$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa File: aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa (raw, json) Hash identifier: IiLCp63jxYYbQ2XmRA5Mmoq3mcbV3XS9QBixM92R4O8= Subject key identifier: F3:73:F6:EF:BC:88:9B:9C:34:CE:61:DB:90:8D:14:D6:00:B3:DC:4B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6A4BB856D23FE1FC676DACD66F94E58926119233 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa Signing time: Mon 30 Dec 2024 00:00:00 +0000 ROA not before: Mon 30 Dec 2024 00:00:00 +0000 ROA not after: Mon 03 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5502::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:4b:b8:56:d2:3f:e1:fc:67:6d:ac:d6:6f:94:e5:89:26:11:92:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Dec 30 00:00:00 2024 GMT Not After : Feb 3 23:59:59 2025 GMT Subject: serialNumber=91b3e97ec42b23317a2a0dddebff34fe823e664bd03dc88cd0d3d58278bdac85, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:27:22:6e:8c:50:5a:62:a6:06:f1:07:03: b6:c9:59:52:de:b7:d6:a4:17:a4:c5:6c:86:7c:e9: 8c:b0:05:c8:4b:d7:08:c3:9d:c1:b6:0c:86:de:02: 0f:08:89:db:ae:ba:c9:d7:50:14:dc:da:31:81:93: 44:54:44:a5:76:6d:7f:de:c8:95:58:d2:62:53:eb: d1:69:b7:0b:5f:de:97:b2:e4:a0:a6:04:bb:aa:f5: 5f:5e:a8:02:11:49:9f:66:96:04:bf:94:31:b6:8d: cf:8e:ff:a5:1a:56:13:dc:c0:9e:17:1d:81:b6:d2: 86:ab:31:2c:b7:3e:1e:bd:70:4b:c3:98:49:85:8a: c8:69:7f:9a:b7:9f:e1:8c:97:1f:28:55:c4:bb:3c: 63:bb:90:87:67:4e:23:18:47:68:bb:85:e2:eb:65: 1f:d3:8a:2e:3e:f0:2a:4a:04:fd:22:1e:04:6a:7b: 45:28:10:a8:b1:d9:a6:fd:bd:d6:2d:d3:c1:7d:d4: 44:5b:1a:49:91:03:38:f0:93:b8:2c:78:b5:4f:bb: 06:d9:96:25:be:c1:73:ba:52:a2:e1:cf:96:46:2a: b1:4b:c5:80:aa:33:ec:a8:d7:2b:d8:65:da:a8:e8: f1:e7:8e:2d:83:6f:6c:62:8c:a7:af:3d:9b:92:70: a4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:73:F6:EF:BC:88:9B:9C:34:CE:61:DB:90:8D:14:D6:00:B3:DC:4B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5502::/48 Signature Algorithm: sha256WithRSAEncryption 0e:26:16:56:8d:28:ff:77:59:cb:f8:b2:1d:4c:cd:45:2d:bb: 6c:dc:c2:1b:e7:c2:46:54:8d:89:e0:e7:88:2b:d7:50:29:49: 62:eb:1d:36:94:68:f3:b0:38:a6:1f:b9:db:1a:97:a9:89:9a: b6:dc:db:7b:d9:0a:6f:20:dc:a7:cb:33:56:63:82:7d:98:05: bb:f6:bc:6c:91:05:67:8c:de:1c:71:a7:4f:71:81:7a:b2:dd: 21:cb:cf:fb:2c:b1:37:16:4c:38:7f:18:93:5b:0d:d6:54:95: b9:fd:3e:e2:f5:84:07:34:2d:f8:49:65:b8:8a:b5:76:73:6e: 8c:1a:94:e3:e4:42:82:1e:6a:bf:02:77:c4:a1:1c:b2:24:18: 32:66:e2:27:b3:31:c3:70:cf:7e:19:8c:0b:4d:37:74:e5:b4: cc:f5:02:6d:fa:e4:f5:77:dd:62:df:b1:34:67:7f:94:be:71: 7e:80:94:70:b2:a6:c1:f3:41:51:f8:36:0f:da:ae:23:32:ee: db:dd:e9:20:08:7c:b8:d2:d9:f8:20:13:88:f9:3e:a5:7d:13: 4c:4b:84:b4:47:3e:1b:6e:53:9a:8b:8f:35:78:fd:99:4c:3e: 37:a0:cf:d2:b8:19:ef:8f:3d:98:c7:85:49:29:b3:37:ca:f2: 3e:be:af:53 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaku4VtI/4fxnbazWb5TliSYRkjMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMjMwMDAwMDAwWhcNMjUwMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MWIzZTk3ZWM0MmIyMzMxN2EyYTBkZGRlYmZmMzRmZTgy M2U2NjRiZDAzZGM4OGNkMGQzZDU4Mjc4YmRhYzg1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC13CciboxQWmKmBvEHA7bJWVLet9akF6TFbIZ86YywBchL 1wjDncG2DIbeAg8IiduuusnXUBTc2jGBk0RURKV2bX/eyJVY0mJT69Fptwtf3pey 5KCmBLuq9V9eqAIRSZ9mlgS/lDG2jc+O/6UaVhPcwJ4XHYG20oarMSy3Ph69cEvD mEmFishpf5q3n+GMlx8oVcS7PGO7kIdnTiMYR2i7heLrZR/Tii4+8CpKBP0iHgRq e0UoEKix2ab9vdYt08F91ERbGkmRAzjwk7gseLVPuwbZliW+wXO6UqLhz5ZGKrFL xYCqM+yo1yvYZdqo6PHnji2Db2xijKevPZuScKTdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU83P277yIm5w0zmHbkI0U1gCz3EswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FhZDI0YTJlLWY2MWItNDJiNC05NTA5LTllMDZhMTM2ZWIwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQIwDQYJKoZIhvcNAQELBQADggEBAA4mFlaNKP93Wcv4sh1MzUUt u2zcwhvnwkZUjYng54gr11ApSWLrHTaUaPOwOKYfudsal6mJmrbc23vZCm8g3KfL M1Zjgn2YBbv2vGyRBWeM3hxxp09xgXqy3SHLz/sssTcWTDh/GJNbDdZUlbn9PuL1 hAc0LfhJZbiKtXZzbowalOPkQoIear8Cd8ShHLIkGDJm4iezMcNwz34ZjAtNN3Tl tMz1Am365PV33WLfsTRnf5S+cX6AlHCypsHzQVH4Ng/ariMy7tvd6SAIfLjS2fgg E4j5PqV9E0xLhLRHPhtuU5qLjzV4/ZlMPjegz9K4Ge+PPZjHhUkpszfK8j6+r1M= -----END CERTIFICATE-----Generated at Fri Jan 17 21:21:57 2025 by rpki-client on console-ams.rpki-client.org