$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece8eb8f-37d1-4797-8746-990300c8ab75.roa File: ece8eb8f-37d1-4797-8746-990300c8ab75.roa (raw, json) Hash identifier: r3eNzOgwUWCNuHnJvTRUtbMK3e2E9yNGSZ9uCzMRbGQ= Subject key identifier: B2:56:B7:8F:0C:E5:7D:62:08:89:E4:85:DC:D6:64:13:DA:84:04:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2822328A41AD166F9AE251945DF654E64B4B57A2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece8eb8f-37d1-4797-8746-990300c8ab75.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:8422::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:22:32:8a:41:ad:16:6f:9a:e2:51:94:5d:f6:54:e6:4b:4b:57:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=a4011599d1213fe6663b483e52c28b2045c42660de01f916833082b501e6cad2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:69:96:eb:d9:6d:02:7f:e7:b0:ef:b8:69: 2f:57:3b:a8:d0:ec:5f:bc:ea:0e:82:3c:a2:9a:f3: 6a:82:7a:9c:56:a4:18:cc:5c:c6:1e:ec:9f:54:db: 54:4a:2a:c7:51:9b:3f:07:f2:58:22:dc:fe:2c:ca: 69:0b:1f:fb:20:fc:b1:a4:33:cd:a8:e9:bb:c3:d4: e7:a0:29:1c:a7:61:f1:19:28:ba:9c:59:f4:4f:0a: 99:a6:0b:1c:2c:a2:d5:e9:f6:59:2c:5a:5e:93:b0: 02:81:16:fb:98:89:6d:fb:4d:cb:e0:6b:a6:cf:48: e3:b2:10:a2:45:a9:a2:90:2b:ba:4e:50:a3:3e:8b: 0a:be:3d:5d:85:9d:f4:6c:7b:c1:cd:04:09:6d:30: fd:c3:69:53:b5:7d:8f:1a:b5:d8:55:ac:22:99:6c: 98:6c:3e:6a:5b:59:87:4c:9d:42:4d:56:01:8e:20: 6f:2e:17:2c:44:aa:32:e1:46:d8:11:ff:1b:e5:40: 94:56:68:52:eb:91:e5:ea:fd:c2:7c:20:63:52:1c: 35:4e:0c:43:47:7c:69:77:ae:9d:6e:0e:c8:70:50: 0e:36:22:29:3d:5a:28:38:26:6b:d2:ad:bb:25:4d: b4:29:d3:4d:72:c0:a4:da:11:e5:a2:63:e6:cb:d3: e0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:56:B7:8F:0C:E5:7D:62:08:89:E4:85:DC:D6:64:13:DA:84:04:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece8eb8f-37d1-4797-8746-990300c8ab75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:8422::/48 Signature Algorithm: sha256WithRSAEncryption 88:4d:4d:cf:5b:19:e7:b1:ad:1f:46:ab:50:af:3f:69:4e:6a: 51:07:ae:82:a3:33:ca:cf:47:7f:71:96:56:f5:a8:94:92:93: 8d:22:5d:56:03:b0:3f:1b:55:07:4d:75:25:fa:d9:0f:ea:46: 2f:c9:d7:65:1d:12:24:39:2e:d2:a1:1b:d9:1c:06:3c:69:32: 12:65:af:96:63:ab:e9:23:56:0c:3a:9f:c0:84:9b:95:ed:85: 84:15:8c:c8:4a:81:cd:5e:75:32:96:8e:5c:66:70:1d:c8:a6: 64:11:28:9b:27:d0:b4:e0:4a:4b:40:10:44:48:1e:28:6c:6d: 7b:bc:91:48:43:0c:9f:20:6a:ae:d8:2d:66:d4:ec:1c:8f:d4: 6b:19:be:73:ad:ef:26:f9:a3:51:00:46:83:d7:f2:49:87:45: 2b:27:4f:ef:c1:a8:38:22:2b:89:51:34:1a:9b:5b:9e:ef:88: 42:8e:e1:80:7b:86:a6:dc:70:a4:c0:1b:df:e9:9a:82:ad:71: df:bc:31:09:c1:3e:10:0b:9c:86:6d:66:97:3f:86:1f:27:47: 7c:52:47:46:a9:07:bf:3c:ba:14:94:1b:f4:44:6d:ee:48:a9: 5c:04:3b:a5:5b:3d:9c:6a:ad:fe:5e:a1:f7:f3:c4:df:89:61: 2d:f1:b5:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKCIyikGtFm+a4lGUXfZU5ktLV6IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDAxMTU5OWQxMjEzZmU2NjYzYjQ4M2U1MmMyOGIyMDQ1 YzQyNjYwZGUwMWY5MTY4MzMwODJiNTAxZTZjYWQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK0mmW69ltAn/nsO+4aS9XO6jQ7F+86g6CPKKa82qCepxW pBjMXMYe7J9U21RKKsdRmz8H8lgi3P4symkLH/sg/LGkM82o6bvD1OegKRynYfEZ KLqcWfRPCpmmCxwsotXp9lksWl6TsAKBFvuYiW37Tcvga6bPSOOyEKJFqaKQK7pO UKM+iwq+PV2FnfRse8HNBAltMP3DaVO1fY8atdhVrCKZbJhsPmpbWYdMnUJNVgGO IG8uFyxEqjLhRtgR/xvlQJRWaFLrkeXq/cJ8IGNSHDVODENHfGl3rp1uDshwUA42 Iik9Wig4JmvSrbslTbQp001ywKTaEeWiY+bL0+CJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsla3jwzlfWIIieSF3NZkE9qEBJ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VjZThlYjhmLTM3ZDEtNDc5Ny04NzQ2LTk5MDMwMGM4YWI3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9hCIwDQYJKoZIhvcNAQELBQADggEBAIhNTc9bGeexrR9Gq1CvP2lO alEHroKjM8rPR39xllb1qJSSk40iXVYDsD8bVQdNdSX62Q/qRi/J12UdEiQ5LtKh G9kcBjxpMhJlr5Zjq+kjVgw6n8CEm5XthYQVjMhKgc1edTKWjlxmcB3IpmQRKJsn 0LTgSktAEERIHihsbXu8kUhDDJ8gaq7YLWbU7ByP1GsZvnOt7yb5o1EARoPX8kmH RSsnT+/BqDgiK4lRNBqbW57viEKO4YB7hqbccKTAG9/pmoKtcd+8MQnBPhALnIZt Zpc/hh8nR3xSR0apB788uhSUG/REbe5IqVwEO6VbPZxqrf5eoffzxN+JYS3xtXk= -----END CERTIFICATE-----Generated at Thu Apr 18 00:46:21 2024 by rpki-client on console-fra.rpki-client.org