$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/7a1043c1-c73c-4a4a-9847-51bac031181c.roa File: 7a1043c1-c73c-4a4a-9847-51bac031181c.roa (raw, json) Hash identifier: V8QI1X97CSNwRNy5kQZBwbpT6MtTfiOGeV27ME0vqD4= Subject key identifier: 1A:56:F5:74:96:55:E7:86:73:CE:52:67:B8:E1:31:40:07:89:76:F0 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 2E5B806EA328D46B0DE19A37C4895E8E49874F43 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/7a1043c1-c73c-4a4a-9847-51bac031181c.roa Signing time: Mon 11 Nov 2024 00:00:00 +0000 ROA not before: Mon 11 Nov 2024 00:00:00 +0000 ROA not after: Mon 16 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:5b:80:6e:a3:28:d4:6b:0d:e1:9a:37:c4:89:5e:8e:49:87:4f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Nov 11 00:00:00 2024 GMT Not After : Dec 16 23:59:59 2024 GMT Subject: serialNumber=29b1e9751f2f5fcd20bd3b2a2785640c352ee4ccdb615666d983884d42ae1d17, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:b6:7a:b2:e8:4e:b8:47:11:23:4f:20:d7: 02:0b:c1:b3:02:3d:53:17:a5:05:c1:6a:cc:c3:3f: 9a:c0:b6:33:54:2e:ce:f3:2e:d7:90:cc:19:f2:79: 88:17:28:ce:cd:fd:b8:41:2e:14:3b:b6:ef:be:76: 2f:e9:17:57:26:b9:7f:4c:bf:fc:b8:e1:f4:bd:ff: 9c:66:bb:1b:c8:67:04:70:43:fc:4b:c7:fd:1e:2e: c7:b6:0e:fb:1c:bf:f6:ef:8c:35:47:fc:f6:20:c1: a6:df:03:bd:a7:60:67:96:d7:dc:64:aa:76:a4:07: 06:92:62:55:7c:eb:5b:8a:a8:01:3d:7a:82:95:5a: cf:94:0e:dc:45:51:6f:24:63:20:37:0e:33:53:57: 9e:72:21:1f:e9:6a:3c:a7:95:31:bb:1f:c7:72:9f: 24:06:2d:37:5e:1a:34:e8:98:96:99:8f:28:b2:21: 2d:97:00:b0:9e:59:eb:62:6e:4a:b6:81:a0:cf:96: b4:84:52:61:90:0e:70:65:a3:2e:df:c8:83:e8:2e: 9b:ab:2c:09:4e:ca:2b:2c:d9:66:c0:4c:2b:d4:34: 7e:9a:db:44:6f:40:ec:4a:4a:bb:b8:3b:95:8a:83: c1:3f:a6:19:eb:98:11:cf:ab:40:af:87:2a:87:b6: dd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:56:F5:74:96:55:E7:86:73:CE:52:67:B8:E1:31:40:07:89:76:F0 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/7a1043c1-c73c-4a4a-9847-51bac031181c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3000::/44 Signature Algorithm: sha256WithRSAEncryption 73:df:95:18:ad:37:24:05:e2:93:be:41:37:ab:74:b1:8e:e2: 24:99:b6:f5:a0:06:3e:5a:d7:b6:ae:a6:34:60:d4:d2:e7:61: c5:58:41:95:0b:f1:ff:50:68:a9:5e:15:65:8c:c7:29:40:ff: b6:c6:2b:ff:d8:f2:9b:c6:7d:7a:e9:74:92:d2:63:53:a2:04: 66:a7:01:0e:67:0b:15:06:bc:5a:63:16:bb:5a:29:bf:ea:8e: 27:d8:cd:9d:46:20:ee:7f:cd:14:82:7e:27:23:17:2a:f1:b4: fa:05:25:d4:0d:06:e7:6e:df:be:71:42:7e:d5:c0:66:d8:2f: 04:2b:20:78:5e:21:2d:fb:dd:07:8a:2b:94:f9:70:24:58:91: 8b:20:9f:0b:f6:4c:40:9e:1b:91:c9:5d:0b:e6:6d:cd:df:b2: 80:87:32:83:44:70:03:53:b8:13:37:1e:ac:74:3e:a8:84:a0: 5b:5b:13:52:6b:bc:d0:b0:d2:1d:13:e8:5f:1b:57:e4:93:5f: 97:1e:fd:c5:56:3a:12:d6:3b:c8:97:01:6c:88:70:0e:7e:41: 1d:38:c7:35:e1:b3:c6:8e:6a:fe:dc:a1:7d:4e:ea:8c:68:d9: b0:3c:c9:2d:1b:36:9c:3e:a5:f9:a0:03:86:2d:d9:16:35:df: f2:c5:d1:90 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULluAbqMo1GsN4Zo3xIlejkmHT0MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjQxMTExMDAwMDAwWhcNMjQxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWIxZTk3NTFmMmY1ZmNkMjBiZDNiMmEyNzg1NjQwYzM1 MmVlNGNjZGI2MTU2NjZkOTgzODg0ZDQyYWUxZDE3MS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTLrZ6suhOuEcRI08g1wILwbMCPVMXpQXBaszDP5rAtjNU Ls7zLteQzBnyeYgXKM7N/bhBLhQ7tu++di/pF1cmuX9Mv/y44fS9/5xmuxvIZwRw Q/xLx/0eLse2Dvscv/bvjDVH/PYgwabfA72nYGeW19xkqnakBwaSYlV861uKqAE9 eoKVWs+UDtxFUW8kYyA3DjNTV55yIR/pajynlTG7H8dynyQGLTdeGjTomJaZjyiy IS2XALCeWetibkq2gaDPlrSEUmGQDnBloy7fyIPoLpurLAlOyiss2WbATCvUNH6a 20RvQOxKSru4O5WKg8E/phnrmBHPq0CvhyqHtt07AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGlb1dJZV54ZzzlJnuOExQAeJdvAwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzdhMTA0M2MxLWM3M2MtNGE0YS05ODQ3LTUxYmFjMDMxMTgxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmIAEHMAAwDQYJKoZIhvcNAQELBQADggEBAHPflRitNyQF4pO+QTerdLGO 4iSZtvWgBj5a17aupjRg1NLnYcVYQZUL8f9QaKleFWWMxylA/7bGK//Y8pvGfXrp dJLSY1OiBGanAQ5nCxUGvFpjFrtaKb/qjifYzZ1GIO5/zRSCficjFyrxtPoFJdQN Budu375xQn7VwGbYLwQrIHheIS373QeKK5T5cCRYkYsgnwv2TECeG5HJXQvmbc3f soCHMoNEcANTuBM3Hqx0PqiEoFtbE1JrvNCw0h0T6F8bV+STX5ce/cVWOhLWO8iX AWyIcA5+QR04xzXhs8aOav7coX1O6oxo2bA8yS0bNpw+pfmgA4Yt2RY13/LF0ZA= -----END CERTIFICATE-----Generated at Fri Nov 22 01:34:50 2024 by rpki-client on console-ams.rpki-client.org