$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d766739-1e1d-4cc2-aa74-f851801a7751.roa File: 7d766739-1e1d-4cc2-aa74-f851801a7751.roa (raw, json) Hash identifier: 4n03i6TjE2bcCcBLy6Ia0rF/iAZTuoIPZzaoIFul0F4= Subject key identifier: 01:F8:C3:52:E6:51:0E:C7:17:15:8C:33:98:C0:CD:DE:F4:EB:74:57 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0C3729D43CFD52455E348E5080990414749FFA03 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d766739-1e1d-4cc2-aa74-f851801a7751.roa Signing time: Mon 03 Jun 2024 00:00:00 +0000 ROA not before: Mon 03 Jun 2024 00:00:00 +0000 ROA not after: Mon 08 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:37:29:d4:3c:fd:52:45:5e:34:8e:50:80:99:04:14:74:9f:fa:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 3 00:00:00 2024 GMT Not After : Jul 8 23:59:59 2024 GMT Subject: serialNumber=a2b1f824ab17de6ab39282d2de9d55d1e0450d5aebdccb17a6b47c20993941f0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b6:88:0a:04:17:08:32:a5:67:6b:07:41:49: 8f:83:8d:e1:b2:44:e8:78:d7:d5:22:f2:7c:eb:42: 49:73:e7:31:da:be:c1:42:28:da:03:aa:41:c8:0a: aa:10:a5:64:59:4d:52:ba:43:03:a8:f5:da:c3:90: ce:8d:14:da:1c:77:4b:28:ba:8b:7d:40:80:4d:d3: 7a:25:58:7d:ec:f4:6f:c5:29:d1:4b:ed:fe:e8:1c: ff:7c:6d:7a:86:bf:d8:16:dd:87:ad:fd:36:82:05: 15:c1:c2:e3:4b:0f:1c:45:1d:0f:f0:10:e5:0f:b6: da:88:32:55:ee:0b:29:4e:8e:18:56:5a:a7:a5:ab: fb:69:d2:7f:4d:36:ad:e1:51:11:7a:a1:4a:0f:d4: ec:76:e7:fc:3e:42:97:f1:fb:6b:b4:83:6c:97:f4: a3:5c:d8:a1:d8:bd:1f:f4:22:7e:85:05:45:ef:a8: b8:8b:ef:2d:e8:ee:a0:5e:63:40:76:d6:f4:8a:68: 54:d1:9f:53:7b:70:76:06:ac:20:2a:ec:81:d4:96: a2:b0:5c:03:93:55:57:91:36:3d:a5:f8:d5:ab:41: 1e:70:c3:66:dd:21:a3:54:4f:31:1e:82:5f:76:18: 8e:d7:df:52:14:15:20:8f:ae:61:66:ab:2f:36:9d: 15:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F8:C3:52:E6:51:0E:C7:17:15:8C:33:98:C0:CD:DE:F4:EB:74:57 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d766739-1e1d-4cc2-aa74-f851801a7751.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:300::/48 Signature Algorithm: sha256WithRSAEncryption 36:fe:41:7f:1b:25:fa:5e:dd:1f:ae:e2:b5:81:b5:5a:a0:01: 79:71:0f:23:37:fa:80:19:4f:e3:03:13:68:5b:b0:d1:d4:0f: 59:f2:b1:7f:19:d2:d5:d2:ae:b9:bc:61:ad:95:09:98:52:fa: 76:0e:0d:85:38:7c:ae:a7:3d:89:b2:8a:f8:a2:25:9f:40:be: d4:96:88:31:f1:91:b9:a0:29:8a:a4:19:c7:fa:2e:73:16:95: f3:8d:8e:05:7b:a0:98:4f:e8:d7:22:a8:96:f5:66:29:6f:f0: 68:69:99:d7:d1:62:f0:03:82:de:49:55:cd:c8:99:9d:f8:de: 16:a1:53:1d:3d:4d:cf:c1:96:5a:6d:e6:a1:35:98:5f:03:03: 7a:e3:48:08:72:9a:68:ac:b6:77:52:52:c1:41:ab:56:21:dd: ed:88:c2:89:22:72:f5:f7:69:a6:04:9f:48:00:86:fc:35:07: 09:92:c2:a3:c9:59:55:a3:af:ed:7a:81:7c:31:b2:20:47:4d: a2:1a:8b:6d:6a:e1:0c:c7:ef:dd:61:48:bd:f5:2b:fa:48:9d: be:6d:4a:b1:9b:c1:a2:0a:69:5b:ac:ca:3c:10:70:9d:62:39: 38:e6:80:3c:3b:17:b4:88:07:3e:cb:98:cb:f2:77:e0:9a:32: 4e:c1:53:f2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDDcp1Dz9UkVeNI5QgJkEFHSf+gMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQwNjAzMDAwMDAwWhcNMjQwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmIxZjgyNGFiMTdkZTZhYjM5MjgyZDJkZTlkNTVkMWUw NDUwZDVhZWJkY2NiMTdhNmI0N2MyMDk5Mzk0MWYwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNtogKBBcIMqVnawdBSY+DjeGyROh419Ui8nzrQklz5zHa vsFCKNoDqkHICqoQpWRZTVK6QwOo9drDkM6NFNocd0souot9QIBN03olWH3s9G/F KdFL7f7oHP98bXqGv9gW3Yet/TaCBRXBwuNLDxxFHQ/wEOUPttqIMlXuCylOjhhW Wqelq/tp0n9NNq3hURF6oUoP1Ox25/w+Qpfx+2u0g2yX9KNc2KHYvR/0In6FBUXv qLiL7y3o7qBeY0B21vSKaFTRn1N7cHYGrCAq7IHUlqKwXAOTVVeRNj2l+NWrQR5w w2bdIaNUTzEegl92GI7X31IUFSCPrmFmqy82nRVVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAfjDUuZRDscXFYwzmMDN3vTrdFcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdkNzY2NzM5LTFlMWQtNGNjMi1hYTc0LWY4NTE4MDFhNzc1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAwAwDQYJKoZIhvcNAQELBQADggEBADb+QX8bJfpe3R+u4rWBtVqg AXlxDyM3+oAZT+MDE2hbsNHUD1nysX8Z0tXSrrm8Ya2VCZhS+nYODYU4fK6nPYmy iviiJZ9AvtSWiDHxkbmgKYqkGcf6LnMWlfONjgV7oJhP6NciqJb1Zilv8GhpmdfR YvADgt5JVc3ImZ343hahUx09Tc/Bllpt5qE1mF8DA3rjSAhymmistndSUsFBq1Yh 3e2IwokicvX3aaYEn0gAhvw1BwmSwqPJWVWjr+16gXwxsiBHTaIai21q4QzH791h SL31K/pInb5tSrGbwaIKaVusyjwQcJ1iOTjmgDw7F7SIBz7LmMvyd+CaMk7BU/I= -----END CERTIFICATE-----Generated at Sun Jun 16 16:37:51 2024 by rpki-client on console-fra.rpki-client.org