$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfd75e94-c6a2-460b-9136-c7a2911cb1a0.roa File: bfd75e94-c6a2-460b-9136-c7a2911cb1a0.roa (raw, json) Hash identifier: pcow9LnTH1RRYUkVB+1ups7C6cfAze8glXP2E07zl58= Subject key identifier: E4:0D:7B:B0:9F:6D:67:E4:20:43:B0:D2:12:F7:E0:E1:03:F0:4D:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FF3D715C0803F3B90F35A9580EBE30A98ADD391 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfd75e94-c6a2-460b-9136-c7a2911cb1a0.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f3:d7:15:c0:80:3f:3b:90:f3:5a:95:80:eb:e3:0a:98:ad:d3:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=62d1aea8bf00ce2d621592d8147f06a8761cdc67931626c89326c40bf6c0111c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:14:02:f5:2c:eb:07:15:e8:b8:7a:19:f7: 4d:ae:09:0c:14:21:a3:c8:0a:d2:ca:31:be:0b:93: 9f:3e:58:2b:a6:a4:a7:31:5d:f2:fd:1e:f1:c2:d5: 17:b2:0b:d3:14:65:ef:d4:45:1a:b4:f2:b3:62:f2: 11:63:0f:ba:9d:3e:17:1f:b9:f8:df:9b:e1:b2:03: fb:9e:a8:86:fb:3e:be:f0:0c:be:fa:a4:3a:ba:81: 60:ac:44:c2:38:ac:1a:e1:fc:18:50:d7:3b:b4:43: 8c:cb:7b:34:a8:90:8a:a6:b3:06:c4:ad:56:62:a5: 7e:8e:64:91:71:08:35:07:54:81:b9:44:c3:9e:28: 2c:70:ab:ff:9b:65:71:f5:c7:dc:5d:30:6a:e8:df: 5e:d1:61:44:22:b3:bd:6d:ae:b1:89:43:f7:d9:2e: 0f:99:22:6d:a8:8c:a7:56:d5:dc:39:97:24:0d:a8: 2d:f8:92:e0:3e:57:c8:e1:4a:35:ac:22:47:ff:1f: d2:f2:ca:99:73:07:fb:2a:20:20:6d:98:32:90:ce: de:66:0f:fb:a4:89:0f:db:be:a1:69:42:d6:65:e2: 19:3a:7f:88:10:1c:31:31:25:ea:74:13:d3:39:d4: 7c:71:17:32:30:1a:e1:69:59:30:b8:c5:10:28:97: 22:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0D:7B:B0:9F:6D:67:E4:20:43:B0:D2:12:F7:E0:E1:03:F0:4D:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfd75e94-c6a2-460b-9136-c7a2911cb1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:6000::/40 Signature Algorithm: sha256WithRSAEncryption 90:b8:25:e3:c0:5b:09:06:73:63:e4:51:a6:b7:81:e4:a7:dc: 72:06:25:35:49:54:af:50:41:6e:d0:b3:eb:ad:e5:b4:5f:79: cc:e7:5e:ac:a2:41:e9:e2:b1:12:46:0e:35:c2:6b:74:81:57: cd:f5:4a:25:00:8e:18:7d:3a:5d:52:05:c0:25:0a:c2:c6:2e: 5f:e8:59:3a:cd:9d:5c:b3:c4:bc:c1:c6:15:11:a0:14:0f:96: cc:57:be:41:dc:d2:a0:19:ee:c2:5d:a4:fd:9d:8d:c0:6c:01: ef:29:39:06:bc:a6:64:0c:36:45:93:66:ee:e4:71:61:94:d3: 89:69:ae:0d:03:b5:b7:cb:b5:60:df:4b:83:87:3a:0a:81:25: 07:df:0e:eb:89:43:89:ab:98:a2:96:81:9d:20:6c:c6:e2:f5: 5d:44:11:2f:b5:18:50:c0:98:b4:8b:d6:63:59:b2:90:4b:ea: 57:10:11:01:d3:cf:dd:fe:61:1b:d9:62:f1:86:2c:f4:5c:9d: ed:87:ce:c6:7c:34:53:26:ac:9f:83:24:47:28:b8:b0:6e:21: 9a:f1:6a:f9:00:65:3e:ad:2f:18:02:1a:71:56:27:aa:29:42: 13:04:38:60:b0:5f:be:77:e0:61:f9:bb:bd:44:59:d8:fc:d5: 86:dd:2f:7f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUT/PXFcCAPzuQ81qVgOvjCpit05EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MmQxYWVhOGJmMDBjZTJkNjIxNTkyZDgxNDdmMDZhODc2 MWNkYzY3OTMxNjI2Yzg5MzI2YzQwYmY2YzAxMTFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzWxQC9SzrBxXouHoZ902uCQwUIaPICtLKMb4Lk58+WCum pKcxXfL9HvHC1ReyC9MUZe/URRq08rNi8hFjD7qdPhcfufjfm+GyA/ueqIb7Pr7w DL76pDq6gWCsRMI4rBrh/BhQ1zu0Q4zLezSokIqmswbErVZipX6OZJFxCDUHVIG5 RMOeKCxwq/+bZXH1x9xdMGro317RYUQis71trrGJQ/fZLg+ZIm2ojKdW1dw5lyQN qC34kuA+V8jhSjWsIkf/H9LyyplzB/sqICBtmDKQzt5mD/ukiQ/bvqFpQtZl4hk6 f4gQHDExJep0E9M51HxxFzIwGuFpWTC4xRAolyIBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU5A17sJ9tZ+QgQ7DSEvfg4QPwTVgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmZDc1ZTk0LWM2YTItNDYwYi05MTM2LWM3YTI5MTFjYjFhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//YDANBgkqhkiG9w0BAQsFAAOCAQEAkLgl48BbCQZzY+RRpreB5Kfc cgYlNUlUr1BBbtCz663ltF95zOderKJB6eKxEkYONcJrdIFXzfVKJQCOGH06XVIF wCUKwsYuX+hZOs2dXLPEvMHGFRGgFA+WzFe+QdzSoBnuwl2k/Z2NwGwB7yk5Brym ZAw2RZNm7uRxYZTTiWmuDQO1t8u1YN9Lg4c6CoElB98O64lDiauYopaBnSBsxuL1 XUQRL7UYUMCYtIvWY1mykEvqVxARAdPP3f5hG9li8YYs9Fyd7YfOxnw0Uyasn4Mk Ryi4sG4hmvFq+QBlPq0vGAIacVYnqilCEwQ4YLBfvnfgYfm7vURZ2PzVht0vfw== -----END CERTIFICATE-----Generated at Sun Nov 24 02:35:49 2024 by rpki-client on console-fra.rpki-client.org