$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee039a15-aea5-4f01-9cb6-29d071d6e963.roa File: ee039a15-aea5-4f01-9cb6-29d071d6e963.roa (raw, json) Hash identifier: UhTKWT1Lq0FmF7AIPCa67+WJMxxlvJRVhotRQVU7vBg= Subject key identifier: C7:B1:A0:5D:39:91:F7:5E:43:B2:2A:E2:00:B7:4C:74:49:29:20:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3164EB589B0AB7695916E7003D203CDEF5774395 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee039a15-aea5-4f01-9cb6-29d071d6e963.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 168.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:64:eb:58:9b:0a:b7:69:59:16:e7:00:3d:20:3c:de:f5:77:43:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=eeb7ba6e55e9510e36928cc596175b7cc2ffc42652a652225dba070f9292cd38, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:31:f7:1e:34:c6:e2:68:f7:de:dd:aa:a9: 51:7d:d4:66:22:0f:23:f4:f0:94:b6:b8:94:61:d8: fb:c9:2e:66:3c:79:27:34:9c:c5:4a:2b:8c:91:ba: 3b:61:6c:dd:0b:f7:3b:67:19:4b:2d:e5:a9:ea:53: 13:b4:5e:69:fe:4f:5a:cc:ce:eb:c0:33:54:7f:f0: 3f:ff:6c:2d:b1:74:1a:34:6c:78:91:3a:3f:08:1e: 13:8f:f0:31:48:9d:58:6d:d7:94:c5:df:7d:67:cd: d9:df:07:ac:ab:42:0b:b4:3b:d9:0c:f4:c6:98:5e: 32:42:ad:99:e3:d5:08:28:91:3f:08:e6:b0:92:8a: 27:c3:4f:93:d0:6b:ba:d2:8e:4e:64:9c:e4:13:ac: b2:44:8e:45:d2:62:6b:76:5f:c4:0b:cf:66:f9:aa: 91:cd:bf:8c:38:1a:42:f8:15:44:89:61:09:d7:b4: 2a:d6:32:6b:c9:f7:50:dd:2b:8f:73:9c:dd:fc:7d: fd:9f:a1:5c:33:c0:45:be:f3:80:60:2c:66:07:ae: 20:11:0f:b3:10:bc:f4:ff:85:c2:f3:b5:56:cb:91: 26:bf:5b:d7:11:1a:c7:47:cb:61:84:5d:ec:fb:ea: e5:57:77:24:49:ed:7c:56:bf:73:71:c8:08:b9:4b: 23:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B1:A0:5D:39:91:F7:5E:43:B2:2A:E2:00:B7:4C:74:49:29:20:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee039a15-aea5-4f01-9cb6-29d071d6e963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.157.0.0/16 Signature Algorithm: sha256WithRSAEncryption 31:71:9d:74:ea:05:82:a9:ca:0c:d5:7b:67:76:c9:9a:f9:68: 1f:1a:b1:49:db:97:73:da:d5:6a:a5:9a:bb:27:e7:e4:58:c3: b6:20:b5:ed:16:3e:7b:14:5f:a8:85:b3:24:1f:a8:6a:64:cc: 17:ff:e4:21:f0:e5:4a:6b:6e:51:95:02:11:95:93:96:44:16: 3d:0a:a2:6c:c9:5d:7f:62:17:c2:9d:6f:58:f2:8c:a8:cf:c7: b9:32:4a:79:67:96:87:a9:91:8e:a7:60:59:67:2a:d2:fc:6d: 6f:b1:85:fc:ca:24:aa:05:a5:7a:0d:d3:87:f4:f0:af:c1:17: 6e:79:24:e9:03:10:ad:39:53:37:8c:d2:ff:a5:43:f7:a7:f4: c4:29:36:d1:05:1c:4a:ce:7f:8d:17:22:ca:c1:37:01:01:fe: 9d:9f:63:d1:07:02:38:e6:d2:d7:68:c0:44:b5:46:cb:f3:69: fb:e2:cc:b4:c6:88:de:c0:8b:8c:b2:80:5c:92:36:45:48:31: b7:54:50:5b:d9:90:0c:27:43:ab:ec:6d:e6:ff:43:2c:06:54: 28:14:9c:25:71:d3:58:7a:d4:e4:9e:2d:fc:4f:dc:c6:c6:92: df:fe:e5:67:cf:dd:61:49:92:ad:bd:86:23:03:14:72:cf:4b: 5a:9d:7b:0f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMWTrWJsKt2lZFucAPSA83vV3Q5UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWI3YmE2ZTU1ZTk1MTBlMzY5MjhjYzU5NjE3NWI3Y2My ZmZjNDI2NTJhNjUyMjI1ZGJhMDcwZjkyOTJjZDM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzfjH3HjTG4mj33t2qqVF91GYiDyP08JS2uJRh2PvJLmY8 eSc0nMVKK4yRujthbN0L9ztnGUst5anqUxO0Xmn+T1rMzuvAM1R/8D//bC2xdBo0 bHiROj8IHhOP8DFInVht15TF331nzdnfB6yrQgu0O9kM9MaYXjJCrZnj1QgokT8I 5rCSiifDT5PQa7rSjk5knOQTrLJEjkXSYmt2X8QLz2b5qpHNv4w4GkL4FUSJYQnX tCrWMmvJ91DdK49znN38ff2foVwzwEW+84BgLGYHriARD7MQvPT/hcLztVbLkSa/ W9cRGsdHy2GEXez76uVXdyRJ7XxWv3NxyAi5SyOhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUx7GgXTmR915DsiriALdMdEkpIC8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VlMDM5YTE1LWFlYTUtNGYwMS05Y2I2LTI5ZDA3MWQ2ZTk2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwConTANBgkqhkiG9w0BAQsFAAOCAQEAMXGddOoFgqnKDNV7Z3bJmvloHxqx SduXc9rVaqWauyfn5FjDtiC17RY+exRfqIWzJB+oamTMF//kIfDlSmtuUZUCEZWT lkQWPQqibMldf2IXwp1vWPKMqM/HuTJKeWeWh6mRjqdgWWcq0vxtb7GF/MokqgWl eg3Th/Twr8EXbnkk6QMQrTlTN4zS/6VD96f0xCk20QUcSs5/jRciysE3AQH+nZ9j 0QcCOObS12jARLVGy/Np++LMtMaI3sCLjLKAXJI2RUgxt1RQW9mQDCdDq+xt5v9D LAZUKBScJXHTWHrU5J4t/E/cxsaS3/7lZ8/dYUmSrb2GIwMUcs9LWp17Dw== -----END CERTIFICATE-----Generated at Sun Nov 24 02:36:01 2024 by rpki-client on console-fra.rpki-client.org