$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ee79c98-182f-4893-8e2e-0282a7731dda.roa File: 3ee79c98-182f-4893-8e2e-0282a7731dda.roa (raw, json) Hash identifier: QW2SOJEGnTHvEtpo5EVcqRtzcaMWRwtJv1lSAf7zs04= Subject key identifier: C4:4E:C1:70:9F:0D:79:DA:95:3C:30:DF:7D:4A:81:DA:D7:2E:0F:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54323B042920F446D9D2F15DB7E0008750C776B2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ee79c98-182f-4893-8e2e-0282a7731dda.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1e:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:32:3b:04:29:20:f4:46:d9:d2:f1:5d:b7:e0:00:87:50:c7:76:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=d94858543085e4b41f4e888991e910492c49b65e0d574ba8b94dc5a3314635de, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:75:af:ca:7c:10:cd:88:4a:2a:ec:4a:a2:c6: ab:a8:1f:f7:16:16:8f:e5:a1:98:2c:7d:a9:11:3b: 87:65:74:45:bf:82:a2:3e:1d:13:f3:6e:da:91:97: e4:b7:ac:8d:39:38:fb:10:7a:df:83:d8:01:28:57: 0c:8a:dd:da:db:fe:bd:e4:82:63:be:8b:d5:82:5b: 3e:8e:bb:ff:6d:3b:2a:b0:25:a0:17:cc:0d:d9:ed: 47:1b:ac:03:9a:1c:83:be:ba:e1:57:c4:3c:b5:57: cb:e3:3f:57:e0:4f:d9:22:05:8e:a9:fe:ec:df:cd: b1:80:56:81:8d:a5:24:73:ab:a2:77:d8:e9:c0:46: 3e:06:0a:3e:28:f4:0d:09:bd:08:62:99:ec:60:c2: ce:9f:e3:70:13:5f:7c:ef:b0:63:8e:33:e1:77:ca: 5c:ab:65:bb:41:55:d5:cc:58:8f:8c:af:32:4f:c5: 52:c3:6d:0c:c1:c3:b7:68:80:a1:48:9f:e6:eb:f3: 78:67:f8:f4:a5:13:fc:79:cf:07:22:b9:b3:22:67: b1:ef:4d:ae:50:7c:13:cd:af:07:a5:50:7b:2c:6d: 0f:99:dc:21:74:bf:97:26:2d:48:61:bc:67:dd:13: e3:dc:e8:42:32:98:02:b3:9c:ea:85:b4:7b:78:f0: 34:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4E:C1:70:9F:0D:79:DA:95:3C:30:DF:7D:4A:81:DA:D7:2E:0F:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ee79c98-182f-4893-8e2e-0282a7731dda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1e:8000::/36 Signature Algorithm: sha256WithRSAEncryption 4e:1d:7b:21:04:86:fb:0d:cd:0a:0c:6e:54:a9:dc:c0:d8:18: df:a7:eb:ed:b6:d5:9b:84:32:0f:cd:12:60:0b:ac:ff:e7:f4: ea:fe:09:6a:f8:a8:f2:00:fe:7b:92:4f:ad:87:a5:38:02:db: 6c:da:b0:cc:ba:e4:35:b0:e1:d7:30:2d:8e:cc:00:36:ee:7e: 1e:c7:d6:e5:b2:d0:b3:36:07:ce:54:fe:95:63:bc:d0:9c:9f: 27:b7:f4:84:9c:3c:6a:e0:b3:0f:b7:3b:f3:2b:a4:21:f9:66: 51:34:a7:b5:91:d5:b1:53:63:54:2f:31:90:ab:c2:6d:ad:45: 0a:b3:ec:36:26:98:d4:98:77:57:21:2c:24:04:41:95:69:0a: 4c:18:5a:3c:ea:61:85:f0:da:f1:88:5d:5c:eb:1b:b9:2c:86: 3c:cc:d2:ab:fb:16:d9:27:99:32:41:65:87:43:03:10:bc:fe: 0d:07:27:5e:79:44:9a:ca:22:52:71:22:6b:28:ed:e2:0c:b7: b1:d5:9a:6d:e1:8f:39:3b:02:3b:51:30:cd:10:42:af:bf:50: 2e:96:15:cf:27:f6:d4:65:73:44:0f:ad:2b:93:41:ca:39:8b: 1e:09:d9:ee:6e:2a:39:b0:fd:69:bd:92:c4:da:ed:48:33:3c: 36:86:ef:0d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVDI7BCkg9EbZ0vFdt+AAh1DHdrIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTQ4NTg1NDMwODVlNGI0MWY0ZTg4ODk5MWU5MTA0OTJj NDliNjVlMGQ1NzRiYThiOTRkYzVhMzMxNDYzNWRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTda/KfBDNiEoq7EqixquoH/cWFo/loZgsfakRO4dldEW/ gqI+HRPzbtqRl+S3rI05OPsQet+D2AEoVwyK3drb/r3kgmO+i9WCWz6Ou/9tOyqw JaAXzA3Z7UcbrAOaHIO+uuFXxDy1V8vjP1fgT9kiBY6p/uzfzbGAVoGNpSRzq6J3 2OnARj4GCj4o9A0JvQhimexgws6f43ATX3zvsGOOM+F3ylyrZbtBVdXMWI+MrzJP xVLDbQzBw7dogKFIn+br83hn+PSlE/x5zwciubMiZ7HvTa5QfBPNrwelUHssbQ+Z 3CF0v5cmLUhhvGfdE+Pc6EIymAKznOqFtHt48DRTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUxE7BcJ8NedqVPDDffUqB2tcuDy8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlZTc5Yzk4LTE4MmYtNDg5My04ZTJlLTAyODJhNzczMWRkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8egDANBgkqhkiG9w0BAQsFAAOCAQEATh17IQSG+w3NCgxuVKncwNgY 36fr7bbVm4QyD80SYAus/+f06v4Javio8gD+e5JPrYelOALbbNqwzLrkNbDh1zAt jswANu5+HsfW5bLQszYHzlT+lWO80JyfJ7f0hJw8auCzD7c78yukIflmUTSntZHV sVNjVC8xkKvCba1FCrPsNiaY1Jh3VyEsJARBlWkKTBhaPOphhfDa8YhdXOsbuSyG PMzSq/sW2SeZMkFlh0MDELz+DQcnXnlEmsoiUnEiayjt4gy3sdWabeGPOTsCO1Ew zRBCr79QLpYVzyf21GVzRA+tK5NByjmLHgnZ7m4qObD9ab2SxNrtSDM8NobvDQ== -----END CERTIFICATE-----Generated at Wed Apr 24 15:48:58 2024 by rpki-client on console-ams.rpki-client.org