$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb5c39ae-6a57-4edd-8079-48a621d13ca3.roa File: bb5c39ae-6a57-4edd-8079-48a621d13ca3.roa (raw, json) Hash identifier: TVFbGuO7zHws9L3gJtABBW/WH9Y83LKG8X18uDct7wI= Subject key identifier: D5:BB:DB:88:0B:15:8E:72:33:C9:FC:C5:4D:8F:3A:F5:08:78:AF:B8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1236037420C713637638A50C6C04400A6D475391 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb5c39ae-6a57-4edd-8079-48a621d13ca3.roa Signing time: Mon 18 Nov 2024 00:00:00 +0000 ROA not before: Mon 18 Nov 2024 00:00:00 +0000 ROA not after: Mon 23 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:36:03:74:20:c7:13:63:76:38:a5:0c:6c:04:40:0a:6d:47:53:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 18 00:00:00 2024 GMT Not After : Dec 23 23:59:59 2024 GMT Subject: serialNumber=45b7ca665f90707924a8a9d8a19bec91756e38c8f300df54f8aa657b85174dfa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f8:09:59:9a:51:0c:cb:a1:f1:7a:25:f2:2d: b0:29:ba:25:31:3b:ab:0e:06:4a:8b:47:43:38:2b: c8:fe:56:28:a7:51:1f:11:11:ec:6b:08:02:01:83: 0a:4c:67:72:a9:ba:8a:a5:cd:b3:26:5e:68:f6:2a: 78:a6:25:0c:ef:07:3c:1f:85:36:3c:64:6b:5a:d0: a5:c0:ae:74:06:19:43:e4:6f:4c:fa:33:33:9b:25: c4:65:40:9d:1d:57:31:6f:e4:99:3b:f8:bf:50:c6: 10:f6:cc:82:0c:6d:0a:79:b2:5b:cd:64:2b:9f:ef: 32:a9:47:17:58:af:49:ae:79:76:25:65:a3:22:5b: 85:10:f1:ca:36:d6:a4:6a:94:6c:d5:17:4c:a1:63: db:34:fb:fd:de:31:6d:0e:e8:77:87:28:54:eb:12: 71:de:47:db:b0:5b:5a:84:b0:c9:f5:e4:14:00:5c: 2a:8a:e4:26:fd:21:7e:3d:4d:5e:1c:7d:8b:82:9a: a4:a9:d4:1f:0f:50:24:74:9b:4f:f2:af:08:74:06: 62:ea:38:77:20:8e:b1:d7:9e:bd:75:0e:d0:d1:b3: 70:97:dc:77:15:03:a5:68:b3:5c:87:2b:3a:8c:79: 8e:b4:62:bf:e7:3b:c6:b4:45:ec:5f:22:8e:f6:42: dd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BB:DB:88:0B:15:8E:72:33:C9:FC:C5:4D:8F:3A:F5:08:78:AF:B8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb5c39ae-6a57-4edd-8079-48a621d13ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:30::/44 Signature Algorithm: sha256WithRSAEncryption 27:13:47:62:b7:b8:46:8e:39:41:b7:bc:e7:3a:e5:00:73:ea: 7a:0e:e1:49:25:cd:56:ad:9d:83:db:62:88:40:53:47:cc:6a: 15:bd:79:d8:74:e6:85:93:01:2b:ce:34:52:4b:bf:1a:c7:60: c0:dc:f7:e6:6d:cf:1b:3b:20:71:f1:38:20:d7:46:f8:93:92: 1d:9a:4d:bb:16:3f:df:91:9b:d7:6f:27:43:05:73:f1:b2:b1: 60:18:15:d1:fc:d7:04:ad:ef:04:0d:1b:c6:55:55:b0:32:06: b0:09:63:69:1c:be:90:09:8d:d8:3d:01:cd:c9:59:3a:c6:c1: 5b:2f:a2:79:3d:91:f1:08:9d:f4:82:aa:9d:0e:3e:e6:f0:5c: e2:98:a2:00:d7:80:38:92:d9:82:85:0f:ed:ef:6d:dd:c0:ba: e0:34:5b:33:99:9a:ad:a7:89:18:00:83:29:5f:60:34:48:ce: cc:ce:96:50:63:10:db:45:01:23:51:e2:ae:75:35:20:74:77: f0:a4:74:ca:59:45:49:80:e8:7c:7c:86:2f:95:64:52:5b:9a: 97:fb:de:c9:3f:a9:36:83:f7:23:b1:1c:bd:ff:26:a6:56:7e: 29:d0:9e:bb:e7:10:59:59:06:c4:bd:02:d2:58:fb:33:5a:0b: d9:66:a1:1c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEjYDdCDHE2N2OKUMbARACm1HU5EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMTE4MDAwMDAwWhcNMjQxMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NWI3Y2E2NjVmOTA3MDc5MjRhOGE5ZDhhMTliZWM5MTc1 NmUzOGM4ZjMwMGRmNTRmOGFhNjU3Yjg1MTc0ZGZhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh+AlZmlEMy6HxeiXyLbApuiUxO6sOBkqLR0M4K8j+Viin UR8REexrCAIBgwpMZ3KpuoqlzbMmXmj2KnimJQzvBzwfhTY8ZGta0KXArnQGGUPk b0z6MzObJcRlQJ0dVzFv5Jk7+L9QxhD2zIIMbQp5slvNZCuf7zKpRxdYr0mueXYl ZaMiW4UQ8co21qRqlGzVF0yhY9s0+/3eMW0O6HeHKFTrEnHeR9uwW1qEsMn15BQA XCqK5Cb9IX49TV4cfYuCmqSp1B8PUCR0m0/yrwh0BmLqOHcgjrHXnr11DtDRs3CX 3HcVA6Vos1yHKzqMeY60Yr/nO8a0RexfIo72Qt11AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1bvbiAsVjnIzyfzFTY869Qh4r7gwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JiNWMzOWFlLTZhNTctNGVkZC04MDc5LTQ4YTYyMWQxM2NhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwADAwDQYJKoZIhvcNAQELBQADggEBACcTR2K3uEaOOUG3vOc65QBz 6noO4UklzVatnYPbYohAU0fMahW9edh05oWTASvONFJLvxrHYMDc9+Ztzxs7IHHx OCDXRviTkh2aTbsWP9+Rm9dvJ0MFc/GysWAYFdH81wSt7wQNG8ZVVbAyBrAJY2kc vpAJjdg9Ac3JWTrGwVsvonk9kfEInfSCqp0OPubwXOKYogDXgDiS2YKFD+3vbd3A uuA0WzOZmq2niRgAgylfYDRIzszOllBjENtFASNR4q51NSB0d/CkdMpZRUmA6Hx8 hi+VZFJbmpf73sk/qTaD9yOxHL3/JqZWfinQnrvnEFlZBsS9AtJY+zNaC9lmoRw= -----END CERTIFICATE-----Generated at Thu Nov 21 21:03:25 2024 by rpki-client on console-fra.rpki-client.org