$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8161abe7-e259-4d31-95e3-aed6c301fbd0.roa File: 8161abe7-e259-4d31-95e3-aed6c301fbd0.roa (raw, json) Hash identifier: +m3UC96m+HMkXVBCT61dtQm3wy/5p8ySdLML8dmMxkg= Subject key identifier: D5:49:A7:68:C7:08:9A:04:EE:5D:32:0B:32:0B:02:23:B5:BD:0A:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 136D856A67882E597F403AE87A903FA401EAC58E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8161abe7-e259-4d31-95e3-aed6c301fbd0.roa Signing time: Fri 12 Apr 2024 00:00:00 +0000 ROA not before: Fri 12 Apr 2024 00:00:00 +0000 ROA not after: Fri 17 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6d:85:6a:67:88:2e:59:7f:40:3a:e8:7a:90:3f:a4:01:ea:c5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:00:00 2024 GMT Not After : May 17 23:59:59 2024 GMT Subject: serialNumber=43415617e26d45726689f056fd8b075f435e10a4b3b3e82a79918927be3555ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:96:1e:7b:1a:2f:c6:29:e1:fb:f9:d5:c5:4e: 89:a7:ef:d0:db:47:1b:77:50:51:9c:08:df:98:97: ce:12:f4:af:be:fa:66:37:c5:9e:b1:d5:d4:f5:7e: 94:d5:92:3b:77:34:49:a6:d4:5e:46:23:57:13:c4: df:32:65:69:eb:aa:56:ba:42:e9:1e:df:38:05:83: a3:6e:ef:39:3e:6e:f8:38:68:55:1c:cc:b4:20:42: c6:27:a8:d8:b1:3a:ad:0c:8b:8d:86:91:fd:e0:d1: 37:66:7d:be:5e:a3:25:e5:60:f0:93:49:eb:e3:d0: 70:48:86:ab:ef:c4:2f:1a:fd:ba:e7:45:63:a4:60: 5e:77:dc:78:98:fa:51:b7:d5:03:1f:cc:86:4d:f9: c9:5f:b4:2b:e3:92:72:52:8b:f6:1f:c1:eb:c4:d4: 77:87:45:66:3c:47:f1:9d:19:a8:99:fb:60:58:06: 1f:49:dd:88:c9:0a:b3:a6:5c:52:a1:27:14:db:90: a3:64:55:a1:3a:14:4d:38:f5:8f:1a:06:b8:50:7c: e7:de:49:04:16:df:e2:93:7d:b4:ae:95:26:c3:f4: e1:56:cd:f2:99:51:cd:08:e4:ab:ba:24:76:9d:18: 29:88:7a:49:fe:c4:af:47:06:44:0d:25:f7:0a:d0: 58:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:49:A7:68:C7:08:9A:04:EE:5D:32:0B:32:0B:02:23:B5:BD:0A:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8161abe7-e259-4d31-95e3-aed6c301fbd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:e000::/40 Signature Algorithm: sha256WithRSAEncryption 86:d8:f0:fc:51:2b:d4:b9:ac:56:5f:27:6b:ff:77:b2:3f:d8: fa:45:2f:2b:71:d3:a2:4e:85:d5:e3:4d:d4:88:c8:28:47:39: 54:d8:f5:47:d8:bd:d8:8e:85:4e:e6:08:7d:3e:36:68:a9:18: 65:75:67:3a:5e:55:c2:df:ac:c2:53:fc:76:dc:d7:f6:c1:7b: 14:da:fd:98:dd:5a:dc:0c:1c:70:39:33:b0:08:b9:2f:60:45: 64:33:ed:18:52:bd:14:27:2a:37:27:4e:b0:15:1c:63:b3:d1: 84:fa:ca:ba:1a:9a:ac:d6:d9:8e:ea:1a:b0:d9:12:48:42:22: 51:ab:f2:d2:b7:5c:ab:8f:de:c8:f8:91:f7:eb:67:47:fc:22: 1b:44:f3:8b:5f:fe:36:86:72:4d:c0:af:01:3c:f8:9e:58:5b: 0f:85:40:0e:93:5a:5d:d8:ce:5d:eb:08:be:b8:25:c2:ca:5e: c3:c9:be:b1:8c:0f:d7:3c:83:e3:84:cd:6d:60:9d:66:55:bf: e0:ff:b3:39:ca:da:ed:a0:16:8d:20:f7:05:bc:27:9e:00:46: 40:13:f3:7f:b5:ce:9b:48:af:fb:e2:25:e2:f8:f5:e8:b5:8a: 3c:c6:6e:63:2b:09:f1:bb:e3:18:eb:a8:e8:13:f6:82:73:30: 71:d8:96:4c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUE22FameILll/QDroepA/pAHqxY4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzQxNTYxN2UyNmQ0NTcyNjY4OWYwNTZmZDhiMDc1ZjQz NWUxMGE0YjNiM2U4MmE3OTkxODkyN2JlMzU1NWFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNlh57Gi/GKeH7+dXFTomn79DbRxt3UFGcCN+Yl84S9K++ +mY3xZ6x1dT1fpTVkjt3NEmm1F5GI1cTxN8yZWnrqla6Quke3zgFg6Nu7zk+bvg4 aFUczLQgQsYnqNixOq0Mi42Gkf3g0Tdmfb5eoyXlYPCTSevj0HBIhqvvxC8a/brn RWOkYF533HiY+lG31QMfzIZN+clftCvjknJSi/YfwevE1HeHRWY8R/GdGaiZ+2BY Bh9J3YjJCrOmXFKhJxTbkKNkVaE6FE049Y8aBrhQfOfeSQQW3+KTfbSulSbD9OFW zfKZUc0I5Ku6JHadGCmIekn+xK9HBkQNJfcK0FhbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU1UmnaMcImgTuXTILMgsCI7W9CpEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxNjFhYmU3LWUyNTktNGQzMS05NWUzLWFlZDZjMzAxZmJkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/y4DANBgkqhkiG9w0BAQsFAAOCAQEAhtjw/FEr1LmsVl8na/93sj/Y +kUvK3HTok6F1eNN1IjIKEc5VNj1R9i92I6FTuYIfT42aKkYZXVnOl5Vwt+swlP8 dtzX9sF7FNr9mN1a3AwccDkzsAi5L2BFZDPtGFK9FCcqNydOsBUcY7PRhPrKuhqa rNbZjuoasNkSSEIiUavy0rdcq4/eyPiR9+tnR/wiG0Tzi1/+NoZyTcCvATz4nlhb D4VADpNaXdjOXesIvrglwspew8m+sYwP1zyD44TNbWCdZlW/4P+zOcra7aAWjSD3 BbwnngBGQBPzf7XOm0iv++Il4vj16LWKPMZuYysJ8bvjGOuo6BP2gnMwcdiWTA== -----END CERTIFICATE-----Generated at Sat Apr 20 01:08:12 2024 by rpki-client on console-ams.rpki-client.org