$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae1dcc46-0c63-4913-ac04-7d7e10196b47.roa File: ae1dcc46-0c63-4913-ac04-7d7e10196b47.roa (raw, json) Hash identifier: NnxTauVqDhEw6PEL207hlScSCU95eijLXBAvW6BoP2s= Subject key identifier: 2B:24:86:DE:B8:B6:B2:80:D3:C4:FA:40:A1:46:24:84:02:8A:35:F3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 034B10F9BE548D6B520278CCB356BFCCEC248731 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae1dcc46-0c63-4913-ac04-7d7e10196b47.roa Signing time: Mon 04 Nov 2024 00:00:00 +0000 ROA not before: Mon 04 Nov 2024 00:00:00 +0000 ROA not after: Mon 09 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:4b:10:f9:be:54:8d:6b:52:02:78:cc:b3:56:bf:cc:ec:24:87:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 4 00:00:00 2024 GMT Not After : Dec 9 23:59:59 2024 GMT Subject: serialNumber=02f32e2c9932fd5866264d7664cefa64206feeaf7da0e14358697016470a1b0b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3a:c3:63:38:41:88:1f:ae:6b:a8:68:7a:5c: a6:4f:df:51:03:9c:d5:a8:9f:d5:6d:4f:41:ee:e7: ef:f5:11:f1:3e:2d:f6:90:97:2d:f2:38:a0:a3:0c: c2:c5:27:a4:d2:3e:bb:93:23:9d:6f:5c:59:56:39: 01:ba:eb:49:53:c7:19:e2:cf:da:89:91:c9:78:69: 5c:84:30:bf:d1:8b:34:5b:27:f5:e9:60:94:fc:f5: 57:f7:f3:13:60:25:89:1a:68:70:b1:98:fe:8b:0c: 9f:8b:33:af:2a:ca:d2:2f:7a:c2:45:16:e1:a8:72: f3:14:9b:bc:ec:eb:2c:72:50:6c:51:ab:3e:8b:20: 60:03:82:b6:a8:2b:f9:7f:86:19:92:b6:bd:40:1d: 55:6f:72:9a:d4:09:33:54:57:bb:32:0d:42:36:bf: ee:1e:a2:2c:58:7c:92:b7:92:1d:53:14:28:21:4e: e6:c1:96:72:d4:b1:e1:f8:24:ae:05:1a:bd:57:81: 10:06:a1:7d:aa:55:67:9e:be:49:58:2f:a8:30:73: d9:7c:61:19:c0:3a:ba:ab:a6:b7:c4:0d:95:46:73: 8c:ae:a9:1a:24:51:29:45:69:46:d3:8b:dd:2f:02: e5:9c:89:10:c1:1b:69:8b:b1:2d:ce:b4:26:65:62: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:24:86:DE:B8:B6:B2:80:D3:C4:FA:40:A1:46:24:84:02:8A:35:F3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae1dcc46-0c63-4913-ac04-7d7e10196b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:5000::/40 Signature Algorithm: sha256WithRSAEncryption 27:94:90:ec:64:c4:e6:38:81:ec:99:cc:97:7f:b4:03:dd:f5: c5:11:5b:e8:fd:de:01:5d:5e:9d:35:39:8c:87:a3:69:7e:2a: 9a:2f:c3:9b:99:7a:11:a1:0c:a9:25:ad:cc:80:f8:e5:86:bf: c1:8b:d6:ba:2c:31:c7:d6:ad:bc:89:7f:fa:ff:0e:6d:d3:0a: 5d:6d:ef:2d:55:79:4a:e5:35:23:4e:70:3c:3d:ff:9b:6c:a3: 69:07:ce:49:53:c4:14:e7:3a:5f:08:87:4c:d3:49:4b:63:02: 66:1d:4c:9a:65:1e:94:ab:51:70:0e:16:80:99:a1:aa:1c:6b: 6b:28:71:f7:d6:ee:98:14:05:98:b3:f5:c6:f7:d2:31:5b:dd: dd:44:76:b5:6d:da:49:56:58:67:bc:22:8b:62:a3:86:ce:6e: 3a:5c:e3:41:b5:96:ca:c7:4b:9e:24:a3:87:a5:cc:e4:6e:33: 90:c0:e7:18:25:2c:fc:82:b6:88:d9:55:01:35:2f:62:25:a3: 1f:88:58:90:70:7e:80:ab:73:57:6c:8c:06:c1:f9:8d:b6:8c: 45:8d:d3:05:c2:0d:33:48:ee:4e:24:92:23:f5:1d:fb:27:cc: 4b:60:48:da:be:9e:6c:a9:50:11:92:67:d2:3a:e8:54:79:a5: 88:97:c4:86 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUA0sQ+b5UjWtSAnjMs1a/zOwkhzEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMmYzMmUyYzk5MzJmZDU4NjYyNjRkNzY2NGNlZmE2NDIw NmZlZWFmN2RhMGUxNDM1ODY5NzAxNjQ3MGExYjBiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOOsNjOEGIH65rqGh6XKZP31EDnNWon9VtT0Hu5+/1EfE+ LfaQly3yOKCjDMLFJ6TSPruTI51vXFlWOQG660lTxxniz9qJkcl4aVyEML/RizRb J/XpYJT89Vf38xNgJYkaaHCxmP6LDJ+LM68qytIvesJFFuGocvMUm7zs6yxyUGxR qz6LIGADgraoK/l/hhmStr1AHVVvcprUCTNUV7syDUI2v+4eoixYfJK3kh1TFCgh TubBlnLUseH4JK4FGr1XgRAGoX2qVWeevklYL6gwc9l8YRnAOrqrprfEDZVGc4yu qRokUSlFaUbTi90vAuWciRDBG2mLsS3OtCZlYifTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUKySG3ri2soDTxPpAoUYkhAKKNfMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlMWRjYzQ2LTBjNjMtNDkxMy1hYzA0LTdkN2UxMDE5NmI0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/yUDANBgkqhkiG9w0BAQsFAAOCAQEAJ5SQ7GTE5jiB7JnMl3+0A931 xRFb6P3eAV1enTU5jIejaX4qmi/Dm5l6EaEMqSWtzID45Ya/wYvWuiwxx9atvIl/ +v8ObdMKXW3vLVV5SuU1I05wPD3/m2yjaQfOSVPEFOc6XwiHTNNJS2MCZh1MmmUe lKtRcA4WgJmhqhxrayhx99bumBQFmLP1xvfSMVvd3UR2tW3aSVZYZ7wii2Kjhs5u OlzjQbWWysdLniSjh6XM5G4zkMDnGCUs/IK2iNlVATUvYiWjH4hYkHB+gKtzV2yM BsH5jbaMRY3TBcINM0juTiSSI/Ud+yfMS2BI2r6ebKlQEZJn0jroVHmliJfEhg== -----END CERTIFICATE-----Generated at Fri Nov 22 01:34:23 2024 by rpki-client on console-ams.rpki-client.org