$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f5e6c1-04f9-4253-a4d4-858892769e9e.roa File: f2f5e6c1-04f9-4253-a4d4-858892769e9e.roa (raw, json) Hash identifier: c/+ddr/P24SVUY61XOKES/5n1EMSZqcCQzIbdIDQxj4= Subject key identifier: 66:4B:7F:E7:AE:86:14:0C:81:7F:64:13:78:C5:51:8C:C7:3F:12:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F5DB448108BB91DE8687A2B26CE7580FB589CB6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f5e6c1-04f9-4253-a4d4-858892769e9e.roa Signing time: Fri 01 Nov 2024 00:00:00 +0000 ROA not before: Fri 01 Nov 2024 00:00:00 +0000 ROA not after: Fri 06 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 171.73.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5d:b4:48:10:8b:b9:1d:e8:68:7a:2b:26:ce:75:80:fb:58:9c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 1 00:00:00 2024 GMT Not After : Dec 6 23:59:59 2024 GMT Subject: serialNumber=b5689d5b75957e6a78d6a7527523fe44c84b05578d17abb5ff44c9dd636d9f74, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:81:46:71:f4:e2:28:3b:86:d5:95:2c:1a:eb: 1c:6a:23:7e:9c:5d:1b:a4:57:6f:0c:84:b1:79:63: da:e4:60:12:01:51:7f:e1:10:03:cc:2a:2c:0b:3f: 7e:88:ec:76:de:44:9c:06:0a:c3:2e:69:33:95:38: 49:08:a6:44:a9:7e:6c:41:6e:b2:7c:73:f6:cd:00: e8:ac:7a:69:91:45:d7:30:bf:ce:ea:63:77:8a:1b: 9a:81:7e:51:59:40:bf:2f:5e:b6:39:d9:8d:28:fd: c9:aa:60:87:b5:cd:dc:19:bc:90:0a:dc:4f:1f:e6: ab:b8:0b:59:08:04:b0:f7:1b:09:0a:1f:31:63:9e: 6a:59:32:33:5f:56:e9:36:a5:67:19:78:41:6d:86: d7:d0:65:b3:4b:4f:7a:8c:2f:bc:11:68:02:9e:1b: 7a:ee:9d:0a:16:6d:4a:89:f4:26:00:f5:ed:cb:8c: 5b:91:d3:e7:93:56:cc:e0:59:bb:c2:78:c8:a2:dd: a5:a2:a9:ee:d1:78:87:cb:05:c0:aa:39:62:98:29: 54:d0:9b:66:ac:78:bf:43:4c:8f:f7:9e:8e:f6:10: 06:4b:41:52:05:1d:cb:06:60:4b:9b:97:c6:b2:d1: 22:e3:23:fb:f9:a8:d5:ef:8b:5a:e5:af:cb:04:17: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4B:7F:E7:AE:86:14:0C:81:7F:64:13:78:C5:51:8C:C7:3F:12:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f5e6c1-04f9-4253-a4d4-858892769e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.73.0.0/16 Signature Algorithm: sha256WithRSAEncryption aa:0e:17:6b:63:e8:6a:48:8a:cd:9e:99:e4:40:15:a6:95:aa: 22:7a:ba:5d:db:14:80:24:b6:28:e9:39:e5:d4:8d:3b:74:7a: 0a:3f:23:8f:c4:f6:ca:fc:fa:f8:84:82:15:3a:52:ac:3f:3f: 0b:35:6d:9b:a0:a2:4c:16:09:53:5f:b5:62:90:24:06:87:76: f2:18:24:7d:72:e3:56:64:97:4c:6d:53:13:a6:99:18:54:7d: 71:90:72:10:a5:4a:26:0e:9d:04:8b:b1:8f:16:5a:e5:58:6e: c6:06:83:aa:67:a2:d7:c7:07:4a:3a:84:05:8a:3d:44:3b:21: 7b:b0:25:35:30:61:cf:c0:4e:16:1f:7a:3f:6a:e3:36:f2:44: d4:3a:75:73:10:b9:7b:2f:c3:50:55:b3:87:3a:f3:d6:89:d9: f6:b6:f8:cf:65:d5:05:f1:60:1c:30:1d:11:98:31:ff:69:1c: 94:4a:bd:32:cd:81:b3:0e:7b:e1:25:bc:40:07:c0:cf:3a:d6: 96:5b:f1:0c:3f:71:6e:d7:d1:64:32:04:15:8b:58:45:91:11: 6c:08:1c:80:e6:af:7b:49:88:68:d2:f8:92:77:3c:25:f8:f5: b7:b1:4d:a3:d3:f1:84:ec:66:56:5e:a4:64:db:23:89:7d:d8: c0:86:2c:0d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUf120SBCLuR3oaHorJs51gPtYnLYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAxMDAwMDAwWhcNMjQxMjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTY4OWQ1Yjc1OTU3ZTZhNzhkNmE3NTI3NTIzZmU0NGM4 NGIwNTU3OGQxN2FiYjVmZjQ0YzlkZDYzNmQ5Zjc0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxgUZx9OIoO4bVlSwa6xxqI36cXRukV28MhLF5Y9rkYBIB UX/hEAPMKiwLP36I7HbeRJwGCsMuaTOVOEkIpkSpfmxBbrJ8c/bNAOisemmRRdcw v87qY3eKG5qBflFZQL8vXrY52Y0o/cmqYIe1zdwZvJAK3E8f5qu4C1kIBLD3GwkK HzFjnmpZMjNfVuk2pWcZeEFthtfQZbNLT3qML7wRaAKeG3runQoWbUqJ9CYA9e3L jFuR0+eTVszgWbvCeMii3aWiqe7ReIfLBcCqOWKYKVTQm2aseL9DTI/3no72EAZL QVIFHcsGYEubl8ay0SLjI/v5qNXvi1rlr8sEFzrfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZkt/566GFAyBf2QTeMVRjMc/EjowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyZjVlNmMxLTA0ZjktNDI1My1hNGQ0LTg1ODg5Mjc2OWU5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCrSTANBgkqhkiG9w0BAQsFAAOCAQEAqg4Xa2PoakiKzZ6Z5EAVppWqInq6 XdsUgCS2KOk55dSNO3R6Cj8jj8T2yvz6+ISCFTpSrD8/CzVtm6CiTBYJU1+1YpAk Bod28hgkfXLjVmSXTG1TE6aZGFR9cZByEKVKJg6dBIuxjxZa5VhuxgaDqmei18cH SjqEBYo9RDshe7AlNTBhz8BOFh96P2rjNvJE1Dp1cxC5ey/DUFWzhzrz1onZ9rb4 z2XVBfFgHDAdEZgx/2kclEq9Ms2Bsw574SW8QAfAzzrWllvxDD9xbtfRZDIEFYtY RZERbAgcgOave0mIaNL4knc8Jfj1t7FNo9PxhOxmVl6kZNsjiX3YwIYsDQ== -----END CERTIFICATE-----Generated at Sun Nov 24 03:17:43 2024 by rpki-client on console-ams.rpki-client.org