$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bf2efac-12de-4901-b282-08e6702e1a1a.roa File: 9bf2efac-12de-4901-b282-08e6702e1a1a.roa (raw, json) Hash identifier: NGE3WfgDJI+nXGwqMzZt3mhZeSY3+3Pv/NBIn1jgcyg= Subject key identifier: B5:4A:A8:7C:92:D5:F9:E0:B5:2F:F3:7C:C6:A8:A3:E2:4A:3F:31:A6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 518B3B24D403C366ED830A1BFF160CAAC7066C44 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bf2efac-12de-4901-b282-08e6702e1a1a.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f36:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8b:3b:24:d4:03:c3:66:ed:83:0a:1b:ff:16:0c:aa:c7:06:6c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=0ac9995eed9c8d82d24bed5a841b93093001de648b713861f3e2c37dcee47aee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7d:a6:94:93:29:1b:f3:d5:52:ac:56:20:51: ff:87:d7:38:a0:e3:07:13:f4:89:c4:1c:f3:23:00: 81:1a:7d:3e:6f:d9:a4:a4:7a:71:9a:0b:d1:97:7e: 09:bb:2f:69:fe:78:fe:59:82:c4:a4:05:3c:34:c1: 80:bc:4c:37:ce:57:f9:a8:7e:4f:61:3a:30:d9:7d: ec:d7:9a:54:09:37:c5:c3:c6:92:a1:b2:da:98:0f: 8c:48:2d:c9:c0:e3:e2:09:39:08:a4:6a:f0:e3:54: 4e:a7:5e:00:a2:a9:5d:5b:94:76:78:a5:de:c0:17: f8:6f:87:3f:aa:b8:ff:30:a0:ec:bf:8e:9c:e0:40: fd:c5:f6:e7:71:74:6e:e0:e6:d4:f8:26:e3:38:97: 82:f3:be:e0:41:fa:d2:93:92:36:49:ea:a2:97:56: 2b:2a:89:81:8f:90:ac:3b:99:b9:67:db:86:b2:4a: 1a:43:68:f0:d9:d8:3b:c3:89:49:8d:4c:96:e7:6a: 47:58:56:f8:2f:ef:38:31:e8:6d:08:1c:d4:09:48: ec:c3:5e:18:16:fd:aa:a6:e7:44:7a:58:f2:51:fd: 81:47:46:67:7d:ad:77:d0:23:11:cd:f1:8e:d3:af: c6:a8:da:bd:85:1a:d9:b4:b2:34:0e:7c:6d:42:35: a4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4A:A8:7C:92:D5:F9:E0:B5:2F:F3:7C:C6:A8:A3:E2:4A:3F:31:A6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bf2efac-12de-4901-b282-08e6702e1a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f36:5000::/40 Signature Algorithm: sha256WithRSAEncryption 72:f7:25:46:5d:c5:15:da:27:ec:ba:e6:b4:6b:62:d4:d9:a0: ca:33:4d:11:8d:6c:ba:ec:70:31:c3:e3:6e:f9:eb:d1:74:a0: d4:57:76:d9:a5:a6:bc:5b:e4:d8:9b:50:9a:ed:53:55:a7:fe: 18:52:9a:7c:54:82:93:d3:af:ef:e7:42:a0:f2:a2:c1:eb:f6: 5b:5a:8e:93:38:9b:8e:b4:95:36:4c:13:4b:12:1e:56:bf:6e: 64:eb:4e:cf:67:82:12:31:c4:4e:ac:ca:8b:58:8d:cd:0d:fe: 7d:8e:e5:3b:bb:be:80:4a:a4:de:d0:06:51:8b:ce:2b:94:77: e0:0a:a1:dd:e7:7c:03:fd:6a:13:0c:1c:7b:5a:cb:dc:06:a4: 8b:3c:ae:61:64:ee:27:a9:ec:c6:08:0e:87:06:a0:a4:d8:bf: 54:85:5d:c8:1c:50:40:75:bb:69:ab:f2:c7:3a:e9:6e:3f:55: cd:3a:de:a4:fb:65:dd:53:9b:da:b7:3a:e0:3f:90:63:db:f9: f6:11:37:2c:93:7c:a1:1c:28:48:aa:eb:db:c7:3f:d2:24:59: 11:40:95:81:9a:74:1e:06:ea:d4:53:49:21:fd:c5:77:ab:97: f2:2c:d8:39:50:5a:c9:82:50:78:89:c7:c0:84:96:bf:84:e6: 20:ed:82:19 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUYs7JNQDw2btgwob/xYMqscGbEQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTE5MDAwMDAwWhcNMjQxMjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYWM5OTk1ZWVkOWM4ZDgyZDI0YmVkNWE4NDFiOTMwOTMw MDFkZTY0OGI3MTM4NjFmM2UyYzM3ZGNlZTQ3YWVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjfaaUkykb89VSrFYgUf+H1zig4wcT9InEHPMjAIEafT5v 2aSkenGaC9GXfgm7L2n+eP5ZgsSkBTw0wYC8TDfOV/mofk9hOjDZfezXmlQJN8XD xpKhstqYD4xILcnA4+IJOQikavDjVE6nXgCiqV1blHZ4pd7AF/hvhz+quP8woOy/ jpzgQP3F9udxdG7g5tT4JuM4l4LzvuBB+tKTkjZJ6qKXVisqiYGPkKw7mbln24ay ShpDaPDZ2DvDiUmNTJbnakdYVvgv7zgx6G0IHNQJSOzDXhgW/aqm50R6WPJR/YFH Rmd9rXfQIxHN8Y7Tr8ao2r2FGtm0sjQOfG1CNaSjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUtUqofJLV+eC1L/N8xqij4ko/MaYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliZjJlZmFjLTEyZGUtNDkwMS1iMjgyLTA4ZTY3MDJlMWExYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB82UDANBgkqhkiG9w0BAQsFAAOCAQEAcvclRl3FFdon7LrmtGti1Nmg yjNNEY1suuxwMcPjbvnr0XSg1Fd22aWmvFvk2JtQmu1TVaf+GFKafFSCk9Ov7+dC oPKiwev2W1qOkzibjrSVNkwTSxIeVr9uZOtOz2eCEjHETqzKi1iNzQ3+fY7lO7u+ gEqk3tAGUYvOK5R34Aqh3ed8A/1qEwwce1rL3AakizyuYWTuJ6nsxggOhwagpNi/ VIVdyBxQQHW7aavyxzrpbj9VzTrepPtl3VOb2rc64D+QY9v59hE3LJN8oRwoSKrr 28c/0iRZEUCVgZp0Hgbq1FNJIf3Fd6uX8izYOVBayYJQeInHwISWv4TmIO2CGQ== -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:59 2024 by rpki-client on console-ams.rpki-client.org