$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f619c54b-758f-439f-834b-535001e1dc31.roa File: f619c54b-758f-439f-834b-535001e1dc31.roa (raw, json) Hash identifier: vXKDMYUza6Kz3FL0h+CxhHHtCprjV2ZcqcltuCGFhnY= Subject key identifier: 8B:22:E2:40:73:53:19:5E:55:06:77:65:EA:F5:CC:83:5D:8F:61:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01172AFA165346BD2CF0135E227CA38F3D71A6A3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f619c54b-758f-439f-834b-535001e1dc31.roa Signing time: Mon 02 Dec 2024 00:00:00 +0000 ROA not before: Mon 02 Dec 2024 00:00:00 +0000 ROA not after: Mon 06 Jan 2025 23:59:59 +0000 asID: 16509 IP address blocks: 128.21.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Dec 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:17:2a:fa:16:53:46:bd:2c:f0:13:5e:22:7c:a3:8f:3d:71:a6:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 2 00:00:00 2024 GMT Not After : Jan 6 23:59:59 2025 GMT Subject: serialNumber=3060900e448bf163b76664a8dfea76b1104706921828c74a8b9bc1889b02fbde, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:db:40:8e:55:8e:27:c2:56:11:1f:97:93: 47:48:31:5a:8f:9f:8c:ab:59:1d:e5:e9:dd:3b:82: dd:87:92:d5:50:15:ed:58:f6:ba:9e:9f:d9:c1:46: c1:25:64:1b:19:b9:f0:de:af:f8:33:80:3d:82:09: 6b:c0:37:8c:df:8e:2c:0c:e2:e4:8c:05:0c:c1:1b: 2e:16:62:b0:31:6c:7b:0c:0b:01:af:f8:ed:2a:43: 48:13:13:12:95:c4:d2:3e:bf:db:4f:be:30:f7:fc: 3c:12:aa:ca:d3:85:55:f9:49:12:3d:7e:43:9b:1d: db:68:78:b0:b9:a6:92:5c:ef:05:a8:eb:15:d6:ea: 26:7e:d5:a2:61:b4:d5:1a:3a:a6:85:c0:a4:bb:ec: 7b:95:2f:95:9f:46:5f:87:22:6a:16:18:77:53:98: e3:f9:0a:37:c8:74:19:9c:25:e9:f0:c4:e6:c4:05: 2a:0f:b8:1e:7e:eb:43:e4:fb:e6:c2:0f:43:23:b1: 9c:cf:d6:e2:04:fb:80:ce:d5:6a:a3:e4:ec:2c:c6: f0:e8:7e:f5:be:69:9f:4e:1e:37:0c:d0:30:84:a2: 14:58:61:c6:11:c0:86:e7:2c:a9:1c:22:c8:74:37: d3:6c:4d:b4:2b:18:92:a5:e8:64:6e:dd:1c:92:54: 29:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:22:E2:40:73:53:19:5E:55:06:77:65:EA:F5:CC:83:5D:8F:61:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f619c54b-758f-439f-834b-535001e1dc31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.21.0.0/16 Signature Algorithm: sha256WithRSAEncryption 21:86:51:4b:b1:3c:c2:fa:0f:17:03:b0:74:6b:da:a9:49:0b: 68:06:d7:8d:e2:21:c1:ec:b2:b8:aa:35:0b:7f:35:78:91:e8: 7f:05:0c:b2:0d:0d:65:d5:5a:da:87:a8:37:03:8d:08:0c:1c: 3c:18:ec:4f:22:ae:da:d5:f2:0b:06:30:31:3d:b7:0c:a7:84: b6:b6:02:cf:ff:a8:33:b5:a7:e8:61:01:ce:e5:9b:9c:48:8e: 36:f2:87:11:e9:f5:c3:ae:e1:f6:76:fa:e5:f1:a4:86:d7:10: 07:c9:f6:c5:d7:3e:24:43:74:01:aa:68:da:0a:31:08:fc:13: 5b:30:93:33:92:76:0d:68:d6:fa:6b:74:25:c7:9b:d6:84:51: 62:31:83:c9:13:2e:c5:a9:91:d8:f4:4b:d5:6e:08:e8:26:47: 0a:f8:0c:2f:14:13:7e:c9:58:03:cd:93:27:14:1d:bd:a4:05: 59:1b:92:01:dd:ce:35:e1:55:4f:65:0f:83:80:46:14:82:07: eb:7a:5e:bb:76:d9:21:d6:fc:49:41:d3:77:e9:83:fa:e7:33: 05:72:67:b9:51:61:8b:4c:1d:00:22:5f:30:91:cd:7a:8f:91: 25:61:c9:02:37:3c:41:d6:8f:1f:bc:22:81:fd:af:40:a1:5d: 00:38:c3:31 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUARcq+hZTRr0s8BNeInyjjz1xpqMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjAyMDAwMDAwWhcNMjUwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDYwOTAwZTQ0OGJmMTYzYjc2NjY0YThkZmVhNzZiMTEw NDcwNjkyMTgyOGM3NGE4YjliYzE4ODliMDJmYmRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs/NtAjlWOJ8JWER+Xk0dIMVqPn4yrWR3l6d07gt2HktVQ Fe1Y9rqen9nBRsElZBsZufDer/gzgD2CCWvAN4zfjiwM4uSMBQzBGy4WYrAxbHsM CwGv+O0qQ0gTExKVxNI+v9tPvjD3/DwSqsrThVX5SRI9fkObHdtoeLC5ppJc7wWo 6xXW6iZ+1aJhtNUaOqaFwKS77HuVL5WfRl+HImoWGHdTmOP5CjfIdBmcJenwxObE BSoPuB5+60Pk++bCD0MjsZzP1uIE+4DO1Wqj5OwsxvDofvW+aZ9OHjcM0DCEohRY YcYRwIbnLKkcIsh0N9NsTbQrGJKl6GRu3RySVCnJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiyLiQHNTGV5VBndl6vXMg12PYbIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y2MTljNTRiLTc1OGYtNDM5Zi04MzRiLTUzNTAwMWUxZGMzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCAFTANBgkqhkiG9w0BAQsFAAOCAQEAIYZRS7E8wvoPFwOwdGvaqUkLaAbX jeIhweyyuKo1C381eJHofwUMsg0NZdVa2oeoNwONCAwcPBjsTyKu2tXyCwYwMT23 DKeEtrYCz/+oM7Wn6GEBzuWbnEiONvKHEen1w67h9nb65fGkhtcQB8n2xdc+JEN0 Aapo2goxCPwTWzCTM5J2DWjW+mt0Jceb1oRRYjGDyRMuxamR2PRL1W4I6CZHCvgM LxQTfslYA82TJxQdvaQFWRuSAd3ONeFVT2UPg4BGFIIH63peu3bZIdb8SUHTd+mD +uczBXJnuVFhi0wdACJfMJHNeo+RJWHJAjc8QdaPH7wigf2vQKFdADjDMQ== -----END CERTIFICATE-----Generated at Wed Dec 11 00:55:16 2024 by rpki-client on console-ams.rpki-client.org