$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/34aa606e-0ded-49e0-8124-2799643cf271.roa File: 34aa606e-0ded-49e0-8124-2799643cf271.roa (raw, json) Hash identifier: XHoWXeSYWjjbNhJzy4ofv6TZyzWb4TA5kQpgAtZpUV4= Subject key identifier: AC:AF:B5:E0:8F:5F:1A:B2:70:9C:90:AE:66:42:16:AA:15:DA:94:2F Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 059ECEF632D07085DCC7A54557BA939B73997371 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/34aa606e-0ded-49e0-8124-2799643cf271.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:399::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9e:ce:f6:32:d0:70:85:dc:c7:a5:45:57:ba:93:9b:73:99:73:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=c711a03bb00b469b61baa0b9723d04f1b039a96dd6803238fa4c89d6e60ccc63, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:27:66:0d:59:e1:7f:60:78:81:2c:44:b9:34: e1:05:ef:62:6a:66:c5:7f:fc:33:7f:11:39:e4:76: bf:3b:46:99:01:f5:94:7a:5f:4c:80:99:9f:25:bf: c9:64:50:59:0c:99:26:16:8c:10:87:85:f8:b7:17: 2f:13:a2:8a:3f:69:35:36:d6:03:47:94:db:a2:4a: 53:2a:19:51:82:40:56:ff:9d:f4:34:ef:12:f7:e3: f1:1d:1b:70:8a:5e:90:55:85:96:1e:d8:6c:58:b9: cf:e4:9f:82:7b:51:c8:8a:f2:21:de:38:76:64:6f: b3:66:40:18:03:5a:e0:6e:d0:f5:ec:7e:ea:a8:da: 9d:d9:54:50:d1:3a:ff:d1:3a:fb:14:01:3f:f8:b8: ba:98:79:33:d6:87:67:d3:1c:6c:a1:e3:b4:92:77: 0d:f4:66:11:89:55:aa:b8:bc:6c:2a:a9:cd:18:38: 93:f4:a4:a8:fe:ca:78:a8:64:f7:f2:9a:8e:c6:b9: fd:bf:ab:00:1e:50:b4:a6:60:57:64:d0:e5:8c:b9: 47:f3:52:49:ca:ca:d0:cd:66:e0:4b:93:9c:ec:55: 87:a3:e0:4e:cf:b4:16:da:8a:20:e5:2c:f0:e0:0a: 0a:4e:aa:68:b8:0e:22:76:4f:7f:82:8b:e4:e0:88: 76:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AF:B5:E0:8F:5F:1A:B2:70:9C:90:AE:66:42:16:AA:15:DA:94:2F X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/34aa606e-0ded-49e0-8124-2799643cf271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:399::/48 Signature Algorithm: sha256WithRSAEncryption 4b:20:0b:72:7b:ba:36:53:99:f8:92:ba:71:77:1d:e8:29:15: 33:50:54:48:4f:8c:38:a2:1f:1e:05:aa:2d:27:c2:c1:10:68: 02:76:7d:43:ed:29:62:ad:10:28:e2:54:cd:ca:2c:8e:be:e3: 0a:30:5e:ce:4e:d2:6e:d0:5d:d2:b4:01:ac:a6:0d:36:01:b0: 62:b5:1a:ca:88:32:bf:b5:bd:de:26:e6:b7:be:fd:fa:dd:af: b3:ba:ae:bc:45:b7:47:28:d3:fb:69:a4:42:cc:b1:9a:46:48: ee:cf:62:4a:5b:e2:44:a0:e8:e5:96:2c:ca:61:68:81:12:e5: 8d:b7:33:8c:db:61:78:58:a3:9d:46:33:ba:21:63:8e:0f:b1: 3e:3c:38:b7:4c:08:c3:ea:86:25:9c:e2:ea:8e:d3:d4:34:42: 65:f4:b5:ec:98:17:d3:3a:48:e5:e1:27:9e:e4:17:5e:5f:fa: fc:b5:5d:ee:c1:23:27:0a:23:b2:ac:23:78:be:4b:15:35:82: 00:0d:62:7d:f6:4e:29:39:1f:79:c0:86:b4:59:54:b5:fa:79: 14:ad:de:37:e1:83:4c:93:a8:9f:23:eb:48:02:70:1a:9b:91: 8e:2e:8f:32:fa:be:e5:b1:02:3a:da:99:29:80:d4:2e:3f:03: c2:48:f3:2b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBZ7O9jLQcIXcx6VFV7qTm3OZc3EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzExYTAzYmIwMGI0NjliNjFiYWEwYjk3MjNkMDRmMWIw MzlhOTZkZDY4MDMyMzhmYTRjODlkNmU2MGNjYzYzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD7J2YNWeF/YHiBLES5NOEF72JqZsV//DN/ETnkdr87RpkB 9ZR6X0yAmZ8lv8lkUFkMmSYWjBCHhfi3Fy8Tooo/aTU21gNHlNuiSlMqGVGCQFb/ nfQ07xL34/EdG3CKXpBVhZYe2GxYuc/kn4J7UciK8iHeOHZkb7NmQBgDWuBu0PXs fuqo2p3ZVFDROv/ROvsUAT/4uLqYeTPWh2fTHGyh47SSdw30ZhGJVaq4vGwqqc0Y OJP0pKj+ynioZPfymo7Guf2/qwAeULSmYFdk0OWMuUfzUknKytDNZuBLk5zsVYej 4E7PtBbaiiDlLPDgCgpOqmi4DiJ2T3+Ci+TgiHatAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrK+14I9fGrJwnJCuZkIWqhXalC8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM0YWE2MDZlLTBkZWQtNDllMC04MTI0LTI3OTk2NDNjZjI3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5kwDQYJKoZIhvcNAQELBQADggEBAEsgC3J7ujZTmfiSunF3Hegp FTNQVEhPjDiiHx4Fqi0nwsEQaAJ2fUPtKWKtECjiVM3KLI6+4wowXs5O0m7QXdK0 AaymDTYBsGK1GsqIMr+1vd4m5re+/frdr7O6rrxFt0co0/tppELMsZpGSO7PYkpb 4kSg6OWWLMphaIES5Y23M4zbYXhYo51GM7ohY44PsT48OLdMCMPqhiWc4uqO09Q0 QmX0teyYF9M6SOXhJ57kF15f+vy1Xe7BIycKI7KsI3i+SxU1ggANYn32Tik5H3nA hrRZVLX6eRSt3jfhg0yTqJ8j60gCcBqbkY4ujzL6vuWxAjramSmA1C4/A8JI8ys= -----END CERTIFICATE-----Generated at Fri Nov 22 11:46:06 2024 by rpki-client on console-ams.rpki-client.org