$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faafb7cf-b998-40b6-95c1-1942a3e23801.roa File: faafb7cf-b998-40b6-95c1-1942a3e23801.roa (raw, json) Hash identifier: 29bp2dbiZdbVwV4WIIh7+06G3t0l8hbm9gBRu4Gv9tU= Subject key identifier: 1B:34:91:E4:D3:2C:37:41:59:FA:B6:DF:89:8E:CE:F1:6D:9F:D3:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7EDCE11E2057A09F6A3F549C6CAC36AC1614506D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faafb7cf-b998-40b6-95c1-1942a3e23801.roa Signing time: Mon 04 Nov 2024 00:00:00 +0000 ROA not before: Mon 04 Nov 2024 00:00:00 +0000 ROA not after: Mon 09 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 98.131.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:dc:e1:1e:20:57:a0:9f:6a:3f:54:9c:6c:ac:36:ac:16:14:50:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 4 00:00:00 2024 GMT Not After : Dec 9 23:59:59 2024 GMT Subject: serialNumber=4fee0d94b88e87057a53d30a68d2437285e3fe11c52e38a3005b8764c350e932, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:0d:55:25:ca:33:9a:71:98:78:ee:5e:05: 05:ea:84:0e:43:88:02:8b:7a:c2:7d:31:46:6c:10: 26:f4:1e:c4:a3:c9:8b:ef:04:4c:93:7e:c9:b2:cc: 07:f5:d1:72:4b:a0:67:4b:1b:d5:14:7c:e4:3c:ed: e3:41:ac:35:d8:12:93:45:46:aa:60:68:90:f9:10: 26:6d:13:ca:18:08:0f:df:33:8e:98:22:ee:58:9e: f6:74:8f:eb:12:37:8f:58:74:15:39:a7:2d:ea:9b: d3:17:da:c5:42:53:b0:5c:b7:a7:2e:ef:1b:97:d7: e3:17:8e:f3:1c:ae:4b:db:d1:c4:e9:77:c9:3b:70: cf:0e:40:f5:79:72:d1:4d:dd:bb:a4:2b:33:6d:0d: fe:37:39:ba:a5:12:60:5d:dd:fa:eb:4f:7f:f4:51: 24:04:3f:e9:8a:87:9f:73:fa:1a:a9:e4:f8:d6:c0: f7:e0:de:d2:82:fe:77:12:3a:9e:5f:b6:62:8b:93: b6:de:e7:d7:a2:58:e6:9e:02:63:74:0c:03:aa:a1: 1a:08:a8:27:cb:9a:bc:65:40:bb:00:81:b4:f1:32: 11:1c:7e:b1:b8:b7:e6:e1:22:fc:8c:bc:9d:1b:9c: 71:ec:36:8a:9f:59:fb:fb:a3:51:1c:d9:97:8d:99: 3b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:34:91:E4:D3:2C:37:41:59:FA:B6:DF:89:8E:CE:F1:6D:9F:D3:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faafb7cf-b998-40b6-95c1-1942a3e23801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.131.0.0/16 Signature Algorithm: sha256WithRSAEncryption 13:0e:1b:17:d0:e4:df:ef:44:7a:34:bd:a9:7f:3b:a6:66:31: 70:82:0f:e7:ef:ec:be:d7:a3:d0:b5:4c:d5:2a:30:41:d9:aa: f0:26:76:df:d1:8b:7a:f8:1a:55:6b:48:0d:cf:a8:44:a0:59: db:06:37:4b:5c:4f:e8:79:cb:64:c2:53:4e:51:e3:02:f8:73: 0e:e3:d6:45:d0:4a:f9:5b:f7:27:9a:d7:21:43:45:40:ba:d5: 17:49:c6:21:bc:8c:59:94:db:54:ca:49:fd:39:af:fe:1c:a7: e0:4e:5c:85:9d:86:09:0f:20:21:70:d7:bf:d7:43:2b:54:fe: 64:17:72:87:f2:3d:69:d4:b5:58:46:65:ce:ff:db:50:0e:b7: 51:57:67:04:50:a7:4f:b9:40:83:38:7b:3d:28:0e:eb:eb:5f: c3:8d:f9:d9:03:f1:a0:98:7c:c8:9b:89:0f:3b:73:a5:b7:00: 44:51:3d:86:28:8c:e0:ac:9f:88:98:ca:e3:45:78:74:dd:22: 7c:ac:43:7e:a6:26:c7:4e:21:9b:c1:92:5e:45:84:da:ba:f1: a0:00:b1:12:2a:e8:c1:17:a5:e8:87:6a:b1:03:0b:3c:39:f9: 98:13:44:22:ee:10:e0:0a:61:ac:a3:4a:bd:e2:62:73:a2:a1: c4:f8:41:90 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUftzhHiBXoJ9qP1ScbKw2rBYUUG0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZmVlMGQ5NGI4OGU4NzA1N2E1M2QzMGE2OGQyNDM3Mjg1 ZTNmZTExYzUyZTM4YTMwMDViODc2NGMzNTBlOTMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKqw1VJcozmnGYeO5eBQXqhA5DiAKLesJ9MUZsECb0HsSj yYvvBEyTfsmyzAf10XJLoGdLG9UUfOQ87eNBrDXYEpNFRqpgaJD5ECZtE8oYCA/f M46YIu5YnvZ0j+sSN49YdBU5py3qm9MX2sVCU7Bct6cu7xuX1+MXjvMcrkvb0cTp d8k7cM8OQPV5ctFN3bukKzNtDf43ObqlEmBd3frrT3/0USQEP+mKh59z+hqp5PjW wPfg3tKC/ncSOp5ftmKLk7be59eiWOaeAmN0DAOqoRoIqCfLmrxlQLsAgbTxMhEc frG4t+bhIvyMvJ0bnHHsNoqfWfv7o1Ec2ZeNmTu5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUGzSR5NMsN0FZ+rbfiY7O8W2f0y0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhYWZiN2NmLWI5OTgtNDBiNi05NWMxLTE5NDJhM2UyMzgwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBigzANBgkqhkiG9w0BAQsFAAOCAQEAEw4bF9Dk3+9EejS9qX87pmYxcIIP 5+/svtej0LVM1SowQdmq8CZ239GLevgaVWtIDc+oRKBZ2wY3S1xP6HnLZMJTTlHj AvhzDuPWRdBK+Vv3J5rXIUNFQLrVF0nGIbyMWZTbVMpJ/Tmv/hyn4E5chZ2GCQ8g IXDXv9dDK1T+ZBdyh/I9adS1WEZlzv/bUA63UVdnBFCnT7lAgzh7PSgO6+tfw435 2QPxoJh8yJuJDztzpbcARFE9hiiM4KyfiJjK40V4dN0ifKxDfqYmx04hm8GSXkWE 2rrxoACxEirowRel6IdqsQMLPDn5mBNEIu4Q4AphrKNKveJic6KhxPhBkA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:43 2024 by rpki-client on console-fra.rpki-client.org