$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d2861a4-2160-4d5f-aa18-8a9321122721.roa File: 3d2861a4-2160-4d5f-aa18-8a9321122721.roa (raw, json) Hash identifier: GynCg/f2WaRJN75Pz0IpqbdpQDOxfSzbyL/krp/6QJo= Subject key identifier: 1E:41:57:28:7C:55:07:33:7F:D7:CD:A4:E6:59:77:17:DD:08:3A:C2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 553F30464A3A46C08B96A8AA5D08A9E33E1D21F6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d2861a4-2160-4d5f-aa18-8a9321122721.roa Signing time: Wed 24 Apr 2024 00:00:00 +0000 ROA not before: Wed 24 Apr 2024 00:00:00 +0000 ROA not after: Wed 29 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3f:30:46:4a:3a:46:c0:8b:96:a8:aa:5d:08:a9:e3:3e:1d:21:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 24 00:00:00 2024 GMT Not After : May 29 23:59:59 2024 GMT Subject: serialNumber=94f621e5b7774be82781ec48e64fa89cdf88f4960919cfa9eb528cb48426aa31, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:cb:e3:6a:04:ba:fd:08:1b:ee:5c:90:71: 72:75:b4:f0:46:bc:fc:e6:31:52:8a:a3:56:75:16: 6e:ca:e5:c6:b7:54:58:25:15:1a:26:27:e9:e1:69: 4d:76:88:6e:dc:49:be:75:c2:a3:15:34:4e:98:7f: de:c3:84:ef:75:cc:ec:1b:6b:be:74:98:9c:58:09: 8f:7e:d9:1c:35:cf:99:8c:fc:a3:49:ad:5d:ef:53: f0:d7:9e:e4:b7:ed:cf:8b:9c:20:c5:96:00:11:90: e0:55:a6:6f:34:4c:47:b6:14:4f:76:3d:e2:de:73: 19:86:60:c0:85:78:cb:2d:c2:de:64:e0:90:0f:e4: d0:af:53:ac:32:0f:d4:51:a3:04:ac:eb:20:ce:99: 43:97:15:1f:cb:dc:d4:b5:85:79:39:fe:0f:a7:26: e2:1a:62:2d:1c:6d:59:06:45:af:56:3d:e2:d9:56: 48:b0:9f:09:f3:c1:0e:71:c6:c1:15:69:f3:83:9a: 76:4f:5d:7b:0d:3f:05:a4:af:6f:16:5e:5e:8e:ff: 36:7a:8e:12:ce:03:56:02:1d:92:c7:9a:0c:92:f5: 4c:34:26:1b:75:33:2d:5e:d4:37:fb:a3:fe:e3:85: c8:f8:8d:1e:b5:9e:04:fe:1c:8a:4e:b5:75:63:6f: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:41:57:28:7C:55:07:33:7F:D7:CD:A4:E6:59:77:17:DD:08:3A:C2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d2861a4-2160-4d5f-aa18-8a9321122721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:a400::/40 Signature Algorithm: sha256WithRSAEncryption 36:af:08:ac:26:de:12:1e:9b:cb:37:b8:b4:b8:31:ef:8b:e7: e2:7c:83:c1:d4:97:95:a0:2a:d3:90:72:9f:b3:e1:87:4a:a4: 5a:70:eb:7f:32:ab:cf:7b:97:c5:09:58:bb:b2:d8:5e:1b:b6: b1:6f:7b:3f:3e:d4:fb:d9:08:78:c1:15:85:e2:77:03:9e:dd: 9f:87:b3:da:47:ce:d5:32:9f:fe:5a:10:bf:68:29:46:1b:03: d4:44:7b:7f:20:7d:9a:4a:00:55:94:b9:24:3b:a1:e5:51:6f: 18:46:f4:fa:5d:a2:27:53:1b:b2:aa:38:97:7c:66:11:70:e5: 19:e1:fa:bb:03:38:1c:ad:30:db:e9:2a:63:95:ac:63:0b:ac: 28:89:90:a4:ba:bd:1e:c3:b9:c5:d4:17:fb:69:b4:2b:7e:1d: a9:c5:a0:d6:1e:95:2d:11:5e:77:cc:87:5c:3d:dc:1d:26:00: d2:73:b6:e8:c4:67:c3:24:1e:72:13:11:ab:07:3d:d2:f1:5e: 8b:a3:ae:82:55:b3:35:34:64:6d:5c:7a:0d:4a:81:49:58:f9: a7:be:7b:98:e1:cb:8e:d7:d7:57:96:e8:46:ad:86:b1:21:c3: 60:7c:cd:ca:43:6c:9b:55:a8:37:25:71:8b:97:88:42:9f:7c: c2:9e:06:aa -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVT8wRko6RsCLlqiqXQip4z4dIfYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDI0MDAwMDAwWhcNMjQwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NGY2MjFlNWI3Nzc0YmU4Mjc4MWVjNDhlNjRmYTg5Y2Rm ODhmNDk2MDkxOWNmYTllYjUyOGNiNDg0MjZhYTMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC27cvjagS6/Qgb7lyQcXJ1tPBGvPzmMVKKo1Z1Fm7K5ca3 VFglFRomJ+nhaU12iG7cSb51wqMVNE6Yf97DhO91zOwba750mJxYCY9+2Rw1z5mM /KNJrV3vU/DXnuS37c+LnCDFlgARkOBVpm80TEe2FE92PeLecxmGYMCFeMstwt5k 4JAP5NCvU6wyD9RRowSs6yDOmUOXFR/L3NS1hXk5/g+nJuIaYi0cbVkGRa9WPeLZ VkiwnwnzwQ5xxsEVafODmnZPXXsNPwWkr28WXl6O/zZ6jhLOA1YCHZLHmgyS9Uw0 Jht1My1e1Df7o/7jhcj4jR61ngT+HIpOtXVjbx2fAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHkFXKHxVBzN/182k5ll3F90IOsIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkMjg2MWE0LTIxNjAtNGQ1Zi1hYTE4LThhOTMyMTEyMjcyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4pDANBgkqhkiG9w0BAQsFAAOCAQEANq8IrCbeEh6byze4tLgx74vn 4nyDwdSXlaAq05Byn7Phh0qkWnDrfzKrz3uXxQlYu7LYXhu2sW97Pz7U+9kIeMEV heJ3A57dn4ez2kfO1TKf/loQv2gpRhsD1ER7fyB9mkoAVZS5JDuh5VFvGEb0+l2i J1Mbsqo4l3xmEXDlGeH6uwM4HK0w2+kqY5WsYwusKImQpLq9HsO5xdQX+2m0K34d qcWg1h6VLRFed8yHXD3cHSYA0nO26MRnwyQechMRqwc90vFei6OuglWzNTRkbVx6 DUqBSVj5p757mOHLjtfXV5boRq2GsSHDYHzNykNsm1WoNyVxi5eIQp98wp4Gqg== -----END CERTIFICATE-----Generated at Thu May 2 17:17:08 2024 by rpki-client on console-ams.rpki-client.org