$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f53df1f3-96dd-4cb1-bdbe-255e07b7c31b.roa File: f53df1f3-96dd-4cb1-bdbe-255e07b7c31b.roa (raw, json) Hash identifier: H/IuanoyPgQP+1aHzWkun8vU7Az954sxr49sKl5vvJk= Subject key identifier: 3F:DF:D1:6F:55:74:4D:E4:B7:BF:B7:EC:68:98:29:B6:35:8C:CC:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6AD72881E8506D2B48D7387FE44AD65847193C73 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f53df1f3-96dd-4cb1-bdbe-255e07b7c31b.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 136.18.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d7:28:81:e8:50:6d:2b:48:d7:38:7f:e4:4a:d6:58:47:19:3c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=ad93545cfc8c1936e517e23f98c0d10745566917b1cb15322c27f35b9b2ca523, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:af:49:90:56:1d:fe:c1:19:e3:8f:a1:5b: 26:cd:a8:2f:10:d8:97:e9:e1:c8:7e:f1:40:c7:5d: 1f:4c:d7:21:cb:7d:7e:a0:26:5c:c8:da:cf:05:7e: 5f:ce:a8:9e:b4:63:7a:37:c2:1f:6e:4e:99:11:d7: eb:9f:2d:96:ef:10:67:5e:f5:3b:6d:4e:f4:13:2f: d1:7d:b0:3f:d7:cb:bd:d0:fc:b1:2b:1f:fe:58:91: 89:c4:53:7d:f6:e3:ec:d3:e7:9b:f5:a5:f3:89:f4: 9a:db:77:1e:04:86:76:47:4c:0c:0c:43:9a:c6:c9: a9:5b:fb:c4:9d:bc:fb:ab:14:d1:64:8d:1c:bc:35: 06:0b:7e:cd:d9:b4:6c:86:d6:83:de:1d:fe:27:7a: e0:3d:e9:38:0e:89:4c:3c:40:2b:a0:70:c0:dc:26: 72:a2:fd:dc:3f:1b:68:71:96:d0:a0:6c:ff:86:21: cb:b5:bb:f4:73:7c:2f:43:13:ad:09:1f:6a:cd:f0: 85:8f:34:27:42:3b:2e:2f:36:94:24:91:62:79:6c: bc:7b:63:23:53:88:5e:f8:18:86:43:2e:98:76:40: 1e:1f:a5:a9:fb:75:dc:39:65:af:42:ce:62:9a:f4: ec:d5:30:00:a7:c4:6b:55:1c:cd:88:6b:ca:90:84: 43:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DF:D1:6F:55:74:4D:E4:B7:BF:B7:EC:68:98:29:B6:35:8C:CC:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f53df1f3-96dd-4cb1-bdbe-255e07b7c31b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.20.0/22 Signature Algorithm: sha256WithRSAEncryption d2:82:59:77:95:84:7d:95:4d:ef:f0:07:bb:41:0a:a0:41:8b: 27:be:fb:7f:fc:01:15:05:67:54:0a:4b:2c:70:1c:05:1f:d3: 0d:2f:48:92:b4:e4:09:dc:8f:7f:03:fa:d7:dc:1f:11:73:78: 14:26:43:24:1f:17:b8:71:0d:ab:79:09:98:c3:08:9f:30:67: 3a:b0:10:a0:7a:f7:ac:e5:cc:0c:8f:23:1d:42:cc:69:34:5f: c9:d2:9e:b0:35:22:bf:4f:0d:42:26:08:9e:c8:b2:60:ab:17: 27:a3:1c:91:85:ba:5c:a8:96:c6:d1:4e:f3:7a:44:f4:ab:33: bf:7b:9a:73:ad:c5:cc:45:29:d4:e4:cc:68:fe:20:d6:bf:af: c9:a5:34:98:25:95:a8:ff:3a:69:75:75:08:2e:70:a9:78:63: 1c:51:50:57:c7:71:61:ac:b7:02:1c:21:0d:26:70:c5:9b:4d: ea:8b:ec:4b:51:61:93:12:27:55:a5:94:44:9c:e7:62:e1:64: 42:8c:f3:eb:ab:af:f5:d2:6a:45:81:20:b2:84:aa:43:f6:1b: 6a:ca:73:89:09:07:37:c7:24:8b:eb:4a:14:85:a4:69:63:5d: 46:69:0e:54:e0:10:c9:cb:e2:68:9e:5d:06:93:23:47:64:7f: 18:15:63:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUatcogehQbStI1zh/5ErWWEcZPHMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDkzNTQ1Y2ZjOGMxOTM2ZTUxN2UyM2Y5OGMwZDEwNzQ1 NTY2OTE3YjFjYjE1MzIyYzI3ZjM1YjliMmNhNTIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0za9JkFYd/sEZ44+hWybNqC8Q2Jfp4ch+8UDHXR9M1yHL fX6gJlzI2s8Ffl/OqJ60Y3o3wh9uTpkR1+ufLZbvEGde9TttTvQTL9F9sD/Xy73Q /LErH/5YkYnEU3324+zT55v1pfOJ9Jrbdx4EhnZHTAwMQ5rGyalb+8SdvPurFNFk jRy8NQYLfs3ZtGyG1oPeHf4neuA96TgOiUw8QCugcMDcJnKi/dw/G2hxltCgbP+G Icu1u/RzfC9DE60JH2rN8IWPNCdCOy4vNpQkkWJ5bLx7YyNTiF74GIZDLph2QB4f pan7ddw5Za9CzmKa9OzVMACnxGtVHM2Ia8qQhENPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP9/Rb1V0TeS3v7fsaJgptjWMzO4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1M2RmMWYzLTk2ZGQtNGNiMS1iZGJlLTI1NWUwN2I3YzMxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKIEhQwDQYJKoZIhvcNAQELBQADggEBANKCWXeVhH2VTe/wB7tBCqBBiye+ +3/8ARUFZ1QKSyxwHAUf0w0vSJK05Ancj38D+tfcHxFzeBQmQyQfF7hxDat5CZjD CJ8wZzqwEKB696zlzAyPIx1CzGk0X8nSnrA1Ir9PDUImCJ7IsmCrFyejHJGFulyo lsbRTvN6RPSrM797mnOtxcxFKdTkzGj+INa/r8mlNJgllaj/Oml1dQgucKl4YxxR UFfHcWGstwIcIQ0mcMWbTeqL7EtRYZMSJ1WllESc52LhZEKM8+urr/XSakWBILKE qkP2G2rKc4kJBzfHJIvrShSFpGljXUZpDlTgEMnL4mieXQaTI0dkfxgVYyk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:03:25 2024 by rpki-client on console-ams.rpki-client.org