$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa File: a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa (raw, json) Hash identifier: K7lrvtBzgSKqXcw9YRFdOj8awI6BUyE9NUT6u5m5fcg= Subject key identifier: EB:E9:F4:E2:7B:C8:81:8E:83:81:ED:92:6C:75:87:9E:7E:74:69:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7227F7D634C80D23C0436791B4982B65E0FB34AC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:4008::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:27:f7:d6:34:c8:0d:23:c0:43:67:91:b4:98:2b:65:e0:fb:34:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=b74a06975a846acf2469cb3b1a2e2daa9954b8ce8b696fa53fbe84b32b94b199, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c9:83:8b:3f:bd:54:53:c1:d5:98:26:30:a9: 2f:b6:9b:69:25:86:d2:f8:00:82:06:a6:a3:5a:2e: 26:7a:1c:81:0f:f2:c6:bd:20:38:21:18:6d:83:b3: 38:1d:b2:04:16:2f:37:96:a1:3a:2d:40:66:8f:d5: 39:9f:cc:f4:da:90:34:24:65:a7:28:d2:6a:0e:34: 99:8b:e3:ff:37:f6:52:7a:39:5a:bc:78:e1:42:ee: f6:31:31:b0:fc:f1:88:ef:4c:4c:d3:40:0b:14:d6: 53:d6:8c:05:16:ed:51:40:ec:42:21:11:2a:f1:31: 3c:47:1d:46:a0:cd:db:6a:2e:11:b6:a5:d9:a4:63: 7c:2c:80:52:92:65:f3:f4:e0:2c:13:c2:a5:99:56: ed:33:63:8b:2d:72:6f:dd:22:55:65:f1:48:b0:77: 38:45:3c:24:fe:aa:35:60:3e:01:fb:df:31:fb:39: 50:98:2c:21:c3:87:a2:75:94:e7:72:6b:1e:47:90: 46:d5:1f:8b:f8:3d:91:cb:c3:e5:1e:45:ab:7a:95: 0c:f4:ce:cf:08:eb:45:33:b8:ec:6c:14:dc:04:2c: c4:a7:63:23:54:a6:74:df:59:60:b4:2a:c7:d4:d2: aa:51:8d:96:d4:84:78:8b:d2:cc:67:16:db:bd:91: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E9:F4:E2:7B:C8:81:8E:83:81:ED:92:6C:75:87:9E:7E:74:69:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:4008::/45 Signature Algorithm: sha256WithRSAEncryption 74:a0:6f:26:3b:78:f4:84:1d:6b:b4:18:d8:ed:b4:f8:9a:d6: 55:d5:b3:ee:06:cd:fa:a8:18:f0:44:73:d0:41:83:4b:62:21: e0:d7:17:2e:9b:62:f8:54:12:9b:be:6d:95:ff:5c:07:1e:c7: cd:10:19:6b:20:fc:88:0e:73:a4:f6:75:62:63:d0:dc:70:b8: 86:5f:42:fd:b1:12:52:32:4b:21:12:74:4a:25:7e:f0:2c:52: fe:b5:0f:fa:25:7b:dd:b3:4c:c1:38:11:18:19:6c:eb:57:8b: 72:58:4c:bc:26:4c:b2:77:4b:af:a7:3d:32:2c:fc:31:9d:8f: a9:d1:de:ec:fe:dc:6e:50:a0:a1:f8:d0:37:ad:52:5e:40:3f: c3:9f:dd:c8:9d:52:6f:d1:fc:dd:b5:2e:77:c1:a5:9c:3f:93: 05:7d:54:38:75:e6:3f:2f:c9:15:fa:d7:22:3c:44:70:48:2c: fc:e1:8b:d3:36:01:8a:f0:c9:6b:bc:34:a7:5a:09:b5:19:d7: 76:21:d9:8b:00:40:e2:36:45:cd:64:20:6e:56:4e:c6:a3:3b: 85:86:63:26:c1:27:9d:2e:c2:d4:31:5a:b7:9d:c8:4b:71:01: 82:38:b0:c9:0a:d2:cb:d4:70:48:a9:71:b1:b1:4f:08:08:be: fb:d4:1a:28 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcif31jTIDSPAQ2eRtJgrZeD7NKwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzRhMDY5NzVhODQ2YWNmMjQ2OWNiM2IxYTJlMmRhYTk5 NTRiOGNlOGI2OTZmYTUzZmJlODRiMzJiOTRiMTk5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqyYOLP71UU8HVmCYwqS+2m2klhtL4AIIGpqNaLiZ6HIEP 8sa9IDghGG2DszgdsgQWLzeWoTotQGaP1TmfzPTakDQkZaco0moONJmL4/839lJ6 OVq8eOFC7vYxMbD88YjvTEzTQAsU1lPWjAUW7VFA7EIhESrxMTxHHUagzdtqLhG2 pdmkY3wsgFKSZfP04CwTwqWZVu0zY4stcm/dIlVl8UiwdzhFPCT+qjVgPgH73zH7 OVCYLCHDh6J1lOdyax5HkEbVH4v4PZHLw+UeRat6lQz0zs8I60UzuOxsFNwELMSn YyNUpnTfWWC0KsfU0qpRjZbUhHiL0sxnFtu9kYdbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6+n04nvIgY6Dge2SbHWHnn50aSkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0OTJlODUxLWU3NGMtNDRlZC1iNGJkLTRiOTVmM2M4N2EwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmIAEHQAgwDQYJKoZIhvcNAQELBQADggEBAHSgbyY7ePSEHWu0GNjttPia 1lXVs+4GzfqoGPBEc9BBg0tiIeDXFy6bYvhUEpu+bZX/XAcex80QGWsg/IgOc6T2 dWJj0NxwuIZfQv2xElIySyESdEolfvAsUv61D/ole92zTME4ERgZbOtXi3JYTLwm TLJ3S6+nPTIs/DGdj6nR3uz+3G5QoKH40DetUl5AP8Of3cidUm/R/N21LnfBpZw/ kwV9VDh15j8vyRX61yI8RHBILPzhi9M2AYrwyWu8NKdaCbUZ13Yh2YsAQOI2Rc1k IG5WTsajO4WGYybBJ50uwtQxWredyEtxAYI4sMkK0svUcEipcbGxTwgIvvvUGig= -----END CERTIFICATE-----Generated at Sun Nov 24 03:17:23 2024 by rpki-client on console-ams.rpki-client.org