$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/639cf60f-b659-495a-ad4a-265220ddbe5d.roa File: 639cf60f-b659-495a-ad4a-265220ddbe5d.roa (raw, json) Hash identifier: ytADzVn1Mcn8BUNbJNyEnPfErIArjK6Wpr+zq4lmPgI= Subject key identifier: 1C:8C:91:DF:29:A5:66:EF:97:9F:A6:72:81:52:A3:AB:EA:4A:D3:AF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 299210E0365DAD094386043F69AE0DA3DDA2E9CB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/639cf60f-b659-495a-ad4a-265220ddbe5d.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:551b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:92:10:e0:36:5d:ad:09:43:86:04:3f:69:ae:0d:a3:dd:a2:e9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=bc1c0c82ea4eb52e21470f20e707ffb26ebe36390669551fc2a8f935324016df, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:b9:13:2d:57:d2:80:af:f4:85:7d:a4:87: 63:ce:69:b5:a3:a1:2b:d6:64:4c:2d:b1:f3:55:50: 05:72:a4:9c:1d:e9:ad:4c:0f:f3:48:2c:02:d7:af: 5f:ff:99:ab:9b:1e:f4:2b:09:c9:dc:ec:2a:20:fd: 46:74:b6:69:75:33:dd:9b:05:bf:34:37:a9:32:d9: d7:32:3a:e8:ea:c7:ad:dc:73:2b:71:08:94:55:18: 4f:2f:c6:9e:ee:93:ab:62:ea:45:77:17:a5:1a:7a: 3d:e4:cf:38:f4:61:80:d9:de:9e:78:94:cf:c1:03: 76:e9:bd:ce:d3:0f:1e:a6:5b:0d:46:20:f6:76:91: 9b:ff:c4:15:02:6d:40:fc:d3:ca:45:fc:c1:5f:0e: 0d:1f:0f:28:cc:08:64:e5:1f:35:b0:c0:f1:60:77: 2d:0e:00:ae:dc:be:ab:51:b6:46:fa:a9:61:58:aa: 7e:45:1f:f4:1a:eb:c1:a8:0e:58:87:7f:51:3e:3d: 80:86:c7:c8:44:11:66:fa:22:e4:38:e0:d9:33:13: 15:d9:39:40:b8:46:08:77:07:e8:28:03:bc:69:dd: 57:f6:48:48:c7:45:a0:1e:84:37:ba:11:16:df:cc: bd:da:f7:b8:2e:93:09:c5:6b:8c:fd:f1:25:88:a8: 2d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8C:91:DF:29:A5:66:EF:97:9F:A6:72:81:52:A3:AB:EA:4A:D3:AF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/639cf60f-b659-495a-ad4a-265220ddbe5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:551b::/48 Signature Algorithm: sha256WithRSAEncryption 85:7f:3b:e2:b6:c5:86:27:dc:86:a1:16:34:8c:87:38:b8:a8: dc:29:96:3e:ce:52:92:3d:d1:42:12:89:86:ba:e1:29:67:c4: c1:26:fc:22:0b:8c:2c:81:06:ba:00:05:39:9b:5e:24:75:f2: f8:41:3b:d7:fc:c0:27:6c:ff:99:71:9e:3b:d8:99:c0:af:c3: 3b:2f:05:06:a2:e7:d4:74:d9:c6:65:dc:bf:15:ae:d1:69:97: 54:97:53:1f:1f:a1:ba:a1:76:3f:87:36:fa:b4:38:69:68:98: 0b:98:79:03:d7:3d:10:13:ee:2a:18:68:c5:49:bd:21:d2:7e: e8:9e:e8:98:9d:f8:f0:03:e8:34:ae:35:ef:bb:e0:db:b5:74: 2f:e3:5f:89:e4:e7:c3:74:83:0a:d1:8e:e5:be:96:18:b7:9a: 06:a7:47:fa:cf:ba:6e:b6:45:70:90:5f:8f:eb:ea:78:fd:5d: 0b:73:f1:48:c4:12:4c:3a:ee:84:22:4d:85:e9:46:e5:2c:02: 88:61:8c:87:9b:a7:9d:04:f4:44:17:bf:6c:35:6c:10:f1:d9: ae:77:03:84:f9:72:ba:65:85:52:56:14:a5:de:4a:e6:ce:ec: cd:cd:77:83:8c:e4:a9:fd:80:4e:41:9e:f8:23:89:3d:9a:18: 19:ea:ca:39 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKZIQ4DZdrQlDhgQ/aa4No92i6cswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzFjMGM4MmVhNGViNTJlMjE0NzBmMjBlNzA3ZmZiMjZl YmUzNjM5MDY2OTU1MWZjMmE4ZjkzNTMyNDAxNmRmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3grkTLVfSgK/0hX2kh2POabWjoSvWZEwtsfNVUAVypJwd 6a1MD/NILALXr1//maubHvQrCcnc7Cog/UZ0tml1M92bBb80N6ky2dcyOujqx63c cytxCJRVGE8vxp7uk6ti6kV3F6Uaej3kzzj0YYDZ3p54lM/BA3bpvc7TDx6mWw1G IPZ2kZv/xBUCbUD808pF/MFfDg0fDyjMCGTlHzWwwPFgdy0OAK7cvqtRtkb6qWFY qn5FH/Qa68GoDliHf1E+PYCGx8hEEWb6IuQ44NkzExXZOUC4Rgh3B+goA7xp3Vf2 SEjHRaAehDe6ERbfzL3a97gukwnFa4z98SWIqC3LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHIyR3ymlZu+Xn6ZygVKjq+pK068wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzYzOWNmNjBmLWI2NTktNDk1YS1hZDRhLTI2NTIyMGRkYmU1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRswDQYJKoZIhvcNAQELBQADggEBAIV/O+K2xYYn3IahFjSMhzi4 qNwplj7OUpI90UISiYa64SlnxMEm/CILjCyBBroABTmbXiR18vhBO9f8wCds/5lx njvYmcCvwzsvBQai59R02cZl3L8VrtFpl1SXUx8fobqhdj+HNvq0OGlomAuYeQPX PRAT7ioYaMVJvSHSfuie6Jid+PAD6DSuNe+74Nu1dC/jX4nk58N0gwrRjuW+lhi3 mganR/rPum62RXCQX4/r6nj9XQtz8UjEEkw67oQiTYXpRuUsAohhjIebp50E9EQX v2w1bBDx2a53A4T5crplhVJWFKXeSubO7M3Nd4OM5Kn9gE5BnvgjiT2aGBnqyjk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:03:25 2024 by rpki-client on console-fra.rpki-client.org