$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a89d9bd7-f94c-4343-8870-6fec23b2db0a.roa File: a89d9bd7-f94c-4343-8870-6fec23b2db0a.roa (raw, json) Hash identifier: xzPuj3WCAEEBqffuC2kFWOmYjUZjY/JBqewixbZotA8= Subject key identifier: 3B:1C:63:D4:74:19:2E:AD:52:82:07:AA:DC:E0:27:D5:00:FC:9C:BC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3254B8829B22AC8C662E9CE499FB68E17A4E4C93 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a89d9bd7-f94c-4343-8870-6fec23b2db0a.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5531::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:54:b8:82:9b:22:ac:8c:66:2e:9c:e4:99:fb:68:e1:7a:4e:4c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=6a23967f0d8781a0160dfec52fc412b178e85c3a82b9dff3aab5248650565899, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8c:5b:d8:43:3c:16:af:52:6f:76:44:68:e9: d3:48:a2:44:e6:17:ab:b2:f8:25:49:c6:0f:23:ee: 5a:c6:53:e5:dd:d4:40:25:8d:f5:e7:5d:bf:36:81: bc:1e:e1:f1:a2:44:3b:c4:43:7f:97:83:f7:c6:8a: dc:88:79:b1:18:33:39:eb:8f:12:86:7d:5b:e7:1d: ab:94:1c:8c:06:6f:25:8b:4d:2c:5b:69:57:dd:ae: 6e:83:6d:03:a0:b4:22:88:75:aa:91:a4:fc:0b:9e: c7:c6:3b:c3:2c:69:3b:6a:86:1b:e0:e9:a6:15:0b: 81:d1:82:4a:08:8e:b8:07:8c:a9:e2:1b:2f:b2:6c: 48:6a:ae:c5:42:bb:ce:9a:25:48:b1:66:20:7d:a6: c7:c8:e1:7c:da:e5:4b:83:53:f7:5b:2f:27:ec:24: ad:90:d7:e2:86:b2:a5:91:04:3d:d1:e6:2f:45:da: aa:7e:21:01:85:22:f4:b3:4d:4a:4e:ad:18:e7:b2: cb:ac:1e:21:2e:1b:41:03:09:e4:9f:4d:57:f7:75: 7d:04:11:db:92:31:36:83:f3:ef:23:51:99:cb:f2: 73:ef:d5:43:bf:44:2d:02:13:e5:be:1e:30:a7:1d: 93:2d:8b:97:fe:e6:ea:93:21:81:83:35:ba:e6:3e: ee:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1C:63:D4:74:19:2E:AD:52:82:07:AA:DC:E0:27:D5:00:FC:9C:BC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a89d9bd7-f94c-4343-8870-6fec23b2db0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5531::/48 Signature Algorithm: sha256WithRSAEncryption 6a:32:10:98:09:df:90:e5:a6:36:e5:e1:62:ad:08:11:6e:7b: 51:be:45:e0:88:da:42:92:af:a1:2e:6d:08:0d:8b:08:ce:65: 9d:3c:18:e5:a3:00:0c:37:28:0b:20:c6:ac:5f:c5:db:5f:1f: fb:e8:08:cc:c9:41:fc:c3:8e:c3:b5:27:ab:29:40:51:0a:72: f8:2f:7e:05:a8:2d:3f:50:74:bc:88:a1:e3:8a:4f:74:bd:97: 63:cc:a4:7d:98:65:54:95:cb:67:73:5c:9b:22:3b:55:51:bd: ac:a2:a3:cb:25:8f:f4:2c:a5:96:07:00:c3:63:23:6f:26:48: 01:43:31:af:9f:68:0f:82:f3:2a:f9:21:fa:42:43:f9:90:19: f0:0a:ea:7d:19:50:f5:f2:c8:61:6c:0f:ca:b5:1d:93:78:0a: bd:2e:01:a0:a2:81:9e:10:6b:2f:35:60:e8:7a:c8:79:f0:9b: e4:1b:e8:ce:e0:25:fb:ae:e1:53:a9:80:22:cf:57:68:73:39: e7:d3:62:98:0e:31:be:99:2c:ba:a6:48:43:ef:40:7a:7c:ab: 29:d3:f3:10:e7:bf:a1:36:19:e6:1e:ef:57:a8:9d:dc:f1:e3: 72:75:09:1a:c1:19:51:01:a5:d9:32:50:43:46:ac:00:a8:08: 41:87:d3:a1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMlS4gpsirIxmLpzkmfto4XpOTJMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTIzOTY3ZjBkODc4MWEwMTYwZGZlYzUyZmM0MTJiMTc4 ZTg1YzNhODJiOWRmZjNhYWI1MjQ4NjUwNTY1ODk5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKjFvYQzwWr1JvdkRo6dNIokTmF6uy+CVJxg8j7lrGU+Xd 1EAljfXnXb82gbwe4fGiRDvEQ3+Xg/fGityIebEYMznrjxKGfVvnHauUHIwGbyWL TSxbaVfdrm6DbQOgtCKIdaqRpPwLnsfGO8MsaTtqhhvg6aYVC4HRgkoIjrgHjKni Gy+ybEhqrsVCu86aJUixZiB9psfI4Xza5UuDU/dbLyfsJK2Q1+KGsqWRBD3R5i9F 2qp+IQGFIvSzTUpOrRjnssusHiEuG0EDCeSfTVf3dX0EEduSMTaD8+8jUZnL8nPv 1UO/RC0CE+W+HjCnHZMti5f+5uqTIYGDNbrmPu4RAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOxxj1HQZLq1Sggeq3OAn1QD8nLwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E4OWQ5YmQ3LWY5NGMtNDM0My04ODcwLTZmZWMyM2IyZGIwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVTEwDQYJKoZIhvcNAQELBQADggEBAGoyEJgJ35Dlpjbl4WKtCBFu e1G+ReCI2kKSr6EubQgNiwjOZZ08GOWjAAw3KAsgxqxfxdtfH/voCMzJQfzDjsO1 J6spQFEKcvgvfgWoLT9QdLyIoeOKT3S9l2PMpH2YZVSVy2dzXJsiO1VRvayio8sl j/QspZYHAMNjI28mSAFDMa+faA+C8yr5IfpCQ/mQGfAK6n0ZUPXyyGFsD8q1HZN4 Cr0uAaCigZ4Qay81YOh6yHnwm+Qb6M7gJfuu4VOpgCLPV2hzOefTYpgOMb6ZLLqm SEPvQHp8qynT8xDnv6E2GeYe71eondzx43J1CRrBGVEBpdkyUENGrACoCEGH06E= -----END CERTIFICATE-----Generated at Thu Nov 21 21:40:23 2024 by rpki-client on console-ams.rpki-client.org