$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/492df3c4-e0a9-4ee6-9ef4-ca6f96cceba1.roa File: 492df3c4-e0a9-4ee6-9ef4-ca6f96cceba1.roa (raw, json) Hash identifier: 4mZtgFx7b4c+jsQoiO6P6bQXH3w6fDoT0X88JSV/1/c= Subject key identifier: EA:EC:A3:BC:4B:8C:C7:81:F9:BF:53:E7:16:70:DB:42:B8:7E:21:11 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 03ABF773641550C9462321936DBF82B7D38117ED Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/492df3c4-e0a9-4ee6-9ef4-ca6f96cceba1.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f000::/24 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ab:f7:73:64:15:50:c9:46:23:21:93:6d:bf:82:b7:d3:81:17:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=db22b261ab6acb3ebb14ea1a257bdba96db978534391e0b41098f26cf7d79621, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c5:fe:3a:ee:f8:a5:3b:08:a4:64:c3:aa:d2: b4:3b:08:cb:c7:52:13:9a:05:a5:18:9a:ca:56:72: 7b:9e:c2:24:e2:72:72:d7:34:77:91:42:8a:82:fc: 66:1a:39:d0:a0:2a:7d:eb:f3:a7:c2:fd:62:bf:41: e8:60:7b:d4:c2:af:13:cb:ae:ce:5f:7d:c6:5c:ac: 3f:63:7d:92:03:f6:4c:97:a7:e2:71:25:e1:f0:69: 43:3a:37:12:af:55:95:6b:ba:07:b6:1d:6c:96:d3: 27:ec:6c:db:a2:05:d3:ca:f8:b2:f3:62:ab:aa:46: ac:c0:ac:7a:f3:a9:84:e5:1a:a4:5a:11:18:19:91: 8e:08:be:44:65:4b:34:9e:6a:ba:44:7a:11:2d:b1: f7:c1:f3:df:6d:da:91:29:cf:80:2b:29:ca:f9:13: 9b:07:e9:a8:84:a5:bb:e9:25:18:80:d6:e6:0c:4d: 6b:37:cd:e7:ed:c5:2d:b1:9e:bd:ee:52:e2:9f:b2: 9a:01:a0:68:ee:27:5c:3a:cc:75:4e:8d:13:8e:6b: a0:24:54:aa:b3:f7:5d:c6:34:08:94:93:f5:09:a2: c4:2b:65:b5:7b:30:82:0c:49:34:88:ae:55:d7:70: 15:c5:78:5d:4a:34:51:99:e8:d4:86:16:ea:ed:af: 34:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EC:A3:BC:4B:8C:C7:81:F9:BF:53:E7:16:70:DB:42:B8:7E:21:11 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/492df3c4-e0a9-4ee6-9ef4-ca6f96cceba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f000::/24 Signature Algorithm: sha256WithRSAEncryption 7d:7a:5d:61:9a:17:a4:ea:9c:b2:01:00:87:de:56:cf:dc:12: 90:e3:96:3a:10:f5:34:d0:52:d3:ff:fd:03:00:bc:b8:91:ce: f2:c8:f2:08:52:5a:ad:7e:ea:79:06:00:c0:21:e2:63:af:50: 91:f0:a1:2a:84:26:76:b1:8f:c8:59:b5:9b:74:93:e7:fd:f3: d2:dc:9a:fc:e4:4d:0f:b9:e5:37:0a:e4:1e:63:30:c9:48:e9: bd:08:07:4c:73:a1:48:ad:11:5c:bc:44:8a:fc:43:95:f5:45: 0e:54:f5:7a:59:1b:af:cb:1d:be:c0:0e:61:04:ab:d5:df:75: e4:f4:2a:63:cb:2c:23:74:e0:1c:cd:0e:50:6d:e8:0a:a3:a4: 96:5d:92:02:3b:f8:92:04:51:8b:71:56:67:5f:62:f6:b2:1d: e8:a9:9e:27:23:e6:cc:1b:2a:ae:8a:f7:6a:2b:f4:c3:7b:35: 59:63:73:8e:aa:7e:b7:ab:85:cd:eb:a0:2f:51:91:9a:0b:9e: 97:79:a0:e4:bd:63:2d:b2:20:25:bb:ed:ca:53:ff:4f:1d:9e: ef:03:17:87:55:50:7b:a1:02:5b:a8:c7:25:3f:b4:ec:88:bb: f4:d5:18:b6:95:38:f5:23:e4:ea:29:c5:fc:aa:03:2e:58:83: 90:f7:23:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA6v3c2QVUMlGIyGTbb+Ct9OBF+0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMTE5MDAwMDAwWhcNMjQxMjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjIyYjI2MWFiNmFjYjNlYmIxNGVhMWEyNTdiZGJhOTZk Yjk3ODUzNDM5MWUwYjQxMDk4ZjI2Y2Y3ZDc5NjIxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDxf467vilOwikZMOq0rQ7CMvHUhOaBaUYmspWcnuewiTi cnLXNHeRQoqC/GYaOdCgKn3r86fC/WK/Qehge9TCrxPLrs5ffcZcrD9jfZID9kyX p+JxJeHwaUM6NxKvVZVruge2HWyW0yfsbNuiBdPK+LLzYquqRqzArHrzqYTlGqRa ERgZkY4IvkRlSzSearpEehEtsffB899t2pEpz4ArKcr5E5sH6aiEpbvpJRiA1uYM TWs3zeftxS2xnr3uUuKfspoBoGjuJ1w6zHVOjROOa6AkVKqz913GNAiUk/UJosQr ZbV7MIIMSTSIrlXXcBXFeF1KNFGZ6NSGFurtrzRDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6uyjvEuMx4H5v1PnFnDbQrh+IREwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQ5MmRmM2M0LWUwYTktNGVlNi05ZWY0LWNhNmY5NmNjZWJhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC MAYDBAAmAPAwDQYJKoZIhvcNAQELBQADggEBAH16XWGaF6TqnLIBAIfeVs/cEpDj ljoQ9TTQUtP//QMAvLiRzvLI8ghSWq1+6nkGAMAh4mOvUJHwoSqEJnaxj8hZtZt0 k+f989LcmvzkTQ+55TcK5B5jMMlI6b0IB0xzoUitEVy8RIr8Q5X1RQ5U9XpZG6/L Hb7ADmEEq9XfdeT0KmPLLCN04BzNDlBt6AqjpJZdkgI7+JIEUYtxVmdfYvayHeip nicj5swbKq6K92or9MN7NVljc46qfrerhc3roC9RkZoLnpd5oOS9Yy2yICW77cpT /08dnu8DF4dVUHuhAluoxyU/tOyIu/TVGLaVOPUj5OopxfyqAy5Yg5D3I6g= -----END CERTIFICATE-----Generated at Thu Nov 21 21:03:25 2024 by rpki-client on console-fra.rpki-client.org