$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/baf219fc-7e20-4cad-8ac9-0276ea59b17a.roa File: baf219fc-7e20-4cad-8ac9-0276ea59b17a.roa (raw, json) Hash identifier: duuepSBak9T7ihzO7H5ufy+iZ/Pa2UEyPZBArL/w3PU= Subject key identifier: 34:61:E8:7F:F3:0A:EB:7A:EE:8C:B3:E7:4C:7A:6A:92:DE:4A:74:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E2399082556E4DB7265FB2A6985AE1638E0FA94 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/baf219fc-7e20-4cad-8ac9-0276ea59b17a.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:7400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:23:99:08:25:56:e4:db:72:65:fb:2a:69:85:ae:16:38:e0:fa:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=ce0cb0705335f541f4ada68565737a68f04c4474b7e6cfd8227d7cb29580f483, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:62:d6:9d:9d:2b:62:eb:9d:f2:98:29:9e: 62:44:53:69:9e:c6:40:cc:64:52:58:85:f5:5f:0c: b9:82:ab:47:ea:ba:a2:e6:d5:ab:03:f4:8e:d9:34: 1c:03:db:38:a6:88:dd:64:d4:25:42:98:29:fb:18: 6c:0c:3b:28:42:e4:90:71:99:6b:a5:d3:eb:1b:72: 7a:14:4b:d3:63:8d:d7:26:38:f4:88:aa:8c:32:ba: c8:64:c5:df:45:0a:59:cb:b8:60:f8:77:4a:67:9f: 6d:06:b0:f6:c3:f3:c8:25:75:e2:85:11:86:e0:77: 6b:c1:d1:98:c0:1a:fb:3b:ab:07:4a:3f:ad:c5:82: 1f:d6:25:3a:b8:f4:e9:24:7a:52:aa:bd:b3:01:4f: f3:d4:50:af:2d:a7:93:0a:b5:dc:5b:f5:18:94:31: 78:c0:c6:84:4d:d0:f5:12:94:e2:ec:df:25:be:88: d9:1b:c3:c2:cb:50:19:2b:e8:aa:05:90:d7:3b:82: 28:01:cb:ef:ef:aa:a1:c9:5d:5b:24:2e:b3:a3:b8: 98:e1:cc:68:a6:e7:9d:b8:1c:92:91:d9:21:10:d1: 0f:db:f3:73:e6:ba:6f:fe:28:0a:b2:d7:14:aa:35: 28:3f:5f:85:1b:96:de:ce:06:18:05:ff:9f:5b:ed: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:61:E8:7F:F3:0A:EB:7A:EE:8C:B3:E7:4C:7A:6A:92:DE:4A:74:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/baf219fc-7e20-4cad-8ac9-0276ea59b17a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:7400::/40 Signature Algorithm: sha256WithRSAEncryption 79:fb:3f:33:29:96:b7:d5:6d:e5:a8:d9:3b:2d:f9:ed:22:d2: 7b:97:e1:68:4a:75:a6:df:5d:ec:8d:7c:55:b8:51:2d:43:a3: 82:28:bd:86:35:ce:51:89:3f:d8:37:c9:87:6b:d4:74:6f:85: 8f:7c:3a:21:9f:ab:f0:50:fa:3f:9a:70:b7:38:e5:57:d8:45: ea:f1:6e:af:3b:8f:51:af:87:2d:33:6c:50:28:cc:5e:bc:27: 98:f3:06:e7:96:54:ad:31:05:97:5c:c0:19:fd:e1:93:7f:b1: d6:4b:ce:c5:b0:f0:36:2d:a4:69:72:85:d6:4c:c7:29:3c:2d: 40:d9:1e:d5:5d:69:60:29:5e:22:bb:62:9e:df:1e:04:11:48: af:8c:58:73:b9:08:a6:ed:6e:9b:64:85:cf:0c:21:0e:90:1e: 39:2d:4f:81:fe:c6:42:35:35:24:71:85:55:53:8d:07:80:77: 70:5d:96:73:bf:2a:de:fd:8f:51:64:2f:69:3e:90:b7:87:1c: 95:cc:81:a6:3f:81:69:b8:0f:3c:42:ee:1f:46:bb:53:1d:04: 1e:7b:8f:14:71:9c:50:a6:b9:37:23:db:ec:de:bd:64:78:f2: 26:3a:5a:f6:40:92:ae:0a:fc:d4:e4:a9:29:81:6f:04:bb:a1: e4:65:5a:ff -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfiOZCCVW5NtyZfsqaYWuFjjg+pQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTBjYjA3MDUzMzVmNTQxZjRhZGE2ODU2NTczN2E2OGYw NGM0NDc0YjdlNmNmZDgyMjdkN2NiMjk1ODBmNDgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLnWLWnZ0rYuud8pgpnmJEU2mexkDMZFJYhfVfDLmCq0fq uqLm1asD9I7ZNBwD2zimiN1k1CVCmCn7GGwMOyhC5JBxmWul0+sbcnoUS9Njjdcm OPSIqowyushkxd9FClnLuGD4d0pnn20GsPbD88gldeKFEYbgd2vB0ZjAGvs7qwdK P63Fgh/WJTq49OkkelKqvbMBT/PUUK8tp5MKtdxb9RiUMXjAxoRN0PUSlOLs3yW+ iNkbw8LLUBkr6KoFkNc7gigBy+/vqqHJXVskLrOjuJjhzGim5524HJKR2SEQ0Q/b 83Pmum/+KAqy1xSqNSg/X4Ublt7OBhgF/59b7fFlAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUNGHof/MK63rujLPnTHpqkt5KdLQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhZjIxOWZjLTdlMjAtNGNhZC04YWM5LTAyNzZlYTU5YjE3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4dDANBgkqhkiG9w0BAQsFAAOCAQEAefs/MymWt9Vt5ajZOy357SLS e5fhaEp1pt9d7I18VbhRLUOjgii9hjXOUYk/2DfJh2vUdG+Fj3w6IZ+r8FD6P5pw tzjlV9hF6vFurzuPUa+HLTNsUCjMXrwnmPMG55ZUrTEFl1zAGf3hk3+x1kvOxbDw Ni2kaXKF1kzHKTwtQNke1V1pYCleIrtint8eBBFIr4xYc7kIpu1um2SFzwwhDpAe OS1Pgf7GQjU1JHGFVVONB4B3cF2Wc78q3v2PUWQvaT6Qt4cclcyBpj+BabgPPELu H0a7Ux0EHnuPFHGcUKa5NyPb7N69ZHjyJjpa9kCSrgr81OSpKYFvBLuh5GVa/w== -----END CERTIFICATE-----Generated at Thu May 2 11:33:23 2024 by rpki-client on console-fra.rpki-client.org