$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6d41f5a-0086-4c82-91c6-bacb4fc980ed.roa File: b6d41f5a-0086-4c82-91c6-bacb4fc980ed.roa (raw, json) Hash identifier: R8wj2Mwr4mIS5dncx27QQjkyT7mkW3jwGLUvr/LT+Zk= Subject key identifier: 49:D8:46:DD:71:FD:5F:56:4E:73:E0:0B:D1:9C:9B:17:8B:9F:2E:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19A2C92B1AE00B5852764CBCB0A57B21AFD683EA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6d41f5a-0086-4c82-91c6-bacb4fc980ed.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff0:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a2:c9:2b:1a:e0:0b:58:52:76:4c:bc:b0:a5:7b:21:af:d6:83:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=bb17a356e1d262363ea588806d3bfaa833b2ef0dad63fbe194025f93b92c2cb4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:da:50:50:36:cc:be:1c:91:81:0e:68:1c: 7d:e2:e3:ec:c3:13:66:c1:9d:45:b2:db:dc:4c:e0: 22:51:ec:07:94:95:94:62:b2:77:f4:5b:c1:91:88: 4a:8b:c9:ec:69:36:89:b5:ef:be:57:32:ee:f2:98: 62:3c:86:47:6c:80:29:02:17:7c:41:26:cb:dd:87: d8:e6:df:a0:14:a6:53:20:90:99:8d:15:55:32:cd: 56:ef:c9:92:f4:22:f4:1b:b9:f0:a0:fc:c0:a9:bf: 19:74:72:3f:c8:3c:22:4d:d4:f1:b3:30:e3:f0:5c: 38:7e:6e:5d:e3:51:e5:2d:d9:39:fc:6e:8c:9d:04: 39:d0:80:4c:d8:5c:be:9c:da:eb:41:a0:1c:00:8e: 3d:95:ee:b5:75:8f:49:22:31:26:4c:cb:00:36:5b: 58:6a:f9:80:c3:66:c4:a8:ec:86:5e:53:87:35:fb: 80:06:a4:18:fa:ad:cf:c5:49:ca:c0:8c:51:fd:38: 97:ae:1f:f5:1a:a9:82:a3:99:43:8d:e5:5a:2d:9b: 9c:c2:b7:5f:df:29:90:9e:06:b4:41:15:5c:80:9a: f9:16:bf:01:59:80:65:de:60:55:66:d5:80:ff:ec: 37:68:55:54:df:ee:ad:c7:a7:98:8e:5d:d0:1b:ba: e1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D8:46:DD:71:FD:5F:56:4E:73:E0:0B:D1:9C:9B:17:8B:9F:2E:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6d41f5a-0086-4c82-91c6-bacb4fc980ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff0:6000::/40 Signature Algorithm: sha256WithRSAEncryption 64:02:ac:da:f0:9f:86:b9:9e:0d:96:d5:1c:17:8e:52:69:d8: 2c:45:31:ef:ac:47:2d:cd:7e:ba:1e:fe:d8:db:1d:43:8d:a2: 51:00:c5:b0:91:d0:a3:17:2c:77:33:98:2d:12:4e:55:8e:f2: 53:0c:de:6b:f4:fe:de:00:59:10:4e:76:42:c8:bf:fe:76:91: 48:54:49:e4:39:01:a9:00:90:53:40:5c:61:92:cc:83:69:d6: cc:6c:56:e8:a1:7e:74:75:4b:12:9d:56:c8:8b:90:e3:cf:95: 1d:19:3e:ce:5c:83:25:34:dd:fb:b8:2f:25:22:79:a4:14:0d: 45:79:e7:02:62:df:1b:ce:3d:17:cc:b3:97:bf:9e:4f:ea:5d: 76:c6:59:51:ed:04:b8:e2:78:1d:41:e7:cb:01:02:3e:eb:86: 48:76:0e:ca:2d:6c:2a:9f:10:35:81:af:54:7b:85:bd:d2:41: 8e:8b:f6:b2:71:b9:02:da:c2:8d:41:01:c3:45:64:a1:77:ce: 2c:82:05:3d:1b:52:53:04:cf:ac:46:fc:ce:a2:e5:ad:92:d5: 70:58:50:d9:12:8e:4b:be:64:7c:88:10:33:3e:4f:b5:b6:08: e1:fa:e2:f2:3a:76:3d:e2:17:e8:38:64:e5:39:d7:52:5d:b9: 47:ea:58:f2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUGaLJKxrgC1hSdky8sKV7Ia/Wg+owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjE3YTM1NmUxZDI2MjM2M2VhNTg4ODA2ZDNiZmFhODMz YjJlZjBkYWQ2M2ZiZTE5NDAyNWY5M2I5MmMyY2I0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZfNpQUDbMvhyRgQ5oHH3i4+zDE2bBnUWy29xM4CJR7AeU lZRisnf0W8GRiEqLyexpNom1775XMu7ymGI8hkdsgCkCF3xBJsvdh9jm36AUplMg kJmNFVUyzVbvyZL0IvQbufCg/MCpvxl0cj/IPCJN1PGzMOPwXDh+bl3jUeUt2Tn8 boydBDnQgEzYXL6c2utBoBwAjj2V7rV1j0kiMSZMywA2W1hq+YDDZsSo7IZeU4c1 +4AGpBj6rc/FScrAjFH9OJeuH/UaqYKjmUON5Votm5zCt1/fKZCeBrRBFVyAmvkW vwFZgGXeYFVm1YD/7DdoVVTf7q3Hp5iOXdAbuuEvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSdhG3XH9X1ZOc+AL0ZybF4ufLrAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I2ZDQxZjVhLTAwODYtNGM4Mi05MWM2LWJhY2I0ZmM5ODBlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/wYDANBgkqhkiG9w0BAQsFAAOCAQEAZAKs2vCfhrmeDZbVHBeOUmnY LEUx76xHLc1+uh7+2NsdQ42iUQDFsJHQoxcsdzOYLRJOVY7yUwzea/T+3gBZEE52 Qsi//naRSFRJ5DkBqQCQU0BcYZLMg2nWzGxW6KF+dHVLEp1WyIuQ48+VHRk+zlyD JTTd+7gvJSJ5pBQNRXnnAmLfG849F8yzl7+eT+pddsZZUe0EuOJ4HUHnywECPuuG SHYOyi1sKp8QNYGvVHuFvdJBjov2snG5AtrCjUEBw0VkoXfOLIIFPRtSUwTPrEb8 zqLlrZLVcFhQ2RKOS75kfIgQMz5PtbYI4fri8jp2PeIX6Dhk5TnXUl25R+pY8g== -----END CERTIFICATE-----Generated at Wed Apr 24 16:34:55 2024 by rpki-client on console-fra.rpki-client.org