$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b642a109-e9c2-47d6-891e-b07342398a0e.roa File: b642a109-e9c2-47d6-891e-b07342398a0e.roa (raw, json) Hash identifier: bANp7t+aJHaNoObRSmuHPj5EF/QYoTBSQTJeh2FuNVk= Subject key identifier: F2:CF:7B:57:A7:52:D6:6D:45:53:83:2D:10:FB:CE:6C:6E:37:A5:50 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 607976741710F482C19966910CA6C4C355BA1D9D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b642a109-e9c2-47d6-891e-b07342398a0e.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:79:76:74:17:10:f4:82:c1:99:66:91:0c:a6:c4:c3:55:ba:1d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=8e30259d35a10d1ebaa8a54078689b56c25f59f56fd7ab5b3f9f47d4b8ea37ae, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8e:40:64:f5:46:45:7f:d9:28:89:bb:2b:50: af:03:bd:84:20:ff:6f:0c:16:97:0b:0e:f0:11:a7: d7:6c:ca:11:e6:76:1b:75:4e:76:09:4a:b3:3b:a2: 15:75:53:f6:22:77:b6:50:c8:1d:c5:f1:8f:2d:f6: a3:47:6b:9c:47:bd:ba:5e:50:53:6c:15:6a:ca:5c: 04:a8:52:3c:99:41:09:ab:cb:5d:a7:b9:81:38:88: b7:8a:b8:66:76:be:f4:a9:f5:45:e7:c7:51:30:c7: b7:90:80:b9:0a:28:33:fb:a2:63:3c:72:65:1a:84: bb:23:49:db:61:8b:da:dd:9a:61:a3:b8:96:ae:39: 6f:af:af:ad:f7:1e:3b:73:d2:ff:c7:c5:e1:75:77: 4d:25:20:9b:a6:e4:94:b8:66:0a:27:e6:a2:2e:dd: f4:2b:75:1c:d9:23:5c:d6:5a:bd:ed:b4:8b:09:d4: 10:70:8e:25:95:d4:c5:a2:18:79:40:6b:86:de:83: 6d:07:ae:d6:c9:9c:35:1c:cd:5b:1d:17:86:79:e6: 35:96:51:bb:4a:2f:5d:a9:32:dd:0c:e4:95:38:ff: a5:e4:04:c8:b5:b4:2e:b2:93:d9:b9:56:79:f1:53: ef:10:e7:d8:d4:d6:10:88:4d:4c:b9:de:50:f2:2d: f7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CF:7B:57:A7:52:D6:6D:45:53:83:2D:10:FB:CE:6C:6E:37:A5:50 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b642a109-e9c2-47d6-891e-b07342398a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c17::/48 Signature Algorithm: sha256WithRSAEncryption 5c:92:d9:af:4d:d9:d0:9a:b2:11:e3:45:5a:b7:89:ad:5d:71: f9:af:1a:33:e1:07:42:d0:06:c2:5e:85:87:5e:70:f4:a4:f2: 28:8a:86:f9:7d:dd:b7:1b:56:58:77:f1:b3:6e:ed:ab:05:f0: dc:49:e6:92:ef:52:00:5e:fc:42:90:5a:b9:03:42:87:2b:37: 46:ee:23:8a:ee:1b:ed:4c:15:e1:3d:8a:24:e5:2a:34:43:34: 2d:8d:a9:a1:0a:23:54:ed:82:65:f6:a4:f0:eb:b1:09:0b:6d: e2:a9:fe:08:a7:1a:71:71:7c:97:db:e5:ee:a2:7f:46:49:31: 75:6d:d8:1d:a8:31:24:e9:74:f1:be:17:37:21:9a:ba:0b:6f: f0:b8:30:d0:56:50:e9:63:19:46:b9:7c:54:4b:2b:1a:05:f4: b4:c0:90:a8:7d:e5:74:23:26:99:e7:67:53:46:4a:4c:6c:47: e3:ac:5d:10:0a:db:e3:33:9f:ca:9e:5b:29:76:e9:a8:8b:6c: 6f:24:95:ec:72:02:3c:b1:35:e8:5c:0c:64:b6:c5:c1:bf:24: 51:a5:34:ed:1e:52:c9:e9:12:9e:4a:41:c4:23:f9:d3:21:3b: 50:18:fe:1b:bf:4c:b8:1e:fd:b1:64:b6:cd:02:92:66:15:00: e8:88:ec:9e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYHl2dBcQ9ILBmWaRDKbEw1W6HZ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTMwMjU5ZDM1YTEwZDFlYmFhOGE1NDA3ODY4OWI1NmMy NWY1OWY1NmZkN2FiNWIzZjlmNDdkNGI4ZWEzN2FlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHjkBk9UZFf9koibsrUK8DvYQg/28MFpcLDvARp9dsyhHm dht1TnYJSrM7ohV1U/Yid7ZQyB3F8Y8t9qNHa5xHvbpeUFNsFWrKXASoUjyZQQmr y12nuYE4iLeKuGZ2vvSp9UXnx1Ewx7eQgLkKKDP7omM8cmUahLsjSdthi9rdmmGj uJauOW+vr633Hjtz0v/HxeF1d00lIJum5JS4Zgon5qIu3fQrdRzZI1zWWr3ttIsJ 1BBwjiWV1MWiGHlAa4beg20HrtbJnDUczVsdF4Z55jWWUbtKL12pMt0M5JU4/6Xk BMi1tC6yk9m5VnnxU+8Q59jU1hCITUy53lDyLfczAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8s97V6dS1m1FU4MtEPvObG43pVAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2I2NDJhMTA5LWU5YzItNDdkNi04OTFlLWIwNzM0MjM5OGEwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBcwDQYJKoZIhvcNAQELBQADggEBAFyS2a9N2dCashHjRVq3ia1d cfmvGjPhB0LQBsJehYdecPSk8iiKhvl93bcbVlh38bNu7asF8NxJ5pLvUgBe/EKQ WrkDQocrN0buI4ruG+1MFeE9iiTlKjRDNC2NqaEKI1TtgmX2pPDrsQkLbeKp/gin GnFxfJfb5e6if0ZJMXVt2B2oMSTpdPG+FzchmroLb/C4MNBWUOljGUa5fFRLKxoF 9LTAkKh95XQjJpnnZ1NGSkxsR+OsXRAK2+Mzn8qeWyl26aiLbG8klexyAjyxNehc DGS2xcG/JFGlNO0eUsnpEp5KQcQj+dMhO1AY/hu/TLge/bFkts0CkmYVAOiI7J4= -----END CERTIFICATE-----Generated at Fri Nov 22 11:46:07 2024 by rpki-client on console-ams.rpki-client.org