$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f852fe0c-feed-4333-b2fa-93e1948b5904.roa File: f852fe0c-feed-4333-b2fa-93e1948b5904.roa (raw, json) Hash identifier: X2hcJBfmZm4MVXsXnB8G8lU345rgljHlrTFyZMwFYzU= Subject key identifier: 9E:1B:0B:F1:7F:10:02:12:1C:BB:64:85:53:A4:E1:14:A5:B6:87:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19DA42F44641348153F5766629F6FEBB90840119 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f852fe0c-feed-4333-b2fa-93e1948b5904.roa Signing time: Fri 22 Nov 2024 00:00:00 +0000 ROA not before: Fri 22 Nov 2024 00:00:00 +0000 ROA not after: Fri 27 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 16.196.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:da:42:f4:46:41:34:81:53:f5:76:66:29:f6:fe:bb:90:84:01:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 00:00:00 2024 GMT Not After : Dec 27 23:59:59 2024 GMT Subject: serialNumber=f7122d62f16ce5173048ba479ec0322494c1afd56bffce3cdfa9f8def3918b0e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:68:1c:3b:37:0c:c5:8d:0e:a7:1f:e7:39: 45:2f:4f:78:16:52:fd:b4:e4:11:a7:0e:d4:3d:42: 42:2f:35:03:c1:b1:3f:a5:64:40:00:5a:2d:b6:bc: 84:29:51:ef:05:9d:d1:d8:68:6a:a3:bf:a4:fc:96: a6:e8:54:e1:52:7c:cf:47:79:b2:3e:60:80:26:df: 98:d7:ea:27:0c:20:ab:07:89:d0:96:97:49:c9:94: 76:f3:2e:36:2b:15:71:9a:92:c5:fa:35:76:f2:65: 9d:2b:80:f0:13:a2:2c:f6:05:d5:c5:cb:7b:6d:64: a3:ea:44:14:3a:8a:a0:4b:ee:0c:0c:5b:17:d6:82: a9:77:f1:34:61:c2:94:4a:0b:e1:af:a3:f9:04:48: 90:e2:45:54:a8:78:4b:1d:41:0a:cb:e3:ac:c0:c1: 9d:40:4f:c6:7a:18:24:6e:51:6e:e8:d2:f1:f5:2e: 28:0b:61:de:13:aa:a7:15:56:47:c7:a8:a5:d2:4a: 00:d1:a3:7f:bd:a8:ff:53:b4:a9:ec:61:a1:2e:dc: 2a:dc:3d:a7:aa:36:40:96:d7:03:ce:3b:bd:16:66: e5:34:16:c5:ad:0a:f6:66:49:a5:98:d4:fa:4b:3a: f6:48:c1:27:d2:5d:77:9b:98:e5:fd:2a:53:32:ce: 4f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1B:0B:F1:7F:10:02:12:1C:BB:64:85:53:A4:E1:14:A5:B6:87:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f852fe0c-feed-4333-b2fa-93e1948b5904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.196.0.0/16 Signature Algorithm: sha256WithRSAEncryption 22:cb:20:40:1f:3f:2a:16:db:f1:b2:f5:44:85:be:79:1e:d3: 21:cf:be:95:e8:3c:8b:63:8b:14:d9:36:8f:1c:76:55:19:f3: 49:89:12:d4:56:c7:fd:de:9e:92:cc:11:98:1b:ac:c3:36:95: d7:22:9e:4c:0c:56:87:6a:4e:0c:16:4e:87:99:76:be:db:a5: c7:f9:a6:0f:a3:40:49:c3:ac:b1:1a:1c:50:62:cc:d5:e7:c1: 95:b6:03:3a:a4:41:02:76:f7:79:21:7c:aa:d3:98:7a:e2:77: b1:6b:1f:48:51:00:d4:e3:92:46:38:91:76:cc:8b:48:d4:cd: b9:03:8c:c3:05:98:a8:82:77:7f:75:39:b5:5e:9d:87:76:35: cf:21:6b:af:dd:cd:e1:95:5d:62:b4:dc:b5:4e:ba:49:81:9c: 00:b2:f5:f0:49:c4:95:4f:98:16:85:36:88:6d:dc:ca:ca:c2: fa:00:eb:7b:c8:a9:20:8d:aa:f9:63:e9:b6:cc:ac:6c:f7:97: b1:96:8b:b4:fd:7d:85:de:cc:99:c4:01:7d:41:8f:46:d6:61: 45:62:b6:01:c9:eb:a5:4a:d2:f0:70:39:cc:de:1c:97:51:bd: a7:7d:e5:54:70:bc:17:5d:d5:95:f8:ac:7c:5c:39:0b:7d:60: 6c:a3:18:d6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGdpC9EZBNIFT9XZmKfb+u5CEARkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTIyMDAwMDAwWhcNMjQxMjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzEyMmQ2MmYxNmNlNTE3MzA0OGJhNDc5ZWMwMzIyNDk0 YzFhZmQ1NmJmZmNlM2NkZmE5ZjhkZWYzOTE4YjBlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8/2gcOzcMxY0Opx/nOUUvT3gWUv205BGnDtQ9QkIvNQPB sT+lZEAAWi22vIQpUe8FndHYaGqjv6T8lqboVOFSfM9HebI+YIAm35jX6icMIKsH idCWl0nJlHbzLjYrFXGaksX6NXbyZZ0rgPAToiz2BdXFy3ttZKPqRBQ6iqBL7gwM WxfWgql38TRhwpRKC+Gvo/kESJDiRVSoeEsdQQrL46zAwZ1AT8Z6GCRuUW7o0vH1 LigLYd4TqqcVVkfHqKXSSgDRo3+9qP9TtKnsYaEu3CrcPaeqNkCW1wPOO70WZuU0 FsWtCvZmSaWY1PpLOvZIwSfSXXebmOX9KlMyzk95AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUnhsL8X8QAhIcu2SFU6ThFKW2hxswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y4NTJmZTBjLWZlZWQtNDMzMy1iMmZhLTkzZTE5NDhiNTkwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQxDANBgkqhkiG9w0BAQsFAAOCAQEAIssgQB8/Khbb8bL1RIW+eR7TIc++ leg8i2OLFNk2jxx2VRnzSYkS1FbH/d6ekswRmBuswzaV1yKeTAxWh2pODBZOh5l2 vtulx/mmD6NAScOssRocUGLM1efBlbYDOqRBAnb3eSF8qtOYeuJ3sWsfSFEA1OOS RjiRdsyLSNTNuQOMwwWYqIJ3f3U5tV6dh3Y1zyFrr93N4ZVdYrTctU66SYGcALL1 8EnElU+YFoU2iG3cysrC+gDre8ipII2q+WPptsysbPeXsZaLtP19hd7MmcQBfUGP RtZhRWK2AcnrpUrS8HA5zN4cl1G9p33lVHC8F13VlfisfFw5C31gbKMY1g== -----END CERTIFICATE-----Generated at Sun Nov 24 03:17:44 2024 by rpki-client on console-ams.rpki-client.org