$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ed804db6-5545-4be5-b4e5-7250d47a3778.roa File: ed804db6-5545-4be5-b4e5-7250d47a3778.roa (raw, json) Hash identifier: VSag7GyRYBbR1cipSD01PfcOUmSPfU1ls8hoLMrUdcM= Subject key identifier: D1:77:82:4D:1E:F8:62:EA:E5:08:B7:17:51:AF:00:51:F2:D0:91:29 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4DF8027343A8A3F16C34DAC1BF990F5BB834BF3F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ed804db6-5545-4be5-b4e5-7250d47a3778.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5511::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f8:02:73:43:a8:a3:f1:6c:34:da:c1:bf:99:0f:5b:b8:34:bf:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=5119a77f006dc0bbb7956b0532864d209fe5c8ba83753a68988fe041a6d0d180, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:db:55:cf:d0:e5:3c:3e:58:a2:fd:4f:95: 35:f8:cc:ee:c6:8f:e3:9b:7c:db:bf:21:fd:89:0a: c9:0e:f4:3f:95:4b:3e:4a:33:d6:f3:bf:03:a2:df: be:0b:ad:24:75:7c:5f:1c:ed:5d:62:ba:b9:aa:78: 39:5c:63:c0:62:df:70:db:00:77:08:28:c6:66:4c: f3:2a:bf:a8:5c:74:79:b1:b5:91:be:96:ab:e5:ea: db:c9:80:66:04:d0:6b:9c:bd:5f:5b:d8:c6:55:9e: 74:35:05:9f:b3:9e:97:fc:7f:e5:18:7f:0e:04:ee: 66:f8:23:5d:db:3c:f7:45:30:7b:cf:19:7d:44:43: 33:a9:4c:89:50:54:b3:54:9b:97:ed:12:fc:97:25: 56:6e:dc:93:4b:6b:7e:22:ef:af:25:6d:b5:96:e1: e2:7c:a8:ba:88:fd:cf:32:8c:23:0a:2f:af:07:0a: d9:c9:69:ae:80:fc:77:ca:d4:81:e9:b7:a1:59:da: 74:93:f7:07:91:a5:98:bb:cf:bd:e5:2f:56:65:30: 6c:1b:ec:a8:03:c7:26:ee:4a:c9:88:f8:e7:00:7d: 12:50:65:1c:25:55:a6:43:ce:43:a6:e5:0c:db:e3: dd:08:2a:f4:f1:5d:81:26:35:74:1d:d9:8f:f6:88: c9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:77:82:4D:1E:F8:62:EA:E5:08:B7:17:51:AF:00:51:F2:D0:91:29 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ed804db6-5545-4be5-b4e5-7250d47a3778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5511::/48 Signature Algorithm: sha256WithRSAEncryption 45:1d:0f:63:77:73:72:ee:36:83:b1:4d:67:8f:e1:d4:5a:d3: 34:97:61:be:93:ed:aa:02:16:4e:71:f3:2f:d2:fe:03:8d:1a: 10:6e:1e:35:cb:0a:ce:e4:ec:30:6d:13:ea:56:df:09:5c:e5: bc:80:4c:2d:4a:7d:93:68:4c:c0:28:df:48:fa:2a:b9:b4:fc: 80:10:1b:33:4f:c2:03:cb:a4:af:f4:01:1a:0b:5b:80:e4:3a: 1b:af:a8:f3:c2:ff:08:79:1f:a3:24:f2:17:ee:1b:55:d6:f0: 80:cb:bb:97:6d:ae:45:39:78:12:2e:5d:7b:cc:c2:1d:6c:cc: 4d:e3:7c:54:bd:80:99:8e:74:00:da:29:43:8d:d1:e6:b7:28: 7d:fc:26:d4:47:b3:90:7a:2e:4d:c0:70:ec:49:7d:50:42:eb: b5:73:5d:a3:ee:f6:e3:3b:c9:c4:6e:d3:3b:77:f0:64:38:89: e2:7d:fe:06:a8:88:a5:8d:08:26:7a:44:ba:00:65:f8:f6:ba: dd:89:4b:56:04:5f:81:09:3c:cc:3e:54:f0:5a:63:99:e6:4f: 10:4c:57:1e:d9:bf:3b:a4:29:66:ea:24:e6:47:4d:00:04:df: 76:d4:ad:b6:ba:5e:a0:f8:5e:99:e5:33:19:07:cb:22:29:2a: fd:a6:38:ee -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTfgCc0Ooo/FsNNrBv5kPW7g0vz8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTE5YTc3ZjAwNmRjMGJiYjc5NTZiMDUzMjg2NGQyMDlm ZTVjOGJhODM3NTNhNjg5ODhmZTA0MWE2ZDBkMTgwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyyNtVz9DlPD5Yov1PlTX4zO7Gj+ObfNu/If2JCskO9D+V Sz5KM9bzvwOi374LrSR1fF8c7V1iurmqeDlcY8Bi33DbAHcIKMZmTPMqv6hcdHmx tZG+lqvl6tvJgGYE0GucvV9b2MZVnnQ1BZ+znpf8f+UYfw4E7mb4I13bPPdFMHvP GX1EQzOpTIlQVLNUm5ftEvyXJVZu3JNLa34i768lbbWW4eJ8qLqI/c8yjCMKL68H CtnJaa6A/HfK1IHpt6FZ2nST9weRpZi7z73lL1ZlMGwb7KgDxybuSsmI+OcAfRJQ ZRwlVaZDzkOm5Qzb490IKvTxXYEmNXQd2Y/2iMmHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0XeCTR74YurlCLcXUa8AUfLQkSkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VkODA0ZGI2LTU1NDUtNGJlNS1iNGU1LTcyNTBkNDdhMzc3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVREwDQYJKoZIhvcNAQELBQADggEBAEUdD2N3c3LuNoOxTWeP4dRa 0zSXYb6T7aoCFk5x8y/S/gONGhBuHjXLCs7k7DBtE+pW3wlc5byATC1KfZNoTMAo 30j6Krm0/IAQGzNPwgPLpK/0ARoLW4DkOhuvqPPC/wh5H6Mk8hfuG1XW8IDLu5dt rkU5eBIuXXvMwh1szE3jfFS9gJmOdADaKUON0ea3KH38JtRHs5B6Lk3AcOxJfVBC 67VzXaPu9uM7ycRu0zt38GQ4ieJ9/gaoiKWNCCZ6RLoAZfj2ut2JS1YEX4EJPMw+ VPBaY5nmTxBMVx7ZvzukKWbqJOZHTQAE33bUrba6XqD4XpnlMxkHyyIpKv2mOO4= -----END CERTIFICATE-----Generated at Sun Nov 24 22:10:47 2024 by rpki-client on console-fra.rpki-client.org