$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0455f3a2-f0cd-4ad7-810e-8c028fd27cb7.roa File: 0455f3a2-f0cd-4ad7-810e-8c028fd27cb7.roa (raw, json) Hash identifier: aJeGBme6chpmLeD9IkkYMi5heLrYJ2a0x5mmGUVMrx0= Subject key identifier: 0D:2C:6F:C0:D6:F1:13:B2:26:42:FB:9F:F0:17:58:E2:FE:5C:BB:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D783FCBEA3C5C2400A9B8C9C83C40805089812C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0455f3a2-f0cd-4ad7-810e-8c028fd27cb7.roa Signing time: Tue 12 Nov 2024 00:00:00 +0000 ROA not before: Tue 12 Nov 2024 00:00:00 +0000 ROA not after: Tue 17 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:78:3f:cb:ea:3c:5c:24:00:a9:b8:c9:c8:3c:40:80:50:89:81:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 12 00:00:00 2024 GMT Not After : Dec 17 23:59:59 2024 GMT Subject: serialNumber=fffdd693577e484b9b790a89c8dc4a12f9d07854afb029f9901dd3f6aa3ae19d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:7f:78:e4:c2:e4:88:0d:50:90:12:cc:c8: 81:e4:a0:85:40:ea:c4:cc:7c:13:df:ad:50:35:01: c9:9c:60:6c:fa:5f:6b:9a:d1:7c:a4:90:ce:ad:73: f9:bd:e6:bb:25:9b:6a:7a:ce:92:d7:65:79:63:50: 1c:81:3f:c6:b2:04:5e:9c:b8:d0:85:ae:70:c6:2c: 83:7f:b1:92:15:66:b6:2f:64:a6:13:db:f5:37:4b: 38:7f:14:64:41:3f:df:a6:0c:3b:c4:28:1e:94:58: eb:04:1f:f9:c4:87:07:3c:bc:22:e1:b8:6e:96:db: 40:40:c6:5a:f0:6d:04:59:30:9b:22:cd:a8:e3:27: b1:06:e1:5e:24:e8:ce:44:73:c6:13:2c:1c:14:53: 72:23:4f:19:d2:ec:60:d7:93:49:87:f5:d5:29:77: 9b:2f:8c:63:7f:7c:24:d7:4a:19:c6:94:23:94:05: 3a:54:a4:df:b5:2f:fd:69:3f:ed:ae:ad:6c:30:cb: 37:38:a4:78:d7:b4:43:a1:f5:c6:28:58:2e:cf:61: ba:c1:a2:04:0f:8a:b0:7b:2f:d3:cb:1a:ca:f2:40: 87:f5:88:cb:26:ed:8c:01:ea:af:13:f5:28:2e:66: 1c:52:19:a5:07:f8:d0:bf:4b:62:f3:8d:0b:00:31: ac:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2C:6F:C0:D6:F1:13:B2:26:42:FB:9F:F0:17:58:E2:FE:5C:BB:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0455f3a2-f0cd-4ad7-810e-8c028fd27cb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:3400::/40 Signature Algorithm: sha256WithRSAEncryption 4d:fc:a6:ed:56:3c:fb:b6:2e:ec:af:e5:7c:08:6d:04:65:61: 68:84:9b:cc:f1:91:b3:a8:3d:fd:47:e6:e4:32:87:ed:44:42: 00:2d:ea:db:c2:e3:01:0b:14:ae:b9:5c:f1:09:f7:19:a3:e2: a8:34:4f:60:04:12:88:53:0f:fe:7f:d8:2a:ee:f7:3c:80:10: 38:66:10:8b:75:5e:f5:59:69:0e:4b:8c:be:cb:52:2c:4a:2d: 2d:16:68:4d:17:d6:59:b3:86:9f:8e:b6:5f:55:14:d8:67:95: 6f:76:f7:62:4c:22:4d:a9:2e:c5:45:4c:a0:45:2f:bf:0c:ba: a1:17:2e:9b:62:9a:e0:e9:bf:33:10:38:fc:ca:ea:cc:31:d2: 85:46:77:f2:ab:c2:ed:b3:ce:c0:9e:0f:03:dc:1d:5b:ca:e4: 1f:e1:ab:b9:90:c4:5c:0f:cb:bd:ea:82:82:ff:f9:45:0e:62: 2c:2f:00:59:27:35:31:48:51:62:05:dc:8b:55:ec:33:74:db: c8:29:06:24:0e:83:65:71:b3:43:5e:71:5b:85:6d:af:5c:10: fc:f0:7c:22:e9:85:e4:97:08:8b:0f:5c:5b:cb:15:fb:e9:f4: cf:20:bd:6f:8e:bd:73:2c:c9:c5:37:50:44:f4:88:42:22:d4: 52:6e:99:a8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPXg/y+o8XCQAqbjJyDxAgFCJgSwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTEyMDAwMDAwWhcNMjQxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZmZkZDY5MzU3N2U0ODRiOWI3OTBhODljOGRjNGExMmY5 ZDA3ODU0YWZiMDI5Zjk5MDFkZDNmNmFhM2FlMTlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+bn945MLkiA1QkBLMyIHkoIVA6sTMfBPfrVA1AcmcYGz6 X2ua0XykkM6tc/m95rslm2p6zpLXZXljUByBP8ayBF6cuNCFrnDGLIN/sZIVZrYv ZKYT2/U3Szh/FGRBP9+mDDvEKB6UWOsEH/nEhwc8vCLhuG6W20BAxlrwbQRZMJsi zajjJ7EG4V4k6M5Ec8YTLBwUU3IjTxnS7GDXk0mH9dUpd5svjGN/fCTXShnGlCOU BTpUpN+1L/1pP+2urWwwyzc4pHjXtEOh9cYoWC7PYbrBogQPirB7L9PLGsryQIf1 iMsm7YwB6q8T9SguZhxSGaUH+NC/S2LzjQsAMazHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUDSxvwNbxE7ImQvuf8BdY4v5cu5wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0NTVmM2EyLWYwY2QtNGFkNy04MTBlLThjMDI4ZmQyN2NiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/yNDANBgkqhkiG9w0BAQsFAAOCAQEATfym7VY8+7Yu7K/lfAhtBGVh aISbzPGRs6g9/Ufm5DKH7URCAC3q28LjAQsUrrlc8Qn3GaPiqDRPYAQSiFMP/n/Y Ku73PIAQOGYQi3Ve9VlpDkuMvstSLEotLRZoTRfWWbOGn462X1UU2GeVb3b3Ykwi TakuxUVMoEUvvwy6oRcum2Ka4Om/MxA4/MrqzDHShUZ38qvC7bPOwJ4PA9wdW8rk H+GruZDEXA/LveqCgv/5RQ5iLC8AWSc1MUhRYgXci1XsM3TbyCkGJA6DZXGzQ15x W4Vtr1wQ/PB8IumF5JcIiw9cW8sV++n0zyC9b469cyzJxTdQRPSIQiLUUm6ZqA== -----END CERTIFICATE-----Generated at Sun Nov 24 02:34:59 2024 by rpki-client on console-fra.rpki-client.org