$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8ce078c-41ac-4232-b21e-0c6171a80d4a.roa File: c8ce078c-41ac-4232-b21e-0c6171a80d4a.roa (raw, json) Hash identifier: MPqE7JaX5pnCKJalWCKeQVG0/ccPW6nNbgwq25Ae5P4= Subject key identifier: EC:75:C9:AF:6A:3E:B3:51:57:5C:EF:77:57:5E:EC:59:1B:3D:AD:5A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 19A5115C047B3FD06AFE68DE6386908924871CA0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8ce078c-41ac-4232-b21e-0c6171a80d4a.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:304::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a5:11:5c:04:7b:3f:d0:6a:fe:68:de:63:86:90:89:24:87:1c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=563f1502da08323f5993ea1fbb7a3195363e01a58e2eaf504d31b47e15d2941a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b5:d8:8a:e9:93:73:66:fc:3d:7e:7a:c9:a2: 0a:3c:8d:11:5b:52:b3:87:ba:7e:46:d2:74:10:38: ad:d1:ba:08:82:f6:e6:5e:92:5f:97:e5:54:60:34: e9:0d:5f:96:15:ad:e6:bb:36:46:9c:3a:35:f6:3a: 42:9d:c1:ad:af:a0:e0:22:3b:64:a3:23:97:75:c6: 60:91:f4:fc:30:ff:c1:d2:50:ad:55:95:f7:73:2d: b9:63:4a:fd:42:2d:b0:5a:4c:23:35:b3:d1:7b:07: 01:11:6e:c0:b1:99:14:f5:3e:7d:7d:16:4b:8b:52: 4d:eb:ea:8f:ae:69:0d:82:98:7f:63:05:b6:3f:d1: 11:98:79:ac:fd:37:2f:28:85:4a:0d:e1:1d:d6:b2: 9f:f1:96:30:18:bf:b9:48:a0:66:1d:49:66:2a:c9: 1a:0c:ec:1b:fa:05:b5:62:9e:a8:ac:8f:a9:ea:e1: f2:ee:ed:ab:8b:92:48:df:7b:c6:f4:d1:71:e3:ee: 0b:a3:bd:4c:58:95:d5:58:8c:3c:81:08:dc:be:f0: 62:69:52:37:3a:f4:c4:bc:92:12:f6:f2:88:d3:24: f3:d2:6f:15:76:38:c6:54:06:48:5c:ff:03:0f:0e: 48:4c:68:c8:ff:36:c7:56:64:ba:cd:12:1e:e8:b3: be:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:75:C9:AF:6A:3E:B3:51:57:5C:EF:77:57:5E:EC:59:1B:3D:AD:5A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8ce078c-41ac-4232-b21e-0c6171a80d4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:304::/48 Signature Algorithm: sha256WithRSAEncryption 96:e7:4e:40:e5:d1:99:4f:7f:72:98:f2:0a:d8:31:4c:61:48: 4c:4d:61:0a:f2:ab:9a:86:7c:ca:b2:8c:51:7c:66:cc:6c:a2: 44:6e:16:8d:eb:f6:81:a7:ea:af:a3:46:37:b7:8b:71:3f:c3: 51:c0:b7:8a:31:6b:c2:ba:05:45:59:eb:7b:79:2b:eb:79:da: 06:b0:55:ec:28:be:67:a3:58:c8:0d:e2:ff:0b:b8:60:e2:7d: 13:34:a8:9a:c7:dd:14:85:8e:0f:d5:3d:11:0a:1c:2b:1f:36: 56:15:e5:fc:34:21:be:d8:77:5c:a5:5d:c6:f6:4a:0c:46:95: 2a:ec:05:72:9b:ca:aa:11:1e:29:40:0a:5a:d3:5e:18:76:93: ee:b3:67:b0:1d:92:38:4c:ec:30:05:22:b1:54:82:1c:48:e2: a3:c7:86:47:99:3b:ec:4d:c6:8d:29:35:7b:fe:d6:d5:6e:bf: 22:c4:09:d7:eb:2d:4d:34:c1:1a:e9:4d:37:52:b4:3e:7b:56: cb:aa:d5:29:18:55:e8:67:d8:c0:5e:d8:77:c9:86:42:36:96: ac:e4:96:f4:0c:a1:ce:a8:c9:42:58:fc:dd:eb:30:e5:08:ec: ef:25:15:ea:e6:cb:5b:b6:1a:74:c1:05:b7:2f:9b:10:fa:93: 09:dd:06:0f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGaURXAR7P9Bq/mjeY4aQiSSHHKAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjNmMTUwMmRhMDgzMjNmNTk5M2VhMWZiYjdhMzE5NTM2 M2UwMWE1OGUyZWFmNTA0ZDMxYjQ3ZTE1ZDI5NDFhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTtdiK6ZNzZvw9fnrJogo8jRFbUrOHun5G0nQQOK3RugiC 9uZekl+X5VRgNOkNX5YVrea7NkacOjX2OkKdwa2voOAiO2SjI5d1xmCR9Pww/8HS UK1VlfdzLbljSv1CLbBaTCM1s9F7BwERbsCxmRT1Pn19FkuLUk3r6o+uaQ2CmH9j BbY/0RGYeaz9Ny8ohUoN4R3Wsp/xljAYv7lIoGYdSWYqyRoM7Bv6BbVinqisj6nq 4fLu7auLkkjfe8b00XHj7gujvUxYldVYjDyBCNy+8GJpUjc69MS8khL28ojTJPPS bxV2OMZUBkhc/wMPDkhMaMj/NsdWZLrNEh7os77FAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7HXJr2o+s1FXXO93V17sWRs9rVowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M4Y2UwNzhjLTQxYWMtNDIzMi1iMjFlLTBjNjE3MWE4MGQ0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAwQwDQYJKoZIhvcNAQELBQADggEBAJbnTkDl0ZlPf3KY8grYMUxh SExNYQryq5qGfMqyjFF8ZsxsokRuFo3r9oGn6q+jRje3i3E/w1HAt4oxa8K6BUVZ 63t5K+t52gawVewovmejWMgN4v8LuGDifRM0qJrH3RSFjg/VPREKHCsfNlYV5fw0 Ib7Yd1ylXcb2SgxGlSrsBXKbyqoRHilAClrTXhh2k+6zZ7AdkjhM7DAFIrFUghxI 4qPHhkeZO+xNxo0pNXv+1tVuvyLECdfrLU00wRrpTTdStD57Vsuq1SkYVehn2MBe 2HfJhkI2lqzklvQMoc6oyUJY/N3rMOUI7O8lFermy1u2GnTBBbcvmxD6kwndBg8= -----END CERTIFICATE-----Generated at Thu Nov 21 21:40:23 2024 by rpki-client on console-ams.rpki-client.org