$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/d72aece7-0571-461e-98fc-70c3c3f16982.roa File: d72aece7-0571-461e-98fc-70c3c3f16982.roa (raw, json) Hash identifier: HyarBx0VwwuDRuzjUgAwBCXHyWVSrdq/f0CtlFpaPZ4= Subject key identifier: 15:AE:71:61:B9:2C:C4:C9:24:C1:64:15:45:5C:8F:75:EE:52:2A:35 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 65A0651D78B071C7214086B403EBD8007CA285F0 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/d72aece7-0571-461e-98fc-70c3c3f16982.roa Signing time: Mon 11 Nov 2024 00:00:00 +0000 ROA not before: Mon 11 Nov 2024 00:00:00 +0000 ROA not after: Mon 16 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 2620:107:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a0:65:1d:78:b0:71:c7:21:40:86:b4:03:eb:d8:00:7c:a2:85:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Nov 11 00:00:00 2024 GMT Not After : Dec 16 23:59:59 2024 GMT Subject: serialNumber=838927aa51a069d02805019de9f9b05379ea99c7a933d172589182c27a5e6bfc, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:72:8b:b1:c1:16:75:48:af:e1:24:f1:0e:a3: 4b:4f:69:9f:84:f5:91:85:79:35:d4:b4:57:99:d2: 1e:27:a0:b5:d6:29:ca:9f:4b:4f:4f:34:7f:e7:b4: 29:89:3f:17:e5:20:a2:33:24:e6:c4:f1:91:64:60: 7d:e8:57:ef:3d:92:0c:e7:45:de:f8:d0:61:14:08: 70:17:16:f2:50:f0:0c:07:c6:c9:8a:21:9e:0e:de: 23:bd:63:cd:aa:9d:d4:f3:3a:a3:6b:cd:03:4e:91: 02:0b:ff:18:7a:3b:53:4b:dc:0c:5b:08:5d:ea:12: b5:25:af:5e:77:23:9d:0b:f5:75:c2:06:3a:e3:ae: 50:8b:83:df:1b:f8:b2:b1:a8:6e:ce:14:7c:18:af: ee:1e:db:73:5a:83:66:29:13:4c:02:1c:21:60:26: 28:dc:5b:c6:c3:be:78:7e:5e:a6:3a:4c:e0:7a:37: a0:e6:cf:b8:53:97:09:38:22:b3:19:8e:53:65:e7: 7a:67:69:55:21:d7:55:83:65:d3:10:6a:4c:35:4c: f9:42:5e:5e:d7:30:dc:6e:1e:85:05:17:9e:c3:ce: b6:63:72:46:0a:87:d4:29:7a:c2:33:37:f6:86:a0: 4e:25:f4:94:99:5d:79:30:4c:af:0b:d3:fc:db:74: 7c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AE:71:61:B9:2C:C4:C9:24:C1:64:15:45:5C:8F:75:EE:52:2A:35 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/d72aece7-0571-461e-98fc-70c3c3f16982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3000::/44 Signature Algorithm: sha256WithRSAEncryption 66:e8:3b:41:1e:ca:51:db:68:0f:10:fa:75:36:53:c3:05:d1: 5c:7c:41:3d:57:eb:6e:4a:19:cb:7b:d3:12:03:39:8a:ae:21: 41:8e:b3:39:8a:4b:60:48:e5:76:fd:39:8d:62:0b:61:7e:6a: 0b:e3:b7:0b:3c:3b:2a:fd:91:4e:64:fd:a3:79:da:8d:59:ed: 40:07:71:4f:1e:90:fb:f7:58:b4:5f:99:1b:10:31:96:0f:f1: 0a:18:d2:98:eb:4f:37:e5:90:26:97:d3:6e:54:fd:b4:50:38: 21:db:ae:97:25:cb:27:81:e3:1f:94:0b:38:71:d5:5f:ab:c2: 57:97:b3:20:45:cf:cf:43:3f:c0:d1:49:78:57:86:60:62:1e: 66:fd:d2:76:19:dc:e3:3e:a9:c3:e4:f4:bf:c6:0c:b1:44:7a: 69:91:f7:04:7e:6d:7a:40:f4:04:d4:44:ed:c3:c0:2b:4e:9b: a9:8d:db:de:f7:f8:08:43:90:12:85:63:d7:8c:9f:8e:f6:f6: ec:91:09:f3:6a:ba:76:f4:47:35:e7:c5:51:25:68:89:93:93: f9:53:93:bb:0f:72:a6:ba:52:c4:60:56:4c:fd:d4:22:73:38: 0a:cb:d4:9c:00:b7:3b:e0:c2:1d:80:ab:17:07:d4:82:38:8a: 5b:2d:2a:04 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZaBlHXiwccchQIa0A+vYAHyihfAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjQxMTExMDAwMDAwWhcNMjQxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Mzg5MjdhYTUxYTA2OWQwMjgwNTAxOWRlOWY5YjA1Mzc5 ZWE5OWM3YTkzM2QxNzI1ODkxODJjMjdhNWU2YmZjMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJcouxwRZ1SK/hJPEOo0tPaZ+E9ZGFeTXUtFeZ0h4noLXW KcqfS09PNH/ntCmJPxflIKIzJObE8ZFkYH3oV+89kgznRd740GEUCHAXFvJQ8AwH xsmKIZ4O3iO9Y82qndTzOqNrzQNOkQIL/xh6O1NL3AxbCF3qErUlr153I50L9XXC BjrjrlCLg98b+LKxqG7OFHwYr+4e23Nag2YpE0wCHCFgJijcW8bDvnh+XqY6TOB6 N6Dmz7hTlwk4IrMZjlNl53pnaVUh11WDZdMQakw1TPlCXl7XMNxuHoUFF57DzrZj ckYKh9QpesIzN/aGoE4l9JSZXXkwTK8L0/zbdHwJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFa5xYbksxMkkwWQVRVyPde5SKjUwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjL2Q3MmFlY2U3LTA1NzEtNDYxZS05OGZjLTcwYzNjM2YxNjk4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmIAEHMAAwDQYJKoZIhvcNAQELBQADggEBAGboO0EeylHbaA8Q+nU2U8MF 0Vx8QT1X625KGct70xIDOYquIUGOszmKS2BI5Xb9OY1iC2F+agvjtws8Oyr9kU5k /aN52o1Z7UAHcU8ekPv3WLRfmRsQMZYP8QoY0pjrTzflkCaX025U/bRQOCHbrpcl yyeB4x+UCzhx1V+rwleXsyBFz89DP8DRSXhXhmBiHmb90nYZ3OM+qcPk9L/GDLFE emmR9wR+bXpA9ATURO3DwCtOm6mN2973+AhDkBKFY9eMn4729uyRCfNqunb0RzXn xVElaImTk/lTk7sPcqa6UsRgVkz91CJzOArL1JwAtzvgwh2AqxcH1II4ilstKgQ= -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:48 2024 by rpki-client on console-fra.rpki-client.org