$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22cabdd8-745c-4023-9964-ee010590a725.roa File: 22cabdd8-745c-4023-9964-ee010590a725.roa (raw, json) Hash identifier: 1Lw/M+1oI8E2C2MzKlILM4B0tuGFPWl3lOuqIO+KbhE= Subject key identifier: 8C:1A:45:BD:A4:00:A4:B2:42:7A:4A:58:5D:0D:A0:B7:72:93:86:ED Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D4EA1ED0BF896862BE6D6F269615BD544166E8D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22cabdd8-745c-4023-9964-ee010590a725.roa Signing time: Fri 22 Nov 2024 00:00:00 +0000 ROA not before: Fri 22 Nov 2024 00:00:00 +0000 ROA not after: Fri 27 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb9:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4e:a1:ed:0b:f8:96:86:2b:e6:d6:f2:69:61:5b:d5:44:16:6e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 00:00:00 2024 GMT Not After : Dec 27 23:59:59 2024 GMT Subject: serialNumber=b54a1c70b54b44e45ff91b2ad8541fdc14f44dca9a181730fe2710cd3ad4b99f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6c:f3:55:c7:c9:5b:f5:77:2b:1e:a3:b0:05: f1:47:40:24:1c:ac:ec:c0:e8:45:ab:32:2b:71:b7: 15:22:d9:05:9b:4b:6b:f2:37:17:d2:84:0d:bc:5e: 93:44:ae:b8:a0:39:27:92:98:2e:2a:07:4f:98:90: b5:e1:32:bc:47:4c:c2:9a:69:7b:18:23:70:ed:49: 91:80:e4:2f:31:55:b3:e2:15:9a:3b:71:43:da:d6: b0:68:d3:7f:d8:80:b3:65:52:78:0f:36:3f:96:f0: 4c:81:08:93:95:b9:fb:8b:f9:35:dd:70:2b:1a:85: 2a:b0:e9:42:3a:b4:91:c6:08:56:ad:51:d5:97:5c: 79:8f:0c:f8:3d:ec:03:43:0e:42:cd:1b:a0:d3:11: a9:6e:e3:ea:84:d1:2f:15:3f:d6:c2:a2:a8:9e:5c: 56:db:a5:cb:5a:cf:fd:2d:76:ce:3d:c0:2f:8b:51: 0e:5e:b4:99:f1:27:9f:58:24:f5:eb:21:58:3a:70: 19:c7:28:5a:bd:e6:a9:88:ae:d4:8e:e2:08:0f:d8: 39:d1:64:2f:e6:27:db:c8:2d:96:b9:cc:86:44:ae: 76:84:43:21:40:dc:5d:1c:ef:a7:19:dd:7e:2d:79: 9b:2e:bd:27:b1:9e:d5:23:57:4e:bb:68:4b:96:d8: 7b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1A:45:BD:A4:00:A4:B2:42:7A:4A:58:5D:0D:A0:B7:72:93:86:ED X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22cabdd8-745c-4023-9964-ee010590a725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb9:2000::/40 Signature Algorithm: sha256WithRSAEncryption 67:81:c6:8c:e7:4d:19:b4:44:02:a9:27:14:10:e6:07:38:09: e7:e5:c1:21:cf:61:d4:53:45:14:86:b6:cf:01:b2:e0:93:f0: f9:92:3a:15:52:62:a7:72:fd:40:76:23:41:e8:2a:e6:38:5a: 89:2b:59:66:73:05:72:ad:cd:01:ff:dc:68:01:96:29:02:6b: 9a:99:b4:6d:68:2a:f9:46:d2:43:62:25:8a:9a:03:c5:bc:33: 24:cd:ed:0a:7e:86:8e:9a:54:2c:82:a0:a9:5f:4a:ca:c0:25: 09:9d:e3:da:66:ef:a4:55:83:8e:6c:16:91:2c:00:aa:9c:f7: 4c:75:d6:57:9e:04:ad:3f:5f:c9:df:1b:55:6a:ce:0c:fa:fa: 0e:2d:6d:d4:b0:ee:76:90:fc:14:49:3a:ae:4a:37:b3:95:bd: d7:d2:b1:09:85:7f:a3:4f:68:39:cf:02:13:e6:6a:b6:0e:fe: ba:ad:6d:56:c0:e3:c2:0b:8f:f2:30:1b:12:15:c8:a0:90:3b: a8:5e:92:aa:37:e1:9a:f3:b9:4e:28:65:40:b7:f9:83:15:c6: 6c:5c:7b:fa:38:23:52:54:b7:00:b5:41:f2:71:65:09:11:d4: 14:b0:36:32:4e:c6:7d:c2:2f:14:ab:81:7f:05:99:ae:18:10: 71:09:74:bb -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXU6h7Qv4loYr5tbyaWFb1UQWbo0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTIyMDAwMDAwWhcNMjQxMjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTRhMWM3MGI1NGI0NGU0NWZmOTFiMmFkODU0MWZkYzE0 ZjQ0ZGNhOWExODE3MzBmZTI3MTBjZDNhZDRiOTlmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfbPNVx8lb9XcrHqOwBfFHQCQcrOzA6EWrMitxtxUi2QWb S2vyNxfShA28XpNErrigOSeSmC4qB0+YkLXhMrxHTMKaaXsYI3DtSZGA5C8xVbPi FZo7cUPa1rBo03/YgLNlUngPNj+W8EyBCJOVufuL+TXdcCsahSqw6UI6tJHGCFat UdWXXHmPDPg97ANDDkLNG6DTEalu4+qE0S8VP9bCoqieXFbbpctaz/0tds49wC+L UQ5etJnxJ59YJPXrIVg6cBnHKFq95qmIrtSO4ggP2DnRZC/mJ9vILZa5zIZErnaE QyFA3F0c76cZ3X4teZsuvSexntUjV067aEuW2HurAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUjBpFvaQApLJCekpYXQ2gt3KThu0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyY2FiZGQ4LTc0NWMtNDAyMy05OTY0LWVlMDEwNTkwYTcyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+5IDANBgkqhkiG9w0BAQsFAAOCAQEAZ4HGjOdNGbREAqknFBDmBzgJ 5+XBIc9h1FNFFIa2zwGy4JPw+ZI6FVJip3L9QHYjQegq5jhaiStZZnMFcq3NAf/c aAGWKQJrmpm0bWgq+UbSQ2IlipoDxbwzJM3tCn6GjppULIKgqV9KysAlCZ3j2mbv pFWDjmwWkSwAqpz3THXWV54ErT9fyd8bVWrODPr6Di1t1LDudpD8FEk6rko3s5W9 19KxCYV/o09oOc8CE+Zqtg7+uq1tVsDjwguP8jAbEhXIoJA7qF6SqjfhmvO5Tihl QLf5gxXGbFx7+jgjUlS3ALVB8nFlCRHUFLA2Mk7GfcIvFKuBfwWZrhgQcQl0uw== -----END CERTIFICATE-----Generated at Mon Nov 25 02:57:24 2024 by rpki-client on console-fra.rpki-client.org