$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fc27f1a-6a23-4ab0-936c-d4ae9302a07d.roa File: 0fc27f1a-6a23-4ab0-936c-d4ae9302a07d.roa (raw, json) Hash identifier: MPJunG+vWfhd1XwtwYL0DuvO1GtG3eTwE5eOmDHI6G8= Subject key identifier: A0:33:7A:61:53:6A:94:A5:C0:EC:9D:D6:76:B7:D8:33:7F:74:C4:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67FE29438FB2F773E3582689A7D12B04E4E41C22 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fc27f1a-6a23-4ab0-936c-d4ae9302a07d.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f70:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fe:29:43:8f:b2:f7:73:e3:58:26:89:a7:d1:2b:04:e4:e4:1c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=d9a65eafece3a44a9fa6778b02e7a3fd6ba752e44618e37856989f3071ede433, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:47:92:2a:75:23:82:bc:eb:b3:9c:b1:5c:7c: c4:7b:7d:69:6f:4e:e3:ed:6e:be:ea:9f:e6:90:1c: d2:6e:5f:ad:e8:d7:a3:f6:05:35:f6:b9:23:89:f9: ed:89:03:ce:a0:bb:89:f0:00:89:6e:0f:a2:dd:3b: 9d:e1:b8:2f:6b:c6:94:86:07:3a:60:c0:92:af:1f: be:71:ca:21:91:69:be:89:f9:a2:55:2b:a9:0b:d7: 80:70:24:91:02:19:17:87:45:7a:87:c5:76:f5:5e: 0c:75:f3:ad:d1:eb:8c:af:c8:07:45:7f:c0:25:4c: 76:30:d3:53:4d:b5:f7:e1:ee:d7:80:fe:aa:2c:2f: c2:8f:d1:a5:98:b5:01:37:14:77:19:75:6f:c9:ee: 3d:3d:0a:ea:46:eb:a8:4e:db:e5:0e:96:a8:4b:37: c5:95:64:0d:9d:54:42:4e:0c:0f:11:aa:c7:19:42: 0c:ca:66:df:e9:2f:14:7b:70:54:b0:a8:6b:f1:9b: 17:5e:c5:f2:6a:8c:6c:12:83:bc:00:b1:2f:0a:bc: 88:7b:5c:d7:9b:48:76:a9:72:d3:8d:e3:97:d8:94: 9c:97:a8:c6:55:94:bb:57:96:13:74:3e:9c:2b:fb: b1:27:8e:69:4c:0f:a2:22:af:79:55:5e:c1:a7:3c: 5b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:33:7A:61:53:6A:94:A5:C0:EC:9D:D6:76:B7:D8:33:7F:74:C4:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fc27f1a-6a23-4ab0-936c-d4ae9302a07d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f70:5000::/40 Signature Algorithm: sha256WithRSAEncryption 20:61:ad:78:bf:6c:54:fb:96:c2:19:4d:e0:18:f2:00:e7:6c: ca:7a:e1:20:de:56:74:39:88:88:6f:28:d0:1c:64:db:2d:45: 60:ca:72:36:01:eb:dd:95:fe:03:76:f5:33:e7:23:e1:1b:ab: 74:32:21:17:47:7f:58:ac:b2:32:51:45:9f:91:82:87:56:ba: 1e:38:37:fa:eb:9f:b0:e6:ce:da:e1:c0:32:58:27:0c:2c:0c: e5:15:91:a0:fe:d5:63:f5:b0:33:90:5a:c0:2c:c5:c8:0e:76: d8:94:00:5c:70:40:73:48:8f:a9:4a:23:37:f7:74:4f:60:70: fb:d6:a1:a3:51:7d:65:c4:2e:bd:42:d6:10:77:03:9a:42:90: 27:18:a9:dc:69:fe:68:47:88:3f:5c:b3:2e:43:96:ba:c0:bf: 9a:6b:43:4e:4a:3c:9b:49:c5:aa:3e:a9:45:87:5d:9f:e6:5b: 81:1e:b2:65:42:06:32:6d:b0:5f:bd:50:d4:12:30:0a:fb:84: 0a:fa:e3:35:12:c4:08:5a:89:55:1f:75:4b:4d:54:9d:58:d9: e6:f8:14:fe:9e:0c:ae:4f:a3:77:28:81:cc:5d:ce:c6:72:08: c1:df:74:70:79:cb:31:40:e7:66:51:78:65:a9:5c:54:fb:ee: f5:73:95:fd -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZ/4pQ4+y93PjWCaJp9ErBOTkHCIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWE2NWVhZmVjZTNhNDRhOWZhNjc3OGIwMmU3YTNmZDZi YTc1MmU0NDYxOGUzNzg1Njk4OWYzMDcxZWRlNDMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJR5IqdSOCvOuznLFcfMR7fWlvTuPtbr7qn+aQHNJuX63o 16P2BTX2uSOJ+e2JA86gu4nwAIluD6LdO53huC9rxpSGBzpgwJKvH75xyiGRab6J +aJVK6kL14BwJJECGReHRXqHxXb1Xgx1863R64yvyAdFf8AlTHYw01NNtffh7teA /qosL8KP0aWYtQE3FHcZdW/J7j09CupG66hO2+UOlqhLN8WVZA2dVEJODA8RqscZ QgzKZt/pLxR7cFSwqGvxmxdexfJqjGwSg7wAsS8KvIh7XNebSHapctON45fYlJyX qMZVlLtXlhN0Ppwr+7EnjmlMD6Iir3lVXsGnPFt3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUoDN6YVNqlKXA7J3WdrfYM390xJ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmYzI3ZjFhLTZhMjMtNGFiMC05MzZjLWQ0YWU5MzAyYTA3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9wUDANBgkqhkiG9w0BAQsFAAOCAQEAIGGteL9sVPuWwhlN4BjyAOds ynrhIN5WdDmIiG8o0Bxk2y1FYMpyNgHr3ZX+A3b1M+cj4RurdDIhF0d/WKyyMlFF n5GCh1a6Hjg3+uufsObO2uHAMlgnDCwM5RWRoP7VY/WwM5BawCzFyA522JQAXHBA c0iPqUojN/d0T2Bw+9aho1F9ZcQuvULWEHcDmkKQJxip3Gn+aEeIP1yzLkOWusC/ mmtDTko8m0nFqj6pRYddn+ZbgR6yZUIGMm2wX71Q1BIwCvuECvrjNRLECFqJVR91 S01UnVjZ5vgU/p4Mrk+jdyiBzF3OxnIIwd90cHnLMUDnZlF4ZalcVPvu9XOV/Q== -----END CERTIFICATE-----Generated at Thu May 9 01:26:06 2024 by rpki-client on console-ams.rpki-client.org