$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a70abc79-28d2-4d25-86e6-b9648e48d72f.roa File: a70abc79-28d2-4d25-86e6-b9648e48d72f.roa (raw, json) Hash identifier: UtyLD6cOQaZGI274JNnXwSQTgR0i5kcX7m05XDXrQGY= Subject key identifier: BC:89:C7:9E:DC:AC:43:7E:AB:19:D7:3F:BC:F1:9E:C2:29:FF:BB:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3EEE25299173CD6A7010C992DCE6C812A6748CFF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a70abc79-28d2-4d25-86e6-b9648e48d72f.roa Signing time: Fri 22 Nov 2024 00:00:00 +0000 ROA not before: Fri 22 Nov 2024 00:00:00 +0000 ROA not after: Fri 27 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f38:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ee:25:29:91:73:cd:6a:70:10:c9:92:dc:e6:c8:12:a6:74:8c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 00:00:00 2024 GMT Not After : Dec 27 23:59:59 2024 GMT Subject: serialNumber=24e8673c40c063efb120cde2a7eed368a6d4d07d0b6081942ec6c0a76b5733a7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:1b:4f:c5:6f:24:98:e2:f8:bd:9d:96:6e: a3:f8:62:d6:b4:56:de:c2:bf:77:3e:78:81:b4:6a: 09:ed:9d:c2:74:ac:10:a4:0b:db:b4:ae:de:40:20: a9:da:f6:03:82:1c:5e:6c:81:19:95:29:c5:a4:bd: d7:77:ff:a5:a9:6a:00:fb:6a:00:6d:0f:5c:78:d4: df:0e:39:5d:5c:dd:b8:15:88:3e:97:e2:1e:ac:22: b7:bc:ab:ce:7c:81:55:47:50:b6:34:5a:5d:7a:22: 87:30:50:90:aa:16:4f:88:58:a9:fa:5f:6d:7b:51: b3:a4:f4:e1:08:b4:d1:10:bb:04:1d:82:37:a2:3b: 4b:2f:4f:84:96:ef:71:22:5f:be:d0:f8:a6:33:b6: 0b:ec:19:c0:3e:81:c0:91:9a:c8:29:48:ff:aa:ac: 27:f8:d0:f8:8f:09:f3:0c:0b:e1:30:cb:e0:46:b7: 83:6e:e4:7a:4a:df:62:36:6b:11:2f:ed:ef:73:d3: 14:70:09:a0:33:15:ae:cc:fe:e7:e3:74:f7:a3:2a: 78:aa:c0:38:79:54:4f:c5:46:f8:2a:b7:07:4a:d3: 69:1f:92:5a:e1:64:58:5c:1f:dc:85:a7:16:ec:8c: 88:8d:61:93:04:03:4e:a5:d2:54:46:ff:bf:a4:49: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:89:C7:9E:DC:AC:43:7E:AB:19:D7:3F:BC:F1:9E:C2:29:FF:BB:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a70abc79-28d2-4d25-86e6-b9648e48d72f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:5000::/40 Signature Algorithm: sha256WithRSAEncryption 98:16:ce:eb:7b:4f:71:10:bf:69:cd:08:a7:4d:41:98:b0:b6: ad:12:fc:83:f0:b1:17:e5:f8:bb:69:4b:6f:76:77:fc:29:9c: c1:2b:9a:e3:9c:97:3a:05:9c:08:6f:e6:63:e6:bb:3a:f0:a2: 9e:0f:3e:c1:57:27:88:74:63:d7:3c:13:32:e6:33:f4:be:09: 7a:bb:f7:43:12:22:8f:bb:ac:5b:dc:2f:30:f7:48:c1:9a:d2: 1b:ac:69:91:1d:bb:54:40:be:41:32:0e:3e:bd:b0:75:66:79: c2:1b:14:fd:37:9c:99:8e:a4:22:71:b3:f8:c8:02:83:73:fb: c4:03:c1:25:a5:ce:14:ec:a7:55:ed:f9:07:fe:b4:d0:19:f5: 74:96:c6:67:b2:48:9f:51:9c:d0:b2:b7:ef:2b:e5:5c:9c:f9: 2b:68:4c:0d:e1:da:31:37:1b:f8:e7:62:48:12:d2:c2:52:57: 01:90:98:27:2a:53:c6:a9:be:d2:5b:d1:fa:18:17:31:34:a5: 80:18:93:bf:d8:17:50:f6:16:3f:b6:47:c2:4c:c5:d6:87:1e: 4d:b2:a2:5a:07:2e:06:74:a8:55:e1:b4:6c:a4:c6:61:8a:ac: b2:e9:19:bb:13:ef:b6:3d:92:66:93:f4:7a:87:f1:1b:48:6f: 5b:ff:19:1d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPu4lKZFzzWpwEMmS3ObIEqZ0jP8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTIyMDAwMDAwWhcNMjQxMjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNGU4NjczYzQwYzA2M2VmYjEyMGNkZTJhN2VlZDM2OGE2 ZDRkMDdkMGI2MDgxOTQyZWM2YzBhNzZiNTczM2E3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6axtPxW8kmOL4vZ2WbqP4Yta0Vt7Cv3c+eIG0agntncJ0 rBCkC9u0rt5AIKna9gOCHF5sgRmVKcWkvdd3/6WpagD7agBtD1x41N8OOV1c3bgV iD6X4h6sIre8q858gVVHULY0Wl16IocwUJCqFk+IWKn6X217UbOk9OEItNEQuwQd gjeiO0svT4SW73EiX77Q+KYztgvsGcA+gcCRmsgpSP+qrCf40PiPCfMMC+Ewy+BG t4Nu5HpK32I2axEv7e9z0xRwCaAzFa7M/ufjdPejKniqwDh5VE/FRvgqtwdK02kf klrhZFhcH9yFpxbsjIiNYZMEA06l0lRG/7+kSTo/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUvInHntysQ36rGdc/vPGewin/u2kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E3MGFiYzc5LTI4ZDItNGQyNS04NmU2LWI5NjQ4ZTQ4ZDcyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB84UDANBgkqhkiG9w0BAQsFAAOCAQEAmBbO63tPcRC/ac0Ip01BmLC2 rRL8g/CxF+X4u2lLb3Z3/CmcwSua45yXOgWcCG/mY+a7OvCing8+wVcniHRj1zwT MuYz9L4Jerv3QxIij7usW9wvMPdIwZrSG6xpkR27VEC+QTIOPr2wdWZ5whsU/Tec mY6kInGz+MgCg3P7xAPBJaXOFOynVe35B/600Bn1dJbGZ7JIn1Gc0LK37yvlXJz5 K2hMDeHaMTcb+OdiSBLSwlJXAZCYJypTxqm+0lvR+hgXMTSlgBiTv9gXUPYWP7ZH wkzF1oceTbKiWgcuBnSoVeG0bKTGYYqssukZuxPvtj2SZpP0eofxG0hvW/8ZHQ== -----END CERTIFICATE-----Generated at Fri Nov 22 04:03:02 2024 by rpki-client on console-ams.rpki-client.org