$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff90fa7f-25be-4d7b-9186-d26d8e707637.roa File: ff90fa7f-25be-4d7b-9186-d26d8e707637.roa (raw, json) Hash identifier: XPPHNcYKts4u1jFJ1yLO8T76l/V777ODtdjBHtPYju0= Subject key identifier: 4A:38:53:A2:47:E3:D3:FB:13:32:F5:75:32:B5:F3:27:72:67:8E:E7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 135341D4D024106DD99950CF665600E5158950DE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff90fa7f-25be-4d7b-9186-d26d8e707637.roa Signing time: Fri 22 Nov 2024 00:00:00 +0000 ROA not before: Fri 22 Nov 2024 00:00:00 +0000 ROA not after: Fri 27 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00::/24 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:53:41:d4:d0:24:10:6d:d9:99:50:cf:66:56:00:e5:15:89:50:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 00:00:00 2024 GMT Not After : Dec 27 23:59:59 2024 GMT Subject: serialNumber=5e05bb3e34840f177a452458ccd62fdecebd46bd664615381ba32c3abd4fe075, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:9c:de:96:89:f4:0d:b6:f4:42:57:d4:46: ce:0e:a3:06:35:22:ad:c4:ad:0e:a7:88:ea:de:d8: cf:52:e5:47:f2:5e:3e:04:cd:71:52:c6:78:c7:1e: 56:09:07:09:41:87:f3:4e:3e:16:90:27:77:94:32: 8d:04:e9:9c:df:34:a4:4f:b2:c5:16:c4:eb:f3:b6: 66:65:de:b4:e6:45:1f:6b:20:f0:02:95:76:8c:cf: 42:d9:70:e9:9d:d0:84:9b:80:ae:e6:d9:e8:e9:e1: e4:91:e8:e2:22:40:da:21:9a:0f:0d:35:d3:72:9d: ce:44:f2:f9:cc:ed:98:b3:fc:74:02:7e:3d:c6:3f: f4:51:ff:14:8e:28:f8:ed:40:18:1d:3a:b3:f8:ee: 64:1a:50:84:0a:12:93:0d:d8:4d:73:4f:7e:2e:da: 22:92:86:b9:9e:ee:ea:27:cf:6a:30:a0:de:ac:f4: 02:37:8d:4e:7e:cd:41:1a:0e:55:5f:6b:57:97:9a: 27:43:e6:4c:e8:12:43:be:98:3d:1e:12:94:63:28: 6d:6b:eb:74:0a:49:78:48:2c:bd:a0:77:d4:1d:95: d9:0b:3d:11:cd:75:e7:1e:19:82:03:3a:42:f2:2f: 96:a9:cd:48:57:bc:37:7a:bb:9b:e4:4d:81:b1:f4: f4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:38:53:A2:47:E3:D3:FB:13:32:F5:75:32:B5:F3:27:72:67:8E:E7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff90fa7f-25be-4d7b-9186-d26d8e707637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00::/24 Signature Algorithm: sha256WithRSAEncryption 3f:6f:5d:c5:33:d1:08:d3:8e:ae:98:f8:7c:60:01:e1:1a:3f: 61:d9:98:6a:53:a8:d0:60:7c:ed:8e:0c:3c:bf:25:fa:94:ff: 32:dd:15:83:49:ee:ae:99:0a:6d:a3:50:b2:45:13:17:24:a9: 37:9a:8f:c2:15:f0:dc:8a:d2:79:fb:0d:5f:ad:ad:f7:65:f6: fa:89:45:71:43:7c:4c:80:5a:47:7a:78:fe:ed:f6:ee:09:65: 93:63:64:bc:59:9f:1a:a6:0a:45:15:1e:8d:04:e9:ea:2b:8e: 7b:a2:b7:b1:6f:0f:41:61:0c:68:b6:08:13:99:fc:29:62:5e: 22:cd:91:6a:c6:82:16:e9:42:2d:53:15:0b:69:4e:b1:41:e6: fa:d4:64:70:b2:de:0a:18:c4:d7:14:01:8e:fa:38:5c:72:2b: c1:35:29:37:ba:a1:9d:2f:c1:ef:ea:75:f2:9d:8f:46:f4:16: b8:b2:00:5a:86:fb:71:27:f9:d0:6e:17:7b:99:bb:92:e6:11: f3:fd:8b:f7:ec:7b:7f:d1:dd:b7:5b:c2:37:41:49:cb:d4:7f: 60:98:3c:14:47:48:78:95:3d:1f:52:e0:7f:9d:c2:11:26:a5: 8a:16:26:99:10:a5:39:83:da:78:30:79:00:77:4a:f8:6b:1c: 5e:0b:f9:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE1NB1NAkEG3ZmVDPZlYA5RWJUN4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTIyMDAwMDAwWhcNMjQxMjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTA1YmIzZTM0ODQwZjE3N2E0NTI0NThjY2Q2MmZkZWNl YmQ0NmJkNjY0NjE1MzgxYmEzMmMzYWJkNGZlMDc1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9UJzelon0Dbb0QlfURs4OowY1Iq3ErQ6niOre2M9S5Ufy Xj4EzXFSxnjHHlYJBwlBh/NOPhaQJ3eUMo0E6ZzfNKRPssUWxOvztmZl3rTmRR9r IPAClXaMz0LZcOmd0ISbgK7m2ejp4eSR6OIiQNohmg8NNdNync5E8vnM7Ziz/HQC fj3GP/RR/xSOKPjtQBgdOrP47mQaUIQKEpMN2E1zT34u2iKShrme7uonz2owoN6s 9AI3jU5+zUEaDlVfa1eXmidD5kzoEkO+mD0eEpRjKG1r63QKSXhILL2gd9QdldkL PRHNdeceGYIDOkLyL5apzUhXvDd6u5vkTYGx9PTtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSjhTokfj0/sTMvV1MrXzJ3JnjucwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmOTBmYTdmLTI1YmUtNGQ3Yi05MTg2LWQyNmQ4ZTcwNzYzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC MAYDBAAmAB8wDQYJKoZIhvcNAQELBQADggEBAD9vXcUz0QjTjq6Y+HxgAeEaP2HZ mGpTqNBgfO2ODDy/JfqU/zLdFYNJ7q6ZCm2jULJFExckqTeaj8IV8NyK0nn7DV+t rfdl9vqJRXFDfEyAWkd6eP7t9u4JZZNjZLxZnxqmCkUVHo0E6eorjnuit7FvD0Fh DGi2CBOZ/CliXiLNkWrGghbpQi1TFQtpTrFB5vrUZHCy3goYxNcUAY76OFxyK8E1 KTe6oZ0vwe/qdfKdj0b0FriyAFqG+3En+dBuF3uZu5LmEfP9i/fse3/R3bdbwjdB ScvUf2CYPBRHSHiVPR9S4H+dwhEmpYoWJpkQpTmD2ngweQB3SvhrHF4L+cc= -----END CERTIFICATE-----Generated at Fri Nov 22 01:34:46 2024 by rpki-client on console-ams.rpki-client.org