$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cb318461-987d-4c0e-bf7e-c0523f561e38.roa File: cb318461-987d-4c0e-bf7e-c0523f561e38.roa (raw, json) Hash identifier: EK2YKf3rS3S7azh8FkTBYD4F638Dg3/UBjdJtu50920= Subject key identifier: AE:AA:53:1F:28:1C:4C:39:DA:CF:76:4F:5D:5B:AF:43:9B:A8:DD:01 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 66C5A9181DE7A33DE69452A62452EC64B7B20FFF Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cb318461-987d-4c0e-bf7e-c0523f561e38.roa Signing time: Fri 24 May 2024 00:00:00 +0000 ROA not before: Fri 24 May 2024 00:00:00 +0000 ROA not after: Fri 28 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:83::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c5:a9:18:1d:e7:a3:3d:e6:94:52:a6:24:52:ec:64:b7:b2:0f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 24 00:00:00 2024 GMT Not After : Jun 28 23:59:59 2024 GMT Subject: serialNumber=5c4e4f371fcc4e3446a08fb20b45499d0cd3e81d4bce34c447bbca4cfbca19fd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:fb:bc:68:49:63:df:0d:6c:a8:b7:08:5a: ad:ee:ef:6e:98:cc:8c:05:5a:f4:33:9f:37:34:5a: f7:ae:5a:c8:25:87:a9:a6:fd:3c:cd:c9:84:0d:42: ed:77:2c:8e:18:e1:fd:23:89:28:3f:9f:1e:04:e8: ac:90:b2:63:02:ab:67:91:df:05:16:18:57:b1:69: cc:9a:a3:37:e4:99:8f:90:2c:c5:4b:b7:2a:6d:6e: f7:fe:de:18:c7:a8:3f:15:fc:1a:16:61:68:f3:87: 82:a4:60:a8:62:08:a3:5a:c6:d7:20:70:8e:21:be: 27:d6:28:1b:28:1f:a1:23:6c:98:4d:ae:1b:6f:91: a8:c8:bf:ba:49:74:8a:31:16:47:c9:f5:c1:2d:f3: e0:05:d8:c5:90:e2:92:b8:b8:87:f7:d0:d7:55:4e: 8c:e2:3e:e5:4b:c0:f5:53:87:12:e9:1c:8a:8b:60: 5d:17:66:22:a2:45:c6:8f:3d:42:93:2c:a9:af:c1: 76:76:c2:80:77:1b:d3:c6:7a:73:00:ab:98:b2:b2: 4b:cd:c8:49:86:15:c0:a4:37:63:5b:a6:4f:ed:7f: a0:f8:f7:12:86:3d:c3:9f:8d:3a:ef:46:87:90:74: 30:59:eb:8a:54:c5:27:b3:b1:ac:97:50:9a:0d:d6: e2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AA:53:1F:28:1C:4C:39:DA:CF:76:4F:5D:5B:AF:43:9B:A8:DD:01 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cb318461-987d-4c0e-bf7e-c0523f561e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:83::/48 Signature Algorithm: sha256WithRSAEncryption 77:fa:16:f0:0b:c7:4d:8f:58:0e:2d:7d:2d:b5:96:19:25:f9: 24:70:9b:e9:71:42:c1:8a:29:2b:2b:f7:3d:38:e0:fa:0e:4e: 0d:e3:f7:fc:0b:ce:6d:8d:65:a5:33:95:71:2c:da:88:a7:1a: 0d:e4:a3:28:7b:2e:6e:9c:b5:b4:12:53:da:56:89:c8:7c:42: 3b:1a:3a:97:61:7d:27:16:30:45:5b:d0:6c:ca:53:a2:82:c6: ba:e9:95:ec:44:80:2d:d1:41:eb:1c:89:80:cf:9e:9f:69:3f: 33:f0:cc:fa:17:c2:f2:be:22:89:fc:07:1b:b0:74:4d:44:e8: 4c:f8:2a:fd:09:93:df:b9:46:1f:f3:bc:1a:c5:81:70:71:b1: 50:d7:50:cc:89:22:1c:61:ce:be:44:c6:1d:11:f0:01:19:98: f4:59:d9:39:2e:e7:ea:8d:e1:46:79:d4:d4:31:cc:9a:2c:f6: ba:df:92:21:e3:ab:2f:7b:01:7a:58:76:15:bf:88:d2:b2:e0: 83:46:df:9e:bc:29:ba:7d:58:ff:4b:ab:d7:4e:f0:92:73:3d: 68:43:b0:7b:c7:b5:77:49:f4:bf:63:2c:b5:7a:c1:7e:c8:b2: 9e:46:46:d8:8e:9a:f0:08:e1:96:32:6c:f1:2e:48:f8:31:0c: 0b:de:af:0e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZsWpGB3noz3mlFKmJFLsZLeyD/8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQwNTI0MDAwMDAwWhcNMjQwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzRlNGYzNzFmY2M0ZTM0NDZhMDhmYjIwYjQ1NDk5ZDBj ZDNlODFkNGJjZTM0YzQ0N2JiY2E0Y2ZiY2ExOWZkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv8Pu8aElj3w1sqLcIWq3u726YzIwFWvQznzc0WveuWsgl h6mm/TzNyYQNQu13LI4Y4f0jiSg/nx4E6KyQsmMCq2eR3wUWGFexacyaozfkmY+Q LMVLtyptbvf+3hjHqD8V/BoWYWjzh4KkYKhiCKNaxtcgcI4hvifWKBsoH6EjbJhN rhtvkajIv7pJdIoxFkfJ9cEt8+AF2MWQ4pK4uIf30NdVToziPuVLwPVThxLpHIqL YF0XZiKiRcaPPUKTLKmvwXZ2woB3G9PGenMAq5iyskvNyEmGFcCkN2Nbpk/tf6D4 9xKGPcOfjTrvRoeQdDBZ64pUxSezsayXUJoN1uIBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrqpTHygcTDnaz3ZPXVuvQ5uo3QEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2NiMzE4NDYxLTk4N2QtNGMwZS1iZjdlLWMwNTIzZjU2MWUzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAIMwDQYJKoZIhvcNAQELBQADggEBAHf6FvALx02PWA4tfS21lhkl +SRwm+lxQsGKKSsr9z044PoOTg3j9/wLzm2NZaUzlXEs2oinGg3koyh7Lm6ctbQS U9pWich8QjsaOpdhfScWMEVb0GzKU6KCxrrplexEgC3RQesciYDPnp9pPzPwzPoX wvK+Ion8BxuwdE1E6Ez4Kv0Jk9+5Rh/zvBrFgXBxsVDXUMyJIhxhzr5Exh0R8AEZ mPRZ2Tku5+qN4UZ51NQxzJos9rrfkiHjqy97AXpYdhW/iNKy4ING3568Kbp9WP9L q9dO8JJzPWhDsHvHtXdJ9L9jLLV6wX7Isp5GRtiOmvAI4ZYybPEuSPgxDAverw4= -----END CERTIFICATE-----Generated at Sun Jun 16 16:37:51 2024 by rpki-client on console-fra.rpki-client.org