$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53468e8d-2e7a-4cf3-9f68-7248fcabc5b9.roa File: 53468e8d-2e7a-4cf3-9f68-7248fcabc5b9.roa (raw, json) Hash identifier: mvHs0r5L3EfMOiOTxMzr7OST4wfI5OPo6fmAC62AEl8= Subject key identifier: EE:9A:A4:3D:02:62:2F:25:64:F5:E7:56:2E:39:1B:83:AB:37:32:94 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 373B3ACE950DA42A0E6BDADB4928487C2D0ACF5E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53468e8d-2e7a-4cf3-9f68-7248fcabc5b9.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f70:7400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3b:3a:ce:95:0d:a4:2a:0e:6b:da:db:49:28:48:7c:2d:0a:cf:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=bdd2e5b584bc3f0e80d4977551f6ba4512937de908d9984e7b0bf5ad2809cd92, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:77:82:66:48:16:82:57:6a:cf:59:e3:0c:f0: 6c:77:91:f4:af:f3:bc:14:de:75:2d:24:c3:60:3d: 44:3d:0a:c2:93:39:80:86:61:48:ab:15:3d:1b:fe: 80:57:72:25:b1:8c:2f:47:ab:f6:40:82:56:12:cf: ca:bc:92:51:9a:04:a9:ff:2b:07:81:d3:78:92:f2: a6:6f:b0:2e:3e:30:fa:1c:91:43:43:d0:2e:4c:e1: d6:5b:a7:20:50:19:b9:7c:4a:4e:17:70:fb:91:b2: 49:ca:5e:35:9b:5a:a2:02:56:cb:ce:9b:61:6b:b6: 44:3e:17:78:49:15:ba:1f:f4:fe:f3:49:3e:ef:60: bf:44:f0:32:34:bc:29:81:05:15:76:70:68:0b:f0: 50:60:d8:0a:26:b1:8e:01:a9:26:0b:ec:5b:0a:b5: 7b:99:b3:a2:71:aa:93:6c:74:45:dd:74:6f:a5:33: 44:6b:09:5a:10:b4:3c:45:c9:b9:67:58:f3:de:46: 2b:1a:b2:a1:24:02:77:4b:9d:69:22:aa:ae:1e:1a: 06:00:09:95:15:4e:41:8c:73:38:08:95:c2:6c:e1: 60:00:2a:fd:66:21:41:5d:f2:9b:23:09:33:c6:fe: a2:73:c0:4b:4f:08:f6:90:a8:ca:b5:6a:15:0b:06: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9A:A4:3D:02:62:2F:25:64:F5:E7:56:2E:39:1B:83:AB:37:32:94 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53468e8d-2e7a-4cf3-9f68-7248fcabc5b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f70:7400::/40 Signature Algorithm: sha256WithRSAEncryption 24:de:1d:02:e6:01:64:43:b0:21:eb:c9:6f:85:06:08:d1:72: 30:67:5c:b3:73:73:b9:43:b9:1c:45:62:ed:68:f7:1d:53:87: cf:80:57:0e:94:2f:04:e5:6f:50:73:75:fb:be:eb:5b:93:8e: c6:4d:30:af:a9:e6:28:2e:06:df:73:8d:87:04:5e:80:db:51: ae:03:5f:5d:31:77:b2:0f:f8:b8:99:d9:e0:c4:4f:a9:67:04: a5:f8:b0:fe:0b:79:69:03:32:2e:8f:f1:f3:e9:21:5e:03:f2: 23:ae:37:0b:ca:5d:44:f9:6c:87:b7:d5:b4:15:99:3c:8b:d5: 0c:2a:ee:ee:ff:8e:3d:17:e3:84:ea:8c:bd:60:85:19:d0:a9: 6c:c3:cd:a6:40:3d:c0:21:14:d8:9c:89:60:8a:42:57:39:b7: 99:2c:93:db:7a:78:fe:a4:04:8a:18:5a:1f:82:75:1f:e8:e2: 8c:1f:53:3d:67:3f:8d:54:fd:10:bc:e9:32:73:d8:27:73:d0: 6d:f5:bc:91:8c:2c:88:5f:d9:b0:ff:76:b4:13:cd:f1:fb:fe: ee:f0:f1:81:a3:3a:c0:f5:ea:aa:ff:17:a6:17:43:bd:6b:b7: 4f:d8:3b:e1:2f:70:bb:64:52:47:c8:34:4e:e9:68:82:bb:07: 05:5f:05:d7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNzs6zpUNpCoOa9rbSShIfC0Kz14wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZGQyZTViNTg0YmMzZjBlODBkNDk3NzU1MWY2YmE0NTEy OTM3ZGU5MDhkOTk4NGU3YjBiZjVhZDI4MDljZDkyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpd4JmSBaCV2rPWeMM8Gx3kfSv87wU3nUtJMNgPUQ9CsKT OYCGYUirFT0b/oBXciWxjC9Hq/ZAglYSz8q8klGaBKn/KweB03iS8qZvsC4+MPoc kUND0C5M4dZbpyBQGbl8Sk4XcPuRsknKXjWbWqICVsvOm2FrtkQ+F3hJFbof9P7z ST7vYL9E8DI0vCmBBRV2cGgL8FBg2AomsY4BqSYL7FsKtXuZs6JxqpNsdEXddG+l M0RrCVoQtDxFyblnWPPeRisasqEkAndLnWkiqq4eGgYACZUVTkGMczgIlcJs4WAA Kv1mIUFd8psjCTPG/qJzwEtPCPaQqMq1ahULBlfHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU7pqkPQJiLyVk9edWLjkbg6s3MpQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzNDY4ZThkLTJlN2EtNGNmMy05ZjY4LTcyNDhmY2FiYzViOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9wdDANBgkqhkiG9w0BAQsFAAOCAQEAJN4dAuYBZEOwIevJb4UGCNFy MGdcs3NzuUO5HEVi7Wj3HVOHz4BXDpQvBOVvUHN1+77rW5OOxk0wr6nmKC4G33ON hwRegNtRrgNfXTF3sg/4uJnZ4MRPqWcEpfiw/gt5aQMyLo/x8+khXgPyI643C8pd RPlsh7fVtBWZPIvVDCru7v+OPRfjhOqMvWCFGdCpbMPNpkA9wCEU2JyJYIpCVzm3 mSyT23p4/qQEihhaH4J1H+jijB9TPWc/jVT9ELzpMnPYJ3PQbfW8kYwsiF/ZsP92 tBPN8fv+7vDxgaM6wPXqqv8XphdDvWu3T9g74S9wu2RSR8g0TulogrsHBV8F1w== -----END CERTIFICATE-----Generated at Thu May 2 17:41:09 2024 by rpki-client on console-fra.rpki-client.org