: 08:87:e8:a2:dd:a8:bb:9e:d1:40:a2:22:72:75:71:c5:41:0b: 43:7f:b4:0d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUe+M6AJG3yp9wyRixvF4GlrcOgVAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjY3ZTU3NDgxMjA3NWRmMDg4NDkxYTk5NzZjMTE0Mzhi NGE0ZmRmNjYzMzdjZjAyZjE5MDgwNmUwMGViMTEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDM8pdskFKpYeapJgZa4NQ299QKdmWQ7HnaAGJKB+LN3WQ 2RnwxJLTdG1G9HC+zv6QqLAsakY+TqtElOLHdDSnWCboI3HoQ4ytwOulckMyDgcI qdPxIQUEn5ieiyqQzjIqPlU+mAMRapJoe+4y2MpL4ajX0dOZMAN7AVI1yOlPy4kw kX4UKgjSIEwpomRE4/1Srdju/az1solSwcCSCyux3o8LDyXrNgPOyyexN3G6ywJx LtKqKOXV6KlAvurLcDEZfNrnpRmp2BbQZKyjDvE5gYlRLVGBA2I6urmVXCYtsjpT zv4MW6e3h07fWVmC4ktXiW5H8YPTuM7iYOLuSjllAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2HEMyYtGhtzUvV8srfKX12lGllMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VjNTAwN2U4LTYwOWQtNDkzZC04ZmFkLWQ1ZjUyMzhlZWU0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQhTANBgkqhkiG9w0BAQsFAAOCAQEAqAL3Tf9RikS+WI/dM7ZBynQQnDV9 7VINeXlweGj36sO+5I7gNYC+wgxUlZch/CDC+64Ic0Ksgi2gnDlCR6UfDDtXhWb9 At8njvUq2sGC19nR1WWNwkxBR9LUvd7iVr5vqpuJ246YiVD8ae4/0S4Ev/Ho69Zd nvcsl0C0t9xbu7rR5fGFEnGic8+oFm/fa/b8suWyZAc4a9tEbyAaLVmjTKyZMtpg c/jhbEIA7h49I3eakT9NpHFgelEL8eXwANQJiqd9Aty4+it50utAiRnARzf44tUD R+eokR4cHYMJallO+GunHrQqc+FcCIfoot2ou57RQKIicnVxxUELQ3+0DQ== -----END CERTIFICATE-----Generated at Fri Nov 22 04:03:22 2024 by rpki-client on console-ams.rpki-client.org