$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/05ba86c2-dd51-4120-a2dd-2ff87874fa66.roa File: 05ba86c2-dd51-4120-a2dd-2ff87874fa66.roa (raw, json) Hash identifier: E2IL918hAiLx/iCCdXqPbXIdmEEtEjfLkHLFXGcrSkE= Subject key identifier: 2A:B1:E3:35:08:A2:4D:F0:A9:31:11:97:6F:86:B1:1B:9B:40:C8:98 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 310C08F3D03166413E916BDB82D7D65D1B7F065F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/05ba86c2-dd51-4120-a2dd-2ff87874fa66.roa Signing time: Thu 14 Nov 2024 00:00:00 +0000 ROA not before: Thu 14 Nov 2024 00:00:00 +0000 ROA not after: Thu 19 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:ea00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0c:08:f3:d0:31:66:41:3e:91:6b:db:82:d7:d6:5d:1b:7f:06:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 14 00:00:00 2024 GMT Not After : Dec 19 23:59:59 2024 GMT Subject: serialNumber=38a8137526cd5b65b0f98feb507a30321d18a9c41019459f65111966401c4cfd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:ba:a6:bd:d6:60:83:fd:b3:e8:37:bf:ba: 27:0c:03:e1:73:54:d6:0f:03:0c:c2:90:f2:26:30: ef:03:6c:8d:dc:5a:4b:34:36:fa:51:5b:cf:e2:9c: 8d:cb:e9:22:d4:0c:1c:d0:f8:36:cb:6e:5f:42:b6: f4:30:d0:0c:fa:c5:05:c7:3e:73:d8:38:77:86:d1: b3:13:85:04:85:9f:01:50:10:da:42:53:1c:c0:78: 92:94:e6:a4:2a:98:1d:4b:da:24:e6:83:8c:d9:29: 97:25:2b:39:c3:a7:d0:04:3a:0a:d6:5c:c4:9e:d5: 82:0c:f4:8a:f4:e2:23:ff:5f:82:87:ee:18:ea:51: 98:15:ba:80:90:b1:e2:25:e7:7d:03:01:63:8e:9d: 0d:c6:66:04:86:0c:98:16:75:b2:05:11:b5:a3:12: 4d:c9:4a:e0:37:50:fb:01:4e:dc:31:d4:6e:3f:52: 43:f3:21:cb:72:c5:38:20:24:f1:ee:21:ef:85:cf: 6b:73:4e:f1:45:73:80:f5:5e:cf:be:f9:69:79:3b: c4:2b:f2:e1:e6:fa:0e:e5:5f:e1:6d:45:2d:6b:07: 01:2c:25:f8:59:6c:e4:ca:8e:44:69:f1:55:1a:1c: b6:9c:ea:5e:44:b7:b2:ea:1f:b5:48:a2:7d:c1:c2: 06:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B1:E3:35:08:A2:4D:F0:A9:31:11:97:6F:86:B1:1B:9B:40:C8:98 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/05ba86c2-dd51-4120-a2dd-2ff87874fa66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ea00::/40 Signature Algorithm: sha256WithRSAEncryption 9a:81:4b:f3:cd:97:e8:81:bb:02:11:03:55:b5:e5:72:68:a3: 04:d3:2a:f3:e6:a5:04:8e:9b:46:03:43:ec:33:84:b6:a9:4d: ac:bc:5e:92:7a:c0:8c:3e:3f:b3:b9:85:29:b6:c6:99:1b:75: 23:18:6e:df:68:de:39:01:58:6b:6e:48:fb:2a:9a:bc:32:56: 88:58:fd:64:bb:04:3e:83:7e:73:d1:a3:8c:0a:df:52:b9:75: fd:77:e8:07:f7:dd:66:a5:5b:b4:00:0a:9b:01:05:53:cf:06: 60:70:66:83:78:bf:6d:69:0a:9a:c5:bf:1a:6f:56:87:4d:2f: 45:88:24:b5:c5:c0:58:e6:3b:88:57:26:53:40:5b:a6:8c:0c: cb:65:7a:1f:10:c6:f5:af:fb:d9:ad:99:d6:a5:23:02:db:fe: a1:81:2e:50:a8:c1:12:db:f4:09:41:65:fe:d2:fd:69:ff:55: 93:59:65:8e:41:6d:d3:d7:8a:57:55:78:f0:43:fd:17:f1:64: 6f:ae:cc:dc:9e:2f:c5:19:6a:92:5f:96:a7:8d:5e:a9:ae:fc: 68:7d:0e:2e:f4:7b:8d:f1:a9:8b:ba:55:28:06:1e:09:63:70: 0c:e3:00:e0:fa:5b:27:a1:86:ce:20:64:e0:52:80:1b:1c:6d: 67:80:3a:18 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMQwI89AxZkE+kWvbgtfWXRt/Bl8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMTE0MDAwMDAwWhcNMjQxMjE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOGE4MTM3NTI2Y2Q1YjY1YjBmOThmZWI1MDdhMzAzMjFk MThhOWM0MTAxOTQ1OWY2NTExMTk2NjQwMWM0Y2ZkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC7rqmvdZgg/2z6De/uicMA+FzVNYPAwzCkPImMO8DbI3c Wks0NvpRW8/inI3L6SLUDBzQ+DbLbl9CtvQw0Az6xQXHPnPYOHeG0bMThQSFnwFQ ENpCUxzAeJKU5qQqmB1L2iTmg4zZKZclKznDp9AEOgrWXMSe1YIM9Ir04iP/X4KH 7hjqUZgVuoCQseIl530DAWOOnQ3GZgSGDJgWdbIFEbWjEk3JSuA3UPsBTtwx1G4/ UkPzIctyxTggJPHuIe+Fz2tzTvFFc4D1Xs+++Wl5O8Qr8uHm+g7lX+FtRS1rBwEs JfhZbOTKjkRp8VUaHLac6l5Et7LqH7VIon3BwgbPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUKrHjNQiiTfCpMRGXb4axG5tAyJgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzA1YmE4NmMyLWRkNTEtNDEyMC1hMmRkLTJmZjg3ODc0ZmE2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76jANBgkqhkiG9w0BAQsFAAOCAQEAmoFL882X6IG7AhEDVbXlcmij BNMq8+alBI6bRgND7DOEtqlNrLxeknrAjD4/s7mFKbbGmRt1Ixhu32jeOQFYa25I +yqavDJWiFj9ZLsEPoN+c9GjjArfUrl1/XfoB/fdZqVbtAAKmwEFU88GYHBmg3i/ bWkKmsW/Gm9Wh00vRYgktcXAWOY7iFcmU0BbpowMy2V6HxDG9a/72a2Z1qUjAtv+ oYEuUKjBEtv0CUFl/tL9af9Vk1lljkFt09eKV1V48EP9F/Fkb67M3J4vxRlqkl+W p41eqa78aH0OLvR7jfGpi7pVKAYeCWNwDOMA4PpbJ6GGziBk4FKAGxxtZ4A6GA== -----END CERTIFICATE-----Generated at Thu Nov 21 21:40:23 2024 by rpki-client on console-ams.rpki-client.org