$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/72315a24-c761-413a-bbc8-f8a1f5e41181.roa File: 72315a24-c761-413a-bbc8-f8a1f5e41181.roa (raw, json) Hash identifier: dAad5HlH0wXyC86uanxW4lKIZjLN3K/jpHnnSw5hgvY= Subject key identifier: DD:B1:64:40:00:EA:B6:C4:95:DF:DF:12:7D:7A:1E:46:36:E4:4E:05 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 23504F04BC3B578BDA457DCD4AB2E8D7E650F5C3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/72315a24-c761-413a-bbc8-f8a1f5e41181.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5535::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:50:4f:04:bc:3b:57:8b:da:45:7d:cd:4a:b2:e8:d7:e6:50:f5:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=74c6d3c6ae8be869276c1ea9d16518c189dcc40fb87446b70ca3e6c911971604, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:6c:fe:9f:ae:a2:e0:8b:5c:18:b2:24:9b: 1c:56:df:8a:4a:a1:e0:e9:0a:51:71:91:4c:42:9b: 59:71:84:46:5a:bd:bf:ee:0b:ea:ba:63:3f:4c:71: 54:c7:1e:3c:df:98:a3:0f:fe:0f:8b:ca:7d:42:d9: d9:60:77:e3:8e:ec:ac:27:be:d9:08:d9:63:0f:0b: 20:d0:3b:d4:9c:8b:ab:18:e9:a4:b3:2e:57:fd:20: 9a:c5:d7:64:17:a0:5b:bb:05:4c:c0:5e:d7:ae:05: c9:5c:a3:be:c3:62:12:db:f8:f1:5c:43:39:14:db: 01:b6:ce:32:8f:22:92:b4:f2:c6:84:28:ad:c3:e9: 0d:75:c5:04:85:37:eb:b4:ca:36:9b:b1:24:50:e6: 1f:51:23:40:5b:ba:c1:96:6f:f5:32:85:a4:0d:c6: b3:87:4b:34:6f:f9:59:86:49:eb:f7:76:d0:9d:23: 63:ea:67:93:5e:43:50:c3:6f:97:33:4b:c4:a1:33: c6:42:99:28:b9:dc:89:78:93:66:8a:d3:0f:4a:3c: 84:33:70:7c:b4:73:e6:1c:49:92:87:fa:6b:84:f9: e8:ec:ea:0c:3b:10:63:88:0a:cc:c5:0a:01:c0:96: d8:21:e2:b7:53:13:59:12:3d:b0:1b:10:ce:64:c8: a2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B1:64:40:00:EA:B6:C4:95:DF:DF:12:7D:7A:1E:46:36:E4:4E:05 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/72315a24-c761-413a-bbc8-f8a1f5e41181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5535::/48 Signature Algorithm: sha256WithRSAEncryption 0a:1f:2d:88:02:2c:38:b1:4e:50:91:05:af:16:bd:6e:1d:33: f3:54:0c:1f:d0:7f:00:99:bb:35:92:5d:78:0d:23:a3:81:9e: 7e:b9:b8:23:4e:44:67:f9:a4:c7:5f:e6:09:aa:a3:c1:1d:a3: 71:ab:d0:4b:11:28:62:1d:d6:15:af:59:28:5e:64:0f:e1:a9: 81:a9:9e:60:c1:4d:d9:ae:38:34:21:e6:fb:0d:25:1d:e8:e2: 7d:17:e7:ce:3d:00:89:a2:94:f0:c3:03:12:38:63:86:c9:71: f4:45:90:a7:ca:0a:90:80:83:8b:53:b9:a0:71:a4:e6:5b:87: a5:d4:6b:ee:60:ec:21:de:40:20:f9:67:8e:65:6c:88:99:57: e1:d1:b9:b2:af:0c:88:10:cf:85:b6:19:d2:c1:e8:f9:86:8a: b9:b5:13:dd:c6:d8:cb:79:e5:9c:31:5f:c4:17:48:a1:de:bc: 57:b5:5a:ed:59:23:3f:16:2d:05:a5:12:aa:6f:a7:97:d4:5f: 40:b0:c2:2e:6d:fb:cf:13:a3:32:4e:de:38:14:2e:a1:14:39: 43:1d:94:da:9c:c2:c8:d5:a3:44:80:c8:8d:f3:dd:a7:f3:77: 2b:97:26:5f:56:37:54:71:5d:48:11:8e:e0:bf:62:b0:01:73: d6:05:3d:44 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUI1BPBLw7V4vaRX3NSrLo1+ZQ9cMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NGM2ZDNjNmFlOGJlODY5Mjc2YzFlYTlkMTY1MThjMTg5 ZGNjNDBmYjg3NDQ2YjcwY2EzZTZjOTExOTcxNjA0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFK2z+n66i4ItcGLIkmxxW34pKoeDpClFxkUxCm1lxhEZa vb/uC+q6Yz9McVTHHjzfmKMP/g+Lyn1C2dlgd+OO7KwnvtkI2WMPCyDQO9Sci6sY 6aSzLlf9IJrF12QXoFu7BUzAXteuBclco77DYhLb+PFcQzkU2wG2zjKPIpK08saE KK3D6Q11xQSFN+u0yjabsSRQ5h9RI0BbusGWb/UyhaQNxrOHSzRv+VmGSev3dtCd I2PqZ5NeQ1DDb5czS8ShM8ZCmSi53Il4k2aK0w9KPIQzcHy0c+YcSZKH+muE+ejs 6gw7EGOICszFCgHAltgh4rdTE1kSPbAbEM5kyKK7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3bFkQADqtsSV398SfXoeRjbkTgUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcyMzE1YTI0LWM3NjEtNDEzYS1iYmM4LWY4YTFmNWU0MTE4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVTUwDQYJKoZIhvcNAQELBQADggEBAAofLYgCLDixTlCRBa8WvW4d M/NUDB/QfwCZuzWSXXgNI6OBnn65uCNORGf5pMdf5gmqo8Edo3Gr0EsRKGId1hWv WSheZA/hqYGpnmDBTdmuODQh5vsNJR3o4n0X5849AImilPDDAxI4Y4bJcfRFkKfK CpCAg4tTuaBxpOZbh6XUa+5g7CHeQCD5Z45lbIiZV+HRubKvDIgQz4W2GdLB6PmG irm1E93G2Mt55ZwxX8QXSKHevFe1Wu1ZIz8WLQWlEqpvp5fUX0Cwwi5t+88TozJO 3jgULqEUOUMdlNqcwsjVo0SAyI3z3afzdyuXJl9WN1RxXUgRjuC/YrABc9YFPUQ= -----END CERTIFICATE-----Generated at Sun Nov 24 21:43:45 2024 by rpki-client on console-ams.rpki-client.org