$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2380e964-f7b9-45fc-86f9-20cb3046f265.roa File: 2380e964-f7b9-45fc-86f9-20cb3046f265.roa (raw, json) Hash identifier: 9etZvVBShDH9dt+IOLsjqy92cR7vtDMKEMvt3YAMaME= Subject key identifier: 9C:2C:4C:8E:E8:E9:35:50:CB:5C:10:3F:1D:36:C3:05:DE:66:C9:ED Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 159951896103BA7AA97E2304FC8D4AF3A7E04748 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2380e964-f7b9-45fc-86f9-20cb3046f265.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:a200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:99:51:89:61:03:ba:7a:a9:7e:23:04:fc:8d:4a:f3:a7:e0:47:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=683b2228e7a8d922c70524af99b4c1f5b859a7a57998903554a59256b34345b4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:d2:53:a9:58:18:f5:81:12:7c:0a:0b:bc: a7:a2:78:d8:94:91:fb:df:ed:09:4d:67:fa:4c:2d: eb:13:e2:39:8c:ec:6a:61:a6:c3:cf:87:89:80:29: 65:9a:1f:9b:1a:4f:e2:21:7f:c3:4f:4c:e3:54:79: ce:28:cd:ba:ce:73:f6:be:cb:87:a7:4b:2d:81:5a: f2:77:9a:e3:73:89:a9:6b:76:12:df:f0:b6:8d:56: d2:fe:9c:3a:99:aa:e6:27:3b:0f:6e:9d:e5:cf:46: 16:81:80:ec:7a:75:26:d0:94:2b:3a:5c:0f:d6:06: 4e:26:9e:cd:a1:1e:90:7d:15:96:dc:b9:34:03:24: ec:7b:cb:e4:0e:f3:e1:6e:40:b8:fb:1d:8e:53:bb: 44:27:df:db:4b:13:b9:82:78:c5:4e:75:d1:19:7e: 9f:52:42:8e:8a:77:aa:cb:c8:49:80:68:98:7e:d4: ec:59:08:72:2f:e8:ce:4f:9d:68:29:d6:e0:a0:29: a1:1b:0f:fa:c7:1d:dc:0b:b0:0a:28:dc:d8:d3:b0: 1e:99:5e:c2:83:82:28:56:16:cc:4b:c0:44:75:d1: b0:01:46:a1:fb:65:5f:65:7b:92:98:96:1f:bb:d5: 94:5e:62:e8:55:9f:f0:37:b0:0e:5e:28:c0:f8:fe: 81:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2C:4C:8E:E8:E9:35:50:CB:5C:10:3F:1D:36:C3:05:DE:66:C9:ED X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2380e964-f7b9-45fc-86f9-20cb3046f265.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:a200::/40 Signature Algorithm: sha256WithRSAEncryption 70:48:0a:a4:7b:8e:2f:56:7d:f5:77:6c:a0:4a:53:47:a0:c2: 93:1d:a6:f2:10:f2:b0:7d:85:b6:9b:b6:5f:af:e4:a1:57:8c: 09:61:5b:a3:7a:c9:51:d9:0d:20:1b:60:37:2c:e4:32:23:53: 82:52:c8:47:ca:76:64:cf:93:01:a7:8a:1e:bd:3d:50:4f:98: e5:8d:54:97:56:03:22:f9:24:48:b0:64:2c:f8:8b:e6:c1:cc: 52:45:9d:c6:6e:ee:4a:3d:b8:2b:dd:75:be:4c:af:e9:71:fa: 88:b7:93:6f:66:3a:25:33:9d:b5:0c:d1:d4:a7:7d:0a:f8:c5: 3a:66:60:ae:f9:f7:04:01:d2:9c:5b:4b:d0:c4:a8:07:ea:70: 4e:a7:98:60:6a:da:26:a2:64:02:1a:2d:66:e2:76:68:c1:1f: 16:84:66:7e:34:26:7c:46:88:a6:f6:9a:71:06:63:1c:86:01: b4:80:52:1b:64:e4:3e:ad:51:cb:77:50:19:d0:fa:5e:b6:f5: 33:0f:cc:23:c2:b2:e8:76:39:68:f7:38:74:88:85:ad:22:d7: 7d:19:72:7c:ec:49:d4:99:57:b8:d2:6a:04:b6:19:f8:20:8a: 28:e0:0d:33:1e:55:47:12:2e:9e:38:ae:95:a1:91:5a:1e:cb: d4:9f:7d:ae -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFZlRiWEDunqpfiME/I1K86fgR0gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODNiMjIyOGU3YThkOTIyYzcwNTI0YWY5OWI0YzFmNWI4 NTlhN2E1Nzk5ODkwMzU1NGE1OTI1NmIzNDM0NWI0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuu9JTqVgY9YESfAoLvKeieNiUkfvf7QlNZ/pMLesT4jmM 7GphpsPPh4mAKWWaH5saT+Ihf8NPTONUec4ozbrOc/a+y4enSy2BWvJ3muNzialr dhLf8LaNVtL+nDqZquYnOw9uneXPRhaBgOx6dSbQlCs6XA/WBk4mns2hHpB9FZbc uTQDJOx7y+QO8+FuQLj7HY5Tu0Qn39tLE7mCeMVOddEZfp9SQo6Kd6rLyEmAaJh+ 1OxZCHIv6M5PnWgp1uCgKaEbD/rHHdwLsAoo3NjTsB6ZXsKDgihWFsxLwER10bAB RqH7ZV9le5KYlh+71ZReYuhVn/A3sA5eKMD4/oE/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUnCxMjujpNVDLXBA/HTbDBd5mye0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIzODBlOTY0LWY3YjktNDVmYy04NmY5LTIwY2IzMDQ2ZjI2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAJAAojANBgkqhkiG9w0BAQsFAAOCAQEAcEgKpHuOL1Z99XdsoEpTR6DC kx2m8hDysH2Ftpu2X6/koVeMCWFbo3rJUdkNIBtgNyzkMiNTglLIR8p2ZM+TAaeK Hr09UE+Y5Y1Ul1YDIvkkSLBkLPiL5sHMUkWdxm7uSj24K911vkyv6XH6iLeTb2Y6 JTOdtQzR1Kd9CvjFOmZgrvn3BAHSnFtL0MSoB+pwTqeYYGraJqJkAhotZuJ2aMEf FoRmfjQmfEaIpvaacQZjHIYBtIBSG2TkPq1Ry3dQGdD6Xrb1Mw/MI8Ky6HY5aPc4 dIiFrSLXfRlyfOxJ1JlXuNJqBLYZ+CCKKOANMx5VRxIunjiulaGRWh7L1J99rg== -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:20 2024 by rpki-client on console-ams.rpki-client.org