$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f00be76-5ce7-441a-a059-8eb07a383aaf.roa File: 5f00be76-5ce7-441a-a059-8eb07a383aaf.roa (raw, json) Hash identifier: JFl1KWpBwDwxG7Jc1lycFwhbPcVuxvUzO6k3oQwqir4= Subject key identifier: 9B:D4:C4:5A:D8:DC:B0:FD:AD:F9:69:F7:88:0C:02:E2:72:D9:C8:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37B41656076A90A493A60A2D5C4EAE6F00C46AE4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f00be76-5ce7-441a-a059-8eb07a383aaf.roa Signing time: Mon 28 Oct 2024 00:00:00 +0000 ROA not before: Mon 28 Oct 2024 00:00:00 +0000 ROA not after: Mon 02 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:7400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b4:16:56:07:6a:90:a4:93:a6:0a:2d:5c:4e:ae:6f:00:c4:6a:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 28 00:00:00 2024 GMT Not After : Dec 2 23:59:59 2024 GMT Subject: serialNumber=d217e1b08f3a94c3fd0d3c3a26a9d0a243e4e5160947366558f1727856562f73, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:e8:11:6b:3c:56:81:23:6c:14:65:ba:21: 19:b2:18:23:60:e7:20:7c:40:77:83:c1:65:93:9f: 77:2b:03:a2:3c:83:18:bf:17:69:cc:64:84:be:1b: a5:c8:9c:c1:33:d6:69:01:5e:6e:52:3f:0a:32:8d: e2:61:b6:b8:d7:99:18:da:6e:72:de:16:bd:6a:d4: b7:d4:86:48:2b:2b:7f:63:98:d5:da:5b:d7:6b:cc: bc:36:ea:bb:5f:cb:24:01:7a:b1:54:be:82:39:a3: 3b:4c:7f:15:de:ec:af:81:68:d6:0c:d8:35:fb:f7: 0b:69:37:45:02:80:be:e0:2d:c1:4b:37:60:e8:5a: 6b:e4:ee:ce:f8:3f:8d:fa:93:c3:54:7b:31:cc:e8: 7b:36:ef:b8:ed:46:50:96:95:c6:eb:24:fb:23:14: fa:c0:2d:61:2d:96:e2:32:7b:f5:71:71:1d:88:4c: a5:d8:6a:7b:80:da:a9:f7:64:04:77:1b:ce:d8:17: 39:e1:9c:9f:ab:8a:9a:11:94:36:61:b7:3d:15:61: 9e:5a:15:16:d9:6f:31:45:4a:f8:8a:34:b8:f7:86: ca:9b:10:bc:44:38:bf:ca:db:28:c2:71:91:50:6d: 84:6a:de:31:9c:4c:69:a6:fa:c2:25:2e:0b:58:0a: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D4:C4:5A:D8:DC:B0:FD:AD:F9:69:F7:88:0C:02:E2:72:D9:C8:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f00be76-5ce7-441a-a059-8eb07a383aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:7400::/40 Signature Algorithm: sha256WithRSAEncryption 71:fd:ae:79:f6:8a:12:aa:02:09:96:84:cf:1d:00:85:81:f0: 10:55:c0:f3:9b:6d:71:00:4d:1f:b6:d1:fa:6b:f3:b2:23:d2: 47:64:d5:20:b9:0e:e7:1f:8b:6b:98:91:da:9f:e1:f6:9a:b6: 8c:f6:18:f5:f9:1c:f3:3b:7a:b4:0d:fa:9b:6d:37:af:99:27: 93:38:0f:19:9b:37:7e:cd:6c:27:6a:70:2b:01:40:0f:61:d8: ef:3c:df:66:fe:74:9e:32:de:6c:5e:82:e3:2d:06:77:62:69: c3:a3:8d:a5:cc:ee:1e:78:00:bb:96:6f:62:90:3f:dd:c1:6f: 1c:61:79:1f:5f:82:d0:2e:6c:11:c4:ba:eb:0d:f8:a4:ea:a7: fd:b1:09:dc:4f:10:9c:7c:53:3d:01:1e:89:c3:e5:57:ca:ba: fe:8d:80:08:c0:03:a8:c5:3b:e5:2a:f8:d7:d0:26:ed:6b:75: 62:9f:cd:b4:97:02:aa:98:10:e3:30:52:73:28:da:66:b4:bd: 25:69:8b:85:6a:f2:b1:c2:8c:82:19:a0:6f:a1:08:65:99:1c: 2a:6d:24:8e:01:9d:97:fe:7f:d8:b6:75:e5:e9:9e:00:09:2e: aa:e3:15:c5:d7:56:17:6c:83:d8:f1:10:29:1d:73:5c:c4:1f: 95:84:33:16 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUN7QWVgdqkKSTpgotXE6ubwDEauQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDI4MDAwMDAwWhcNMjQxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjE3ZTFiMDhmM2E5NGMzZmQwZDNjM2EyNmE5ZDBhMjQz ZTRlNTE2MDk0NzM2NjU1OGYxNzI3ODU2NTYyZjczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAoOgRazxWgSNsFGW6IRmyGCNg5yB8QHeDwWWTn3crA6I8 gxi/F2nMZIS+G6XInMEz1mkBXm5SPwoyjeJhtrjXmRjabnLeFr1q1LfUhkgrK39j mNXaW9drzLw26rtfyyQBerFUvoI5oztMfxXe7K+BaNYM2DX79wtpN0UCgL7gLcFL N2DoWmvk7s74P436k8NUezHM6Hs277jtRlCWlcbrJPsjFPrALWEtluIye/VxcR2I TKXYanuA2qn3ZAR3G87YFznhnJ+ripoRlDZhtz0VYZ5aFRbZbzFFSviKNLj3hsqb ELxEOL/K2yjCcZFQbYRq3jGcTGmm+sIlLgtYCthhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUm9TEWtjcsP2t+Wn3iAwC4nLZyNAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVmMDBiZTc2LTVjZTctNDQxYS1hMDU5LThlYjA3YTM4M2FhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/3dDANBgkqhkiG9w0BAQsFAAOCAQEAcf2uefaKEqoCCZaEzx0AhYHw EFXA85ttcQBNH7bR+mvzsiPSR2TVILkO5x+La5iR2p/h9pq2jPYY9fkc8zt6tA36 m203r5knkzgPGZs3fs1sJ2pwKwFAD2HY7zzfZv50njLebF6C4y0Gd2Jpw6ONpczu HngAu5ZvYpA/3cFvHGF5H1+C0C5sEcS66w34pOqn/bEJ3E8QnHxTPQEeicPlV8q6 /o2ACMADqMU75Sr419Am7Wt1Yp/NtJcCqpgQ4zBScyjaZrS9JWmLhWryscKMghmg b6EIZZkcKm0kjgGdl/5/2LZ15emeAAkuquMVxddWF2yD2PEQKR1zXMQflYQzFg== -----END CERTIFICATE-----Generated at Fri Nov 22 01:34:05 2024 by rpki-client on console-ams.rpki-client.org