$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa File: 4dac6043-34e0-4357-a5ac-4587a0261982.roa (raw, json) Hash identifier: BTZ5qRGTGc/axj6ajKWUejuQ2sXUlkPsY/BDNUucOto= Subject key identifier: F2:D5:6A:69:E5:E1:0E:AA:41:DB:75:5C:20:04:E2:41:3E:E8:06:E1 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3DDDEFD0D8303AAF2DFA989DD2D8010B148AB02C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:396::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:dd:ef:d0:d8:30:3a:af:2d:fa:98:9d:d2:d8:01:0b:14:8a:b0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=19772fc765d13f54b16a16032b94f02c1dbf79b091b2d28b8ea30025600f3e6c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4c:17:64:49:11:dc:85:0d:b7:72:4e:55:71: 6f:fd:9f:1a:ff:93:10:6f:80:19:de:8b:bf:29:14: eb:00:83:59:8a:f1:b5:81:cc:63:3c:90:e6:04:ae: 44:9c:64:b1:d0:1f:81:1f:dd:e7:57:92:c8:24:8f: 71:08:90:a4:8a:2c:b2:de:f3:ec:e0:26:f6:bb:e7: 7e:4a:0c:ba:b8:ad:b8:46:a7:73:3b:66:76:9b:4b: 48:81:d0:1e:2d:99:73:cd:c0:2f:ab:36:37:82:1f: 1b:a6:6b:49:aa:e4:8a:f4:cc:f3:06:15:ae:c4:63: e0:09:e0:4c:b3:b3:10:b4:f3:2a:c8:6c:43:18:90: a0:65:01:46:29:c8:14:16:2f:02:29:06:8f:fe:77: 70:0d:d7:25:e1:39:3c:fb:28:34:4a:fb:d3:e8:59: a1:00:bf:86:62:a2:a2:26:37:48:8c:6c:6c:61:5d: 97:f7:32:ee:36:48:60:2d:d5:8c:4c:cc:67:07:80: 03:d2:66:c1:59:a5:d9:bf:a9:c4:62:a9:27:d0:c5: c5:bf:53:6c:99:00:2a:72:9a:86:5e:0f:92:ec:17: ca:7d:8b:a3:a0:d6:0a:ca:46:d9:69:4d:71:b4:c2: 70:e9:75:12:65:59:65:ae:5e:04:29:44:d0:68:b5: f8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D5:6A:69:E5:E1:0E:AA:41:DB:75:5C:20:04:E2:41:3E:E8:06:E1 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:396::/48 Signature Algorithm: sha256WithRSAEncryption 32:3d:01:d7:15:9a:2f:ab:5f:bf:eb:b0:56:90:2a:9d:9c:1d: 4d:51:fb:27:68:c3:ea:52:88:68:13:f9:d4:f7:5b:ec:89:59: 5b:10:fa:15:2e:b7:f6:47:a1:82:e5:13:28:08:da:61:2c:18: 8b:bb:69:28:9d:c3:4b:1d:f3:4e:e7:49:11:b4:7e:5c:54:e5: 5c:83:ea:8e:02:b9:af:69:10:f4:a4:28:37:b2:b8:9d:2a:f1: be:2c:ae:4c:d9:75:b5:00:39:b6:56:7b:bb:9e:92:15:48:89: e8:d1:47:5f:a5:77:ad:c9:fd:00:82:9a:9e:3a:a5:dc:61:bd: a9:52:4f:9a:6f:37:9a:44:5e:14:a1:84:86:73:56:1d:7b:c6: c1:07:01:86:83:da:a4:10:07:af:4b:9f:65:49:30:e2:21:a3: 1b:2b:60:fd:f5:2c:d1:4a:e6:80:b3:4b:f9:2d:03:7c:8f:d1: 2b:c6:1c:fc:62:ee:07:0c:5f:31:ea:7b:f9:2b:cc:d2:87:0a: 97:c2:7a:2e:33:8f:a1:0f:14:12:ab:c3:c9:49:f4:64:b4:b2: 8e:34:ab:59:67:51:b0:4c:83:2c:7d:25:9f:09:8b:0b:09:bc: f3:25:65:ad:8a:27:c2:0c:54:c7:f1:e7:d5:00:f9:8d:52:d2: 45:96:c7:3f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPd3v0NgwOq8t+pid0tgBCxSKsCwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTc3MmZjNzY1ZDEzZjU0YjE2YTE2MDMyYjk0ZjAyYzFk YmY3OWIwOTFiMmQyOGI4ZWEzMDAyNTYwMGYzZTZjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7TBdkSRHchQ23ck5VcW/9nxr/kxBvgBnei78pFOsAg1mK 8bWBzGM8kOYErkScZLHQH4Ef3edXksgkj3EIkKSKLLLe8+zgJva7535KDLq4rbhG p3M7ZnabS0iB0B4tmXPNwC+rNjeCHxuma0mq5Ir0zPMGFa7EY+AJ4EyzsxC08yrI bEMYkKBlAUYpyBQWLwIpBo/+d3AN1yXhOTz7KDRK+9PoWaEAv4ZioqImN0iMbGxh XZf3Mu42SGAt1YxMzGcHgAPSZsFZpdm/qcRiqSfQxcW/U2yZACpymoZeD5LsF8p9 i6Og1grKRtlpTXG0wnDpdRJlWWWuXgQpRNBotfjTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8tVqaeXhDqpB23VcIATiQT7oBuEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzRkYWM2MDQzLTM0ZTAtNDM1Ny1hNWFjLTQ1ODdhMDI2MTk4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5YwDQYJKoZIhvcNAQELBQADggEBADI9AdcVmi+rX7/rsFaQKp2c HU1R+ydow+pSiGgT+dT3W+yJWVsQ+hUut/ZHoYLlEygI2mEsGIu7aSidw0sd807n SRG0flxU5VyD6o4Cua9pEPSkKDeyuJ0q8b4srkzZdbUAObZWe7uekhVIiejRR1+l d63J/QCCmp46pdxhvalST5pvN5pEXhShhIZzVh17xsEHAYaD2qQQB69Ln2VJMOIh oxsrYP31LNFK5oCzS/ktA3yP0SvGHPxi7gcMXzHqe/krzNKHCpfCei4zj6EPFBKr w8lJ9GS0so40q1lnUbBMgyx9JZ8JiwsJvPMlZa2KJ8IMVMfx59UA+Y1S0kWWxz8= -----END CERTIFICATE-----Generated at Sun May 5 23:33:24 2024 by rpki-client on console-fra.rpki-client.org