$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5198cb90-7b24-4831-90b1-194527fabddb.roa File: 5198cb90-7b24-4831-90b1-194527fabddb.roa (raw, json) Hash identifier: HOPY+ya5g1KbGvkdAhXkFz0o+YxwcHASeLWffzNn/o4= Subject key identifier: 32:8C:0D:3A:A2:FB:01:8D:EC:96:0B:F0:1E:C3:0C:7C:12:7C:CD:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C41F117FDC17282DAA63B51E600A44D4D9DB3EB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5198cb90-7b24-4831-90b1-194527fabddb.roa Signing time: Fri 22 Nov 2024 00:00:00 +0000 ROA not before: Fri 22 Nov 2024 00:00:00 +0000 ROA not after: Fri 27 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff4:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:41:f1:17:fd:c1:72:82:da:a6:3b:51:e6:00:a4:4d:4d:9d:b3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 00:00:00 2024 GMT Not After : Dec 27 23:59:59 2024 GMT Subject: serialNumber=fcfa8deac16209d86bf99bc963e03ddffee172b8b46f2a5ab646ee9b2866b9fc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2d:de:06:9f:84:0b:3f:5f:76:75:18:02:02: 7d:e5:cf:77:12:cb:24:ce:ec:83:5c:4e:b4:5f:8c: 3a:1a:d2:71:7d:9b:f9:2b:c2:09:b1:cd:2b:55:1e: 30:be:5e:8f:79:90:42:73:84:76:70:73:e2:d1:ab: 6e:f4:70:60:9a:9a:ea:27:7a:82:b8:f7:54:d4:aa: 27:6f:e4:1f:2c:6a:ab:39:bd:0b:ca:98:72:aa:3e: ce:6b:ae:cc:89:3d:b8:c8:b6:a4:51:62:7c:7a:51: 47:17:5d:cc:6e:fa:79:4c:12:f0:b8:a2:22:0a:65: 4b:59:c0:40:46:06:c5:ce:2d:38:d3:21:27:4e:01: a9:81:43:ee:36:94:48:5e:73:87:a1:6e:8f:2a:ef: 27:58:57:7e:05:ec:e2:3e:ca:da:93:c7:98:5a:db: 50:d2:81:3f:61:bb:c3:d5:8a:ce:d0:84:eb:c0:89: 29:df:fd:80:da:10:38:1d:0e:50:ea:52:c6:0a:37: 01:12:73:66:a8:e4:c2:d6:ea:f8:35:38:67:9e:bd: a6:b1:4c:09:b8:4a:31:95:87:a2:75:75:33:9a:94: 12:75:3e:52:30:f2:48:19:a1:82:da:1a:90:da:a6: 95:bd:2e:3b:a6:a7:09:ac:84:fd:57:a9:23:da:7c: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8C:0D:3A:A2:FB:01:8D:EC:96:0B:F0:1E:C3:0C:7C:12:7C:CD:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5198cb90-7b24-4831-90b1-194527fabddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:2000::/40 Signature Algorithm: sha256WithRSAEncryption a2:9e:06:e2:9b:c5:fc:ba:7c:5d:c9:19:de:53:bf:be:de:91: 4f:cb:0d:c5:a2:3c:a0:c2:ff:26:b6:80:fc:93:75:31:49:75: f4:9d:4e:f6:9c:e2:d9:3e:2d:73:24:00:54:9e:0e:dc:04:46: 47:c9:f4:35:0b:2e:3d:fa:b0:87:e8:3c:64:e4:2e:d6:b0:2d: 8c:49:50:7b:45:20:01:fa:cc:da:80:9b:c8:f1:0d:49:43:12: f8:9c:ea:01:0a:12:89:87:2e:98:c1:17:98:0d:d3:3c:60:6c: 03:6c:28:84:83:8d:db:27:67:7f:d4:8e:0a:e2:ab:32:4b:85: ae:b5:86:5d:9f:c0:1c:8d:da:d9:b8:1b:2e:ec:7a:e2:36:2c: 60:39:9a:32:a1:35:eb:51:b7:db:4b:b6:99:c1:f6:07:2a:de: fa:f2:63:cd:41:f0:95:cc:e4:da:74:b1:70:e4:84:40:30:ea: 68:9e:60:69:1e:c7:74:f0:cc:a2:5d:96:47:c2:2e:9c:7e:ef: 5d:69:a8:cd:cd:2e:78:e3:0e:c1:4e:8c:d9:f2:94:bb:09:3b: 2b:91:28:4c:e5:ee:5e:c3:d5:6a:97:24:da:92:1e:82:21:e2: b1:da:83:92:ff:a3:c6:e7:62:e4:c5:a1:7f:03:1f:10:b7:75: 68:46:4b:88 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULEHxF/3BcoLapjtR5gCkTU2ds+swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTIyMDAwMDAwWhcNMjQxMjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2ZhOGRlYWMxNjIwOWQ4NmJmOTliYzk2M2UwM2RkZmZl ZTE3MmI4YjQ2ZjJhNWFiNjQ2ZWU5YjI4NjZiOWZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLLd4Gn4QLP192dRgCAn3lz3cSyyTO7INcTrRfjDoa0nF9 m/krwgmxzStVHjC+Xo95kEJzhHZwc+LRq270cGCamuoneoK491TUqidv5B8saqs5 vQvKmHKqPs5rrsyJPbjItqRRYnx6UUcXXcxu+nlMEvC4oiIKZUtZwEBGBsXOLTjT ISdOAamBQ+42lEhec4ehbo8q7ydYV34F7OI+ytqTx5ha21DSgT9hu8PVis7QhOvA iSnf/YDaEDgdDlDqUsYKNwESc2ao5MLW6vg1OGeevaaxTAm4SjGVh6J1dTOalBJ1 PlIw8kgZoYLaGpDappW9LjumpwmshP1XqSPafPUtAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUMowNOqL7AY3slgvwHsMMfBJ8zWYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUxOThjYjkwLTdiMjQtNDgzMS05MGIxLTE5NDUyN2ZhYmRkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/0IDANBgkqhkiG9w0BAQsFAAOCAQEAop4G4pvF/Lp8XckZ3lO/vt6R T8sNxaI8oML/JraA/JN1MUl19J1O9pzi2T4tcyQAVJ4O3ARGR8n0NQsuPfqwh+g8 ZOQu1rAtjElQe0UgAfrM2oCbyPENSUMS+JzqAQoSiYcumMEXmA3TPGBsA2wohION 2ydnf9SOCuKrMkuFrrWGXZ/AHI3a2bgbLux64jYsYDmaMqE161G320u2mcH2Byre +vJjzUHwlczk2nSxcOSEQDDqaJ5gaR7HdPDMol2WR8IunH7vXWmozc0ueOMOwU6M 2fKUuwk7K5EoTOXuXsPVapck2pIegiHisdqDkv+jxudi5MWhfwMfELd1aEZLiA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:00 2024 by rpki-client on console-fra.rpki-client.org