$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/824ac83b-b484-4c86-91ba-4445f42ddf35.roa File: 824ac83b-b484-4c86-91ba-4445f42ddf35.roa (raw, json) Hash identifier: 72halndVdoSQw1Rj/wHuO7o2r27IDOvLa/yjyZCLa7s= Subject key identifier: 6E:8D:CB:F6:23:E9:8A:3C:61:E0:F7:EB:1C:30:26:EE:4D:27:70:6B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2FA02535C1943E5B846D1C7EAF9F11D5DD3C96A0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/824ac83b-b484-4c86-91ba-4445f42ddf35.roa Signing time: Sat 07 Sep 2024 00:00:00 +0000 ROA not before: Sat 07 Sep 2024 00:00:00 +0000 ROA not after: Sat 12 Oct 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Sep 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a0:25:35:c1:94:3e:5b:84:6d:1c:7e:af:9f:11:d5:dd:3c:96:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 7 00:00:00 2024 GMT Not After : Oct 12 23:59:59 2024 GMT Subject: serialNumber=27c17d8f8cc9e161802220425f5a48fdcfb80dcc3ae13e456ac5581f2fda8600, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ae:96:72:2b:7e:41:82:7e:84:26:20:e4:d4: e4:7a:aa:29:12:dd:fd:a5:dd:e0:62:1d:82:bc:5c: fb:6f:2e:96:71:10:e5:89:84:76:95:56:3f:ae:55: 66:11:10:81:d6:f4:7e:e2:dc:d5:67:14:bb:1d:5a: 6c:03:aa:0a:23:d0:b6:58:ab:55:b4:24:5e:26:c6: 90:3a:4d:09:3a:a0:b2:91:8d:da:4a:7d:98:69:30: 71:a5:d4:9d:04:d6:50:a8:db:d6:70:f5:5f:24:dd: ed:f2:70:02:7c:fa:33:02:6f:3f:b8:ca:eb:f5:d1: 69:d9:49:f2:af:f4:5d:a3:88:09:d7:43:3f:e1:d4: 46:1e:57:79:96:d0:6d:8c:0f:0d:6e:2e:d0:cd:bf: 6f:45:69:24:53:bb:96:36:d9:b4:13:23:43:12:e5: 8e:ca:7e:21:39:40:2b:7a:27:23:b4:b4:a8:df:75: 48:c8:4d:e0:68:fc:33:6f:5e:20:72:cb:5e:c9:21: 10:65:af:c0:50:4e:e0:fb:3e:3c:9e:4b:e4:5e:36: 0a:e0:b3:92:e6:94:94:9e:17:de:cf:f2:41:f0:93: 47:30:86:f9:19:ac:bc:aa:64:2d:ac:2b:b4:e5:62: 2e:ff:85:ce:cf:29:78:a9:51:9f:a3:51:6e:74:80: 16:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8D:CB:F6:23:E9:8A:3C:61:E0:F7:EB:1C:30:26:EE:4D:27:70:6B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/824ac83b-b484-4c86-91ba-4445f42ddf35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:88::/48 Signature Algorithm: sha256WithRSAEncryption 65:ba:15:26:d8:a6:15:1c:f9:f0:64:e0:6d:f8:13:06:ed:49: 2c:6a:b2:6d:29:3f:cd:ac:c2:b3:9b:b9:a2:95:90:1a:ec:cf: 87:ab:6d:f7:e2:b7:9f:81:c4:27:51:b5:5f:1e:50:e4:70:f8: 6f:10:0b:eb:56:09:44:43:76:5a:50:1d:fb:75:07:c4:1c:82: 29:fa:21:72:7b:c1:8f:c5:24:3f:7c:93:7c:c2:3f:20:f9:53: 81:3b:07:ba:bb:a6:8b:e7:ae:62:3f:08:60:2a:22:e1:70:0c: 7d:56:43:fe:05:53:7f:a7:dd:91:40:ee:e4:20:52:7e:18:71: 8f:84:cd:c2:9e:0c:d6:cd:7c:9f:2e:a6:90:7f:0f:c0:b8:da: ae:05:ba:56:bc:9d:0b:fa:15:89:c6:89:7c:33:52:ea:ef:75: 86:73:ab:07:1f:88:d8:68:f2:10:bb:79:23:f4:6d:e8:b0:c3: 7b:40:e9:52:23:c0:1f:44:b8:6d:47:54:d2:f0:1a:72:28:cf: 5b:fb:08:58:8f:34:bd:26:37:3d:44:7a:c8:8c:7a:17:cc:d5: 15:4f:78:cc:37:13:ce:61:28:cc:4f:0d:88:81:d6:67:4b:b4: 86:86:14:b3:c2:9e:1f:f7:c3:62:ce:46:92:3b:63:e4:74:0f: 2b:e4:df:6b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUL6AlNcGUPluEbRx+r58R1d08lqAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQwOTA3MDAwMDAwWhcNMjQxMDEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyN2MxN2Q4ZjhjYzllMTYxODAyMjIwNDI1ZjVhNDhmZGNm YjgwZGNjM2FlMTNlNDU2YWM1NTgxZjJmZGE4NjAwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSrpZyK35Bgn6EJiDk1OR6qikS3f2l3eBiHYK8XPtvLpZx EOWJhHaVVj+uVWYREIHW9H7i3NVnFLsdWmwDqgoj0LZYq1W0JF4mxpA6TQk6oLKR jdpKfZhpMHGl1J0E1lCo29Zw9V8k3e3ycAJ8+jMCbz+4yuv10WnZSfKv9F2jiAnX Qz/h1EYeV3mW0G2MDw1uLtDNv29FaSRTu5Y22bQTI0MS5Y7KfiE5QCt6JyO0tKjf dUjITeBo/DNvXiByy17JIRBlr8BQTuD7PjyeS+ReNgrgs5LmlJSeF97P8kHwk0cw hvkZrLyqZC2sK7TlYi7/hc7PKXipUZ+jUW50gBYPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbo3L9iPpijxh4PfrHDAm7k0ncGswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzgyNGFjODNiLWI0ODQtNGM4Ni05MWJhLTQ0NDVmNDJkZGYzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAIgwDQYJKoZIhvcNAQELBQADggEBAGW6FSbYphUc+fBk4G34Ewbt SSxqsm0pP82swrObuaKVkBrsz4erbffit5+BxCdRtV8eUORw+G8QC+tWCURDdlpQ Hft1B8Qcgin6IXJ7wY/FJD98k3zCPyD5U4E7B7q7povnrmI/CGAqIuFwDH1WQ/4F U3+n3ZFA7uQgUn4YcY+EzcKeDNbNfJ8uppB/D8C42q4Fula8nQv6FYnGiXwzUurv dYZzqwcfiNho8hC7eSP0beiww3tA6VIjwB9EuG1HVNLwGnIoz1v7CFiPNL0mNz1E esiMehfM1RVPeMw3E85hKMxPDYiB1mdLtIaGFLPCnh/3w2LORpI7Y+R0Dyvk32s= -----END CERTIFICATE-----Generated at Sat Sep 7 01:39:45 2024 by rpki-client on console-ams.rpki-client.org