$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0540ca01-8952-4aed-9627-bff6189a117a.roa File: 0540ca01-8952-4aed-9627-bff6189a117a.roa (raw, json) Hash identifier: ldzJ3c/9hF50DgeYkTUDErPDa0lsJcMOkqL1DZRHTFQ= Subject key identifier: C0:80:24:77:36:A0:B1:65:99:2B:C7:76:03:60:3D:2A:E4:5D:E5:67 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 05AE7D9035CD7D5BAF5FB25A22E53FB29FD7E8A1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0540ca01-8952-4aed-9627-bff6189a117a.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5529::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ae:7d:90:35:cd:7d:5b:af:5f:b2:5a:22:e5:3f:b2:9f:d7:e8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=00e7c0677257539d72b0fe952d3b374226df86c22578b9e73109362b620764d5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:95:62:43:f9:ad:a6:9a:dd:a1:7b:0e:b4: a6:12:4b:bf:dd:1a:0d:0a:05:00:5e:c5:e2:36:d9: bf:9e:65:cf:21:52:d1:bb:4b:ac:9e:14:1e:77:95: 31:97:39:89:f4:be:0a:b7:4e:7f:27:ad:85:c4:7b: b4:09:8e:e5:7a:34:4c:8d:bf:81:e7:d9:08:7f:9d: 3d:42:77:ad:3c:78:15:8f:97:ba:5c:c7:04:5a:a5: bc:a0:23:c2:b1:8e:f8:d1:8a:ac:58:81:bf:6e:fe: 25:83:00:ed:3d:21:c6:4d:cb:9b:77:e1:db:b5:1d: 15:7f:04:22:c0:17:3d:fd:88:12:0f:44:36:2a:4f: 11:13:2f:81:72:2e:39:18:4d:35:6f:92:5e:1d:1f: 67:16:66:d2:a6:c3:c2:94:c7:3f:d4:51:e9:48:7d: fb:82:f5:d2:94:cf:28:c1:2b:cc:2e:c4:de:0c:ed: eb:d9:26:21:48:4f:5a:23:96:d2:92:d0:a1:1b:ad: 75:d4:ae:12:c7:58:5f:42:1a:b6:02:cd:bc:fe:db: b5:85:14:d9:01:07:09:d5:60:10:b7:08:44:9e:55: be:f5:b8:e4:06:3b:10:ba:79:54:a0:6a:19:4d:46: 7e:79:d6:dc:96:bc:ad:45:17:9b:70:4c:0c:c8:0b: 13:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:80:24:77:36:A0:B1:65:99:2B:C7:76:03:60:3D:2A:E4:5D:E5:67 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0540ca01-8952-4aed-9627-bff6189a117a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5529::/48 Signature Algorithm: sha256WithRSAEncryption 61:47:4a:fa:4b:94:04:10:99:62:86:0f:a0:7a:81:6e:6d:33: 46:3f:70:94:d8:ef:ac:fb:82:f3:43:70:78:25:e5:29:d7:fb: 9e:5f:cd:d6:5f:43:fa:85:49:45:95:79:f2:f5:fa:a6:be:dc: f7:2b:63:e9:88:7e:5e:a2:d7:7d:30:29:1e:21:fc:39:4e:64: bc:f1:55:b9:c3:b9:b5:f2:a7:7c:ea:72:54:df:69:39:23:e4: 83:86:02:90:c1:fe:9a:5e:a5:94:2f:be:f8:17:24:94:90:a1: 74:23:28:a6:4f:82:82:8d:29:f0:71:3b:48:bc:31:48:9d:4a: c3:91:f4:14:f3:bb:d5:90:a7:8e:4d:8c:51:3c:08:5d:e8:cd: 2c:b1:42:32:64:5b:b2:ab:ff:39:d0:01:f5:7e:70:70:7b:83: 50:2b:f2:5d:42:d7:90:d1:3a:b2:69:1d:be:61:6f:8b:2e:64: db:ee:92:85:fa:3b:96:56:5d:f7:4b:0c:2c:f6:d2:0d:c2:aa: 97:b3:9d:ed:d5:f7:22:e9:c7:cc:f9:38:d9:82:ca:ff:58:d9: 2a:97:6d:a1:63:0a:37:9a:96:8a:37:6b:10:60:07:b5:2b:40: fc:d5:79:6a:01:39:5f:39:83:d2:b9:2b:5b:6f:c4:61:2b:aa: 0f:9c:9f:68 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBa59kDXNfVuvX7JaIuU/sp/X6KEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMGU3YzA2NzcyNTc1MzlkNzJiMGZlOTUyZDNiMzc0MjI2 ZGY4NmMyMjU3OGI5ZTczMTA5MzYyYjYyMDc2NGQ1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDQZViQ/mtpprdoXsOtKYSS7/dGg0KBQBexeI22b+eZc8h UtG7S6yeFB53lTGXOYn0vgq3Tn8nrYXEe7QJjuV6NEyNv4Hn2Qh/nT1Cd608eBWP l7pcxwRapbygI8KxjvjRiqxYgb9u/iWDAO09IcZNy5t34du1HRV/BCLAFz39iBIP RDYqTxETL4FyLjkYTTVvkl4dH2cWZtKmw8KUxz/UUelIffuC9dKUzyjBK8wuxN4M 7evZJiFIT1ojltKS0KEbrXXUrhLHWF9CGrYCzbz+27WFFNkBBwnVYBC3CESeVb71 uOQGOxC6eVSgahlNRn551tyWvK1FF5twTAzICxPtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwIAkdzagsWWZK8d2A2A9KuRd5WcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzA1NDBjYTAxLTg5NTItNGFlZC05NjI3LWJmZjYxODlhMTE3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVSkwDQYJKoZIhvcNAQELBQADggEBAGFHSvpLlAQQmWKGD6B6gW5t M0Y/cJTY76z7gvNDcHgl5SnX+55fzdZfQ/qFSUWVefL1+qa+3PcrY+mIfl6i130w KR4h/DlOZLzxVbnDubXyp3zqclTfaTkj5IOGApDB/ppepZQvvvgXJJSQoXQjKKZP goKNKfBxO0i8MUidSsOR9BTzu9WQp45NjFE8CF3ozSyxQjJkW7Kr/znQAfV+cHB7 g1Ar8l1C15DROrJpHb5hb4suZNvukoX6O5ZWXfdLDCz20g3Cqpezne3V9yLpx8z5 ONmCyv9Y2SqXbaFjCjealoo3axBgB7UrQPzVeWoBOV85g9K5K1tvxGErqg+cn2g= -----END CERTIFICATE-----Generated at Sun Nov 24 21:43:45 2024 by rpki-client on console-ams.rpki-client.org