$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/48c70aad-8eb4-4016-8ec0-ae3ea1230af8.roa File: 48c70aad-8eb4-4016-8ec0-ae3ea1230af8.roa (raw, json) Hash identifier: cTJifH8D3TAML6Rvir4nR38+MRnJQ+nFcimSFfpMD7g= Subject key identifier: 8E:FB:AE:37:88:68:65:45:48:9D:B3:B4:88:C6:58:52:A4:BA:0B:5C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7243395B8F914961543A87E31BAB9CD077131527 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/48c70aad-8eb4-4016-8ec0-ae3ea1230af8.roa Signing time: Tue 29 Oct 2024 00:00:00 +0000 ROA not before: Tue 29 Oct 2024 00:00:00 +0000 ROA not after: Tue 03 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:54b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:43:39:5b:8f:91:49:61:54:3a:87:e3:1b:ab:9c:d0:77:13:15:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 29 00:00:00 2024 GMT Not After : Dec 3 23:59:59 2024 GMT Subject: serialNumber=4c959c515f8ccbd5bf3b53b6832b2935de548b520d143aaac8a7230d451c7e3c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a0:8c:95:da:84:0f:0d:92:74:be:ed:38:f0: d5:e5:5c:be:a8:28:d3:40:f0:8c:02:eb:2e:06:0c: 30:3c:c0:ec:1d:db:0a:ee:d5:76:58:c8:b3:35:82: 24:8e:6d:50:8e:70:33:af:f6:90:c6:82:58:d2:89: a0:c1:04:46:76:d6:77:ba:c9:5d:33:7f:3c:0c:92: ca:91:3c:a4:ec:dc:75:af:f2:e4:52:df:ce:0c:c5: 1c:97:49:23:0d:b7:0d:66:2e:ff:b7:f9:e8:de:5e: d8:ba:34:f0:a4:e3:9c:0b:0f:2c:85:87:10:b9:2f: e3:07:04:53:e4:af:f9:6a:10:6a:50:d3:81:d6:01: 0f:16:8b:12:56:c0:db:ab:41:5d:c3:b2:e0:40:aa: 8b:b5:b8:bf:4b:de:cf:a5:94:82:7b:e3:d0:d4:1e: 68:bf:eb:f6:a9:fb:65:f6:bf:18:d4:75:4a:a5:83: 95:2a:3e:5a:eb:7d:15:98:b1:ad:0c:08:fb:43:f9: 9c:7c:83:0e:d9:75:f2:24:f3:aa:a2:92:99:95:f2: ef:e3:2c:60:72:d9:91:f6:fa:d5:0d:29:86:28:08: 49:28:c5:85:52:e9:9d:04:5d:c3:bf:5d:cf:c8:9b: 62:62:04:4c:8f:e0:82:92:84:b8:92:df:d8:34:7e: 94:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FB:AE:37:88:68:65:45:48:9D:B3:B4:88:C6:58:52:A4:BA:0B:5C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/48c70aad-8eb4-4016-8ec0-ae3ea1230af8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:54b::/48 Signature Algorithm: sha256WithRSAEncryption 11:2b:b5:1d:6c:56:50:10:7d:7d:e0:07:29:a5:ee:0f:ab:24: fa:6e:af:dd:dc:ea:b3:d5:c8:31:0e:c9:42:aa:43:14:79:21: bd:8f:7a:a3:3d:f2:91:7e:28:4c:1c:74:20:a6:e7:7f:38:ad: 51:47:05:76:7a:7d:a9:3d:dc:71:e4:ad:23:59:59:e2:6c:f1: 29:b5:4e:f2:05:63:dc:c3:c2:d2:02:a9:8e:47:06:ff:80:26: 2d:10:7f:62:58:a0:cf:4e:c4:1a:a5:97:91:d8:1d:39:41:71: 52:e4:59:5f:de:08:16:b9:dd:b5:18:82:fe:8f:5d:97:03:b0: 8b:a1:85:5c:19:26:04:f0:e0:3d:5c:53:15:cb:05:dc:5b:bf: eb:a3:38:88:6f:b8:27:ae:04:06:f7:36:16:50:78:ed:12:f4: b1:3f:20:44:0a:25:bc:3d:01:53:2f:1b:8f:78:74:6b:ac:37: a2:2f:fa:07:91:1d:4d:2b:16:ba:8c:67:7e:e2:09:5c:e9:55: 55:6e:37:cb:90:33:4b:f7:7c:55:d4:9a:d4:ba:4d:d9:36:d8: dd:7a:6a:dd:64:c6:d3:52:aa:3f:38:8e:f0:d1:70:91:19:a3: e2:5c:b3:61:5b:1f:a1:ff:4a:78:49:9c:87:8b:13:a4:b0:36: 01:b8:45:9c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUckM5W4+RSWFUOofjG6uc0HcTFScwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQxMDI5MDAwMDAwWhcNMjQxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Yzk1OWM1MTVmOGNjYmQ1YmYzYjUzYjY4MzJiMjkzNWRl NTQ4YjUyMGQxNDNhYWFjOGE3MjMwZDQ1MWM3ZTNjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgoIyV2oQPDZJ0vu048NXlXL6oKNNA8IwC6y4GDDA8wOwd 2wru1XZYyLM1giSObVCOcDOv9pDGgljSiaDBBEZ21ne6yV0zfzwMksqRPKTs3HWv 8uRS384MxRyXSSMNtw1mLv+3+ejeXti6NPCk45wLDyyFhxC5L+MHBFPkr/lqEGpQ 04HWAQ8WixJWwNurQV3DsuBAqou1uL9L3s+llIJ749DUHmi/6/ap+2X2vxjUdUql g5UqPlrrfRWYsa0MCPtD+Zx8gw7ZdfIk86qikpmV8u/jLGBy2ZH2+tUNKYYoCEko xYVS6Z0EXcO/Xc/Im2JiBEyP4IKShLiS39g0fpQhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjvuuN4hoZUVInbO0iMZYUqS6C1wwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQ4YzcwYWFkLThlYjQtNDAxNi04ZWMwLWFlM2VhMTIzMGFmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUswDQYJKoZIhvcNAQELBQADggEBABErtR1sVlAQfX3gByml7g+r JPpur93c6rPVyDEOyUKqQxR5Ib2PeqM98pF+KEwcdCCm5384rVFHBXZ6fak93HHk rSNZWeJs8Sm1TvIFY9zDwtICqY5HBv+AJi0Qf2JYoM9OxBqll5HYHTlBcVLkWV/e CBa53bUYgv6PXZcDsIuhhVwZJgTw4D1cUxXLBdxbv+ujOIhvuCeuBAb3NhZQeO0S 9LE/IEQKJbw9AVMvG494dGusN6Iv+geRHU0rFrqMZ37iCVzpVVVuN8uQM0v3fFXU mtS6Tdk22N16at1kxtNSqj84jvDRcJEZo+Jcs2FbH6H/SnhJnIeLE6SwNgG4RZw= -----END CERTIFICATE-----Generated at Fri Nov 22 11:16:05 2024 by rpki-client on console-fra.rpki-client.org