$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/595ebfb9-e548-4d3e-9fa8-016973527359.roa File: 595ebfb9-e548-4d3e-9fa8-016973527359.roa (raw, json) Hash identifier: is47thb9BsclQGQSyHSwfeJ5tFYUQCXIOX1QBAzBBW8= Subject key identifier: 96:CA:27:73:CC:9C:DF:D2:E9:AC:E9:75:38:A9:35:9C:F1:75:59:BF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 41E0EC6ACFC827B355C647226CFC4EB0431B829A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/595ebfb9-e548-4d3e-9fa8-016973527359.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e0:ec:6a:cf:c8:27:b3:55:c6:47:22:6c:fc:4e:b0:43:1b:82:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=f164fd651ae23362a5ce63cfc1c5b78b1ff81a0e0056f9259077f47136456d2f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:99:21:11:eb:29:f4:72:bb:6a:28:39:74: e4:88:92:05:c6:91:a5:f6:ef:03:16:bc:6e:8a:32: 17:a0:4e:38:65:05:b4:01:27:85:ff:bb:a7:08:f4: 36:59:f5:67:cd:67:67:5f:86:a1:09:e6:35:ce:bf: 6f:03:00:26:fb:6f:40:e4:4c:ad:1d:5f:66:7a:f5: ba:00:8b:59:a8:3a:90:14:9f:16:b5:c9:75:6b:13: b3:9f:f4:4d:b1:e9:36:e1:54:91:0b:da:72:28:ac: bc:3f:1b:5f:cf:bf:b7:e1:67:51:7e:30:0b:86:9e: 2c:3d:54:4b:c3:99:ef:be:4d:5e:ea:e7:7c:ad:83: 0c:ee:a4:04:80:72:9e:8a:0f:3c:67:23:a2:6e:b9: f7:fa:a6:88:c8:4f:76:fa:a5:2e:cd:0e:f8:5f:e9: dc:66:cb:df:43:a8:7b:18:05:85:c8:59:5f:fe:d6: 54:7f:2f:42:f5:82:f6:82:7f:2f:fc:71:e7:c3:5c: 2d:d6:30:aa:c6:25:69:16:22:5f:a7:35:ca:18:e7: ef:19:c9:6d:f8:4f:b2:77:2b:06:41:aa:a0:fd:a1: 51:95:32:11:1e:0c:78:2f:91:65:f8:3e:e8:c9:c7: 31:18:9c:cb:64:91:7c:a3:5f:e3:ce:7a:be:32:b8: d9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CA:27:73:CC:9C:DF:D2:E9:AC:E9:75:38:A9:35:9C:F1:75:59:BF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/595ebfb9-e548-4d3e-9fa8-016973527359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:8000::/48 Signature Algorithm: sha256WithRSAEncryption 1c:85:d1:25:bb:11:21:84:28:83:ab:bf:b3:c5:34:e0:76:29: 64:66:12:10:d4:27:52:13:03:bd:d4:ec:d9:6d:f4:e1:92:e5: 7e:6e:94:af:26:d4:80:f6:52:ba:a7:e6:d5:0d:27:0e:17:af: e0:46:d4:0c:d9:55:02:fb:65:43:af:df:e9:44:73:f9:b2:d4: 36:81:8f:fc:dc:c4:ce:b7:9b:3f:1f:9e:22:02:59:9a:2f:4b: 0f:13:12:25:37:3d:bd:f7:bd:00:53:52:9f:14:9f:31:94:fe: 93:3f:11:ad:d6:eb:0e:2d:0a:53:48:f6:8c:b1:8b:f8:62:3e: 98:53:95:28:90:25:58:2d:aa:d6:20:cc:32:53:5e:45:3d:ef: 9e:98:60:e6:49:83:af:5d:87:14:e8:f6:2e:58:1a:1d:f4:f8: ba:4c:b4:38:a4:86:dd:ba:70:4b:ff:ff:f8:a5:74:fe:6a:3a: f2:9b:31:35:a5:53:2d:62:fd:d0:40:3c:e3:53:03:bf:00:ca: 59:44:37:10:c8:5a:6c:16:f6:cc:eb:cb:74:4b:4c:af:4f:72: 47:0e:51:4c:8b:2a:3c:e2:13:79:09:1f:c1:52:4a:12:0d:c1: 1f:54:38:64:c8:89:0b:95:9a:c2:d7:41:76:62:61:8d:0e:1a: 74:f7:bb:c9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQeDsas/IJ7NVxkcibPxOsEMbgpowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTY0ZmQ2NTFhZTIzMzYyYTVjZTYzY2ZjMWM1Yjc4YjFm ZjgxYTBlMDA1NmY5MjU5MDc3ZjQ3MTM2NDU2ZDJmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZnJkhEesp9HK7aig5dOSIkgXGkaX27wMWvG6KMhegTjhl BbQBJ4X/u6cI9DZZ9WfNZ2dfhqEJ5jXOv28DACb7b0DkTK0dX2Z69boAi1moOpAU nxa1yXVrE7Of9E2x6TbhVJEL2nIorLw/G1/Pv7fhZ1F+MAuGniw9VEvDme++TV7q 53ytgwzupASAcp6KDzxnI6Juuff6pojIT3b6pS7NDvhf6dxmy99DqHsYBYXIWV/+ 1lR/L0L1gvaCfy/8cefDXC3WMKrGJWkWIl+nNcoY5+8ZyW34T7J3KwZBqqD9oVGV MhEeDHgvkWX4PujJxzEYnMtkkXyjX+POer4yuNlnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlsonc8yc39LprOl1OKk1nPF1Wb8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU5NWViZmI5LWU1NDgtNGQzZS05ZmE4LTAxNjk3MzUyNzM1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwgAAwDQYJKoZIhvcNAQELBQADggEBAByF0SW7ESGEKIOrv7PFNOB2 KWRmEhDUJ1ITA73U7Nlt9OGS5X5ulK8m1ID2Urqn5tUNJw4Xr+BG1AzZVQL7ZUOv 3+lEc/my1DaBj/zcxM63mz8fniICWZovSw8TEiU3Pb33vQBTUp8UnzGU/pM/Ea3W 6w4tClNI9oyxi/hiPphTlSiQJVgtqtYgzDJTXkU9756YYOZJg69dhxTo9i5YGh30 +LpMtDikht26cEv///ildP5qOvKbMTWlUy1i/dBAPONTA78AyllENxDIWmwW9szr y3RLTK9PckcOUUyLKjziE3kJH8FSShINwR9UOGTIiQuVmsLXQXZiYY0OGnT3u8k= -----END CERTIFICATE-----Generated at Thu Nov 21 21:03:25 2024 by rpki-client on console-fra.rpki-client.org