$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9c9ddc5f-b308-4bc3-b4f3-beea89ac69d4.roa File: 9c9ddc5f-b308-4bc3-b4f3-beea89ac69d4.roa (raw, json) Hash identifier: W+w+aThcLBhunMmx1RkfWonLQZ1dzY3VsezCfPLoLHo= Subject key identifier: 7E:5F:DE:EA:46:F9:60:DB:B5:77:36:6C:1C:52:7C:EF:4C:73:1F:56 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 6F34525EF068C64A78B6FE29CB54A4010822ECDF Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9c9ddc5f-b308-4bc3-b4f3-beea89ac69d4.roa Signing time: Fri 01 Nov 2024 00:00:00 +0000 ROA not before: Fri 01 Nov 2024 00:00:00 +0000 ROA not after: Fri 06 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2606:f40:fffa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:34:52:5e:f0:68:c6:4a:78:b6:fe:29:cb:54:a4:01:08:22:ec:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Nov 1 00:00:00 2024 GMT Not After : Dec 6 23:59:59 2024 GMT Subject: serialNumber=1cbdd5f32dec16229870d6d9e06e85140115f6c1def20a6b7832b9e43bf2881d, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:50:69:ce:01:b3:08:d0:b3:f4:bc:aa:4a: 12:77:41:ac:c7:51:b3:3f:76:d6:07:7f:03:06:7b: 39:b5:85:fe:31:56:93:db:1c:c4:3d:8a:1b:11:76: 1d:af:c7:5a:cd:2f:6b:fb:d0:11:84:ff:59:1a:2d: cf:99:73:8a:22:f1:bf:7c:3e:6d:3f:42:f7:9b:c2: b0:2a:2f:50:29:63:68:05:92:0e:7e:a0:28:f2:1e: 24:ba:e1:c8:81:47:30:06:9e:69:6c:30:e8:98:01: 6f:2b:d5:dd:c5:fc:b6:5b:2d:91:4b:2c:ab:13:ef: 39:3f:b9:a1:57:62:84:86:ef:01:0f:2e:22:34:a0: 37:36:59:d3:67:f0:b4:df:c7:16:89:a4:cb:72:34: a0:d5:cd:46:c2:04:58:c8:13:f8:f7:c1:fd:da:d5: dd:4c:65:22:67:58:21:41:c1:5a:34:f6:9c:28:0d: a8:84:76:5d:d7:b3:92:88:0b:53:eb:9b:d2:56:ec: 82:e2:5c:64:ca:93:b0:e7:44:4e:26:15:f0:b8:ad: fa:40:b2:0a:cc:a3:f4:4c:f7:30:ba:ba:be:67:7b: 31:0a:a7:9f:cf:a0:07:3b:9c:17:78:03:31:46:6f: af:93:24:35:1c:d7:27:31:67:9f:25:1d:b8:dd:6b: 17:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5F:DE:EA:46:F9:60:DB:B5:77:36:6C:1C:52:7C:EF:4C:73:1F:56 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9c9ddc5f-b308-4bc3-b4f3-beea89ac69d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:f40:fffa::/48 Signature Algorithm: sha256WithRSAEncryption 18:ea:1c:12:0d:9e:32:68:f0:0d:c0:61:92:a0:eb:00:e0:51: ce:0d:5b:47:98:78:2a:9e:9c:ef:2a:e0:3d:92:ae:b8:6a:ee: b9:4e:06:b4:09:3e:fa:d5:4e:54:24:65:52:bc:dc:6a:86:5d: 79:5f:7e:dd:80:95:f3:b0:f9:0c:e5:36:06:88:3d:06:bf:6d: ed:18:6e:d0:a4:ce:7c:ff:f8:e6:ee:67:bf:44:c4:d0:8f:f1: c2:08:d0:ae:61:b5:bb:1e:28:3b:35:13:e6:a6:c3:3d:4c:41: 34:eb:64:3e:2a:d0:ad:bc:61:b0:b0:e5:27:dc:de:2c:5d:d9: d9:94:60:43:22:4f:bb:92:fc:0e:27:8e:db:5d:02:64:39:ba: 75:f9:39:14:73:63:4b:1d:cb:f0:9b:e6:9a:9b:7f:9a:57:22: 57:d7:58:94:20:8e:d5:f2:2d:59:a9:61:49:dc:09:01:4b:80: df:19:fe:fb:e4:a4:d0:7f:ea:ae:a8:7d:76:06:7a:40:bc:ea: 7a:97:00:05:c5:9a:06:1f:68:56:d1:36:85:46:f9:43:88:a8: 19:8e:83:60:74:0e:c6:ce:e3:c7:68:1a:79:5a:33:7c:c2:2f: c8:43:21:9d:78:97:6e:33:98:91:ae:29:b2:a3:80:47:ce:f5: a3:48:32:b7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbzRSXvBoxkp4tv4py1SkAQgi7N8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjQxMTAxMDAwMDAwWhcNMjQxMjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxY2JkZDVmMzJkZWMxNjIyOTg3MGQ2ZDllMDZlODUxNDAx MTVmNmMxZGVmMjBhNmI3ODMyYjllNDNiZjI4ODFkMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmnFBpzgGzCNCz9LyqShJ3QazHUbM/dtYHfwMGezm1hf4x VpPbHMQ9ihsRdh2vx1rNL2v70BGE/1kaLc+Zc4oi8b98Pm0/QvebwrAqL1ApY2gF kg5+oCjyHiS64ciBRzAGnmlsMOiYAW8r1d3F/LZbLZFLLKsT7zk/uaFXYoSG7wEP LiI0oDc2WdNn8LTfxxaJpMtyNKDVzUbCBFjIE/j3wf3a1d1MZSJnWCFBwVo09pwo DaiEdl3Xs5KIC1Prm9JW7ILiXGTKk7DnRE4mFfC4rfpAsgrMo/RM9zC6ur5nezEK p5/PoAc7nBd4AzFGb6+TJDUc1ycxZ58lHbjdaxcTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfl/e6kb5YNu1dzZsHFJ870xzH1YwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzljOWRkYzVmLWIzMDgtNGJjMy1iNGYzLWJlZWE4OWFjNjlkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBg9A//owDQYJKoZIhvcNAQELBQADggEBABjqHBINnjJo8A3AYZKg6wDg Uc4NW0eYeCqenO8q4D2Srrhq7rlOBrQJPvrVTlQkZVK83GqGXXlfft2AlfOw+Qzl NgaIPQa/be0YbtCkznz/+ObuZ79ExNCP8cII0K5htbseKDs1E+amwz1MQTTrZD4q 0K28YbCw5Sfc3ixd2dmUYEMiT7uS/A4njttdAmQ5unX5ORRzY0sdy/Cb5pqbf5pX IlfXWJQgjtXyLVmpYUncCQFLgN8Z/vvkpNB/6q6ofXYGekC86nqXAAXFmgYfaFbR NoVG+UOIqBmOg2B0DsbO48doGnlaM3zCL8hDIZ14l24zmJGuKbKjgEfO9aNIMrc= -----END CERTIFICATE-----Generated at Sun Nov 24 02:36:06 2024 by rpki-client on console-fra.rpki-client.org