$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aef8ac-4838-4d14-b193-6512977f0074.roa File: f2aef8ac-4838-4d14-b193-6512977f0074.roa (raw, json) Hash identifier: xQRo9cCvEzaGACckehYLLDdKqx8WIVWPmzY1Zqp7C1E= Subject key identifier: 63:ED:65:86:DA:D2:1A:AF:46:4A:87:BD:DA:8C:76:CD:EA:B1:90:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7A5720A5FDF407DF96AA7FCD1C6BBDE1DDACA311 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aef8ac-4838-4d14-b193-6512977f0074.roa Signing time: Mon 04 Nov 2024 00:00:00 +0000 ROA not before: Mon 04 Nov 2024 00:00:00 +0000 ROA not after: Mon 09 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 192.189.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:57:20:a5:fd:f4:07:df:96:aa:7f:cd:1c:6b:bd:e1:dd:ac:a3:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 4 00:00:00 2024 GMT Not After : Dec 9 23:59:59 2024 GMT Subject: serialNumber=e4d8e98572144eddb82c6d479da348efe4443a5bff5e2eb7d7b7cf2b13659896, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9e:6d:ab:19:02:ca:4d:ed:6e:37:1c:88:80: 18:d4:2b:1e:dd:da:c2:82:6c:79:22:d4:40:58:dc: f4:8e:ec:36:e5:5e:96:07:0e:f8:72:a5:5d:cc:fc: c1:97:8c:42:6b:7a:2f:7f:ab:df:9b:70:84:f2:1a: 90:e8:b9:34:5d:ea:fb:a4:6e:b1:56:59:af:80:ef: f8:b2:e4:91:9f:51:1a:9c:dd:97:fb:61:8d:fd:22: d6:53:f7:bc:6d:a1:32:74:ea:48:2b:81:f5:5d:54: df:52:8e:26:3c:18:7c:47:98:f5:90:bc:8e:ae:91: 0e:85:5e:98:5e:4a:60:30:c6:69:e1:50:68:25:6b: 15:00:1d:42:47:30:d9:3a:34:f8:b2:df:e9:87:61: a4:7d:67:45:55:cd:08:38:62:bc:e0:d2:85:0f:e4: 59:a6:c1:96:17:21:fa:39:67:d5:31:15:cd:26:92: 55:d4:ff:11:58:d1:6a:a8:12:8e:4b:51:f2:c6:d4: c4:64:64:db:0d:00:b5:28:4f:cb:74:fb:b3:c2:6c: 26:f4:f6:51:83:e8:aa:17:a2:b2:21:07:ef:a7:39: 9d:17:a7:27:c4:cf:6a:72:3f:3f:a6:f9:b0:ac:98: 9a:34:94:21:4e:49:9c:a6:a0:72:8a:71:42:8b:d7: a0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:ED:65:86:DA:D2:1A:AF:46:4A:87:BD:DA:8C:76:CD:EA:B1:90:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aef8ac-4838-4d14-b193-6512977f0074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.189.196.0/24 Signature Algorithm: sha256WithRSAEncryption b6:84:aa:ef:9c:5f:41:5b:36:fa:23:0d:8e:ca:fa:e4:55:61: 63:09:65:c4:d5:39:f4:7a:9e:e4:3a:21:8d:05:28:07:da:e1: 08:dd:1b:25:0c:6b:ca:48:75:ac:ef:57:f2:94:de:9c:0b:5f: ce:62:87:28:f3:59:0f:2f:60:e4:18:82:62:2d:8d:5d:3d:e2: 21:92:1a:63:3e:ee:7b:1c:2b:aa:f7:51:60:16:b3:13:8d:6d: 95:1c:86:0c:bd:96:9d:0b:96:45:2f:a5:ac:37:a4:04:11:3a: e7:a4:a6:9e:f8:27:0c:0f:e3:c6:6d:d7:4b:16:20:f0:14:6a: 2f:47:2f:f2:7e:83:0a:9f:d7:e0:2d:13:ac:7d:7c:ac:99:91: fc:ad:47:90:46:f3:72:70:bd:e1:68:9c:1f:6b:b3:08:63:78: 6a:d3:7c:5a:1d:21:d0:57:6a:ab:8d:c8:ee:02:32:92:ab:74: 07:7f:4b:cc:d9:6d:9c:31:c2:a1:f5:d5:87:27:83:b6:b6:d3: 58:cb:bf:92:cf:8c:ac:35:42:5f:18:1f:93:a0:cc:32:fd:84: 51:da:a2:bc:df:a5:e9:1c:ad:54:90:ba:6c:29:06:be:b4:e3: be:d1:25:29:46:c8:03:23:09:d8:f5:c6:85:98:2a:25:49:8a: 0f:55:8b:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUelcgpf30B9+Wqn/NHGu94d2soxEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNGQ4ZTk4NTcyMTQ0ZWRkYjgyYzZkNDc5ZGEzNDhlZmU0 NDQzYTViZmY1ZTJlYjdkN2I3Y2YyYjEzNjU5ODk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYnm2rGQLKTe1uNxyIgBjUKx7d2sKCbHki1EBY3PSO7Dbl XpYHDvhypV3M/MGXjEJrei9/q9+bcITyGpDouTRd6vukbrFWWa+A7/iy5JGfURqc 3Zf7YY39ItZT97xtoTJ06kgrgfVdVN9SjiY8GHxHmPWQvI6ukQ6FXpheSmAwxmnh UGglaxUAHUJHMNk6NPiy3+mHYaR9Z0VVzQg4Yrzg0oUP5FmmwZYXIfo5Z9UxFc0m klXU/xFY0WqoEo5LUfLG1MRkZNsNALUoT8t0+7PCbCb09lGD6KoXorIhB++nOZ0X pyfEz2pyPz+m+bCsmJo0lCFOSZymoHKKcUKL16BhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY+1lhtrSGq9GSoe92ox2zeqxkHEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyYWVmOGFjLTQ4MzgtNGQxNC1iMTkzLTY1MTI5NzdmMDA3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAvcQwDQYJKoZIhvcNAQELBQADggEBALaEqu+cX0FbNvojDY7K+uRVYWMJ ZcTVOfR6nuQ6IY0FKAfa4QjdGyUMa8pIdazvV/KU3pwLX85ihyjzWQ8vYOQYgmIt jV094iGSGmM+7nscK6r3UWAWsxONbZUchgy9lp0LlkUvpaw3pAQROuekpp74JwwP 48Zt10sWIPAUai9HL/J+gwqf1+AtE6x9fKyZkfytR5BG83JwveFonB9rswhjeGrT fFodIdBXaquNyO4CMpKrdAd/S8zZbZwxwqH11Ycng7a201jLv5LPjKw1Ql8YH5Og zDL9hFHaorzfpekcrVSQumwpBr60477RJSlGyAMjCdj1xoWYKiVJig9Vi2U= -----END CERTIFICATE-----Generated at Fri Nov 22 01:34:43 2024 by rpki-client on console-ams.rpki-client.org