$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa File: bd7b206c-0527-49d0-914a-fe7ee32411b1.roa (raw, json) Hash identifier: LAYFma6r6K/Ieza8gEP6MiNDsqmNOQYx+iZE4QAG5wU= Subject key identifier: 54:98:41:F6:1C:CA:C2:88:2E:76:F6:21:C3:8E:8F:34:6A:6C:3D:5B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A542A8B1D9AF976DB36BCEB91C8B10A0EA880D0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ffd:8066::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:54:2a:8b:1d:9a:f9:76:db:36:bc:eb:91:c8:b1:0a:0e:a8:80:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=900e6ba552000cb485da8a50a24d2489f4e5dd7b338ffe5efa6aba1271bf101b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:16:19:ec:77:9d:82:83:a2:21:a1:af:e2: de:fd:44:2c:28:45:4c:48:f9:5f:18:79:bd:5b:a1: e0:7c:a3:db:b0:33:44:b6:bb:03:44:60:45:00:cb: 03:c1:31:42:e6:b4:20:46:96:a8:6e:67:50:1a:fa: c9:36:66:95:28:6a:82:cb:a8:00:45:52:73:4e:5f: 04:20:b6:51:c4:f4:b8:ec:91:a3:fa:2d:a5:8a:dc: b7:47:23:a9:01:ff:8c:6a:27:44:02:a7:17:1b:78: b1:c3:0a:d4:49:e0:0b:1e:3c:77:8f:7d:f8:b6:34: 5e:39:22:c0:47:a7:5d:42:cd:05:41:78:9a:ab:53: be:ba:97:5b:c1:4c:de:b6:ca:9f:da:d5:08:09:2a: e8:8b:06:44:18:3a:7d:39:53:1a:c2:28:79:d0:2d: 91:7a:ad:d9:14:bb:4a:9f:a2:b1:ee:4c:fc:49:2a: 79:61:98:53:57:83:56:03:9d:b6:f6:33:7e:35:bf: c0:74:6a:6d:19:07:f4:71:79:12:02:49:ab:eb:4d: 71:61:2b:76:3d:b9:a3:40:b7:2a:a6:d9:96:c0:26: 26:ec:af:df:49:f3:ae:4b:a4:f2:2e:a5:e9:19:c9: 71:09:94:6e:32:12:f1:61:3f:94:e4:35:9d:3a:0e: 08:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:98:41:F6:1C:CA:C2:88:2E:76:F6:21:C3:8E:8F:34:6A:6C:3D:5B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:8066::/48 Signature Algorithm: sha256WithRSAEncryption a6:9e:3e:75:ed:75:1a:b2:01:99:27:c1:ab:df:d2:31:2b:1f: 28:b5:df:62:2d:9e:3f:1c:88:4f:26:fa:55:f8:46:5d:2b:3f: 49:75:34:07:56:87:41:3e:4d:97:1e:0f:72:58:0a:62:17:d6: cc:bd:60:0d:96:5d:50:01:63:cf:02:e6:15:18:45:2b:7f:38: 43:40:17:90:3d:0b:12:d8:00:bc:79:c6:d9:29:72:7b:56:00: 38:67:54:c2:5c:50:3a:58:f5:37:76:89:30:0c:37:5e:ae:b2: 99:da:c5:70:17:9e:4b:32:0c:ac:2c:48:01:16:fa:ec:d4:49: 1f:ec:0f:a7:2a:b7:88:cf:2d:17:5c:a2:fa:6e:66:c8:73:e9: 4f:65:c0:b7:6d:af:54:b0:ff:df:c7:98:84:ac:55:32:f7:63: cd:9f:21:5c:79:c4:20:65:eb:5b:8d:42:7b:54:79:19:f0:de: 9e:76:66:93:3d:be:e3:b4:f9:11:82:1b:2a:e9:ea:86:1b:52: 2e:5e:36:25:57:37:a8:5e:af:90:f3:e3:9a:cd:a9:ae:b0:76: b4:a8:86:50:ce:73:1e:9d:1d:45:c4:62:36:e7:56:2b:9f:d8: f9:4a:d7:ba:e5:78:38:69:37:fa:76:87:bd:94:96:b2:dc:d8: 65:66:15:e0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKlQqix2a+XbbNrzrkcixCg6ogNAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDBlNmJhNTUyMDAwY2I0ODVkYThhNTBhMjRkMjQ4OWY0 ZTVkZDdiMzM4ZmZlNWVmYTZhYmExMjcxYmYxMDFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4CBYZ7HedgoOiIaGv4t79RCwoRUxI+V8Yeb1boeB8o9uw M0S2uwNEYEUAywPBMULmtCBGlqhuZ1Aa+sk2ZpUoaoLLqABFUnNOXwQgtlHE9Ljs kaP6LaWK3LdHI6kB/4xqJ0QCpxcbeLHDCtRJ4AsePHePffi2NF45IsBHp11CzQVB eJqrU766l1vBTN62yp/a1QgJKuiLBkQYOn05UxrCKHnQLZF6rdkUu0qforHuTPxJ KnlhmFNXg1YDnbb2M341v8B0am0ZB/RxeRICSavrTXFhK3Y9uaNAtyqm2ZbAJibs r99J865LpPIupekZyXEJlG4yEvFhP5TkNZ06DgilAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVJhB9hzKwogudvYhw46PNGpsPVswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkN2IyMDZjLTA1MjctNDlkMC05MTRhLWZlN2VlMzI0MTFiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gGYwDQYJKoZIhvcNAQELBQADggEBAKaePnXtdRqyAZknwavf0jEr Hyi132Itnj8ciE8m+lX4Rl0rP0l1NAdWh0E+TZceD3JYCmIX1sy9YA2WXVABY88C 5hUYRSt/OENAF5A9CxLYALx5xtkpcntWADhnVMJcUDpY9Td2iTAMN16uspnaxXAX nksyDKwsSAEW+uzUSR/sD6cqt4jPLRdcovpuZshz6U9lwLdtr1Sw/9/HmISsVTL3 Y82fIVx5xCBl61uNQntUeRnw3p52ZpM9vuO0+RGCGyrp6oYbUi5eNiVXN6her5Dz 45rNqa6wdrSohlDOcx6dHUXEYjbnViuf2PlK17rleDhpN/p2h72UlrLc2GVmFeA= -----END CERTIFICATE-----Generated at Mon May 6 00:46:58 2024 by rpki-client on console-ams.rpki-client.org