$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b05e0150-ed84-4d55-8a09-358f6631a5c9.roa File: b05e0150-ed84-4d55-8a09-358f6631a5c9.roa (raw, json) Hash identifier: Rzw+UffRt2a5hedgtn6dDMbqmkJ4do9G4V9Ch3bg95E= Subject key identifier: E9:2A:4F:36:B0:8C:E9:CF:19:0D:65:5D:6B:55:34:6A:AF:B4:EC:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52160661D2295486AA8E6E09F5C9D62643AD38B6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b05e0150-ed84-4d55-8a09-358f6631a5c9.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:16:06:61:d2:29:54:86:aa:8e:6e:09:f5:c9:d6:26:43:ad:38:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=e8ec81f86288d06357893806793f387fafc295294d2dc58b979fbc76afc19960, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:c4:1a:6c:07:bf:5c:3e:c6:97:31:8c:c7: af:6e:9a:41:c3:47:ef:16:29:0e:79:ff:7c:28:35: 9d:1e:58:0b:3e:07:48:ea:9e:78:70:71:f7:05:95: da:4b:75:10:2b:f2:9e:08:75:9f:13:2a:c3:81:40: cb:ef:4a:99:67:90:b0:1f:c5:0e:0b:57:78:70:8a: a8:ce:65:72:71:5e:d2:0a:a9:ee:0b:80:bd:c9:bb: 33:7a:1f:b9:07:a1:f5:ad:71:ee:f9:98:dd:61:25: b9:27:3c:88:49:51:66:92:f1:e3:80:9c:53:87:f5: 7c:b0:aa:80:1d:9c:26:44:c0:c9:c2:a5:27:29:9c: bf:6c:99:27:39:18:59:58:30:02:13:36:b9:66:92: e9:05:b4:09:b5:ed:4b:fd:e2:bb:f0:22:7d:f9:11: e7:6d:00:7f:e4:65:0c:5d:64:d9:39:e9:b6:70:0d: 57:b0:43:90:9c:77:e1:41:7a:b7:39:b4:da:1e:ab: bd:d8:e6:b3:8d:8b:e2:12:cb:b3:88:c1:4c:dc:45: e2:5e:8e:af:48:a8:ee:5e:b2:78:bd:f6:21:7d:42: 52:e0:c8:d4:08:ca:f3:fe:f0:40:14:eb:62:b6:80: 0c:d5:00:b7:16:3e:69:b7:9e:87:7d:2e:07:a2:02: ed:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2A:4F:36:B0:8C:E9:CF:19:0D:65:5D:6B:55:34:6A:AF:B4:EC:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b05e0150-ed84-4d55-8a09-358f6631a5c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:c000::/40 Signature Algorithm: sha256WithRSAEncryption 89:7d:c6:02:9c:a7:36:7a:ab:9b:b5:4c:14:f1:d1:11:82:82: a4:9d:f1:70:4a:0d:15:9d:3a:d6:a1:f4:9a:8c:56:11:8e:a5: 5d:5a:b0:8e:4b:ab:5d:ca:68:fc:bf:ca:36:e0:dd:7e:e4:e1: ca:fe:fe:f7:f5:35:7f:84:09:d7:ee:00:c1:d1:07:c1:4a:17: 9e:a3:60:bb:45:f9:4a:cd:0a:f5:b4:6c:f1:77:32:28:d8:53: f4:4e:fb:da:9a:92:2d:55:7f:68:97:4f:08:3d:b0:16:cf:a3: 59:df:af:e1:f1:71:a8:fd:ee:8b:cf:b2:89:4d:4e:25:46:68: e6:ce:25:f0:7f:ee:ee:78:cb:84:d8:20:8e:a9:3f:52:2d:3a: 44:11:3d:44:5d:cb:e9:82:b6:7e:af:82:10:35:97:64:1e:0f: 0e:ee:fe:09:12:b1:e3:63:82:00:84:b5:7b:d4:a6:26:d7:cb: d0:05:b7:e6:b6:6f:f0:36:6c:a7:28:b8:cc:bf:3a:a5:76:79: 1d:2d:52:5d:91:72:bc:99:c0:25:72:ec:04:86:47:f9:e7:18: 19:2f:a4:fa:73:51:8b:6a:cb:f0:19:b0:3c:70:dd:b8:a5:2c: de:6d:42:ba:c1:6a:19:3b:10:1c:a8:73:2f:f9:b9:d1:ad:8a: 6f:06:b9:ed -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUhYGYdIpVIaqjm4J9cnWJkOtOLYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOGVjODFmODYyODhkMDYzNTc4OTM4MDY3OTNmMzg3ZmFm YzI5NTI5NGQyZGM1OGI5NzlmYmM3NmFmYzE5OTYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCebsQabAe/XD7GlzGMx69umkHDR+8WKQ55/3woNZ0eWAs+ B0jqnnhwcfcFldpLdRAr8p4IdZ8TKsOBQMvvSplnkLAfxQ4LV3hwiqjOZXJxXtIK qe4LgL3JuzN6H7kHofWtce75mN1hJbknPIhJUWaS8eOAnFOH9XywqoAdnCZEwMnC pScpnL9smSc5GFlYMAITNrlmkukFtAm17Uv94rvwIn35EedtAH/kZQxdZNk56bZw DVewQ5Ccd+FBerc5tNoeq73Y5rONi+ISy7OIwUzcReJejq9IqO5esni99iF9QlLg yNQIyvP+8EAU62K2gAzVALcWPmm3nod9LgeiAu1jAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU6SpPNrCM6c8ZDWVda1U0aq+07G0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwNWUwMTUwLWVkODQtNGQ1NS04YTA5LTM1OGY2NjMxYTVjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9hwDANBgkqhkiG9w0BAQsFAAOCAQEAiX3GApynNnqrm7VMFPHREYKC pJ3xcEoNFZ061qH0moxWEY6lXVqwjkurXcpo/L/KNuDdfuThyv7+9/U1f4QJ1+4A wdEHwUoXnqNgu0X5Ss0K9bRs8XcyKNhT9E772pqSLVV/aJdPCD2wFs+jWd+v4fFx qP3ui8+yiU1OJUZo5s4l8H/u7njLhNggjqk/Ui06RBE9RF3L6YK2fq+CEDWXZB4P Du7+CRKx42OCAIS1e9SmJtfL0AW35rZv8DZspyi4zL86pXZ5HS1SXZFyvJnAJXLs BIZH+ecYGS+k+nNRi2rL8BmwPHDduKUs3m1CusFqGTsQHKhzL/m50a2Kbwa57Q== -----END CERTIFICATE-----Generated at Wed Apr 24 16:34:55 2024 by rpki-client on console-fra.rpki-client.org