$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34cdcbe8-6c77-4649-8808-acabc26403c1.roa File: 34cdcbe8-6c77-4649-8808-acabc26403c1.roa (raw, json) Hash identifier: j2nC2ZNJCTeUkrmBS264AJSukFAvhWpbC+t4G0QwFB8= Subject key identifier: 01:6C:68:E1:11:81:DB:B8:51:C5:15:71:B9:A0:CF:2C:75:B3:55:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 101DF75F905941BD4A1B8B0D7465AFAA2C9BBA82 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34cdcbe8-6c77-4649-8808-acabc26403c1.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f70:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1d:f7:5f:90:59:41:bd:4a:1b:8b:0d:74:65:af:aa:2c:9b:ba:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=7142a25fea3a527e882b35e24beedb128b73b10d09d7f7128b321886f4b6a20f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:8a:f9:e5:a5:51:ba:7e:42:b3:4e:e6:bd: b5:8a:43:6c:fc:e9:74:ff:1a:5f:78:d5:65:bf:b5: 60:ac:c0:bf:39:bb:ca:d3:26:62:27:94:ad:62:42: ea:32:c3:e5:3e:74:48:16:ee:da:ec:52:52:6d:0f: 95:d8:b9:42:ed:5e:49:96:65:8f:70:ba:10:15:0c: e9:c9:79:64:1d:b6:a9:9c:e7:da:6c:27:d9:b6:43: cd:d9:29:ae:b3:0b:6d:f5:65:f9:fc:52:1b:a3:5b: 05:92:13:d3:70:64:5f:90:14:bd:a9:47:35:fd:09: 1c:39:fd:8e:23:e1:14:2b:09:4e:74:2f:d8:e1:27: b2:33:ba:c9:8d:60:cc:4e:f8:dd:92:ea:bf:ae:9a: d5:72:23:c7:54:8a:3e:c9:fc:8a:74:ef:8a:82:72: 0a:1b:dd:43:19:e1:2d:b5:30:25:03:e5:07:63:30: 5f:7d:ab:0e:27:32:7e:e6:c7:86:f0:2f:c8:ab:39: f0:31:5e:dd:3e:6d:2c:dd:63:07:b8:20:45:c2:3c: fe:85:72:99:d7:6e:6e:ae:eb:eb:2e:4f:e8:a9:a3: 90:ad:83:dd:cf:89:2b:9a:60:1e:12:d5:44:cb:d4: db:62:78:5f:57:bc:df:94:ee:4a:ca:78:c0:72:24: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6C:68:E1:11:81:DB:B8:51:C5:15:71:B9:A0:CF:2C:75:B3:55:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34cdcbe8-6c77-4649-8808-acabc26403c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f70:e000::/40 Signature Algorithm: sha256WithRSAEncryption cf:1a:ad:1d:fe:5f:04:3d:51:24:71:03:53:db:7e:ea:c6:07: fe:2a:1d:2d:e9:8b:59:b0:36:90:39:da:24:d4:f8:ec:4a:78: 2a:fa:c5:fe:d9:e0:d1:2a:7b:eb:45:5f:ac:ae:b7:32:be:33: 01:48:af:41:f3:57:c3:a4:b6:c2:c8:55:e2:87:7c:d1:5c:ac: 5d:aa:0e:41:0d:11:78:50:3f:61:57:6d:f8:fd:2e:f4:1e:8e: b8:ff:6d:53:3e:48:3f:15:1a:52:10:b4:de:56:4f:f2:df:f4: 1a:32:d6:16:82:77:9c:ae:9b:ce:af:09:80:56:44:f5:92:ae: f3:f1:14:cd:92:19:d4:bf:a3:74:ea:19:5a:d3:23:c5:27:e7: 24:6a:68:76:36:66:e7:a9:0c:b7:5a:22:15:fc:ab:93:97:1e: 2d:5a:1b:a6:24:a0:41:f8:1a:73:09:99:67:f8:66:0e:a4:ea: 59:34:2d:02:b9:77:cf:91:78:fd:52:02:67:9f:32:ef:83:b4: b0:3d:fe:cf:37:42:05:43:3f:80:9d:22:3e:de:ab:55:05:97: fd:9c:ad:0e:26:8e:39:e0:08:7b:d7:38:83:29:54:26:de:01: e1:7c:75:0c:3d:71:09:13:77:52:08:be:aa:db:3e:a5:f0:32: 00:0e:1c:d8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEB33X5BZQb1KG4sNdGWvqiybuoIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTQyYTI1ZmVhM2E1MjdlODgyYjM1ZTI0YmVlZGIxMjhi NzNiMTBkMDlkN2Y3MTI4YjMyMTg4NmY0YjZhMjBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJD4r55aVRun5Cs07mvbWKQ2z86XT/Gl941WW/tWCswL85 u8rTJmInlK1iQuoyw+U+dEgW7trsUlJtD5XYuULtXkmWZY9wuhAVDOnJeWQdtqmc 59psJ9m2Q83ZKa6zC231Zfn8UhujWwWSE9NwZF+QFL2pRzX9CRw5/Y4j4RQrCU50 L9jhJ7IzusmNYMxO+N2S6r+umtVyI8dUij7J/Ip074qCcgob3UMZ4S21MCUD5Qdj MF99qw4nMn7mx4bwL8irOfAxXt0+bSzdYwe4IEXCPP6FcpnXbm6u6+suT+ipo5Ct g93PiSuaYB4S1UTL1NtieF9XvN+U7krKeMByJAFVAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUAWxo4RGB27hRxRVxuaDPLHWzVbkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0Y2RjYmU4LTZjNzctNDY0OS04ODA4LWFjYWJjMjY0MDNjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9w4DANBgkqhkiG9w0BAQsFAAOCAQEAzxqtHf5fBD1RJHEDU9t+6sYH /iodLemLWbA2kDnaJNT47Ep4KvrF/tng0Sp760VfrK63Mr4zAUivQfNXw6S2wshV 4od80VysXaoOQQ0ReFA/YVdt+P0u9B6OuP9tUz5IPxUaUhC03lZP8t/0GjLWFoJ3 nK6bzq8JgFZE9ZKu8/EUzZIZ1L+jdOoZWtMjxSfnJGpodjZm56kMt1oiFfyrk5ce LVobpiSgQfgacwmZZ/hmDqTqWTQtArl3z5F4/VICZ58y74O0sD3+zzdCBUM/gJ0i Pt6rVQWX/ZytDiaOOeAIe9c4gylUJt4B4Xx1DD1xCRN3Ugi+qts+pfAyAA4c2A== -----END CERTIFICATE-----Generated at Fri Apr 26 03:49:28 2024 by rpki-client on console-ams.rpki-client.org