$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ad2d8aa0-7d35-4739-9ad2-14ca94b93fe2.roa File: ad2d8aa0-7d35-4739-9ad2-14ca94b93fe2.roa (raw, json) Hash identifier: O5rdhn6tgo4UbOYv+KdDJDvNoPDSX6jcu1H0b8R4Jyg= Subject key identifier: 23:0F:D0:8A:D8:54:AA:46:49:66:DF:EE:EE:5C:94:BF:86:D9:41:39 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 421B85F5667BD1E13E67757301E07BC4C2661264 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ad2d8aa0-7d35-4739-9ad2-14ca94b93fe2.roa Signing time: Wed 13 Nov 2024 00:00:00 +0000 ROA not before: Wed 13 Nov 2024 00:00:00 +0000 ROA not after: Wed 18 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:1b:85:f5:66:7b:d1:e1:3e:67:75:73:01:e0:7b:c4:c2:66:12:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Nov 13 00:00:00 2024 GMT Not After : Dec 18 23:59:59 2024 GMT Subject: serialNumber=431ce0faa938f32f1b4aeb95d894e045dc513ebd8499011a8a6368c35360687c, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b1:e0:82:08:f1:20:fe:af:b9:4e:20:5b:bb: 3a:0c:f9:29:b5:e6:a2:c6:42:49:a5:c1:38:82:78: c5:11:87:bc:6d:58:cd:2a:ec:c1:09:15:84:ee:b8: 3d:52:b9:af:79:d3:1a:db:e7:fd:45:dd:37:22:46: a2:76:60:f9:f4:20:21:61:18:5f:d8:c8:7a:11:e7: 31:4b:9c:ec:46:f1:97:5f:57:ce:b9:c1:93:da:7b: 20:b7:47:00:ce:f7:83:22:26:48:50:83:80:08:cf: ab:35:23:92:30:65:3c:97:5b:91:8b:de:31:57:3b: ea:4f:34:f4:0f:fc:08:88:2a:d8:09:32:f6:32:5a: 76:98:77:d7:0d:41:47:41:6a:45:bf:bb:1a:bf:37: 1d:6b:d6:13:42:2a:68:04:72:3b:cd:da:73:9b:9f: 16:96:17:04:37:03:5f:7f:93:42:44:8f:bb:d8:6d: c6:6c:09:c7:11:21:50:ce:d7:ba:7d:79:93:7f:dd: 7f:e0:55:10:18:34:cd:dc:6a:be:14:2f:89:34:36: 13:7e:cf:94:b2:28:d5:88:e3:5a:cf:4e:15:94:b5: de:5d:22:08:74:c5:c6:60:91:c1:fa:9e:43:37:6e: 45:1a:1c:18:8e:f8:63:ab:86:ad:de:09:81:9c:d8: 9d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0F:D0:8A:D8:54:AA:46:49:66:DF:EE:EE:5C:94:BF:86:D9:41:39 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ad2d8aa0-7d35-4739-9ad2-14ca94b93fe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.0.0/17 Signature Algorithm: sha256WithRSAEncryption 06:d5:59:ce:72:9f:c9:dc:51:d5:c7:a5:11:10:f3:4d:b5:95: 0f:46:f6:73:b9:e1:4a:1e:65:9b:41:45:a2:16:ef:cd:5a:3b: 45:0f:3c:41:53:6e:57:6d:b7:67:54:7f:3a:aa:cb:6e:5e:39: 3c:f9:df:82:c7:fe:5e:6b:57:32:3d:84:1b:61:fa:91:a9:9f: 20:9e:a0:f0:45:8c:38:62:a0:1b:7d:c9:68:08:76:92:14:fc: b9:d9:58:e0:35:a4:f0:87:da:4f:43:0f:9e:dc:a6:86:02:c4: 8e:ec:b1:e5:38:b0:a0:de:fd:f2:2d:74:dd:8b:c3:a4:fc:55: 41:4d:ab:3c:bf:6b:45:ae:ca:75:bd:15:ef:47:4c:c7:0a:f3: ed:d0:14:12:5b:6c:91:29:0a:48:da:1d:fb:d7:81:ef:6d:0d: bc:35:b3:de:f5:73:c2:83:7f:f5:49:39:df:de:f2:f1:af:c5: b7:4e:92:b8:58:03:19:9d:c3:14:7c:d6:8c:f8:e6:2b:46:8a: a0:9f:cf:f0:31:9d:34:a6:35:1e:7c:a0:43:62:a8:35:a4:e2: 8c:df:12:ed:f2:17:72:bb:42:37:2f:f5:9d:e6:95:5f:17:ec: 7f:dd:8a:01:37:5a:44:2a:15:06:ab:24:ad:84:23:25:2c:de: b9:59:b8:d0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQhuF9WZ70eE+Z3VzAeB7xMJmEmQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjQxMTEzMDAwMDAwWhcNMjQxMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzFjZTBmYWE5MzhmMzJmMWI0YWViOTVkODk0ZTA0NWRj NTEzZWJkODQ5OTAxMWE4YTYzNjhjMzUzNjA2ODdjMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCEseCCCPEg/q+5TiBbuzoM+Sm15qLGQkmlwTiCeMURh7xt WM0q7MEJFYTuuD1Sua950xrb5/1F3TciRqJ2YPn0ICFhGF/YyHoR5zFLnOxG8Zdf V865wZPaeyC3RwDO94MiJkhQg4AIz6s1I5IwZTyXW5GL3jFXO+pPNPQP/AiIKtgJ MvYyWnaYd9cNQUdBakW/uxq/Nx1r1hNCKmgEcjvN2nObnxaWFwQ3A19/k0JEj7vY bcZsCccRIVDO17p9eZN/3X/gVRAYNM3car4UL4k0NhN+z5SyKNWI41rPThWUtd5d Igh0xcZgkcH6nkM3bkUaHBiO+GOrhq3eCYGc2J1bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIw/QithUqkZJZt/u7lyUv4bZQTkwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2FkMmQ4YWEwLTdkMzUtNDczOS05YWQyLTE0Y2E5NGI5M2ZlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdgfwAwDQYJKoZIhvcNAQELBQADggEBAAbVWc5yn8ncUdXHpREQ8021lQ9G 9nO54UoeZZtBRaIW781aO0UPPEFTbldtt2dUfzqqy25eOTz534LH/l5rVzI9hBth +pGpnyCeoPBFjDhioBt9yWgIdpIU/LnZWOA1pPCH2k9DD57cpoYCxI7sseU4sKDe /fItdN2Lw6T8VUFNqzy/a0WuynW9Fe9HTMcK8+3QFBJbbJEpCkjaHfvXge9tDbw1 s971c8KDf/VJOd/e8vGvxbdOkrhYAxmdwxR81oz45itGiqCfz/AxnTSmNR58oENi qDWk4ozfEu3yF3K7Qjcv9Z3mlV8X7H/digE3WkQqFQarJK2EIyUs3rlZuNA= -----END CERTIFICATE-----Generated at Fri Nov 22 01:34:46 2024 by rpki-client on console-ams.rpki-client.org