$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb5c39ae-6a57-4edd-8079-48a621d13ca3.roa File: bb5c39ae-6a57-4edd-8079-48a621d13ca3.roa (raw, json) Hash identifier: w1PR2IsoAOBHebdgyTwQrk1ItIMo9EuEFm3CTSRMJlo= Subject key identifier: 59:52:E0:12:93:C6:8C:82:2D:37:E7:6B:69:1F:80:B8:F7:66:82:04 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 30732B0621FAE17DD0708F1AF98D3BBFF417C197 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb5c39ae-6a57-4edd-8079-48a621d13ca3.roa Signing time: Tue 30 Apr 2024 00:00:00 +0000 ROA not before: Tue 30 Apr 2024 00:00:00 +0000 ROA not after: Tue 04 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:73:2b:06:21:fa:e1:7d:d0:70:8f:1a:f9:8d:3b:bf:f4:17:c1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 30 00:00:00 2024 GMT Not After : Jun 4 23:59:59 2024 GMT Subject: serialNumber=4cf0bf88c9c83b630ce2d4f5e1f913cef36955db57a0f34712d5293f52688a0c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f2:23:62:d4:7d:b4:88:55:24:21:7e:67:35: 9d:a7:8c:e9:a6:db:ac:12:87:21:88:4a:d4:52:c8: 8d:14:df:ba:cd:ad:b8:16:da:bd:98:33:78:13:83: 1f:03:5a:13:c9:31:ac:a2:e3:4c:15:45:cc:78:5a: db:2e:37:0e:d6:86:0c:92:4a:99:db:2d:66:9c:f9: 8f:fc:66:73:f3:0e:ca:ce:e4:df:9a:2d:e9:32:2c: d1:3a:16:1c:b8:dd:98:e9:2a:3e:4b:5a:1e:3e:b1: 38:ba:5f:79:8f:75:4a:8d:69:54:23:6b:bf:f5:d2: 16:6e:df:db:0d:00:b8:88:53:2e:ac:ce:dc:8e:f6: 34:b1:e8:a4:a7:92:a2:38:03:ed:29:86:fc:5a:77: 15:ff:ef:59:f9:7e:0f:91:21:b8:96:33:99:a5:1f: 07:c1:7c:06:b9:54:98:c2:f7:23:2d:f9:1a:9f:9e: 62:25:5c:7c:f9:e7:ea:b8:e7:7d:ad:63:78:40:02: 86:2f:d3:c2:ae:bc:96:c9:42:99:68:d6:85:ff:43: 48:4a:58:5d:10:e5:b2:d0:be:fa:b1:d0:57:08:67: f2:b3:a6:a5:85:9c:71:f7:37:1e:55:47:1a:e7:49: ee:8f:96:fd:c4:c5:77:c4:48:a6:c3:4e:48:3b:a1: d8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:52:E0:12:93:C6:8C:82:2D:37:E7:6B:69:1F:80:B8:F7:66:82:04 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bb5c39ae-6a57-4edd-8079-48a621d13ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:30::/44 Signature Algorithm: sha256WithRSAEncryption 0a:22:49:f7:36:a0:68:a5:4e:92:ba:c5:74:5f:5c:9f:77:3e: 81:7d:c4:24:ac:fa:82:dc:ff:0b:33:5c:f1:24:09:a2:31:4c: d8:3a:d0:e4:14:e5:0d:7f:bf:d9:bb:b9:71:76:4a:e0:ce:fb: b7:84:09:f8:c8:8a:17:41:f1:21:8e:3d:f1:0f:d5:54:19:d0: f6:86:c2:57:4f:5f:b4:1a:1a:4a:33:e2:f3:31:68:0e:f3:e2: 0c:c4:ba:3a:f5:89:8e:92:e6:47:29:be:8f:f8:a3:93:f5:d7: dd:38:0e:c9:cf:4c:06:93:dc:bf:7e:0a:5d:da:8f:86:21:f2: 6c:b4:e0:f6:d4:d5:19:f8:49:79:77:2d:3e:61:13:11:18:28: ef:9c:0a:fd:d5:94:44:00:42:4f:e4:ab:48:7f:d9:af:d0:30: 75:59:72:6f:55:6c:19:2c:aa:6d:b6:6d:8f:c4:2f:0f:6a:21: d3:11:46:31:85:ac:df:b9:1c:de:d5:fe:bc:80:f2:33:b2:6f: 89:7a:64:01:4b:cf:82:22:86:73:92:3b:7a:01:0f:72:f2:5f: 2b:76:b2:6c:a2:f9:ae:35:7c:40:af:c6:26:57:14:ef:32:f4: f4:15:f8:f1:37:e9:9a:9d:25:9e:56:dc:65:c5:eb:ff:48:ba: 06:d2:e0:cc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMHMrBiH64X3QcI8a+Y07v/QXwZcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjQwNDMwMDAwMDAwWhcNMjQwNjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Y2YwYmY4OGM5YzgzYjYzMGNlMmQ0ZjVlMWY5MTNjZWYz Njk1NWRiNTdhMGYzNDcxMmQ1MjkzZjUyNjg4YTBjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCS8iNi1H20iFUkIX5nNZ2njOmm26wShyGIStRSyI0U37rN rbgW2r2YM3gTgx8DWhPJMayi40wVRcx4WtsuNw7WhgySSpnbLWac+Y/8ZnPzDsrO 5N+aLekyLNE6Fhy43ZjpKj5LWh4+sTi6X3mPdUqNaVQja7/10hZu39sNALiIUy6s ztyO9jSx6KSnkqI4A+0phvxadxX/71n5fg+RIbiWM5mlHwfBfAa5VJjC9yMt+Rqf nmIlXHz55+q4532tY3hAAoYv08KuvJbJQplo1oX/Q0hKWF0Q5bLQvvqx0FcIZ/Kz pqWFnHH3Nx5VRxrnSe6Plv3ExXfESKbDTkg7odj7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWVLgEpPGjIItN+draR+AuPdmggQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JiNWMzOWFlLTZhNTctNGVkZC04MDc5LTQ4YTYyMWQxM2NhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwADAwDQYJKoZIhvcNAQELBQADggEBAAoiSfc2oGilTpK6xXRfXJ93 PoF9xCSs+oLc/wszXPEkCaIxTNg60OQU5Q1/v9m7uXF2SuDO+7eECfjIihdB8SGO PfEP1VQZ0PaGwldPX7QaGkoz4vMxaA7z4gzEujr1iY6S5kcpvo/4o5P11904DsnP TAaT3L9+Cl3aj4Yh8my04PbU1Rn4SXl3LT5hExEYKO+cCv3VlEQAQk/kq0h/2a/Q MHVZcm9VbBksqm22bY/ELw9qIdMRRjGFrN+5HN7V/ryA8jOyb4l6ZAFLz4IihnOS O3oBD3LyXyt2smyi+a41fECvxiZXFO8y9PQV+PE36ZqdJZ5W3GXF6/9IugbS4Mw= -----END CERTIFICATE-----Generated at Thu May 2 01:05:46 2024 by rpki-client on console-fra.rpki-client.org