$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4628fdc0-a31f-437d-8e33-b8f891b1dd1c.roa File: 4628fdc0-a31f-437d-8e33-b8f891b1dd1c.roa (raw, json) Hash identifier: e3yVyyt/mmpUb0Sh2Ziu09NMVp9gbBzPlagIwyaUvIU= Subject key identifier: 04:B2:94:C8:BC:DC:A0:4F:B2:7E:A8:52:56:62:7A:53:BC:32:99:FA Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4DAB5417F17F03205191F47CC678FDD6831ECBE3 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4628fdc0-a31f-437d-8e33-b8f891b1dd1c.roa Signing time: Tue 09 Apr 2024 00:00:00 +0000 ROA not before: Tue 09 Apr 2024 00:00:00 +0000 ROA not after: Tue 14 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:548::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ab:54:17:f1:7f:03:20:51:91:f4:7c:c6:78:fd:d6:83:1e:cb:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 9 00:00:00 2024 GMT Not After : May 14 23:59:59 2024 GMT Subject: serialNumber=574697a2c87723f6d216b06d2a232f06894d97eeec1d04f4725255119501a5d4, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:7b:1e:3d:08:90:58:ea:81:c4:74:43:8c: 31:ce:ff:f7:d7:de:b1:a3:0b:6a:60:0a:0b:bb:fc: 7f:25:45:ca:66:e4:8a:c4:04:49:85:ec:97:36:82: e5:f1:95:4a:e5:5e:96:cb:e7:31:e7:3f:82:82:00: 6f:a4:5f:cc:88:a8:52:e2:bd:5a:ec:c6:8b:d2:c8: fd:ce:12:0e:d0:8c:0c:ca:69:66:d9:6d:f0:57:f5: 20:d8:e0:ee:8d:83:f7:2e:68:dd:c4:4c:70:68:fe: 1f:e6:05:87:b6:50:9b:01:64:a5:d6:a5:bc:01:88: 8a:00:ff:aa:11:fb:0c:e8:23:7a:7d:a0:fc:e0:4e: e8:59:b4:1d:5a:8b:28:78:70:0f:46:43:f2:35:95: 1f:a6:69:3c:e4:45:a8:13:c5:ee:a5:fe:46:1c:9f: 73:29:b3:0b:ef:de:ef:80:b2:17:32:7f:a6:3d:d2: 3f:e5:8c:fc:ff:0e:c2:bd:38:69:63:f0:3f:b9:53: 6e:87:20:a1:46:89:70:90:ef:88:f5:88:95:e5:13: df:b7:d7:42:e8:50:e7:7b:a9:5d:d7:6a:c7:6f:54: c9:32:e5:9f:44:02:71:a4:55:75:95:12:97:b8:b3: a0:d3:97:69:96:e1:f9:6e:e1:d3:95:5d:ae:f3:d6: f4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B2:94:C8:BC:DC:A0:4F:B2:7E:A8:52:56:62:7A:53:BC:32:99:FA X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4628fdc0-a31f-437d-8e33-b8f891b1dd1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:548::/48 Signature Algorithm: sha256WithRSAEncryption 06:f6:5b:f0:ac:53:9c:7d:ad:67:60:4d:59:f8:3b:00:22:8d: e6:c2:e4:fa:78:e5:68:8d:81:f5:68:da:3e:ae:09:5a:58:37: e3:65:9b:74:92:c2:14:81:fa:00:23:ea:63:95:22:21:cc:83: 9b:d2:c6:77:90:9a:69:2f:d7:5e:f6:b3:c5:75:e0:e8:da:61: 08:f5:57:0c:29:9b:10:3e:11:e9:fa:96:dc:dc:af:dc:a8:e2: 00:93:82:f6:aa:c4:57:e4:1e:0c:58:4e:17:ea:6c:a9:d9:82: 2e:ac:53:aa:36:8d:2d:3f:0f:4f:fc:9b:48:72:62:00:c4:1e: a6:cf:e7:40:72:1e:19:20:8c:4d:25:f6:a0:2c:5a:bc:7c:05: 25:37:c0:4d:5e:c4:ba:05:8e:15:e7:53:7f:6d:e6:ac:ce:d2: df:8a:70:44:d5:e6:14:9b:9a:66:d9:88:8d:a3:bb:37:23:2d: a8:f3:64:40:68:b0:98:f4:ba:c2:f6:2e:10:58:5f:d0:e3:62: ef:7f:9e:5b:af:49:a1:42:c0:30:15:11:b1:6a:e7:05:d5:c5: b5:6d:37:71:8d:6c:e4:27:25:6f:a9:67:6f:1e:b0:8b:00:0b: 62:99:44:3d:30:ba:36:8d:1a:9b:48:54:9d:84:aa:14:27:92: dd:9a:ee:35 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTatUF/F/AyBRkfR8xnj91oMey+MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDA5MDAwMDAwWhcNMjQwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzQ2OTdhMmM4NzcyM2Y2ZDIxNmIwNmQyYTIzMmYwNjg5 NGQ5N2VlZWMxZDA0ZjQ3MjUyNTUxMTk1MDFhNWQ0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyh3sePQiQWOqBxHRDjDHO//fX3rGjC2pgCgu7/H8lRcpm 5IrEBEmF7Jc2guXxlUrlXpbL5zHnP4KCAG+kX8yIqFLivVrsxovSyP3OEg7QjAzK aWbZbfBX9SDY4O6Ng/cuaN3ETHBo/h/mBYe2UJsBZKXWpbwBiIoA/6oR+wzoI3p9 oPzgTuhZtB1aiyh4cA9GQ/I1lR+maTzkRagTxe6l/kYcn3Mpswvv3u+Ashcyf6Y9 0j/ljPz/DsK9OGlj8D+5U26HIKFGiXCQ74j1iJXlE9+310LoUOd7qV3XasdvVMky 5Z9EAnGkVXWVEpe4s6DTl2mW4flu4dOVXa7z1vQ3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBLKUyLzcoE+yfqhSVmJ6U7wymfowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQ2MjhmZGMwLWEzMWYtNDM3ZC04ZTMzLWI4Zjg5MWIxZGQxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUgwDQYJKoZIhvcNAQELBQADggEBAAb2W/CsU5x9rWdgTVn4OwAi jebC5Pp45WiNgfVo2j6uCVpYN+Nlm3SSwhSB+gAj6mOVIiHMg5vSxneQmmkv1172 s8V14OjaYQj1VwwpmxA+Een6ltzcr9yo4gCTgvaqxFfkHgxYThfqbKnZgi6sU6o2 jS0/D0/8m0hyYgDEHqbP50ByHhkgjE0l9qAsWrx8BSU3wE1exLoFjhXnU39t5qzO 0t+KcETV5hSbmmbZiI2juzcjLajzZEBosJj0usL2LhBYX9DjYu9/nluvSaFCwDAV EbFq5wXVxbVtN3GNbOQnJW+pZ28esIsAC2KZRD0wujaNGptIVJ2EqhQnkt2a7jU= -----END CERTIFICATE-----Generated at Thu May 2 11:33:41 2024 by rpki-client on console-fra.rpki-client.org