$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d445e728-d44c-4756-b75c-84a184a73fca.roa File: d445e728-d44c-4756-b75c-84a184a73fca.roa (raw, json) Hash identifier: n5+d0v0zt76zyqrZwAnyk+9+5UY6QcCRszSorx6I1aU= Subject key identifier: 4D:63:5F:EF:EE:3E:B6:A8:54:AF:58:7F:14:60:C8:88:0D:3C:38:60 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 3B305995DCE83361411989E14E5EFE967D152DD8 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d445e728-d44c-4756-b75c-84a184a73fca.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2606:f40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:30:59:95:dc:e8:33:61:41:19:89:e1:4e:5e:fe:96:7d:15:2d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=a3ed2b1481a1b9fcd1b3dc3ebd26e90a904a192c07455dad3fa7f263eee60297, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d7:c5:ba:72:20:64:22:d3:6e:af:06:50:54: 37:ad:45:85:6d:e3:98:8f:31:f2:65:c2:24:c3:33: 13:b8:8f:5d:a9:30:1a:f1:b3:36:6a:71:b2:26:04: 2d:bc:68:0e:fd:d3:4c:df:72:86:9c:50:da:38:2b: 66:40:f0:40:84:bf:64:de:0f:a1:98:0b:8f:c3:4b: 03:e1:e0:fe:1c:f4:65:4f:e7:2d:9f:df:ec:85:de: b2:e3:0c:8d:da:d3:ad:dc:32:d1:f2:35:ed:25:aa: af:d2:f7:a3:a7:00:83:de:02:d9:34:d2:fb:c3:da: cc:e0:bb:dd:11:7e:bd:f7:9e:e5:40:0a:dc:81:00: 16:68:65:82:b4:4c:bf:9a:86:aa:1b:98:35:b2:51: ad:42:69:76:fc:b7:2b:5d:71:b0:77:76:f3:76:e3: d4:2a:0e:dc:b3:81:7e:98:b7:c8:b4:83:8a:c8:b2: 87:d2:35:c6:a6:12:56:8d:8c:62:c6:37:79:70:15: 50:da:7c:d2:d5:7e:4c:db:25:62:86:77:b6:cc:ad: bc:9f:80:3a:58:ff:71:1c:77:64:4d:01:75:e1:48: fc:b3:f4:d2:ce:71:54:7c:3a:dd:72:c9:04:fb:d7: 67:29:21:ed:e3:a2:60:33:ae:df:2e:8b:aa:55:56: fd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:63:5F:EF:EE:3E:B6:A8:54:AF:58:7F:14:60:C8:88:0D:3C:38:60 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d445e728-d44c-4756-b75c-84a184a73fca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:f40::/32 Signature Algorithm: sha256WithRSAEncryption 5b:c2:76:2c:40:9d:ca:4e:0a:8a:d7:7d:c1:01:8f:90:29:24: d5:a8:70:0c:ca:a7:6b:36:49:6a:b2:b9:b6:87:e7:85:66:07: 0f:d3:9d:36:12:53:e1:31:32:ad:41:e7:18:6e:76:ec:d7:6e: b4:8e:58:51:df:06:16:d7:41:60:76:e6:2e:0e:d9:86:18:fa: 37:32:5c:42:6a:52:76:13:ab:61:be:4b:6d:d2:65:0d:ee:13: 3f:19:7d:9d:a1:77:b5:94:c4:e6:8d:42:70:01:52:7b:e4:a0: 55:27:aa:ed:b0:ea:37:1f:b2:a2:0c:bb:78:79:44:8f:04:b7: b5:6c:89:fa:82:0b:ed:93:74:39:66:54:d8:d7:3b:e8:6b:46: f7:89:73:44:c9:1e:92:6a:5a:82:99:49:c6:3d:67:01:5c:f6: 1d:15:95:bb:c6:2e:3d:4d:02:03:f8:e6:29:0b:08:c0:0e:89: 5e:b9:8b:42:13:cb:d0:dc:0c:80:ae:25:db:4b:b6:c7:f6:8c: 6e:94:c3:ab:18:f3:41:f4:42:62:16:a6:b5:d8:8b:de:8a:ee: 01:e5:2c:ce:d7:04:d9:2b:8f:34:ab:33:d2:6e:c0:19:13:63: 52:63:bf:c7:e0:24:19:f6:ba:d1:31:9e:21:99:59:54:04:72: d2:32:44:a6 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUOzBZldzoM2FBGYnhTl7+ln0VLdgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhM2VkMmIxNDgxYTFiOWZjZDFiM2RjM2ViZDI2ZTkwYTkw NGExOTJjMDc0NTVkYWQzZmE3ZjI2M2VlZTYwMjk3MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCK18W6ciBkItNurwZQVDetRYVt45iPMfJlwiTDMxO4j12p MBrxszZqcbImBC28aA7900zfcoacUNo4K2ZA8ECEv2TeD6GYC4/DSwPh4P4c9GVP 5y2f3+yF3rLjDI3a063cMtHyNe0lqq/S96OnAIPeAtk00vvD2szgu90Rfr33nuVA CtyBABZoZYK0TL+ahqobmDWyUa1CaXb8tytdcbB3dvN249QqDtyzgX6Yt8i0g4rI sofSNcamElaNjGLGN3lwFVDafNLVfkzbJWKGd7bMrbyfgDpY/3Ecd2RNAXXhSPyz 9NLOcVR8Ot1yyQT712cpIe3jomAzrt8ui6pVVv0FAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUTWNf7+4+tqhUr1h/FGDIiA08OGAwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2Q0NDVlNzI4LWQ0NGMtNDc1Ni1iNzVjLTg0YTE4NGE3M2ZjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBg9AMA0GCSqGSIb3DQEBCwUAA4IBAQBbwnYsQJ3KTgqK133BAY+QKSTV qHAMyqdrNklqsrm2h+eFZgcP0502ElPhMTKtQecYbnbs1260jlhR3wYW10FgduYu DtmGGPo3MlxCalJ2E6thvktt0mUN7hM/GX2doXe1lMTmjUJwAVJ75KBVJ6rtsOo3 H7KiDLt4eUSPBLe1bIn6ggvtk3Q5ZlTY1zvoa0b3iXNEyR6SalqCmUnGPWcBXPYd FZW7xi49TQID+OYpCwjADoleuYtCE8vQ3AyAriXbS7bH9oxulMOrGPNB9EJiFqa1 2Iveiu4B5SzO1wTZK480qzPSbsAZE2NSY7/H4CQZ9rrRMZ4hmVlUBHLSMkSm -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:44 2024 by rpki-client on console-fra.rpki-client.org