$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfd75e94-c6a2-460b-9136-c7a2911cb1a0.roa File: bfd75e94-c6a2-460b-9136-c7a2911cb1a0.roa (raw, json) Hash identifier: lbQiygf8iTvNTzzpvR6DU5S3zwdPazsK2IXNYt9JPVo= Subject key identifier: 7E:09:4A:93:61:D8:32:BC:E3:C7:D6:20:3E:28:D0:73:6E:CA:67:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 06BFE4BB65ABF8DC2C63AF684B47FF1297EB73D6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfd75e94-c6a2-460b-9136-c7a2911cb1a0.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:bf:e4:bb:65:ab:f8:dc:2c:63:af:68:4b:47:ff:12:97:eb:73:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=4dc1e87f96109a66b7ae4c95d6694a4c3b5773267245bb0c549afc4817415993, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d4:82:b4:d2:58:88:59:b7:a5:d3:82:12:89: 16:77:77:c3:0a:85:95:f8:2b:6e:76:3b:e2:63:5e: 96:b2:e1:ac:5e:27:65:76:6f:ae:07:f9:6d:02:29: ff:bd:a0:d7:08:67:ca:1a:8d:1b:73:44:ec:14:59: 08:47:46:d4:f8:1a:f3:9b:29:ff:da:d6:aa:4e:5b: 79:2b:9e:8b:9f:58:f7:37:b1:5f:4b:37:25:a8:78: f2:b9:25:03:9a:54:0f:7f:3b:f2:7b:fc:c5:98:ae: 01:37:cd:79:49:df:b9:68:be:6d:9b:6f:36:dc:2b: b4:aa:4d:77:dc:4d:a5:e3:69:6d:69:cd:9d:8a:1f: 26:ca:0a:2c:db:d5:d5:97:5c:73:53:26:bb:ca:ab: 17:f7:a2:64:9a:cd:ec:5e:b8:33:78:6b:68:16:5f: bc:98:8c:83:d0:50:23:3d:21:ca:72:b7:6b:33:a3: 61:60:8a:4b:b2:9f:b3:bd:2a:ed:a0:69:dc:68:17: 15:51:74:6e:57:bb:75:ff:f3:58:3b:ac:d1:d2:af: d7:a4:35:57:6d:8b:c1:bf:43:5f:85:69:81:36:74: 2a:29:98:ff:0b:bc:e7:c8:17:73:95:1a:a3:01:32: 92:ca:a9:90:44:56:a7:03:64:d4:cd:56:4e:7e:8b: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:09:4A:93:61:D8:32:BC:E3:C7:D6:20:3E:28:D0:73:6E:CA:67:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfd75e94-c6a2-460b-9136-c7a2911cb1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:6000::/40 Signature Algorithm: sha256WithRSAEncryption 81:82:39:17:7f:a2:a4:d9:1d:de:17:0f:d8:0c:c0:90:7d:fe: 05:52:8e:14:ac:f5:37:6b:af:82:4c:b9:fa:6c:33:fc:04:7d: 6f:4d:ab:a3:7d:3d:76:ab:27:d9:14:68:a3:3e:0c:3d:c9:c1: 89:7e:58:55:c8:72:61:6c:6f:03:ec:47:5d:ac:6d:62:eb:5d: d1:aa:cb:b6:34:de:3f:4b:c3:e8:b7:35:40:05:d6:d5:46:ff: 0d:4f:01:50:da:da:dd:96:07:ec:87:32:42:4b:38:4b:ca:27: 70:23:d1:31:de:92:a0:a0:c4:ed:b8:4b:b6:f0:3a:0c:a6:ba: bd:c6:21:46:52:bd:3e:a0:bb:1a:64:1b:dd:58:a7:d7:bf:7a: 25:e6:6d:5d:84:ea:10:39:90:b2:be:c0:71:d9:0c:a4:c0:b3: 84:b9:72:22:88:aa:e8:25:88:7f:a0:78:6d:d6:86:3c:6d:6a: b8:b7:1e:d2:98:c6:96:74:8b:48:f3:45:f1:a0:6d:06:96:6b: 10:50:e7:e1:a8:48:95:45:79:71:14:7b:03:17:92:3f:86:25: 97:8b:57:f7:6d:bc:74:5d:fe:77:26:b6:60:8b:e1:c4:91:f9: b5:9b:62:a7:79:d9:84:c1:f5:a7:25:80:bb:35:c2:2c:71:4f: 38:49:80:96 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBr/ku2Wr+NwsY69oS0f/Epfrc9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZGMxZTg3Zjk2MTA5YTY2YjdhZTRjOTVkNjY5NGE0YzNi NTc3MzI2NzI0NWJiMGM1NDlhZmM0ODE3NDE1OTkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC41IK00liIWbel04ISiRZ3d8MKhZX4K252O+JjXpay4axe J2V2b64H+W0CKf+9oNcIZ8oajRtzROwUWQhHRtT4GvObKf/a1qpOW3krnoufWPc3 sV9LNyWoePK5JQOaVA9/O/J7/MWYrgE3zXlJ37lovm2bbzbcK7SqTXfcTaXjaW1p zZ2KHybKCizb1dWXXHNTJrvKqxf3omSazexeuDN4a2gWX7yYjIPQUCM9Icpyt2sz o2Fgikuyn7O9Ku2gadxoFxVRdG5Xu3X/81g7rNHSr9ekNVdti8G/Q1+FaYE2dCop mP8LvOfIF3OVGqMBMpLKqZBEVqcDZNTNVk5+i+DHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUfglKk2HYMrzjx9YgPijQc27KZzYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmZDc1ZTk0LWM2YTItNDYwYi05MTM2LWM3YTI5MTFjYjFhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//YDANBgkqhkiG9w0BAQsFAAOCAQEAgYI5F3+ipNkd3hcP2AzAkH3+ BVKOFKz1N2uvgky5+mwz/AR9b02ro309dqsn2RRooz4MPcnBiX5YVchyYWxvA+xH XaxtYutd0arLtjTeP0vD6Lc1QAXW1Ub/DU8BUNra3ZYH7IcyQks4S8oncCPRMd6S oKDE7bhLtvA6DKa6vcYhRlK9PqC7GmQb3Vin1796JeZtXYTqEDmQsr7AcdkMpMCz hLlyIoiq6CWIf6B4bdaGPG1quLce0pjGlnSLSPNF8aBtBpZrEFDn4ahIlUV5cRR7 AxeSP4Yll4tX9228dF3+dya2YIvhxJH5tZtip3nZhMH1pyWAuzXCLHFPOEmAlg== -----END CERTIFICATE-----Generated at Fri Apr 26 00:40:25 2024 by rpki-client on console-fra.rpki-client.org