$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42ed074d-afb9-4b87-aef5-73abe42ff5c5.roa File: 42ed074d-afb9-4b87-aef5-73abe42ff5c5.roa (raw, json) Hash identifier: NGZhknbBpHGTxB9vtXhiv1Gl+9U3f8M9NJtA/yJibOg= Subject key identifier: 74:23:30:A7:D6:92:ED:63:AE:F8:14:87:2F:B9:76:DE:01:19:EE:60 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43C0B51F92F8F6657F019683A2999804F8ACC419 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42ed074d-afb9-4b87-aef5-73abe42ff5c5.roa Signing time: Mon 02 Dec 2024 00:00:00 +0000 ROA not before: Mon 02 Dec 2024 00:00:00 +0000 ROA not after: Mon 06 Jan 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Dec 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c0:b5:1f:92:f8:f6:65:7f:01:96:83:a2:99:98:04:f8:ac:c4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 2 00:00:00 2024 GMT Not After : Jan 6 23:59:59 2025 GMT Subject: serialNumber=5dc1fd34a7d9807358e37758539d7b9745d1782f00f2b9ec7ff5bc5b30a7ff76, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3b:d8:2f:e7:a7:ab:51:f5:5a:f1:b4:ca:26: 6d:24:01:37:70:1d:ec:45:49:04:01:d0:18:bc:dd: a7:b1:70:7d:c3:23:a2:ce:d4:c1:5a:8c:5a:4e:c4: 56:bf:e5:f5:90:57:e8:d5:f8:f9:d2:41:13:f5:f9: 7d:3d:90:ea:4d:14:e8:c4:84:e3:22:51:77:ab:95: ea:de:f5:85:9c:7d:40:5d:21:ef:e3:8c:fe:9e:d4: 63:7c:22:07:72:f4:ea:c9:01:dc:2d:9e:d9:0b:6a: 41:31:b6:77:28:86:9f:4f:7f:e7:39:a4:c9:a0:1a: f5:2d:a5:7b:05:8d:ed:ff:0e:34:0c:85:98:df:4c: 5a:97:01:58:95:e3:15:b5:61:a9:3f:16:50:0e:cb: 4b:c9:b2:d0:5b:72:8e:2d:89:df:3f:ee:c6:19:eb: c7:f8:26:bc:a6:22:51:3e:8a:34:9f:a5:3e:83:37: b9:7a:ad:c3:1d:11:da:3a:06:20:f5:ef:af:a0:2d: 90:3f:10:51:2f:f5:e6:c0:4b:24:c5:dc:46:44:cb: 5c:bc:5c:f2:8d:74:d3:b4:24:bf:23:cd:9e:4d:ae: 52:08:6d:b4:d7:22:39:ab:54:e5:20:0b:6c:a4:a0: 79:78:4b:b0:ac:47:1f:12:4f:73:ba:7b:ad:57:97: b5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:23:30:A7:D6:92:ED:63:AE:F8:14:87:2F:B9:76:DE:01:19:EE:60 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42ed074d-afb9-4b87-aef5-73abe42ff5c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:1000::/40 Signature Algorithm: sha256WithRSAEncryption 4b:df:0e:f4:32:bc:1c:ce:7e:09:d9:d8:4e:4b:00:31:d8:4b: 75:f7:04:0d:f0:72:ff:ab:fe:18:a2:54:b5:2b:47:b9:e2:1a: a2:f2:00:03:ee:bc:fd:3e:23:4b:26:94:bd:dc:c2:32:eb:04: 1a:14:85:a3:a0:85:1c:e1:31:dc:df:14:23:a3:d4:d3:f2:64: 55:09:88:97:29:d7:a2:70:2d:41:7e:28:28:7a:a6:ba:60:d2: a5:f7:0b:fa:be:b4:f0:bb:6e:b0:63:19:51:4b:45:52:94:b2: 61:9d:20:85:4e:cb:c0:a0:18:8e:08:0c:9a:f6:3f:b7:1e:35: 1b:05:9a:c4:fb:b1:33:74:29:7a:31:95:19:15:07:c7:fb:7a: 3c:c5:d9:85:8f:99:a9:ea:d0:9d:57:67:ba:c5:6f:d1:99:1b: 98:17:59:a3:31:08:be:27:fe:88:79:92:31:72:a8:7c:9d:2c: b4:aa:32:ad:c5:55:31:db:a7:83:11:5c:61:46:89:c2:cc:6a: af:d2:33:5d:5e:db:ed:85:40:bf:f1:f2:10:8e:23:a9:0e:e8: 36:21:7d:5e:f4:5d:70:70:cd:68:d8:af:b4:18:45:98:14:67: a1:6f:8b:5f:76:7d:cb:e2:72:ef:c2:87:36:46:9c:b5:c9:8f: ee:12:43:6a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQ8C1H5L49mV/AZaDopmYBPisxBkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjAyMDAwMDAwWhcNMjUwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZGMxZmQzNGE3ZDk4MDczNThlMzc3NTg1MzlkN2I5NzQ1 ZDE3ODJmMDBmMmI5ZWM3ZmY1YmM1YjMwYTdmZjc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOO9gv56erUfVa8bTKJm0kATdwHexFSQQB0Bi83aexcH3D I6LO1MFajFpOxFa/5fWQV+jV+PnSQRP1+X09kOpNFOjEhOMiUXerlere9YWcfUBd Ie/jjP6e1GN8Igdy9OrJAdwtntkLakExtncohp9Pf+c5pMmgGvUtpXsFje3/DjQM hZjfTFqXAViV4xW1Yak/FlAOy0vJstBbco4tid8/7sYZ68f4JrymIlE+ijSfpT6D N7l6rcMdEdo6BiD176+gLZA/EFEv9ebASyTF3EZEy1y8XPKNdNO0JL8jzZ5NrlII bbTXIjmrVOUgC2ykoHl4S7CsRx8ST3O6e61Xl7VvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUdCMwp9aS7WOu+BSHL7l23gEZ7mAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyZWQwNzRkLWFmYjktNGI4Ny1hZWY1LTczYWJlNDJmZjVjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/3EDANBgkqhkiG9w0BAQsFAAOCAQEAS98O9DK8HM5+CdnYTksAMdhL dfcEDfBy/6v+GKJUtStHueIaovIAA+68/T4jSyaUvdzCMusEGhSFo6CFHOEx3N8U I6PU0/JkVQmIlynXonAtQX4oKHqmumDSpfcL+r608LtusGMZUUtFUpSyYZ0ghU7L wKAYjggMmvY/tx41GwWaxPuxM3QpejGVGRUHx/t6PMXZhY+ZqerQnVdnusVv0Zkb mBdZozEIvif+iHmSMXKofJ0stKoyrcVVMdungxFcYUaJwsxqr9IzXV7b7YVAv/Hy EI4jqQ7oNiF9XvRdcHDNaNivtBhFmBRnoW+LX3Z9y+Jy78KHNkactcmP7hJDag== -----END CERTIFICATE-----Generated at Wed Dec 11 00:44:10 2024 by rpki-client on console-fra.rpki-client.org