$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dc95307b-87b9-475f-8acf-824b845b46f4.roa File: dc95307b-87b9-475f-8acf-824b845b46f4.roa (raw, json) Hash identifier: RSnztyA+7qGFdNYIZ1ZJsJaXvjBEsmJj3FHuqSFZmHk= Subject key identifier: 48:86:D1:57:22:39:32:45:0E:53:E6:66:02:85:06:CF:DC:58:58:16 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3E7AEE65634582C84A9716C6B1294077F9713FB2 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dc95307b-87b9-475f-8acf-824b845b46f4.roa Signing time: Tue 28 May 2024 00:00:00 +0000 ROA not before: Tue 28 May 2024 00:00:00 +0000 ROA not after: Tue 02 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:610::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Jun 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7a:ee:65:63:45:82:c8:4a:97:16:c6:b1:29:40:77:f9:71:3f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 28 00:00:00 2024 GMT Not After : Jul 2 23:59:59 2024 GMT Subject: serialNumber=677dd7a28231496d84067479fdcc93f369851805f0a6767fc44f96e0c97f917d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ce:9a:a0:ed:97:db:d2:62:18:5f:0a:63:d3: 70:e0:f4:8b:88:72:f1:36:5f:79:96:dc:26:89:64: 31:79:84:0a:f0:ee:88:f0:e9:b9:07:8c:81:d1:16: 7b:2a:0a:4b:8f:67:0a:da:2f:a7:e2:05:77:6b:36: 41:6b:4e:04:06:42:8c:b6:1b:68:4d:1f:67:22:0d: e3:23:c2:cf:ee:f2:7f:ee:04:21:de:18:48:3e:c2: fd:f0:3f:ac:52:37:9f:09:0e:3a:95:c1:f2:d5:79: 0e:0a:00:bc:44:58:69:8a:08:da:8b:fd:0f:0f:19: 29:fb:84:0f:aa:b5:90:39:cd:f8:58:5c:0b:4c:6b: 60:c0:99:8d:80:bf:8e:ef:ae:16:ba:6b:dd:9e:9c: cb:14:c4:b2:61:c0:63:42:f1:c5:3d:21:1c:08:2c: eb:83:68:19:40:a5:3a:02:d0:d4:37:8f:a1:5b:e1: 36:e9:e6:e4:b9:a4:ef:c8:fe:c1:42:63:42:e6:93: 9b:8e:5a:6d:38:79:5e:d8:b2:c1:42:79:7c:54:40: c5:2e:40:50:46:44:e1:58:4b:06:4d:14:4f:b6:09: 22:02:15:bb:44:42:44:d3:25:07:56:07:c8:cc:7b: d5:0d:57:f0:aa:51:9b:7f:f8:07:a6:21:13:ab:1c: e0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:86:D1:57:22:39:32:45:0E:53:E6:66:02:85:06:CF:DC:58:58:16 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dc95307b-87b9-475f-8acf-824b845b46f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:610::/48 Signature Algorithm: sha256WithRSAEncryption 6e:b3:29:41:e0:42:67:41:6c:07:61:76:be:ab:9f:c1:6a:90: 50:34:d8:43:c5:d7:d8:f0:e0:70:84:5d:7b:c2:f1:31:b6:27: 80:35:56:e3:c0:fc:ea:59:80:ad:ce:30:9b:ea:97:e1:fe:c6: f0:4c:04:08:4d:1f:0e:16:78:6d:eb:4e:68:c9:59:a7:5c:e4: 52:28:df:55:2d:35:b5:8e:c9:88:de:8e:7a:65:72:fe:92:87: 0c:8d:10:9a:c6:89:76:5e:8d:47:c1:07:32:57:9d:c4:12:27: 05:c9:be:2e:2f:98:5d:e0:ff:78:0a:80:1e:e1:de:cd:f6:a0: 79:28:0a:d1:aa:46:cf:8b:da:29:e4:4b:c7:2d:95:c5:7d:86: 1d:06:73:b5:30:7e:02:95:ff:11:8f:f3:a9:b7:92:5f:4e:75: 82:4c:a5:a6:cb:36:7c:f9:da:6a:3f:94:64:2e:ea:9d:1e:9b: 16:25:15:82:25:a4:db:56:c5:94:42:65:f5:b5:91:16:8f:64: 80:9f:5b:60:7d:ee:65:27:80:50:fc:57:7e:84:3b:af:0f:2c: 5c:d9:d1:de:2c:b9:aa:f9:a0:f8:5e:c5:7d:40:2b:78:f7:97: a8:c4:b4:5d:3e:9e:64:fa:98:3f:9e:f1:1b:46:f0:9c:4f:22: c5:38:95:31 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPnruZWNFgshKlxbGsSlAd/lxP7IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNTI4MDAwMDAwWhcNMjQwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzdkZDdhMjgyMzE0OTZkODQwNjc0NzlmZGNjOTNmMzY5 ODUxODA1ZjBhNjc2N2ZjNDRmOTZlMGM5N2Y5MTdkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRzpqg7Zfb0mIYXwpj03Dg9IuIcvE2X3mW3CaJZDF5hArw 7ojw6bkHjIHRFnsqCkuPZwraL6fiBXdrNkFrTgQGQoy2G2hNH2ciDeMjws/u8n/u BCHeGEg+wv3wP6xSN58JDjqVwfLVeQ4KALxEWGmKCNqL/Q8PGSn7hA+qtZA5zfhY XAtMa2DAmY2Av47vrha6a92enMsUxLJhwGNC8cU9IRwILOuDaBlApToC0NQ3j6Fb 4Tbp5uS5pO/I/sFCY0Lmk5uOWm04eV7YssFCeXxUQMUuQFBGROFYSwZNFE+2CSIC FbtEQkTTJQdWB8jMe9UNV/CqUZt/+AemIROrHOBbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSIbRVyI5MkUOU+ZmAoUGz9xYWBYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2RjOTUzMDdiLTg3YjktNDc1Zi04YWNmLTgyNGI4NDViNDZmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABhAwDQYJKoZIhvcNAQELBQADggEBAG6zKUHgQmdBbAdhdr6rn8Fq kFA02EPF19jw4HCEXXvC8TG2J4A1VuPA/OpZgK3OMJvql+H+xvBMBAhNHw4WeG3r TmjJWadc5FIo31UtNbWOyYjejnplcv6ShwyNEJrGiXZejUfBBzJXncQSJwXJvi4v mF3g/3gKgB7h3s32oHkoCtGqRs+L2inkS8ctlcV9hh0Gc7UwfgKV/xGP86m3kl9O dYJMpabLNnz52mo/lGQu6p0emxYlFYIlpNtWxZRCZfW1kRaPZICfW2B97mUngFD8 V36EO68PLFzZ0d4suar5oPhexX1AK3j3l6jEtF0+nmT6mD+e8RtG8JxPIsU4lTE= -----END CERTIFICATE-----Generated at Mon Jun 17 00:55:55 2024 by rpki-client on console-fra.rpki-client.org