$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2645849a-4d1c-4d39-9157-62ba39467753.roa File: 2645849a-4d1c-4d39-9157-62ba39467753.roa (raw, json) Hash identifier: ln4Y3G8oEbemiYpP2Yk9AV7+YLSgOX1rYd1kVf2YgkY= Subject key identifier: CA:B0:E9:0D:40:3F:39:18:3B:75:12:BA:E8:54:93:0A:B6:2D:BA:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E407B00A2B1B079231116B084B7D1A3C0AC4E63 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2645849a-4d1c-4d39-9157-62ba39467753.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f70:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:40:7b:00:a2:b1:b0:79:23:11:16:b0:84:b7:d1:a3:c0:ac:4e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=02b39fe4815fbbe0f11732d589280e22513aab373fa36909e5f87a1d5ef79d13, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8f:fe:6b:8d:06:fb:2d:1a:b6:8a:3f:b5:8e: e5:1d:55:cc:56:f7:bb:92:26:2e:17:4b:c4:06:bf: 93:9c:24:6d:59:97:02:b4:fc:38:e9:6f:3e:4d:cc: 55:e9:a4:7e:cf:6d:25:37:e8:d2:db:16:fa:00:4d: 74:ea:e8:95:3e:28:2b:f5:67:61:76:ed:7c:81:d5: 37:e3:46:4d:7c:e4:23:01:d8:e9:58:50:1c:4e:42: 91:20:9d:1d:b9:fb:97:f4:39:88:e0:79:29:24:9a: 34:28:90:fe:32:c6:b9:78:40:7d:dc:9c:fe:de:76: 3f:b6:50:2c:20:56:b2:ef:71:8e:05:49:a1:61:dd: 8c:84:76:21:95:cd:92:b4:a5:95:4f:dc:4c:1e:9d: fa:83:a2:17:cf:54:62:61:44:94:ea:fa:2b:b1:fc: d2:79:32:37:97:41:2e:8f:05:0c:af:27:6d:73:ba: a7:b8:bf:08:f0:29:83:dd:60:12:30:9d:06:08:07: 6d:36:bc:07:79:aa:b7:6b:d2:1d:d4:2f:d9:27:f2: b5:af:e3:f2:e2:7e:a1:11:d1:cc:0e:80:92:2f:5e: 71:51:fa:81:83:1c:2b:f7:32:7d:e4:81:11:9c:88: 6d:8a:31:e3:1c:b5:31:00:30:93:9d:4f:c7:8d:bc: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B0:E9:0D:40:3F:39:18:3B:75:12:BA:E8:54:93:0A:B6:2D:BA:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2645849a-4d1c-4d39-9157-62ba39467753.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f70:c000::/40 Signature Algorithm: sha256WithRSAEncryption 14:32:35:6b:a5:7b:7f:84:9e:ad:dd:17:2a:86:85:79:67:45: 10:2a:9d:8d:8e:df:01:7c:1a:89:a3:88:20:49:bd:d1:3f:43: f9:eb:3b:45:ec:8c:61:fe:c1:f8:db:58:c5:9d:9a:cd:f0:99: 38:12:93:96:dd:6a:37:ad:b6:4d:de:1f:95:23:31:dd:de:f9: d3:be:2a:e5:c9:80:a5:4e:6e:74:8d:2b:f3:28:9f:ce:69:bf: c9:85:e4:9e:9b:f6:f3:a5:f0:c2:f4:1d:d0:cc:38:ee:dc:3a: d3:89:53:64:bd:4f:d3:24:8c:6c:ba:1e:61:52:c7:f3:f9:2a: ba:97:dc:e9:cf:92:58:ef:1e:e8:57:ec:59:4a:78:30:dc:0b: b6:b9:57:c7:bc:34:55:b4:e4:46:80:43:e9:11:33:41:80:6d: 25:33:da:73:4c:61:02:0f:9b:41:cf:9d:5a:70:bf:44:11:63: 49:da:03:47:1e:11:43:27:5e:11:be:2d:a6:4b:8f:46:6a:b6: 36:b2:ab:2e:61:17:f9:6b:32:6c:51:5b:ef:1c:e9:31:04:2d: 95:3f:52:2f:15:5c:87:ea:7e:44:4f:9f:e2:8c:29:f2:11:15: e5:4c:8a:1d:f3:7b:31:ba:2a:76:a3:9b:11:d1:a0:7f:4d:7a: a8:fd:59:51 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULkB7AKKxsHkjERawhLfRo8CsTmMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMmIzOWZlNDgxNWZiYmUwZjExNzMyZDU4OTI4MGUyMjUx M2FhYjM3M2ZhMzY5MDllNWY4N2ExZDVlZjc5ZDEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaj/5rjQb7LRq2ij+1juUdVcxW97uSJi4XS8QGv5OcJG1Z lwK0/Djpbz5NzFXppH7PbSU36NLbFvoATXTq6JU+KCv1Z2F27XyB1TfjRk185CMB 2OlYUBxOQpEgnR25+5f0OYjgeSkkmjQokP4yxrl4QH3cnP7edj+2UCwgVrLvcY4F SaFh3YyEdiGVzZK0pZVP3EwenfqDohfPVGJhRJTq+iux/NJ5MjeXQS6PBQyvJ21z uqe4vwjwKYPdYBIwnQYIB202vAd5qrdr0h3UL9kn8rWv4/LifqER0cwOgJIvXnFR +oGDHCv3Mn3kgRGciG2KMeMctTEAMJOdT8eNvERjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUyrDpDUA/ORg7dRK66FSTCrYtugEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI2NDU4NDlhLTRkMWMtNGQzOS05MTU3LTYyYmEzOTQ2Nzc1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9wwDANBgkqhkiG9w0BAQsFAAOCAQEAFDI1a6V7f4Serd0XKoaFeWdF ECqdjY7fAXwaiaOIIEm90T9D+es7ReyMYf7B+NtYxZ2azfCZOBKTlt1qN622Td4f lSMx3d75074q5cmApU5udI0r8yifzmm/yYXknpv286XwwvQd0Mw47tw604lTZL1P 0ySMbLoeYVLH8/kqupfc6c+SWO8e6FfsWUp4MNwLtrlXx7w0VbTkRoBD6REzQYBt JTPac0xhAg+bQc+dWnC/RBFjSdoDRx4RQydeEb4tpkuPRmq2NrKrLmEX+WsybFFb 7xzpMQQtlT9SLxVch+p+RE+f4owp8hEV5UyKHfN7MboqdqObEdGgf016qP1ZUQ== -----END CERTIFICATE-----Generated at Wed May 8 02:08:06 2024 by rpki-client on console-ams.rpki-client.org