$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9c9ddc5f-b308-4bc3-b4f3-beea89ac69d4.roa File: 9c9ddc5f-b308-4bc3-b4f3-beea89ac69d4.roa (raw, json) Hash identifier: 9dsc5JFKS5nErKpfwIJlmMlO+hBVphbEi9DMrGuuTf4= Subject key identifier: C7:71:17:CE:59:01:48:56:A7:DB:07:B6:CB:A4:96:66:4A:30:49:41 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 7CE37B4F1B9649327621281A8B64A7B1C616308B Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9c9ddc5f-b308-4bc3-b4f3-beea89ac69d4.roa Signing time: Sat 13 Apr 2024 00:00:00 +0000 ROA not before: Sat 13 Apr 2024 00:00:00 +0000 ROA not after: Sat 18 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2606:f40:fffa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e3:7b:4f:1b:96:49:32:76:21:28:1a:8b:64:a7:b1:c6:16:30:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Apr 13 00:00:00 2024 GMT Not After : May 18 23:59:59 2024 GMT Subject: serialNumber=491a63ce07d8c36ebbe43372d50aeea130e7223773e69f9689b5ece41ae3d15b, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:a0:76:ef:6d:37:56:ea:ac:eb:93:09:42: df:3f:6a:aa:23:71:cf:44:72:69:f8:e5:ed:dc:ef: 9e:d1:88:19:21:23:93:0a:ba:87:4c:31:23:60:f3: ff:36:99:8e:60:46:6c:24:86:10:c6:a9:c1:c2:b8: e1:28:10:9c:f3:88:6e:31:e8:bc:a0:4b:0a:bd:3a: 31:dd:51:24:d9:5e:ba:7d:1b:d3:df:e6:05:a6:1a: d4:db:b3:9f:d1:c3:1d:28:b5:ab:ca:78:7d:39:95: 3e:f5:19:ff:cb:fe:19:6d:e9:21:09:6c:d8:36:b6: 29:86:b5:f5:d2:23:9b:1f:f9:96:9e:ba:51:b8:1a: 2b:b4:8d:29:72:9e:86:5f:79:66:e7:56:19:da:85: 20:55:09:ee:67:ea:1b:f5:1c:0d:8c:2d:60:3b:c1: f2:9f:b5:fd:29:02:8c:bd:dd:ad:95:3b:68:5b:30: 5c:16:d6:fb:c2:f9:6b:6b:7a:2e:47:5e:83:7f:20: 8b:5e:af:d2:50:8d:54:a0:91:b9:dc:db:b5:98:a7: 1f:06:08:d2:af:a5:d0:b2:22:5b:54:1b:0f:76:33: 8c:6e:3f:50:40:5b:fd:e9:94:02:84:f5:49:75:0a: 89:bf:df:9e:49:cf:c0:a0:a7:db:a2:33:93:39:f1: b7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:71:17:CE:59:01:48:56:A7:DB:07:B6:CB:A4:96:66:4A:30:49:41 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9c9ddc5f-b308-4bc3-b4f3-beea89ac69d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:f40:fffa::/48 Signature Algorithm: sha256WithRSAEncryption 65:b9:48:3d:de:d9:80:2a:16:33:33:80:c0:44:07:79:d8:a8: 7a:5d:73:da:e6:82:e5:32:22:b2:38:9f:f0:bb:f2:d1:86:a3: d4:dd:de:cc:01:6d:a7:89:4f:4d:7c:be:d3:d2:dd:0f:25:f7: bd:21:56:a8:8e:70:aa:81:e9:16:65:39:f3:5c:2d:2d:e7:76: 08:61:a6:da:ad:c2:f8:c0:13:07:ff:d0:2d:93:e0:60:4a:e0: 3f:35:19:18:4e:7a:ee:99:ee:90:50:a1:ef:7e:7e:9c:64:1c: 6d:49:7f:75:e2:c5:43:be:04:26:c0:ec:57:d9:a3:f8:10:8e: ac:df:59:00:38:90:d9:03:83:d9:a6:8e:3b:1f:88:c9:a4:d3: 44:93:d9:3b:52:96:cf:c1:68:6f:f0:8a:aa:21:30:9f:0c:c5: 11:a9:b1:b1:6c:3d:5f:df:e0:34:05:6b:5d:41:b1:24:07:2b: a3:14:fa:4d:b5:83:b5:85:d1:9a:44:63:e5:72:48:18:ee:2e: 4c:e3:b0:8e:c8:5a:3c:3b:ef:6d:a7:19:17:e9:1d:78:3b:81: 65:ef:d4:8e:80:8d:0b:ab:80:2d:04:05:20:c9:0c:69:38:4c: 39:11:e0:6a:ca:98:fb:dd:92:a1:fb:a4:44:c5:90:5e:38:8f: 8b:1b:37:d7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfON7TxuWSTJ2ISgai2SnscYWMIswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjQwNDEzMDAwMDAwWhcNMjQwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTFhNjNjZTA3ZDhjMzZlYmJlNDMzNzJkNTBhZWVhMTMw ZTcyMjM3NzNlNjlmOTY4OWI1ZWNlNDFhZTNkMTViMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoSKB27203Vuqs65MJQt8/aqojcc9Ecmn45e3c757RiBkh I5MKuodMMSNg8/82mY5gRmwkhhDGqcHCuOEoEJzziG4x6LygSwq9OjHdUSTZXrp9 G9Pf5gWmGtTbs5/Rwx0otavKeH05lT71Gf/L/hlt6SEJbNg2timGtfXSI5sf+Zae ulG4Giu0jSlynoZfeWbnVhnahSBVCe5n6hv1HA2MLWA7wfKftf0pAoy93a2VO2hb MFwW1vvC+Wtrei5HXoN/IIter9JQjVSgkbnc27WYpx8GCNKvpdCyIltUGw92M4xu P1BAW/3plAKE9Ul1Com/355Jz8Cgp9uiM5M58bePAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUx3EXzlkBSFan2we2y6SWZkowSUEwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzljOWRkYzVmLWIzMDgtNGJjMy1iNGYzLWJlZWE4OWFjNjlkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBg9A//owDQYJKoZIhvcNAQELBQADggEBAGW5SD3e2YAqFjMzgMBEB3nY qHpdc9rmguUyIrI4n/C78tGGo9Td3swBbaeJT018vtPS3Q8l970hVqiOcKqB6RZl OfNcLS3ndghhptqtwvjAEwf/0C2T4GBK4D81GRhOeu6Z7pBQoe9+fpxkHG1Jf3Xi xUO+BCbA7FfZo/gQjqzfWQA4kNkDg9mmjjsfiMmk00ST2TtSls/BaG/wiqohMJ8M xRGpsbFsPV/f4DQFa11BsSQHK6MU+k21g7WF0ZpEY+VySBjuLkzjsI7IWjw7722n GRfpHXg7gWXv1I6AjQurgC0EBSDJDGk4TDkR4GrKmPvdkqH7pETFkF44j4sbN9c= -----END CERTIFICATE-----Generated at Thu May 2 00:52:16 2024 by rpki-client on console-ams.rpki-client.org