$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ff10bcf-a0d1-4f40-b79c-d84b07d3c7bd.roa File: 2ff10bcf-a0d1-4f40-b79c-d84b07d3c7bd.roa (raw, json) Hash identifier: uVoMfyCTRNS/ud7vCn6h5JmMxMxdjvRF+mxDUQZ7ohA= Subject key identifier: E5:9B:24:6C:1C:48:DA:B7:83:6B:B5:5C:4B:0A:D9:FF:6A:B3:A9:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7DC50A6B571D112379168B82D6DA9EDB5575AE84 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ff10bcf-a0d1-4f40-b79c-d84b07d3c7bd.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff0:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c5:0a:6b:57:1d:11:23:79:16:8b:82:d6:da:9e:db:55:75:ae:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=ce95b1af866701a4787d045b2e3698ba4d26a30e0b8d49f7ccd5e584eb1f9f24, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:7c:07:35:83:32:84:b7:63:8f:e3:65:b2: 3b:e9:e8:30:d6:ae:3b:e4:e7:e3:0f:33:6b:da:70: 18:a8:63:19:c6:99:e6:92:d8:c8:6a:60:74:65:0d: a4:58:44:fe:0a:f9:76:f9:42:21:8e:fe:0e:ee:b6: de:a2:66:5b:d6:9f:3a:fb:19:f9:45:26:60:16:bb: a9:ff:5e:dc:89:fe:fd:7a:07:00:ba:c5:16:a4:fc: 44:1a:82:13:c4:02:88:c6:33:81:f6:c4:b4:8a:3e: 2a:04:ae:e2:6e:ca:22:51:75:c1:85:b4:2e:58:c7: 48:89:46:46:58:9b:76:3f:7d:68:3e:94:59:40:ce: 3a:8c:95:5a:c3:48:cb:a9:63:a4:3b:20:0d:35:ef: 75:53:5f:ce:1f:c0:73:00:92:00:9b:de:42:0e:d1: 56:3f:11:59:26:7f:f4:7c:17:d8:35:77:83:1f:00: 44:a8:61:74:3a:40:b8:ca:dd:9a:9c:cf:83:96:3f: 2c:c6:61:60:97:d9:92:32:b0:83:3d:e5:a4:60:72: 51:ed:e8:7d:bb:ae:21:bc:8e:9c:48:19:95:37:da: 7f:de:2d:f0:f7:87:f2:10:80:4f:1d:65:93:27:cd: 20:54:1e:03:b0:e9:58:d3:af:87:b9:71:4a:5b:34: 8a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9B:24:6C:1C:48:DA:B7:83:6B:B5:5C:4B:0A:D9:FF:6A:B3:A9:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ff10bcf-a0d1-4f40-b79c-d84b07d3c7bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff0:5000::/40 Signature Algorithm: sha256WithRSAEncryption 58:d5:4d:fb:05:20:52:2c:76:b8:18:f8:43:99:e9:45:3d:87: 28:05:e3:74:e5:db:b5:8a:8c:4b:ae:37:5c:30:f5:16:5d:e4: 9b:04:2a:db:b4:13:da:dd:02:d9:5c:cb:8d:32:dc:b3:9a:a9: ec:a4:cf:f3:6b:7e:5b:67:3c:fb:f2:81:61:94:c7:1f:99:71: 10:78:85:ff:35:b4:6a:15:f9:16:b9:a4:cf:80:bb:27:c6:ab: 14:76:88:4c:73:c0:18:51:b2:00:9a:c9:ce:c1:6a:50:3a:23: 25:76:2b:74:9d:88:57:5c:4d:37:6a:c5:72:7c:79:bb:c9:7f: 74:83:6d:cc:55:f2:d5:d2:d3:f2:5c:8d:41:8c:57:10:c9:ea: 34:19:13:e6:42:3d:47:c1:95:d6:f2:b2:cd:1c:1d:b6:ee:30: 21:ff:de:fe:1c:d1:6b:72:9d:0c:c3:d6:ce:df:67:22:90:1b: d6:0b:bf:77:e0:ab:69:68:92:41:e8:a0:1e:fd:e1:63:ec:ad: 67:cb:59:d4:b0:06:6c:45:8f:05:97:11:bb:d8:6b:c1:6e:ce: 92:e9:92:9c:c0:0d:66:b6:ca:e6:df:6e:6b:56:a4:af:f8:34: 95:1a:90:62:3b:a3:ea:0f:3b:b0:fd:06:19:0a:9d:ae:3a:e7: 3d:4e:cd:34 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfcUKa1cdESN5FouC1tqe21V1roQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTk1YjFhZjg2NjcwMWE0Nzg3ZDA0NWIyZTM2OThiYTRk MjZhMzBlMGI4ZDQ5ZjdjY2Q1ZTU4NGViMWY5ZjI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnOXwHNYMyhLdjj+Nlsjvp6DDWrjvk5+MPM2vacBioYxnG meaS2MhqYHRlDaRYRP4K+Xb5QiGO/g7utt6iZlvWnzr7GflFJmAWu6n/XtyJ/v16 BwC6xRak/EQaghPEAojGM4H2xLSKPioEruJuyiJRdcGFtC5Yx0iJRkZYm3Y/fWg+ lFlAzjqMlVrDSMupY6Q7IA0173VTX84fwHMAkgCb3kIO0VY/EVkmf/R8F9g1d4Mf AESoYXQ6QLjK3Zqcz4OWPyzGYWCX2ZIysIM95aRgclHt6H27riG8jpxIGZU32n/e LfD3h/IQgE8dZZMnzSBUHgOw6VjTr4e5cUpbNIphAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU5ZskbBxI2reDa7VcSwrZ/2qzqawwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmZjEwYmNmLWEwZDEtNGY0MC1iNzljLWQ4NGIwN2QzYzdiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/wUDANBgkqhkiG9w0BAQsFAAOCAQEAWNVN+wUgUix2uBj4Q5npRT2H KAXjdOXbtYqMS643XDD1Fl3kmwQq27QT2t0C2VzLjTLcs5qp7KTP82t+W2c8+/KB YZTHH5lxEHiF/zW0ahX5Frmkz4C7J8arFHaITHPAGFGyAJrJzsFqUDojJXYrdJ2I V1xNN2rFcnx5u8l/dINtzFXy1dLT8lyNQYxXEMnqNBkT5kI9R8GV1vKyzRwdtu4w If/e/hzRa3KdDMPWzt9nIpAb1gu/d+CraWiSQeigHv3hY+ytZ8tZ1LAGbEWPBZcR u9hrwW7OkumSnMANZrbK5t9ua1akr/g0lRqQYjuj6g87sP0GGQqdrjrnPU7NNA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:51 2024 by rpki-client on console-fra.rpki-client.org