$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/7a1043c1-c73c-4a4a-9847-51bac031181c.roa File: 7a1043c1-c73c-4a4a-9847-51bac031181c.roa (raw, json) Hash identifier: JDAo245dO9gl/HdK/M8NZUVmJFeS+iIXxF6bK6SUl/0= Subject key identifier: A7:2B:E4:BC:46:A6:73:F1:5F:E9:D6:81:39:13:95:E4:C7:28:52:97 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 549CF0B74DC7FAE8FE361DFB9BEEF16B2C5853BE Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/7a1043c1-c73c-4a4a-9847-51bac031181c.roa Signing time: Fri 06 Dec 2024 00:00:00 +0000 ROA not before: Fri 06 Dec 2024 00:00:00 +0000 ROA not after: Fri 10 Jan 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Dec 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9c:f0:b7:4d:c7:fa:e8:fe:36:1d:fb:9b:ee:f1:6b:2c:58:53:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Dec 6 00:00:00 2024 GMT Not After : Jan 10 23:59:59 2025 GMT Subject: serialNumber=e86cfe8f83e435b5f758697b497e1754d42e2c31d3030f4d6866a4f49a809ae4, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4d:13:f0:7a:5d:77:2b:a7:a1:ba:a4:f8:66: 53:16:47:06:0f:98:57:21:fb:81:4e:ef:ad:d5:66: 8a:4f:c3:a1:46:3d:67:4c:a3:40:b4:99:7a:52:9e: 71:52:22:ad:4e:f5:01:e3:21:c7:3b:31:b7:47:51: e4:73:d3:1b:4d:76:cc:1d:4d:ef:37:75:b7:3a:93: e5:54:89:d6:e6:48:18:fa:5a:83:97:56:bc:b3:b5: 4e:dd:69:d7:72:0b:68:c4:cd:55:13:f7:ca:12:e7: 52:b2:9e:49:c4:c3:ba:e8:9a:59:55:a6:68:e1:b4: 18:89:60:8a:b4:9d:c8:19:e4:53:6f:7e:0e:43:d2: 86:9e:67:a2:d0:b7:a8:6c:a8:cc:a4:d3:cc:9a:9c: f8:87:da:c7:f4:ae:e8:30:57:a1:d1:4e:ca:0b:e9: ff:c5:59:d4:ce:75:7f:54:65:4d:c9:a2:8f:fe:cf: 46:2b:91:b6:87:50:b4:c4:49:86:f9:f2:51:9f:e0: 87:b2:f4:4c:c7:13:c7:f6:98:2f:73:58:50:89:9f: 90:d1:a1:d8:3a:cf:d2:d1:bd:e6:d6:7f:61:fd:76: 8b:33:63:3a:db:2a:8b:f1:97:61:4c:4d:08:91:0a: ac:0e:3a:9f:c1:29:06:5a:44:49:e4:19:38:6e:02: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2B:E4:BC:46:A6:73:F1:5F:E9:D6:81:39:13:95:E4:C7:28:52:97 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/7a1043c1-c73c-4a4a-9847-51bac031181c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3000::/44 Signature Algorithm: sha256WithRSAEncryption 3c:de:d6:f0:c4:b6:f5:5d:0b:ed:ba:59:90:bb:ee:a2:f9:00: e6:10:f9:7b:09:75:2d:b0:0b:15:bc:1d:a2:15:e7:44:56:ba: 9f:34:ac:de:42:55:3b:53:be:ce:c8:bd:6c:23:97:f7:a6:f4: 30:f9:31:0d:c7:bb:e5:a9:ac:5a:78:00:f0:01:63:ae:9b:4f: 3d:e8:30:53:28:81:dd:47:1b:5b:43:ae:bb:d4:ff:81:75:b2: fd:80:dd:f0:26:1d:13:c4:d5:62:e2:6d:df:93:9a:22:ad:09: 51:d6:da:16:47:c6:42:97:70:0a:be:bf:f0:e6:42:a3:a3:02: bf:14:01:aa:7a:6f:ef:57:58:47:50:1d:82:06:68:1d:2f:65: c7:8b:d5:a8:f7:4a:ec:5e:1c:fe:8a:a5:9d:fd:30:5c:de:c2: ed:31:19:1b:df:25:33:40:79:60:63:f7:bd:ec:4a:bb:d9:81: 90:37:93:c4:f1:4f:99:17:4b:9f:66:79:ce:a3:c5:ce:63:7e: 67:49:0c:7c:9e:9d:ad:d4:21:9b:5f:88:94:8c:c1:b0:f1:54: ec:ed:4b:85:ad:64:41:ba:bc:8b:50:6a:bd:6e:c2:3e:82:97: 37:a7:e4:82:90:9e:f3:77:02:bb:e8:89:ea:7e:82:bd:1a:30: 39:bd:85:8d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVJzwt03H+uj+Nh37m+7xayxYU74wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjQxMjA2MDAwMDAwWhcNMjUwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlODZjZmU4ZjgzZTQzNWI1Zjc1ODY5N2I0OTdlMTc1NGQ0 MmUyYzMxZDMwMzBmNGQ2ODY2YTRmNDlhODA5YWU0MS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWTRPwel13K6ehuqT4ZlMWRwYPmFch+4FO763VZopPw6FG PWdMo0C0mXpSnnFSIq1O9QHjIcc7MbdHUeRz0xtNdswdTe83dbc6k+VUidbmSBj6 WoOXVryztU7daddyC2jEzVUT98oS51KynknEw7romllVpmjhtBiJYIq0ncgZ5FNv fg5D0oaeZ6LQt6hsqMyk08yanPiH2sf0rugwV6HRTsoL6f/FWdTOdX9UZU3Joo/+ z0YrkbaHULTESYb58lGf4Iey9EzHE8f2mC9zWFCJn5DRodg6z9LRvebWf2H9dosz YzrbKovxl2FMTQiRCqwOOp/BKQZaREnkGThuAmovAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpyvkvEamc/Ff6daBOROV5McoUpcwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzdhMTA0M2MxLWM3M2MtNGE0YS05ODQ3LTUxYmFjMDMxMTgxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmIAEHMAAwDQYJKoZIhvcNAQELBQADggEBADze1vDEtvVdC+26WZC77qL5 AOYQ+XsJdS2wCxW8HaIV50RWup80rN5CVTtTvs7IvWwjl/em9DD5MQ3Hu+WprFp4 APABY66bTz3oMFMogd1HG1tDrrvU/4F1sv2A3fAmHRPE1WLibd+TmiKtCVHW2hZH xkKXcAq+v/DmQqOjAr8UAap6b+9XWEdQHYIGaB0vZceL1aj3SuxeHP6KpZ39MFze wu0xGRvfJTNAeWBj973sSrvZgZA3k8TxT5kXS59mec6jxc5jfmdJDHyena3UIZtf iJSMwbDxVOztS4WtZEG6vItQar1uwj6Clzen5IKQnvN3Arvoiep+gr0aMDm9hY0= -----END CERTIFICATE-----Generated at Thu Dec 12 17:11:24 2024 by rpki-client on console-ams.rpki-client.org