$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a3584f7-041e-49fc-bc83-59d995bec280.roa File: 8a3584f7-041e-49fc-bc83-59d995bec280.roa (raw, json) Hash identifier: YmvVevvRZOJWtJLI1NDov2f69cjsoRNP8o8g/qPEoB8= Subject key identifier: AF:09:C5:8A:49:15:88:79:F5:43:20:53:BB:D5:F6:60:E0:21:15:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5AABE03D29E6F3EDDCFF77A4EFD34FAF730F350D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a3584f7-041e-49fc-bc83-59d995bec280.roa Signing time: Fri 10 May 2024 00:00:00 +0000 ROA not before: Fri 10 May 2024 00:00:00 +0000 ROA not after: Fri 14 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff7:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ab:e0:3d:29:e6:f3:ed:dc:ff:77:a4:ef:d3:4f:af:73:0f:35:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:00:00 2024 GMT Not After : Jun 14 23:59:59 2024 GMT Subject: serialNumber=98c22a80e6427dff777a006bd41c3c8ef547516a0422db9b263d4aed50e0314a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:9f:de:85:99:72:3e:65:78:ab:ad:62:a5: 61:7a:64:66:05:ae:a4:d0:59:0f:3f:6d:59:38:63: 92:84:48:4b:3c:6f:0f:dd:75:a2:c0:16:d7:a5:b9: 65:2f:f6:45:73:3c:be:c7:d4:ea:39:71:35:72:c1: 87:10:ff:4d:bb:a8:07:67:1b:41:d3:2b:e3:61:f7: d6:82:7b:56:6c:0f:ed:d8:64:4c:cf:93:18:d2:a9: 30:5c:54:cf:c0:f7:b3:04:d8:ab:bf:3f:71:82:06: 65:c5:55:d1:9f:fa:1d:b1:16:19:b7:d3:55:fd:55: d5:aa:71:09:3b:81:ab:d9:ab:2f:b6:57:7f:0a:5c: e9:4e:f1:3b:2b:f7:15:da:ec:ae:b4:c1:10:9d:64: 5e:3a:c2:bf:00:e4:c0:0f:45:e0:4a:49:83:5b:dc: 75:92:85:c2:15:1b:3f:16:0c:42:81:de:fd:aa:0d: 7a:d0:b3:0b:c7:1a:76:ea:10:39:e9:60:22:10:65: 08:53:cc:0d:63:fd:91:d5:6a:7a:91:6d:a7:df:c8: 94:c0:17:a3:e7:f4:25:9a:0e:1e:26:d6:d8:d3:81: ab:f6:13:4d:8b:b0:35:79:f9:69:3d:dd:bc:cb:2c: 7f:c3:a8:c2:17:ba:19:d5:dc:93:ec:d7:6a:25:32: 19:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:09:C5:8A:49:15:88:79:F5:43:20:53:BB:D5:F6:60:E0:21:15:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a3584f7-041e-49fc-bc83-59d995bec280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:2000::/40 Signature Algorithm: sha256WithRSAEncryption a7:cc:cf:fc:9b:32:8a:65:e3:44:ca:75:be:ff:70:d1:94:33: b6:53:29:49:5f:44:3a:f4:62:68:28:11:ea:9d:b9:06:cf:1c: 40:26:3a:6c:fe:9d:6d:11:d4:90:73:7d:a9:40:f8:68:00:9a: 65:14:18:fb:ba:63:79:26:48:a8:d6:45:4d:5d:58:b5:5f:54: 5e:75:0f:ce:91:64:25:c4:73:90:8b:19:89:fe:86:d3:bf:4e: e9:10:ba:3a:2b:f2:38:db:31:73:d5:f1:f9:ab:51:2d:2b:f4: 47:a1:05:9a:07:37:9c:ff:b0:71:0b:c7:c4:2c:b7:b8:78:d1: a1:73:41:7b:98:12:06:5c:b2:ce:c6:7c:db:e8:3e:97:76:a3: d3:90:b8:18:7e:62:6f:1f:00:b8:14:be:e1:0b:ac:ae:38:f2: 4a:29:82:db:1a:42:28:9f:00:d2:18:a7:34:a0:d6:6a:a5:69: 6f:12:7b:78:cb:80:cd:26:7d:bd:90:3f:8d:a1:27:e1:51:73: 8d:b8:44:0f:6d:49:b0:32:16:63:98:9e:9b:9b:3c:69:59:12: d2:95:ff:fa:e7:06:b4:d0:47:8e:1b:b9:19:2b:34:be:20:d7: 5e:4d:25:8b:e0:e9:a7:fa:1f:81:3f:18:38:93:74:bf:d7:64: ab:45:2a:cb -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWqvgPSnm8+3c/3ek79NPr3MPNQ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTEwMDAwMDAwWhcNMjQwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OGMyMmE4MGU2NDI3ZGZmNzc3YTAwNmJkNDFjM2M4ZWY1 NDc1MTZhMDQyMmRiOWIyNjNkNGFlZDUwZTAzMTRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsu5/ehZlyPmV4q61ipWF6ZGYFrqTQWQ8/bVk4Y5KESEs8 bw/ddaLAFteluWUv9kVzPL7H1Oo5cTVywYcQ/027qAdnG0HTK+Nh99aCe1ZsD+3Y ZEzPkxjSqTBcVM/A97ME2Ku/P3GCBmXFVdGf+h2xFhm301X9VdWqcQk7gavZqy+2 V38KXOlO8Tsr9xXa7K60wRCdZF46wr8A5MAPReBKSYNb3HWShcIVGz8WDEKB3v2q DXrQswvHGnbqEDnpYCIQZQhTzA1j/ZHVanqRbaffyJTAF6Pn9CWaDh4m1tjTgav2 E02LsDV5+Wk93bzLLH/DqMIXuhnV3JPs12olMhkxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUrwnFikkViHn1QyBTu9X2YOAhFeowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhMzU4NGY3LTA0MWUtNDlmYy1iYzgzLTU5ZDk5NWJlYzI4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/3IDANBgkqhkiG9w0BAQsFAAOCAQEAp8zP/JsyimXjRMp1vv9w0ZQz tlMpSV9EOvRiaCgR6p25Bs8cQCY6bP6dbRHUkHN9qUD4aACaZRQY+7pjeSZIqNZF TV1YtV9UXnUPzpFkJcRzkIsZif6G079O6RC6OivyONsxc9Xx+atRLSv0R6EFmgc3 nP+wcQvHxCy3uHjRoXNBe5gSBlyyzsZ82+g+l3aj05C4GH5ibx8AuBS+4Qusrjjy SimC2xpCKJ8A0hinNKDWaqVpbxJ7eMuAzSZ9vZA/jaEn4VFzjbhED21JsDIWY5ie m5s8aVkS0pX/+ucGtNBHjhu5GSs0viDXXk0li+Dpp/ofgT8YOJN0v9dkq0Uqyw== -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:28 2024 by rpki-client on console-ams.rpki-client.org