$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96650e67-0d1e-40a5-9d15-7a6311f13e17.roa File: 96650e67-0d1e-40a5-9d15-7a6311f13e17.roa (raw, json) Hash identifier: pqMa1slDSW8itptIT6v8Se5mRd3TamZR2eHo85ltEsg= Subject key identifier: 72:66:0E:9E:68:E4:C5:64:95:CB:C8:7F:C7:E9:BD:25:B8:4C:72:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 46D2B75E84B95052ADF543DA1D1CE5D5DA48612A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96650e67-0d1e-40a5-9d15-7a6311f13e17.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f01:48d0::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d2:b7:5e:84:b9:50:52:ad:f5:43:da:1d:1c:e5:d5:da:48:61:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=3a4d086e8e37b12740b36cf59e036197da8691483e364b538d1e5c19b7c6f7d8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b5:96:66:dd:00:58:3d:83:2d:e5:32:86:d5: 0f:a9:3e:59:24:cc:44:0a:7a:d0:6b:12:af:90:dc: 42:56:70:67:36:b9:53:a4:41:7b:88:23:16:f1:eb: df:32:47:6c:22:70:34:80:bd:be:bb:36:48:7e:a1: 46:20:cb:e9:0f:37:f5:a7:fc:91:98:c5:36:8e:fc: 6c:17:09:24:e7:c3:b0:0d:76:e1:19:49:65:d6:d0: fe:89:d3:da:41:3b:cd:86:e2:ef:34:a4:1f:74:6e: c5:d8:82:34:a9:ed:d0:98:88:11:f3:49:28:0e:4f: 06:69:18:43:48:ff:b7:23:03:86:14:5e:0f:18:d3: d1:17:e4:71:0a:53:c4:d6:4e:e6:97:7e:5f:cc:3d: 60:02:eb:ec:30:8e:3a:f0:6e:77:b2:49:9e:f2:a6: da:67:1f:05:2b:85:10:1e:0a:81:bf:0d:41:cc:03: 6d:57:55:fb:24:fc:85:b3:7d:94:83:1a:1c:ce:00: 03:28:85:a6:83:08:d0:3a:bf:91:e3:7f:06:2a:bf: 40:08:9d:db:77:ab:f9:94:79:6f:21:9c:1e:eb:5a: a5:68:d3:31:98:dd:a7:b4:3a:0d:b0:4d:ef:0c:45: 3e:8f:35:6c:97:19:0e:ff:7c:48:c9:ac:a9:64:f0: ca:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:66:0E:9E:68:E4:C5:64:95:CB:C8:7F:C7:E9:BD:25:B8:4C:72:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96650e67-0d1e-40a5-9d15-7a6311f13e17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:48d0::/47 Signature Algorithm: sha256WithRSAEncryption 32:ff:41:c4:c7:e1:80:07:fd:4e:2a:9a:6b:03:bd:fe:fa:c3: 65:e8:d5:0c:12:8d:9a:9c:81:4d:2d:0f:2b:45:46:aa:0d:be: e1:07:89:6c:3d:25:46:08:95:de:83:56:05:8e:64:b7:85:d2: 69:a9:da:19:ed:7d:c0:b4:6d:07:f3:64:21:3e:2c:ad:4f:38: e0:88:a3:eb:54:7b:e7:de:f7:62:49:15:a3:3d:e6:6c:46:b2: c3:5b:2b:ac:1f:43:58:cb:bc:70:d8:d4:d5:19:13:33:34:db: 01:bd:04:22:51:68:f5:ec:3e:a1:7d:92:48:bd:8d:37:69:c7: 00:f1:9b:8c:af:4c:35:3b:89:b0:c1:b6:16:75:07:0c:6e:9d: 3a:b6:4a:b6:8f:23:8a:08:c1:7e:5f:78:e3:97:12:50:08:1b: e7:31:4d:4d:e7:9f:5b:fb:17:1a:75:fe:0e:09:a9:e4:a5:cc: df:bf:61:7a:10:a7:99:d1:32:dc:65:83:d4:09:99:32:0f:d5: 6c:13:77:86:c0:da:fd:41:4b:fa:92:18:e7:cc:90:53:21:ba: 64:b5:7a:25:32:f9:5d:c4:c6:7d:d2:3d:66:e1:31:e9:8d:c2: ae:cf:18:6a:5e:e5:72:12:11:e6:80:3a:b2:67:49:43:2e:27: e6:c7:d6:3e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURtK3XoS5UFKt9UPaHRzl1dpIYSowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTRkMDg2ZThlMzdiMTI3NDBiMzZjZjU5ZTAzNjE5N2Rh ODY5MTQ4M2UzNjRiNTM4ZDFlNWMxOWI3YzZmN2Q4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQtZZm3QBYPYMt5TKG1Q+pPlkkzEQKetBrEq+Q3EJWcGc2 uVOkQXuIIxbx698yR2wicDSAvb67Nkh+oUYgy+kPN/Wn/JGYxTaO/GwXCSTnw7AN duEZSWXW0P6J09pBO82G4u80pB90bsXYgjSp7dCYiBHzSSgOTwZpGENI/7cjA4YU Xg8Y09EX5HEKU8TWTuaXfl/MPWAC6+wwjjrwbneySZ7yptpnHwUrhRAeCoG/DUHM A21XVfsk/IWzfZSDGhzOAAMohaaDCNA6v5HjfwYqv0AIndt3q/mUeW8hnB7rWqVo 0zGY3ae0Og2wTe8MRT6PNWyXGQ7/fEjJrKlk8MqfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcmYOnmjkxWSVy8h/x+m9JbhMcpkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2NjUwZTY3LTBkMWUtNDBhNS05ZDE1LTdhNjMxMWYxM2UxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSNAwDQYJKoZIhvcNAQELBQADggEBADL/QcTH4YAH/U4qmmsDvf76 w2Xo1QwSjZqcgU0tDytFRqoNvuEHiWw9JUYIld6DVgWOZLeF0mmp2hntfcC0bQfz ZCE+LK1POOCIo+tUe+fe92JJFaM95mxGssNbK6wfQ1jLvHDY1NUZEzM02wG9BCJR aPXsPqF9kki9jTdpxwDxm4yvTDU7ibDBthZ1BwxunTq2SraPI4oIwX5feOOXElAI G+cxTU3nn1v7Fxp1/g4JqeSlzN+/YXoQp5nRMtxlg9QJmTIP1WwTd4bA2v1BS/qS GOfMkFMhumS1eiUy+V3Exn3SPWbhMemNwq7PGGpe5XISEeaAOrJnSUMuJ+bH1j4= -----END CERTIFICATE-----Generated at Fri Apr 26 08:25:33 2024 by rpki-client on console-ams.rpki-client.org