$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2ff0469b-9f32-4585-929d-a8709323cfa2.roa File: 2ff0469b-9f32-4585-929d-a8709323cfa2.roa (raw, json) Hash identifier: SlAshFi2AUlgtqO486Pzpzfep+5bOqaMDSY/LmhhwLs= Subject key identifier: 21:9C:32:1B:F4:23:BD:E3:63:E4:F1:A6:87:A6:08:70:36:B3:01:1B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6DB28F95BAE43889B45358BC412A430DB0A78045 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2ff0469b-9f32-4585-929d-a8709323cfa2.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c0e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b2:8f:95:ba:e4:38:89:b4:53:58:bc:41:2a:43:0d:b0:a7:80:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=4aafb24f4a1b69133a600a801818f04c4a6c7eaae6484d67915ec7c22b9213ec, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:8b:c2:48:ca:a1:d5:f5:8a:9b:d5:42:b0:1c: 0c:b1:a2:7e:5f:08:fb:f2:32:75:38:1c:59:52:d3: 5e:09:19:88:04:bb:44:f4:a8:97:11:fa:67:f9:33: 42:ac:a8:10:34:7b:71:25:c9:ea:4a:f7:3f:b8:74: 96:bb:74:99:4b:32:87:38:99:00:39:9e:5b:85:85: 99:f1:3e:cf:c8:6e:e7:aa:3a:52:b2:8d:5e:f6:b1: e6:eb:68:1a:7c:0b:ed:c5:dc:0d:29:63:a7:80:fb: 67:2c:76:e3:68:72:5d:1d:17:57:12:d7:5a:a3:17: d5:91:9a:fe:e6:db:44:f1:70:d8:50:62:ee:02:3c: 79:de:18:e6:6c:81:81:69:a3:b1:89:55:cb:85:0e: b8:6b:0f:fb:36:30:ee:73:ec:ac:c1:30:a3:52:3a: b6:55:09:79:cf:24:72:54:9f:bc:bd:6d:35:af:b6: 09:fc:b6:5b:4b:b0:f5:b1:ff:e5:f1:8f:d5:11:57: 7f:a4:f1:87:36:7b:6b:e4:bf:98:09:f9:e1:b3:2a: 1b:a0:48:2e:6c:7d:c5:f2:8e:4f:ff:92:f2:c5:9b: a5:fd:70:a4:dc:64:0d:74:d8:29:d1:67:85:c6:36: de:57:c6:b3:03:cf:65:be:39:5b:7d:43:61:99:ff: 90:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9C:32:1B:F4:23:BD:E3:63:E4:F1:A6:87:A6:08:70:36:B3:01:1B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2ff0469b-9f32-4585-929d-a8709323cfa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0e::/48 Signature Algorithm: sha256WithRSAEncryption 1a:bb:36:ea:db:be:7f:e9:58:e5:f1:2a:47:e1:41:68:48:c1: 97:09:e7:4a:c1:2d:8e:c9:73:df:86:f0:35:78:68:3a:c8:0a: 7c:8e:fe:50:a6:19:5b:0d:07:d6:25:4f:2e:d6:b0:3b:87:74: 4e:e1:49:bc:94:cd:d6:45:15:42:30:59:61:d0:19:43:f6:a2: 68:0e:6e:a8:8d:9a:fd:14:3a:81:11:eb:12:d9:b4:fa:31:d9: 62:46:dc:d0:d3:15:26:64:18:89:e5:a7:35:49:21:29:27:fa: 94:a5:9d:2e:65:f2:dc:36:c2:eb:cc:83:8a:3a:65:14:0d:16: 85:b4:b2:d3:7d:a1:67:af:da:57:c4:25:68:eb:20:48:f8:f3: 01:a8:d4:13:a8:08:a6:71:02:9e:f3:bb:67:80:e0:5f:a8:d8: ab:9f:fa:79:eb:19:66:18:6a:c3:eb:20:82:2c:a1:b8:79:2b: 12:89:f4:59:42:14:87:d9:e7:c8:75:e5:e1:b0:13:52:53:3b: 6b:a4:b4:0a:0d:d2:6c:a0:e5:b4:b5:7e:77:95:81:78:79:f3: 2a:51:a4:f1:62:61:d1:fc:c0:4f:09:8f:70:78:7d:fa:52:b7: af:d9:4e:22:49:6f:2a:37:97:26:5c:09:64:0b:55:0d:98:04: b6:53:ac:81 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbbKPlbrkOIm0U1i8QSpDDbCngEUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWFmYjI0ZjRhMWI2OTEzM2E2MDBhODAxODE4ZjA0YzRh NmM3ZWFhZTY0ODRkNjc5MTVlYzdjMjJiOTIxM2VjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD5i8JIyqHV9Yqb1UKwHAyxon5fCPvyMnU4HFlS014JGYgE u0T0qJcR+mf5M0KsqBA0e3ElyepK9z+4dJa7dJlLMoc4mQA5nluFhZnxPs/Ibueq OlKyjV72sebraBp8C+3F3A0pY6eA+2csduNocl0dF1cS11qjF9WRmv7m20TxcNhQ Yu4CPHneGOZsgYFpo7GJVcuFDrhrD/s2MO5z7KzBMKNSOrZVCXnPJHJUn7y9bTWv tgn8tltLsPWx/+Xxj9URV3+k8Yc2e2vkv5gJ+eGzKhugSC5sfcXyjk//kvLFm6X9 cKTcZA102CnRZ4XGNt5XxrMDz2W+OVt9Q2GZ/5ARAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIZwyG/QjveNj5PGmh6YIcDazARswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzJmZjA0NjliLTlmMzItNDU4NS05MjlkLWE4NzA5MzIzY2ZhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA4wDQYJKoZIhvcNAQELBQADggEBABq7Nurbvn/pWOXxKkfhQWhI wZcJ50rBLY7Jc9+G8DV4aDrICnyO/lCmGVsNB9YlTy7WsDuHdE7hSbyUzdZFFUIw WWHQGUP2omgObqiNmv0UOoER6xLZtPox2WJG3NDTFSZkGInlpzVJISkn+pSlnS5l 8tw2wuvMg4o6ZRQNFoW0stN9oWev2lfEJWjrIEj48wGo1BOoCKZxAp7zu2eA4F+o 2Kuf+nnrGWYYasPrIIIsobh5KxKJ9FlCFIfZ58h15eGwE1JTO2uktAoN0myg5bS1 fneVgXh58ypRpPFiYdH8wE8Jj3B4ffpSt6/ZTiJJbyo3lyZcCWQLVQ2YBLZTrIE= -----END CERTIFICATE-----Generated at Mon Nov 25 18:46:42 2024 by rpki-client on console-ams.rpki-client.org