$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efc992f9-00af-49f7-9474-d7a5b0a4a931.roa File: efc992f9-00af-49f7-9474-d7a5b0a4a931.roa (raw, json) Hash identifier: AYn7DjZOlxp40LtJV+OkLs2RiaWcRHvaz3EwGg36aJM= Subject key identifier: A2:10:18:95:8A:75:75:A6:63:1F:1E:61:9F:C4:7D:58:EA:EE:53:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7866A692497CDFE67D1C0AAE0D9CCDB6BBB73DE3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efc992f9-00af-49f7-9474-d7a5b0a4a931.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f01:4850::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:66:a6:92:49:7c:df:e6:7d:1c:0a:ae:0d:9c:cd:b6:bb:b7:3d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=2a02e57433649e2bf03e9545882a39ee177e5ef2db005522398cf262f5b5f84e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:91:de:43:f7:d4:86:52:fc:ea:40:2d:ab: a6:06:c6:c5:54:39:c0:c3:4e:f0:c2:f4:54:8f:dd: 3f:4f:04:da:1f:6d:ac:5f:3f:11:36:35:d1:50:a2: b8:ae:fc:fd:7a:34:fa:f6:4e:3a:c6:71:14:0c:75: 49:db:1e:77:8b:94:1d:91:05:b7:8d:59:73:23:6f: fd:a1:da:b0:93:28:43:e2:66:cc:c1:4a:9d:9c:4b: 62:ed:c2:1c:5a:17:50:f1:88:42:eb:7e:54:60:e2: e0:75:f1:23:40:ad:fb:52:e2:8e:ee:34:af:44:d5: 4f:52:8d:70:df:3a:7d:d2:30:55:3e:d2:e6:9a:4d: 00:a9:09:6c:ad:ee:78:11:7f:d2:2e:f1:77:e4:1c: b7:fd:da:cc:82:33:94:7c:8d:f6:03:dd:cf:bd:82: 7c:6d:9e:fb:1a:e9:63:18:e5:b2:72:76:af:51:ad: fa:39:3b:73:8a:df:5d:b4:2f:01:c1:45:4b:ce:86: 43:b7:1a:e0:95:53:28:0a:a2:88:74:96:c3:d4:96: b8:5b:50:33:36:ca:60:69:51:60:b6:6f:6f:40:d5: d6:0d:a3:44:b6:e5:38:5f:fc:3a:94:94:4a:4e:43: e3:4b:4b:27:13:4c:14:cb:87:41:e9:a0:3f:b6:af: 85:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:10:18:95:8A:75:75:A6:63:1F:1E:61:9F:C4:7D:58:EA:EE:53:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efc992f9-00af-49f7-9474-d7a5b0a4a931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:4850::/47 Signature Algorithm: sha256WithRSAEncryption 8e:8a:26:a3:a8:f6:dc:9c:7a:b1:2c:62:c5:b7:4c:e2:17:61: 87:2d:2a:b8:2f:7c:a3:64:2c:68:52:44:b6:74:b2:49:74:27: b9:a1:3a:6c:f3:24:5a:61:a9:fc:83:ff:4f:0a:db:b4:4b:16: 8a:2a:f4:03:2e:bd:3e:5d:82:11:98:b0:c0:46:3c:ab:35:3a: 33:0a:4c:f3:6b:67:84:b4:09:04:3f:04:74:d9:35:a7:b5:f0: fd:d5:c5:70:fc:44:c4:e4:12:86:e6:da:c3:48:d0:f6:fc:d9: ce:7d:2e:3f:81:f5:95:f8:20:9e:77:3a:71:6a:51:80:8d:3b: f6:3c:7b:41:bf:61:52:40:81:47:51:bb:e2:c2:b6:c5:76:9b: 0b:1f:f4:d3:e7:ed:81:a3:66:3e:b3:81:d4:da:81:73:22:f2: 70:28:34:6d:5f:93:d4:32:2b:1b:05:20:ad:ec:29:24:06:b8: f6:7c:66:62:cc:e2:5e:51:1b:be:6b:fd:80:cf:c7:c9:44:ae: b0:c3:6c:40:30:5b:e1:b6:6f:a2:25:8a:ce:dd:e2:3d:3a:3e: f1:b2:75:cf:f7:e6:c2:3d:9b:7d:e8:dc:7d:7e:57:98:75:01: 8c:d6:bb:28:31:72:7c:ce:2d:cf:9e:13:cb:66:ca:45:2e:34: 40:19:fc:be -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeGamkkl83+Z9HAquDZzNtru3PeMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTAyZTU3NDMzNjQ5ZTJiZjAzZTk1NDU4ODJhMzllZTE3 N2U1ZWYyZGIwMDU1MjIzOThjZjI2MmY1YjVmODRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw/5HeQ/fUhlL86kAtq6YGxsVUOcDDTvDC9FSP3T9PBNof baxfPxE2NdFQoriu/P16NPr2TjrGcRQMdUnbHneLlB2RBbeNWXMjb/2h2rCTKEPi ZszBSp2cS2LtwhxaF1DxiELrflRg4uB18SNArftS4o7uNK9E1U9SjXDfOn3SMFU+ 0uaaTQCpCWyt7ngRf9Iu8XfkHLf92syCM5R8jfYD3c+9gnxtnvsa6WMY5bJydq9R rfo5O3OK3120LwHBRUvOhkO3GuCVUygKooh0lsPUlrhbUDM2ymBpUWC2b29A1dYN o0S25Thf/DqUlEpOQ+NLSycTTBTLh0HpoD+2r4UnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUohAYlYp1daZjHx5hn8R9WOruUy8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmYzk5MmY5LTAwYWYtNDlmNy05NDc0LWQ3YTViMGE0YTkzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSFAwDQYJKoZIhvcNAQELBQADggEBAI6KJqOo9tycerEsYsW3TOIX YYctKrgvfKNkLGhSRLZ0skl0J7mhOmzzJFphqfyD/08K27RLFooq9AMuvT5dghGY sMBGPKs1OjMKTPNrZ4S0CQQ/BHTZNae18P3VxXD8RMTkEobm2sNI0Pb82c59Lj+B 9ZX4IJ53OnFqUYCNO/Y8e0G/YVJAgUdRu+LCtsV2mwsf9NPn7YGjZj6zgdTagXMi 8nAoNG1fk9QyKxsFIK3sKSQGuPZ8ZmLM4l5RG75r/YDPx8lErrDDbEAwW+G2b6Il is7d4j06PvGydc/35sI9m33o3H1+V5h1AYzWuygxcnzOLc+eE8tmykUuNEAZ/L4= -----END CERTIFICATE-----Generated at Wed Apr 24 01:49:04 2024 by rpki-client on console-fra.rpki-client.org