$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98987eb9-2bef-4e51-9862-a8750c17a714.roa File: 98987eb9-2bef-4e51-9862-a8750c17a714.roa (raw, json) Hash identifier: tFuGcTQO/NIdGuLbobTGrU618h1xp/8qql3W25k7xzg= Subject key identifier: 27:F3:EB:8A:C7:94:E1:3A:69:02:9F:5B:9F:2F:FD:DD:76:DA:13:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7C845F0F407ADBB60D4662AC91F562CB810A6068 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98987eb9-2bef-4e51-9862-a8750c17a714.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f60:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:84:5f:0f:40:7a:db:b6:0d:46:62:ac:91:f5:62:cb:81:0a:60:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=4fc6a6c203705d303a9602678814d1fc7382859773546e989a4c24c380e5b078, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a7:f6:8d:dd:4e:83:37:e4:e3:1c:4e:d8:5f: 50:7c:2a:e5:45:6c:58:47:a1:1e:ac:34:a2:36:91: 48:97:07:d1:58:e2:ca:05:b9:76:43:80:cf:aa:bb: 80:ef:36:d1:75:09:e7:b4:6b:9b:7e:90:a6:0f:b1: a8:50:41:ef:56:32:30:33:b1:5a:f4:c2:cb:da:02: 1b:55:60:84:10:ca:2c:85:73:e6:aa:db:65:f9:dd: 63:b5:0a:1c:60:98:b3:02:f0:80:4a:44:85:9c:1f: f5:da:c6:9b:a0:e6:d0:85:2f:87:a7:22:22:b3:8b: 8a:4d:b1:d8:2b:1c:46:26:78:b8:29:c4:9c:a2:d8: d8:19:3c:3a:6c:c6:f6:78:2b:12:f0:51:66:6b:5b: f5:12:6b:91:fd:2d:7a:c5:d4:43:64:60:2b:ab:77: 51:32:44:cb:5a:52:8a:9e:85:fd:8b:c6:29:24:47: 6a:56:5a:0b:0f:8d:15:b0:97:5e:8e:54:55:79:8b: 3c:2c:9a:40:4f:6b:dc:6c:b1:5d:b8:c0:ab:d9:64: b0:c7:4d:c3:3c:0d:54:0b:ee:d6:e9:68:58:b0:0b: a2:e3:63:62:1c:bb:ec:ec:42:c6:fb:3f:03:37:7e: 68:d5:b0:54:6d:7c:ca:e1:74:5d:1a:1b:94:b5:03: fe:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F3:EB:8A:C7:94:E1:3A:69:02:9F:5B:9F:2F:FD:DD:76:DA:13:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98987eb9-2bef-4e51-9862-a8750c17a714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f60:2000::/40 Signature Algorithm: sha256WithRSAEncryption 37:9c:1f:68:c4:e6:fd:42:8d:76:9d:22:9a:b9:11:1d:82:f7: 83:78:61:88:ff:04:20:cc:00:55:68:a9:79:54:b3:16:6b:8d: 36:1c:6b:f8:9e:9a:a9:5b:f2:6d:90:80:d9:66:b7:05:c4:97: 08:3e:26:61:78:b1:c5:ff:0c:a9:4d:85:c8:a6:ec:b3:57:0d: b5:e5:25:be:76:32:a5:45:87:f1:51:44:ae:cf:f0:ca:87:03: ba:69:d3:6d:56:8e:93:f5:fe:0e:6b:e1:a8:f1:75:73:3e:c8: cc:a5:0a:47:14:d1:f5:09:77:82:7e:d0:2a:8d:47:b4:f9:b7: 09:8f:6f:cb:ea:cf:55:f2:1e:31:1a:f2:fb:b4:df:16:a0:cc: 10:78:30:4c:d2:26:75:8a:ee:c8:59:f8:91:b8:6e:06:c6:2b: ca:1f:8d:9e:4c:ea:40:75:43:5a:40:93:51:ed:2f:86:42:7e: 7d:50:7b:12:47:2b:96:87:84:b6:aa:26:a1:19:e1:97:39:c3: 96:64:8d:e8:5b:e5:b3:6a:82:77:6a:4c:28:b8:db:0d:1b:fc: 4e:76:1b:65:4c:47:3d:8a:6b:62:8b:2b:ec:54:cf:dd:35:41: a4:89:4b:b4:c4:a2:a0:be:c0:a0:58:ab:c4:0b:17:07:87:14: d7:3d:a2:3b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfIRfD0B627YNRmKskfViy4EKYGgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZmM2YTZjMjAzNzA1ZDMwM2E5NjAyNjc4ODE0ZDFmYzcz ODI4NTk3NzM1NDZlOTg5YTRjMjRjMzgwZTViMDc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUp/aN3U6DN+TjHE7YX1B8KuVFbFhHoR6sNKI2kUiXB9FY 4soFuXZDgM+qu4DvNtF1Cee0a5t+kKYPsahQQe9WMjAzsVr0wsvaAhtVYIQQyiyF c+aq22X53WO1ChxgmLMC8IBKRIWcH/Xaxpug5tCFL4enIiKzi4pNsdgrHEYmeLgp xJyi2NgZPDpsxvZ4KxLwUWZrW/USa5H9LXrF1ENkYCurd1EyRMtaUoqehf2Lxikk R2pWWgsPjRWwl16OVFV5izwsmkBPa9xssV24wKvZZLDHTcM8DVQL7tbpaFiwC6Lj Y2Icu+zsQsb7PwM3fmjVsFRtfMrhdF0aG5S1A/77AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUJ/PriseU4TppAp9bny/93XbaE7gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4OTg3ZWI5LTJiZWYtNGU1MS05ODYyLWE4NzUwYzE3YTcxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9gIDANBgkqhkiG9w0BAQsFAAOCAQEAN5wfaMTm/UKNdp0imrkRHYL3 g3hhiP8EIMwAVWipeVSzFmuNNhxr+J6aqVvybZCA2Wa3BcSXCD4mYXixxf8MqU2F yKbss1cNteUlvnYypUWH8VFErs/wyocDumnTbVaOk/X+DmvhqPF1cz7IzKUKRxTR 9Ql3gn7QKo1HtPm3CY9vy+rPVfIeMRry+7TfFqDMEHgwTNImdYruyFn4kbhuBsYr yh+NnkzqQHVDWkCTUe0vhkJ+fVB7EkcrloeEtqomoRnhlznDlmSN6Fvls2qCd2pM KLjbDRv8TnYbZUxHPYprYosr7FTP3TVBpIlLtMSioL7AoFirxAsXB4cU1z2iOw== -----END CERTIFICATE-----Generated at Thu May 9 01:25:39 2024 by rpki-client on console-fra.rpki-client.org