$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51ef0a8e-d88a-4741-b2d5-94acdff50c1e.roa File: 51ef0a8e-d88a-4741-b2d5-94acdff50c1e.roa (raw, json) Hash identifier: /9s+nGcJgW/HS4wU3paY5nJsK6FGHCiQ8+25PifUGjo= Subject key identifier: EC:4C:5B:EE:7C:D9:F6:D1:61:13:56:AB:60:C3:BE:5F:5B:7A:D7:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 439FD5A61A04C13B9A5CDE3584D76DDF8A2C07 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51ef0a8e-d88a-4741-b2d5-94acdff50c1e.roa Signing time: Fri 29 Nov 2024 00:00:00 +0000 ROA not before: Fri 29 Nov 2024 00:00:00 +0000 ROA not after: Fri 03 Jan 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff1:4000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:9f:d5:a6:1a:04:c1:3b:9a:5c:de:35:84:d7:6d:df:8a:2c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 29 00:00:00 2024 GMT Not After : Jan 3 23:59:59 2025 GMT Subject: serialNumber=c5e4a12d6a6b8c864e45607a7df5d66f28419b3b9f7b14cecae22e3d9d81ad71, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f2:88:4d:4f:a8:2f:75:77:e9:cb:70:e2:bd: 39:99:ab:42:68:72:fd:7c:b7:ab:94:c9:be:ee:01: 86:d1:56:da:2a:43:0a:24:42:c0:24:6b:49:da:16: db:35:9a:03:1c:96:c9:28:d0:fc:cf:7f:1a:77:68: c6:46:e4:b8:6c:37:e4:54:9b:8f:7e:e7:bb:a8:dc: 2a:b6:e9:f2:2d:93:ed:57:60:9a:23:0b:7e:2d:e4: a7:51:78:5d:08:ce:8b:eb:5b:40:e4:c6:b5:2e:8a: 38:0e:c2:99:94:13:4f:da:4d:9a:4e:5c:28:cc:d0: 34:6c:62:85:d5:7d:ef:bd:0d:7f:a9:10:9c:b7:ce: 56:c0:52:f1:73:5e:7a:4c:39:8b:e0:44:87:77:f4: 15:44:11:a3:13:78:2a:3f:57:58:ae:c3:9c:19:55: b7:78:91:46:17:50:36:9b:da:df:1c:41:73:cf:43: f9:19:e2:8a:3f:da:43:77:ad:d8:13:49:95:62:5e: 33:8b:de:97:a0:0d:d7:8c:7d:44:89:cd:d9:fe:6d: 91:48:cc:b8:22:f4:51:d7:a0:0a:13:4c:e2:98:5b: b4:25:d3:bc:5b:8b:be:a3:d4:6a:95:73:1e:dc:7e: 45:99:25:ec:84:98:ca:e5:5a:9f:2e:b7:79:eb:fc: ce:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4C:5B:EE:7C:D9:F6:D1:61:13:56:AB:60:C3:BE:5F:5B:7A:D7:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51ef0a8e-d88a-4741-b2d5-94acdff50c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:4000::/39 Signature Algorithm: sha256WithRSAEncryption b4:93:f5:b4:3e:35:19:f6:12:6d:e9:e7:b7:80:5f:a7:0a:77: 67:18:df:84:2f:83:95:81:fc:94:a1:9e:7e:3a:f9:31:7b:d2: 29:22:0a:fc:51:1c:16:3c:42:d8:8f:9f:6d:8e:72:32:42:72: ab:55:a6:c5:50:cf:9f:e2:69:0d:72:e3:7d:bb:07:5b:20:ef: 2d:8a:ef:81:34:db:84:1e:13:43:1f:a4:75:08:ec:09:01:49: 81:8b:c2:d7:ce:02:f4:93:24:cb:51:e0:36:36:71:02:b4:81: 56:28:ef:2d:9d:f1:b4:2c:76:d4:b9:5c:3d:d5:d2:35:83:08: 88:e1:8a:e0:99:ad:ac:cd:6f:86:5f:3a:a0:88:5c:d4:da:43: e7:33:71:ac:f0:90:bc:d9:34:3c:b2:be:8e:8e:d0:a7:22:64: 1f:8d:35:d0:e8:76:81:48:f2:5f:0e:c1:9c:b3:d5:a4:0c:4b: b7:97:a4:52:98:6c:47:e6:0e:30:5d:46:40:1e:1c:0c:3f:08: c7:24:52:a4:60:19:28:de:1c:30:09:07:f0:52:7a:e0:29:e6: f5:69:c6:64:bb:1f:27:bc:79:1a:cc:ce:f3:50:b5:3e:00:36: 51:e5:e1:37:1b:5e:16:9c:c1:6a:76:09:9b:02:bc:0c:4d:c7: cd:d5:1a:aa -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITQ5/VphoEwTuaXN41hNdt34osBzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNDExMjkwMDAwMDBaFw0yNTAxMDMyMzU5NTla MHoxSTBHBgNVBAUTQGM1ZTRhMTJkNmE2YjhjODY0ZTQ1NjA3YTdkZjVkNjZmMjg0 MTliM2I5ZjdiMTRjZWNhZTIyZTNkOWQ4MWFkNzExLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAL7yiE1PqC91d+nLcOK9OZmrQmhy/Xy3q5TJvu4BhtFW2ipD CiRCwCRrSdoW2zWaAxyWySjQ/M9/GndoxkbkuGw35FSbj37nu6jcKrbp8i2T7Vdg miMLfi3kp1F4XQjOi+tbQOTGtS6KOA7CmZQTT9pNmk5cKMzQNGxihdV9770Nf6kQ nLfOVsBS8XNeekw5i+BEh3f0FUQRoxN4Kj9XWK7DnBlVt3iRRhdQNpva3xxBc89D +Rniij/aQ3et2BNJlWJeM4vel6AN14x9RInN2f5tkUjMuCL0UdegChNM4phbtCXT vFuLvqPUapVzHtx+RZkl7ISYyuVany63eev8zucCAwEAAaOCArMwggKvMB0GA1Ud DgQWBBTsTFvufNn20WETVqtgw75fW3rXwzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNTFlZjBhOGUtZDg4YS00NzQxLWIyZDUtOTRhY2RmZjUwYzFlLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGASYAH/FAMA0GCSqGSIb3DQEBCwUAA4IBAQC0k/W0PjUZ9hJt6ee3gF+nCndn GN+EL4OVgfyUoZ5+Ovkxe9IpIgr8URwWPELYj59tjnIyQnKrVabFUM+f4mkNcuN9 uwdbIO8tiu+BNNuEHhNDH6R1COwJAUmBi8LXzgL0kyTLUeA2NnECtIFWKO8tnfG0 LHbUuVw91dI1gwiI4Yrgma2szW+GXzqgiFzU2kPnM3Gs8JC82TQ8sr6OjtCnImQf jTXQ6HaBSPJfDsGcs9WkDEu3l6RSmGxH5g4wXUZAHhwMPwjHJFKkYBko3hwwCQfw UnrgKeb1acZkux8nvHkazM7zULU+ADZR5eE3G14WnMFqdgmbArwMTcfN1Rqq -----END CERTIFICATE-----Generated at Mon Dec 9 19:05:51 2024 by rpki-client on console-ams.rpki-client.org