$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87a7972a-02bd-4235-a037-140957d3e9a0.roa File: 87a7972a-02bd-4235-a037-140957d3e9a0.roa (raw, json) Hash identifier: pXV3WktgulcmFl8FqHkIM1F4irPHTTKKUzeAJnIZ9k4= Subject key identifier: E0:4C:95:15:21:E8:D7:84:FC:26:5B:30:9C:0A:69:4B:C1:49:DE:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39879292D8F557F0787CFB64A3D549A2C3FEACB0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87a7972a-02bd-4235-a037-140957d3e9a0.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f00:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:87:92:92:d8:f5:57:f0:78:7c:fb:64:a3:d5:49:a2:c3:fe:ac:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=683be7f1c5db6dd3fd2c9eb9bd7184007feef2e057b8248cc0365d34ad0a2922, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f8:02:61:49:45:53:7d:59:c3:7c:17:21:20: 1f:54:3b:f7:08:d2:5a:20:36:ad:d7:c4:d2:0a:f3: b5:4e:eb:f1:4b:3e:26:6f:1f:4f:b2:22:0f:1e:90: d3:6a:8b:2c:38:ed:db:d6:a4:b5:ff:3d:6d:d2:f8: cf:e5:25:42:18:2c:19:4e:d6:d4:dd:6c:12:9b:c4: 15:76:9a:a4:a4:ff:05:1f:7d:7d:b2:d1:31:3f:c7: 8c:ab:dd:c6:dc:a9:39:af:84:c5:31:73:9d:6d:a3: d3:d3:9c:3d:fa:dd:ba:33:7b:ec:e0:96:8e:67:bf: 2f:47:07:37:96:b9:ef:72:dc:54:07:4a:49:ef:bc: 70:da:aa:83:f1:a0:0d:71:3e:c8:cc:64:22:bb:60: 86:c0:19:69:48:ac:b1:b2:79:73:4c:41:15:31:3e: a9:3a:22:af:83:75:62:1c:20:dd:3d:1a:7d:05:bf: 52:a7:01:5f:ec:e9:1c:37:53:3c:a2:07:3e:69:c1: 66:8d:df:f9:2a:a3:37:19:9f:66:ac:a2:ae:f5:73: 8d:95:66:5b:29:31:93:e8:1a:59:6b:9c:aa:cb:45: f2:06:64:1c:a8:15:05:1b:fb:77:1f:83:76:e3:45: 05:bb:e5:4d:f1:e5:c3:47:4c:13:ab:47:3c:4c:0f: 03:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4C:95:15:21:E8:D7:84:FC:26:5B:30:9C:0A:69:4B:C1:49:DE:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87a7972a-02bd-4235-a037-140957d3e9a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:2000::/40 Signature Algorithm: sha256WithRSAEncryption c9:60:9b:a5:03:4c:14:4f:2d:e9:37:11:db:8c:09:f8:d2:d8: 4d:4e:61:d2:61:a7:90:5e:ff:7b:c3:04:85:5f:f8:fb:2c:7c: d0:24:ef:f7:f4:9a:48:34:04:09:18:01:0e:da:18:68:de:f4: 8b:bc:fd:53:18:31:9f:5b:ef:d5:f2:19:41:cb:58:c1:0a:e0: 27:3a:f6:7d:ee:57:d0:a6:b7:67:0d:fe:d1:f7:8b:c3:e0:a1: 07:70:a8:01:2a:5c:b8:b5:6c:06:93:c4:eb:29:1b:d2:6c:9e: 38:aa:29:41:af:5e:aa:79:b2:d8:72:79:c7:76:70:7b:3d:ec: 45:cf:75:04:a1:04:11:82:b1:fe:c8:0c:99:52:19:6d:f8:a3: ce:1b:1e:80:f7:05:bc:c3:7f:32:33:03:25:01:be:8e:20:ec: 87:dc:1b:a4:5a:ee:c5:49:b4:67:d0:e3:c9:86:f5:00:b6:1f: 19:d1:7d:b8:7f:a4:25:ca:69:70:1d:5a:9a:27:fb:4c:a2:6f: 89:52:6a:3c:ae:03:15:82:34:d5:f3:af:8a:67:b1:0d:eb:08: 43:4d:e5:91:c0:e9:0d:2d:b7:15:44:b5:2f:23:14:83:bf:27: 05:d1:e1:c2:f7:db:ba:ff:63:c9:15:56:ed:d7:94:6a:d5:90: cd:ba:c4:65 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOYeSktj1V/B4fPtko9VJosP+rLAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODNiZTdmMWM1ZGI2ZGQzZmQyYzllYjliZDcxODQwMDdm ZWVmMmUwNTdiODI0OGNjMDM2NWQzNGFkMGEyOTIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDl+AJhSUVTfVnDfBchIB9UO/cI0logNq3XxNIK87VO6/FL PiZvH0+yIg8ekNNqiyw47dvWpLX/PW3S+M/lJUIYLBlO1tTdbBKbxBV2mqSk/wUf fX2y0TE/x4yr3cbcqTmvhMUxc51to9PTnD363boze+zglo5nvy9HBzeWue9y3FQH SknvvHDaqoPxoA1xPsjMZCK7YIbAGWlIrLGyeXNMQRUxPqk6Iq+DdWIcIN09Gn0F v1KnAV/s6Rw3UzyiBz5pwWaN3/kqozcZn2asoq71c42VZlspMZPoGllrnKrLRfIG ZByoFQUb+3cfg3bjRQW75U3x5cNHTBOrRzxMDwMlAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU4EyVFSHo14T8JlswnAppS8FJ3vAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg3YTc5NzJhLTAyYmQtNDIzNS1hMDM3LTE0MDk1N2QzZTlhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8AIDANBgkqhkiG9w0BAQsFAAOCAQEAyWCbpQNMFE8t6TcR24wJ+NLY TU5h0mGnkF7/e8MEhV/4+yx80CTv9/SaSDQECRgBDtoYaN70i7z9Uxgxn1vv1fIZ QctYwQrgJzr2fe5X0Ka3Zw3+0feLw+ChB3CoASpcuLVsBpPE6ykb0myeOKopQa9e qnmy2HJ5x3Zwez3sRc91BKEEEYKx/sgMmVIZbfijzhsegPcFvMN/MjMDJQG+jiDs h9wbpFruxUm0Z9DjyYb1ALYfGdF9uH+kJcppcB1amif7TKJviVJqPK4DFYI01fOv imexDesIQ03lkcDpDS23FUS1LyMUg78nBdHhwvfbuv9jyRVW7deUatWQzbrEZQ== -----END CERTIFICATE-----Generated at Thu May 9 01:25:37 2024 by rpki-client on console-fra.rpki-client.org