$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/03f5a9d6-dd97-47b4-808d-4536aea7c03e.roa File: 03f5a9d6-dd97-47b4-808d-4536aea7c03e.roa (raw, json) Hash identifier: L+nZUaZoWpjh6CRMr/M3RQwksMTSGWAl9cr0ioY6Mn0= Subject key identifier: 00:A2:4B:FE:0F:44:2D:84:ED:DF:13:F8:DB:B1:CC:03:1C:0D:73:22 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 60B70088B22B50BC6B3E999726DAC16D6D7C148A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/03f5a9d6-dd97-47b4-808d-4536aea7c03e.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c0d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b7:00:88:b2:2b:50:bc:6b:3e:99:97:26:da:c1:6d:6d:7c:14:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=ac439b6caed3d47557bd930206450b9e494b1f1d33bf789e7ad8b2afe33aa388, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:b8:16:22:89:08:a5:36:b2:cc:22:2a:5c: db:ec:e8:fc:83:60:26:13:21:39:d5:0c:a4:05:2d: 7e:ea:f0:95:04:d4:6e:1c:ff:88:6f:2f:62:19:64: 2c:00:55:d7:fd:c8:73:63:d3:dd:00:73:1c:eb:6f: c7:25:1a:34:8c:82:47:cf:14:92:a5:6b:06:aa:57: 1a:d5:fe:7f:cb:42:a7:39:38:59:b4:9a:7b:68:74: cd:12:1b:cb:c8:8c:32:d9:76:e9:00:cc:2c:73:f4: 15:97:d9:6b:65:e7:4e:f1:b7:ff:f2:40:5c:86:47: ac:79:2b:ce:6e:bc:dc:5e:58:9c:86:e4:fa:41:56: e8:a1:ed:a8:99:0b:df:89:1c:7b:80:d7:f2:5f:6a: a7:e5:f6:17:fd:e0:7c:3c:1a:55:e4:cf:30:4f:47: 13:30:a4:2e:08:02:bc:78:53:e6:34:3d:98:4a:65: 71:d2:25:db:7f:c9:1b:69:41:36:a0:69:07:59:d1: 0f:f1:49:db:5a:bc:cb:aa:ae:a0:64:7f:b9:3f:a9: 85:4a:f1:6b:80:b4:14:70:05:7a:e7:cb:47:29:a4: 66:7e:95:9e:6a:b2:f2:3e:1d:72:7f:92:18:9e:bd: 8a:e4:9d:90:d0:74:30:f9:99:1c:35:01:d7:5c:36: fb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A2:4B:FE:0F:44:2D:84:ED:DF:13:F8:DB:B1:CC:03:1C:0D:73:22 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/03f5a9d6-dd97-47b4-808d-4536aea7c03e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0d::/48 Signature Algorithm: sha256WithRSAEncryption 05:56:d4:1e:b6:2f:b9:57:b7:1f:b5:c1:78:9c:91:85:51:ba: 68:4f:6d:26:93:e5:3a:b6:33:fe:3c:63:02:3a:42:1d:fd:ff: 6d:7f:3e:48:c0:a8:f7:4c:ed:ed:74:da:ef:f1:05:b3:f8:d8: 18:51:2d:cb:18:88:74:5b:e6:b8:fb:96:51:c8:1f:68:af:27: 55:4e:4a:a4:e9:54:a9:1b:31:9f:85:c5:72:f2:76:ef:f5:3f: 74:42:e5:8e:e7:4f:a9:d8:a7:ba:9d:10:dd:d1:c8:f1:19:9b: fe:b7:0d:35:86:ca:5b:41:84:40:ed:8a:ce:c4:b4:c7:8e:1a: 8a:8c:de:b3:4c:11:3d:63:d4:a1:42:17:ab:31:3c:25:46:c0: 94:ee:c1:48:75:b3:f6:78:ae:67:74:6c:aa:51:98:96:40:19: 7c:73:81:35:71:23:a4:c9:27:90:bc:e8:b6:67:cc:56:12:c3: fd:ac:f2:d8:c9:11:95:f5:8c:e6:9d:96:84:43:e2:f2:bc:91: 91:69:7f:4d:28:17:4d:6c:66:8a:28:33:f9:6c:09:5e:de:d3: e6:b3:ec:14:86:2e:fe:32:ef:70:0a:3b:b4:b5:a3:a3:01:77: c6:9f:21:6c:ef:2d:95:88:e5:d6:99:f1:10:42:bf:18:73:37: b3:21:6e:ae -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYLcAiLIrULxrPpmXJtrBbW18FIowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzQzOWI2Y2FlZDNkNDc1NTdiZDkzMDIwNjQ1MGI5ZTQ5 NGIxZjFkMzNiZjc4OWU3YWQ4YjJhZmUzM2FhMzg4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6LLgWIokIpTayzCIqXNvs6PyDYCYTITnVDKQFLX7q8JUE 1G4c/4hvL2IZZCwAVdf9yHNj090Acxzrb8clGjSMgkfPFJKlawaqVxrV/n/LQqc5 OFm0mntodM0SG8vIjDLZdukAzCxz9BWX2Wtl507xt//yQFyGR6x5K85uvNxeWJyG 5PpBVuih7aiZC9+JHHuA1/Jfaqfl9hf94Hw8GlXkzzBPRxMwpC4IArx4U+Y0PZhK ZXHSJdt/yRtpQTagaQdZ0Q/xSdtavMuqrqBkf7k/qYVK8WuAtBRwBXrny0cppGZ+ lZ5qsvI+HXJ/khievYrknZDQdDD5mRw1AddcNvvnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAKJL/g9ELYTt3xP427HMAxwNcyIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzAzZjVhOWQ2LWRkOTctNDdiNC04MDhkLTQ1MzZhZWE3YzAzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA0wDQYJKoZIhvcNAQELBQADggEBAAVW1B62L7lXtx+1wXickYVR umhPbSaT5Tq2M/48YwI6Qh39/21/PkjAqPdM7e102u/xBbP42BhRLcsYiHRb5rj7 llHIH2ivJ1VOSqTpVKkbMZ+FxXLydu/1P3RC5Y7nT6nYp7qdEN3RyPEZm/63DTWG yltBhEDtis7EtMeOGoqM3rNMET1j1KFCF6sxPCVGwJTuwUh1s/Z4rmd0bKpRmJZA GXxzgTVxI6TJJ5C86LZnzFYSw/2s8tjJEZX1jOadloRD4vK8kZFpf00oF01sZooo M/lsCV7e0+az7BSGLv4y73AKO7S1o6MBd8afIWzvLZWI5daZ8RBCvxhzN7Mhbq4= -----END CERTIFICATE-----Generated at Thu May 2 11:33:29 2024 by rpki-client on console-fra.rpki-client.org