$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ce62d04-011b-48cc-a6f3-b86a1f636ad2.roa File: 7ce62d04-011b-48cc-a6f3-b86a1f636ad2.roa (raw, json) Hash identifier: 0nW74FND8Wy7ztlgI8RqgonC7qIOaBvpluJomd1ERls= Subject key identifier: 51:AB:43:72:22:B1:DD:C2:98:5F:26:8B:D8:35:1E:3E:67:E1:3E:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16E77320AA685AC2E568175B2E5E1A7202680F5C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ce62d04-011b-48cc-a6f3-b86a1f636ad2.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f60:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e7:73:20:aa:68:5a:c2:e5:68:17:5b:2e:5e:1a:72:02:68:0f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=bf55c8c1910952230adf04ccbf17078288c79136ff95ab65ac8223825dcfd91c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4a:0b:95:39:d3:d8:76:5b:cb:7e:6f:10:10: bb:d2:07:13:5b:b2:90:01:29:01:a5:f8:c3:6c:62: eb:0e:01:04:fb:09:2c:f4:c1:e5:1c:e2:af:d5:f5: 93:c1:0b:17:7c:86:b0:2f:49:0c:fb:df:ba:6b:f6: 9d:25:91:6f:e6:f3:3d:39:83:9b:f0:e7:01:b9:49: b1:ba:5b:d3:ce:1f:c7:de:eb:c5:97:e6:c3:54:9e: 9c:67:d6:52:3d:7f:fa:dc:43:c9:5c:72:d4:6d:d3: 3e:ff:5c:51:d8:0a:45:7b:dc:01:cc:57:83:bd:7e: e1:6d:05:f4:50:dc:f1:99:3f:4c:b4:1d:87:3e:fe: 3e:56:7c:60:0f:79:c1:69:37:91:04:95:69:f6:b7: 07:17:dc:29:e8:6b:06:5c:f7:76:19:e7:0a:1d:4c: a2:9f:ad:e2:58:24:69:43:87:22:db:1c:fc:4b:b5: 1b:42:38:c4:46:83:c8:b4:0c:ac:4e:30:2a:ee:70: 65:62:45:5e:12:a3:e7:b9:d1:c8:9f:63:0a:ba:01: 4c:fc:5f:d9:99:80:34:45:14:b8:66:42:98:5e:90: 4c:2b:d5:cc:9f:81:c9:7e:84:81:72:65:b5:57:8c: 29:a9:8b:e7:e2:08:53:f4:b3:df:c5:60:da:95:1d: c2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AB:43:72:22:B1:DD:C2:98:5F:26:8B:D8:35:1E:3E:67:E1:3E:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ce62d04-011b-48cc-a6f3-b86a1f636ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f60:c000::/40 Signature Algorithm: sha256WithRSAEncryption 3a:5c:76:22:98:64:02:d2:ea:53:0f:a3:29:e8:c4:c9:b0:2a: 02:0a:80:a1:3a:b9:77:0e:b7:20:dc:a0:23:1d:d9:04:07:cc: ac:4e:d7:19:8b:a2:7a:18:fb:46:12:d1:93:ca:87:88:d9:9f: f1:29:88:37:5d:b3:8f:0a:75:3d:83:1b:8a:65:81:41:79:52: 3d:c5:cd:2e:18:a3:ea:8c:72:e1:37:5f:05:01:4e:6f:19:05: 10:79:65:12:3e:3d:38:d7:f4:7e:a4:6b:0b:d7:2d:07:d6:ed: d9:13:a1:c1:01:22:6d:9a:66:39:36:2e:dc:2c:36:3d:c1:1a: 59:40:c6:d3:26:a0:c8:b3:49:e5:01:f9:a0:b8:c7:ce:47:9b: eb:bc:9e:ad:b3:e8:93:3e:8e:d5:11:5f:01:76:0d:ec:61:a7: e2:ea:d7:56:09:9a:3d:09:67:92:71:3e:04:55:ee:c7:b3:76: 75:fd:ca:70:47:70:ac:5a:38:96:ce:c0:b5:64:72:17:e0:2d: 8d:53:da:5d:57:4c:cc:55:c5:ad:32:b7:e0:52:89:9c:fd:0d: 33:83:fb:3b:69:7f:97:26:7e:5d:b2:6f:c3:10:a4:b6:a4:59: d1:7c:f3:77:46:05:7f:e5:9e:a6:09:5c:e5:2b:d1:ce:ce:6d: 69:99:ea:e2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFudzIKpoWsLlaBdbLl4acgJoD1wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjU1YzhjMTkxMDk1MjIzMGFkZjA0Y2NiZjE3MDc4Mjg4 Yzc5MTM2ZmY5NWFiNjVhYzgyMjM4MjVkY2ZkOTFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCISguVOdPYdlvLfm8QELvSBxNbspABKQGl+MNsYusOAQT7 CSz0weUc4q/V9ZPBCxd8hrAvSQz737pr9p0lkW/m8z05g5vw5wG5SbG6W9POH8fe 68WX5sNUnpxn1lI9f/rcQ8lcctRt0z7/XFHYCkV73AHMV4O9fuFtBfRQ3PGZP0y0 HYc+/j5WfGAPecFpN5EElWn2twcX3CnoawZc93YZ5wodTKKfreJYJGlDhyLbHPxL tRtCOMRGg8i0DKxOMCrucGViRV4So+e50cifYwq6AUz8X9mZgDRFFLhmQphekEwr 1cyfgcl+hIFyZbVXjCmpi+fiCFP0s9/FYNqVHcKpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUUatDciKx3cKYXyaL2DUePmfhPqkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdjZTYyZDA0LTAxMWItNDhjYy1hNmYzLWI4NmExZjYzNmFkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9gwDANBgkqhkiG9w0BAQsFAAOCAQEAOlx2IphkAtLqUw+jKejEybAq AgqAoTq5dw63INygIx3ZBAfMrE7XGYuiehj7RhLRk8qHiNmf8SmIN12zjwp1PYMb imWBQXlSPcXNLhij6oxy4TdfBQFObxkFEHllEj49ONf0fqRrC9ctB9bt2ROhwQEi bZpmOTYu3Cw2PcEaWUDG0yagyLNJ5QH5oLjHzkeb67yerbPokz6O1RFfAXYN7GGn 4urXVgmaPQlnknE+BFXux7N2df3KcEdwrFo4ls7AtWRyF+AtjVPaXVdMzFXFrTK3 4FKJnP0NM4P7O2l/lyZ+XbJvwxCktqRZ0Xzzd0YFf+Wepglc5SvRzs5taZnq4g== -----END CERTIFICATE-----Generated at Fri Apr 19 00:31:21 2024 by rpki-client on console-fra.rpki-client.org