$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/998b9d87-46d7-45d1-85e8-62d6d8298271.roa File: 998b9d87-46d7-45d1-85e8-62d6d8298271.roa (raw, json) Hash identifier: F/EymI8m1+GEO7FD7izJxJao1XIbZX15h6wOnUMaOZY= Subject key identifier: 86:2B:70:E1:E1:9E:00:07:97:47:B8:A3:19:8B:BC:1E:F5:41:39:28 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 553705D150DEAF3FA4CA4630AE511AE2DAA879E3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/998b9d87-46d7-45d1-85e8-62d6d8298271.roa Signing time: Tue 15 Oct 2024 00:00:00 +0000 ROA not before: Tue 15 Oct 2024 00:00:00 +0000 ROA not after: Tue 19 Nov 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f32:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:37:05:d1:50:de:af:3f:a4:ca:46:30:ae:51:1a:e2:da:a8:79:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 15 00:00:00 2024 GMT Not After : Nov 19 23:59:59 2024 GMT Subject: serialNumber=f6c3518e5e5e2e5f613caf1c1313545cc3c612b0b4ee4caa25e9b4f96e1c1543, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:e8:e9:09:ca:88:1a:f1:81:5c:7a:14:c7: c2:ff:b2:90:b1:c6:d5:97:4b:34:4b:6f:fe:59:86: a8:c9:19:83:a8:78:40:d3:43:b8:20:4b:66:9e:b3: 37:3c:67:15:ae:25:b5:f3:0d:b1:51:7d:04:01:5f: 57:77:93:ef:28:15:6f:06:3c:f1:db:84:44:7c:a6: b6:f4:e4:59:91:68:93:57:e6:b2:4e:bb:88:8e:5a: 09:e6:63:9e:ae:ce:6d:a8:26:d0:fc:2e:83:a3:eb: 82:3f:54:09:b6:d5:74:b7:3e:0f:3c:28:e5:0e:6e: 4d:ad:4e:95:ed:d3:08:4e:0f:69:3a:ec:89:ae:b6: 67:c4:8a:84:e7:bc:b2:11:7b:3f:36:f0:59:28:1e: 8e:4b:72:01:32:66:07:54:e8:0c:cb:41:b5:92:01: 13:7a:ab:87:c9:87:b0:96:1d:05:15:4e:dc:cf:8f: c9:92:b5:67:b1:54:0e:a1:ad:d5:07:23:55:eb:f6: 2a:d4:26:44:1c:a1:2d:27:c0:9c:e3:57:5a:ad:ec: 6b:73:92:6f:8f:b1:4a:bf:95:bf:ec:13:23:d0:f1: da:0e:d5:ce:d5:c4:9c:96:0f:e3:2a:11:31:63:f2: df:bc:eb:a9:a4:fe:10:8e:23:1c:86:e1:44:19:99: b2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2B:70:E1:E1:9E:00:07:97:47:B8:A3:19:8B:BC:1E:F5:41:39:28 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/998b9d87-46d7-45d1-85e8-62d6d8298271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f32:2000::/40 Signature Algorithm: sha256WithRSAEncryption 5f:50:d4:c5:20:e4:cd:7d:d4:25:48:92:0c:5f:52:4f:f0:1b: 52:e7:87:b6:e9:a7:b0:d7:17:ac:2e:f1:7b:56:99:99:f1:fe: 09:ed:3f:4c:cb:5a:48:55:df:53:c3:66:5f:f9:bc:36:fc:0c: 90:4a:c1:0f:78:15:51:5d:6c:76:38:96:5d:b4:09:3f:80:97: bc:75:9f:a4:8d:71:e1:7d:b7:41:f9:2e:17:ed:a6:56:3c:66: 1f:c6:ef:e9:88:97:e3:de:31:c5:2c:7c:4b:eb:19:62:5d:47: b7:b4:42:3d:2d:0a:f1:04:be:54:7d:38:28:54:f9:23:1e:8c: 95:54:54:ba:41:57:5e:14:43:85:0d:bd:31:a2:1e:a8:a0:6f: 94:ac:77:a9:0b:0b:a9:fd:36:98:52:4c:d1:c3:88:bd:8f:5f: d0:78:f8:b8:ef:dd:c0:6e:0c:52:e0:ec:99:7a:eb:eb:6a:89: 60:78:08:91:4b:58:aa:73:f7:5e:b6:44:75:c5:98:5e:d7:34: de:dc:7d:de:78:b8:e0:29:91:59:4b:7b:1e:c8:2f:b9:f4:33: 6c:b7:26:ec:18:50:09:b4:55:8b:8e:ee:72:e0:25:a0:98:38: e3:ac:f5:28:f4:c0:a8:1d:4e:4e:98:68:5e:43:d3:0d:72:e8: fa:0c:bb:c9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVTcF0VDerz+kykYwrlEa4tqoeeMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDE1MDAwMDAwWhcNMjQxMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmMzNTE4ZTVlNWUyZTVmNjEzY2FmMWMxMzEzNTQ1Y2Mz YzYxMmIwYjRlZTRjYWEyNWU5YjRmOTZlMWMxNTQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCd0ujpCcqIGvGBXHoUx8L/spCxxtWXSzRLb/5ZhqjJGYOo eEDTQ7ggS2aeszc8ZxWuJbXzDbFRfQQBX1d3k+8oFW8GPPHbhER8prb05FmRaJNX 5rJOu4iOWgnmY56uzm2oJtD8LoOj64I/VAm21XS3Pg88KOUObk2tTpXt0whOD2k6 7ImutmfEioTnvLIRez828FkoHo5LcgEyZgdU6AzLQbWSARN6q4fJh7CWHQUVTtzP j8mStWexVA6hrdUHI1Xr9irUJkQcoS0nwJzjV1qt7Gtzkm+PsUq/lb/sEyPQ8doO 1c7VxJyWD+MqETFj8t+866mk/hCOIxyG4UQZmbIrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUhitw4eGeAAeXR7ijGYu8HvVBOSgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk5OGI5ZDg3LTQ2ZDctNDVkMS04NWU4LTYyZDZkODI5ODI3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8yIDANBgkqhkiG9w0BAQsFAAOCAQEAX1DUxSDkzX3UJUiSDF9ST/Ab UueHtumnsNcXrC7xe1aZmfH+Ce0/TMtaSFXfU8NmX/m8NvwMkErBD3gVUV1sdjiW XbQJP4CXvHWfpI1x4X23QfkuF+2mVjxmH8bv6YiX494xxSx8S+sZYl1Ht7RCPS0K 8QS+VH04KFT5Ix6MlVRUukFXXhRDhQ29MaIeqKBvlKx3qQsLqf02mFJM0cOIvY9f 0Hj4uO/dwG4MUuDsmXrr62qJYHgIkUtYqnP3XrZEdcWYXtc03tx93ni44CmRWUt7 HsgvufQzbLcm7BhQCbRVi47ucuAloJg446z1KPTAqB1OTphoXkPTDXLo+gy7yQ== -----END CERTIFICATE-----Generated at Tue Oct 22 00:46:58 2024 by rpki-client on console-fra.rpki-client.org