$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f72046d-9404-48f2-9660-112fbe6ce3f2.roa File: 1f72046d-9404-48f2-9660-112fbe6ce3f2.roa (raw, json) Hash identifier: jyoGS4UR82xai/KZent2EGANm42+h+owOwkfY8y4DfM= Subject key identifier: 53:F4:49:71:0F:1F:F2:23:28:06:C0:7D:C4:D7:3E:34:AF:CB:0B:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21EF82620B687AA3481464F49EBDA098741DC50A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f72046d-9404-48f2-9660-112fbe6ce3f2.roa Signing time: Sat 18 May 2024 00:00:00 +0000 ROA not before: Sat 18 May 2024 00:00:00 +0000 ROA not after: Sat 22 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ef:82:62:0b:68:7a:a3:48:14:64:f4:9e:bd:a0:98:74:1d:c5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 18 00:00:00 2024 GMT Not After : Jun 22 23:59:59 2024 GMT Subject: serialNumber=9e02d450a4818535f30b782c52880e11caff6ab457c22cc8552f90a119da691e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:bd:0c:1d:c3:5d:58:67:0c:69:4b:1a:b6: 00:7f:f6:a5:cd:bd:86:46:0f:42:6a:c7:a3:70:53: eb:cb:97:2b:32:ee:87:c6:97:29:57:cd:b3:52:47: 63:b4:f6:75:5b:bf:8a:54:e6:f5:73:ee:cf:6b:91: 20:66:1f:99:e5:d5:e2:a8:92:fe:6a:3d:28:86:82: e6:e7:c9:d1:b8:71:f1:b7:ab:65:69:91:b5:67:ba: 1c:3c:70:e0:b1:58:b6:ff:22:b6:fb:7c:9e:45:e1: 6b:31:31:32:92:44:79:d5:36:33:26:1b:65:69:ca: a3:20:e5:3b:ac:10:be:47:c4:68:5a:b1:3d:bc:43: 4e:85:3f:6a:4c:c4:d4:91:ec:9f:72:78:1f:27:7a: ab:eb:b1:47:64:35:10:a3:27:78:66:01:72:de:55: ad:75:ed:35:f6:71:83:a7:18:d8:25:af:ff:98:70: de:9d:6d:6a:1b:66:64:1a:5e:1d:e1:22:be:be:b3: e4:04:1f:6b:97:7c:47:ba:41:85:a4:fd:67:ec:8d: 5a:ab:ef:39:b3:cb:c0:c3:f7:eb:e1:47:bb:da:9c: d3:2c:e3:99:8a:0f:f2:76:11:e3:06:6e:db:85:e3: 5e:79:de:13:47:4c:ce:86:ea:78:b4:7e:72:b6:62: cd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F4:49:71:0F:1F:F2:23:28:06:C0:7D:C4:D7:3E:34:AF:CB:0B:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f72046d-9404-48f2-9660-112fbe6ce3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:3400::/40 Signature Algorithm: sha256WithRSAEncryption d3:7d:ca:ed:ee:98:18:7e:23:e9:ab:9e:8f:34:60:ae:03:6f: f0:e7:e0:3b:87:68:b6:e8:3f:05:63:e7:40:ab:b5:67:04:d6: fb:a5:1f:90:80:70:a6:7e:21:c5:be:35:40:d7:f8:f9:72:c3: 70:51:bb:6b:ea:1b:da:c5:94:b9:0a:9b:7c:1d:d0:6f:15:60: 41:70:da:05:a1:49:46:b2:ba:60:99:87:29:b3:ba:1b:d2:43: dd:ae:5d:76:51:0e:e5:1c:bd:55:6a:ef:3a:4a:22:cd:ac:ce: ea:d7:a9:2b:17:73:02:26:63:4e:0f:a1:73:be:69:4b:37:33: 57:24:f5:9a:c3:dc:1f:18:20:32:44:58:9f:00:f2:0a:b8:6b: 6e:bc:45:d4:45:d2:2c:90:24:76:23:a4:54:e5:ca:ef:20:71: cb:1c:11:d1:1b:23:16:3e:81:ba:b2:68:96:43:7f:9b:0c:11: 00:99:d1:1d:de:ce:aa:4e:57:08:0d:ea:68:d7:eb:fc:79:01: b4:2e:e2:89:f6:c6:c7:aa:48:9f:20:5a:62:07:d3:03:dc:19: a4:de:cb:2b:e4:15:d1:3f:5d:7d:ae:de:a0:82:df:d6:46:9f: 18:64:c9:75:28:b6:88:cd:de:2e:4a:0c:6f:c3:9b:5e:91:ea: 24:1e:bd:9a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUIe+CYgtoeqNIFGT0nr2gmHQdxQowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTE4MDAwMDAwWhcNMjQwNjIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTAyZDQ1MGE0ODE4NTM1ZjMwYjc4MmM1Mjg4MGUxMWNh ZmY2YWI0NTdjMjJjYzg1NTJmOTBhMTE5ZGE2OTFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ1b0MHcNdWGcMaUsatgB/9qXNvYZGD0Jqx6NwU+vLlysy 7ofGlylXzbNSR2O09nVbv4pU5vVz7s9rkSBmH5nl1eKokv5qPSiGgubnydG4cfG3 q2VpkbVnuhw8cOCxWLb/Irb7fJ5F4WsxMTKSRHnVNjMmG2VpyqMg5TusEL5HxGha sT28Q06FP2pMxNSR7J9yeB8neqvrsUdkNRCjJ3hmAXLeVa117TX2cYOnGNglr/+Y cN6dbWobZmQaXh3hIr6+s+QEH2uXfEe6QYWk/WfsjVqr7zmzy8DD9+vhR7vanNMs 45mKD/J2EeMGbtuF41553hNHTM6G6ni0fnK2Ys13AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUU/RJcQ8f8iMoBsB9xNc+NK/LC5wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmNzIwNDZkLTk0MDQtNDhmMi05NjYwLTExMmZiZTZjZTNmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8ANDANBgkqhkiG9w0BAQsFAAOCAQEA033K7e6YGH4j6auejzRgrgNv 8OfgO4dotug/BWPnQKu1ZwTW+6UfkIBwpn4hxb41QNf4+XLDcFG7a+ob2sWUuQqb fB3QbxVgQXDaBaFJRrK6YJmHKbO6G9JD3a5ddlEO5Ry9VWrvOkoizazO6tepKxdz AiZjTg+hc75pSzczVyT1msPcHxggMkRYnwDyCrhrbrxF1EXSLJAkdiOkVOXK7yBx yxwR0RsjFj6BurJolkN/mwwRAJnRHd7Oqk5XCA3qaNfr/HkBtC7iifbGx6pInyBa YgfTA9wZpN7LK+QV0T9dfa7eoILf1kafGGTJdSi2iM3eLkoMb8ObXpHqJB69mg== -----END CERTIFICATE-----Generated at Sun Jun 2 02:06:48 2024 by rpki-client on console-fra.rpki-client.org