$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/425263d2-1443-4c26-b2e0-0cad299e4931.roa File: 425263d2-1443-4c26-b2e0-0cad299e4931.roa (raw, json) Hash identifier: NWEEan3OcQ1vVD2GL/iMlFfHrZTy3J1sZkruOZP3wGg= Subject key identifier: D6:97:6F:14:53:55:5A:90:60:AA:AA:95:A1:E5:27:E0:5D:5B:62:DC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5D8E036FE104D12F13A4FDC973A3568D6D3AC088 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/425263d2-1443-4c26-b2e0-0cad299e4931.roa Signing time: Sat 25 May 2024 00:00:00 +0000 ROA not before: Sat 25 May 2024 00:00:00 +0000 ROA not after: Sat 29 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:730::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:8e:03:6f:e1:04:d1:2f:13:a4:fd:c9:73:a3:56:8d:6d:3a:c0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 25 00:00:00 2024 GMT Not After : Jun 29 23:59:59 2024 GMT Subject: serialNumber=af512d5320d98cd5243a9a60c629fb1e9cd1cd4d2ecca61c9a35108ebfa1c11b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:72:a2:d8:48:ea:12:46:9f:b6:59:18:71:ff: 06:bf:a5:c1:65:36:6e:31:75:dc:f5:6e:56:65:fb: f2:ff:b3:b6:72:dd:94:55:92:06:c6:91:39:67:31: 21:40:13:8f:3b:51:15:7c:0f:93:86:32:32:1c:ac: 08:24:8a:a5:23:64:a7:02:f9:b6:d8:c2:00:e0:80: 5b:30:72:bc:b6:6b:cd:d7:1f:1e:66:9a:63:eb:d6: 3c:e7:83:89:94:6d:80:47:15:eb:29:d9:74:02:24: 16:99:6f:15:65:a2:fd:1c:c0:d0:07:9b:5a:6b:fa: b4:2b:53:be:9c:48:1b:50:d7:52:7d:09:5c:02:e3: e4:c0:34:0c:fb:4e:85:bc:96:11:3d:87:a4:4d:e6: 2b:63:c5:39:4c:59:ed:f4:3b:b8:02:92:69:bf:69: af:36:bd:cb:e2:7d:ec:35:dd:d2:4b:9a:ce:23:24: b5:9b:c9:d4:80:88:a1:6f:eb:1b:9c:6a:50:bc:28: 14:87:a4:44:00:35:0b:ca:b0:1a:25:7a:30:d8:50: 63:7f:8f:9b:de:ce:b6:a4:d4:fe:bd:33:07:30:ac: 26:a0:1f:02:4f:33:d5:9a:32:2e:d1:7b:ea:47:ae: 67:8f:82:83:ad:d0:37:59:67:0d:78:05:ab:db:a1: 21:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:97:6F:14:53:55:5A:90:60:AA:AA:95:A1:E5:27:E0:5D:5B:62:DC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/425263d2-1443-4c26-b2e0-0cad299e4931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:730::/48 Signature Algorithm: sha256WithRSAEncryption 2e:a6:2e:ba:aa:1c:67:ab:8c:bb:0a:13:69:d0:2a:3c:e7:bc: be:7b:6e:a9:35:27:2e:32:9a:61:ff:d4:4c:62:a5:55:5b:74: d5:39:4b:d7:10:f1:51:5d:c7:fd:47:df:f7:40:4c:8c:b9:93: 47:ca:89:54:38:51:70:50:79:c4:c3:1b:ee:d7:3d:fe:40:06: ae:a1:7f:9e:5a:d0:30:66:72:85:ec:11:4a:e4:dd:fb:cf:41: a4:a6:02:3b:b9:7e:9f:ad:a8:fe:75:3d:18:ec:c9:dc:26:0b: 83:18:34:40:ff:8f:16:16:57:0f:6b:0d:e2:c5:4b:02:88:1e: 15:cc:ce:64:80:b4:aa:03:26:5a:12:9d:6b:4a:c0:6c:5d:1d: a7:4a:90:15:42:a9:cb:22:bd:cc:6b:25:5a:d4:5c:11:98:89: af:61:ec:41:a7:77:74:88:9d:59:9b:23:47:81:83:cf:54:26: bc:eb:12:ce:00:74:5a:20:78:35:b6:ce:52:ee:ea:de:f3:e9: d7:b1:fa:c7:5b:7c:69:97:50:6a:74:1c:b7:94:df:7e:7b:a4: d5:99:24:2c:83:70:25:7d:33:c1:bb:7a:8c:65:2a:fd:75:1b: a8:3e:e3:39:8e:67:92:5d:20:d7:34:98:82:2b:de:57:e5:18: b7:6a:ff:89 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXY4Db+EE0S8TpP3Jc6NWjW06wIgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQwNTI1MDAwMDAwWhcNMjQwNjI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjUxMmQ1MzIwZDk4Y2Q1MjQzYTlhNjBjNjI5ZmIxZTlj ZDFjZDRkMmVjY2E2MWM5YTM1MTA4ZWJmYTFjMTFiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKcqLYSOoSRp+2WRhx/wa/pcFlNm4xddz1blZl+/L/s7Zy 3ZRVkgbGkTlnMSFAE487URV8D5OGMjIcrAgkiqUjZKcC+bbYwgDggFswcry2a83X Hx5mmmPr1jzng4mUbYBHFesp2XQCJBaZbxVlov0cwNAHm1pr+rQrU76cSBtQ11J9 CVwC4+TANAz7ToW8lhE9h6RN5itjxTlMWe30O7gCkmm/aa82vcvifew13dJLms4j JLWbydSAiKFv6xucalC8KBSHpEQANQvKsBolejDYUGN/j5vezrak1P69MwcwrCag HwJPM9WaMi7Re+pHrmePgoOt0DdZZw14BavboSE9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1pdvFFNVWpBgqqqVoeUn4F1bYtwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQyNTI2M2QyLTE0NDMtNGMyNi1iMmUwLTBjYWQyOTllNDkzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBzAwDQYJKoZIhvcNAQELBQADggEBAC6mLrqqHGerjLsKE2nQKjzn vL57bqk1Jy4ymmH/1ExipVVbdNU5S9cQ8VFdx/1H3/dATIy5k0fKiVQ4UXBQecTD G+7XPf5ABq6hf55a0DBmcoXsEUrk3fvPQaSmAju5fp+tqP51PRjsydwmC4MYNED/ jxYWVw9rDeLFSwKIHhXMzmSAtKoDJloSnWtKwGxdHadKkBVCqcsivcxrJVrUXBGY ia9h7EGnd3SInVmbI0eBg89UJrzrEs4AdFogeDW2zlLu6t7z6dex+sdbfGmXUGp0 HLeU3357pNWZJCyDcCV9M8G7eoxlKv11G6g+4zmOZ5JdINc0mIIr3lflGLdq/4k= -----END CERTIFICATE-----Generated at Sun Jun 16 16:37:51 2024 by rpki-client on console-fra.rpki-client.org