$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6d22e3ab-59b8-41bb-8685-0758081d8424.roa File: 6d22e3ab-59b8-41bb-8685-0758081d8424.roa (raw, json) Hash identifier: /b+at53NZSeWq728LrmKbBbhghJCkHX/9adPpcaK1G0= Subject key identifier: 8C:5D:78:4B:C9:4B:89:35:12:D4:BC:DD:42:1C:3E:88:F8:71:BE:49 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 75101CFB1FFDC638D2BA7DF2371266399135C069 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6d22e3ab-59b8-41bb-8685-0758081d8424.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:64b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:10:1c:fb:1f:fd:c6:38:d2:ba:7d:f2:37:12:66:39:91:35:c0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=e601da09572f6e3985a6d169cf952fd50051e68760dee151df9b3a1f19ee0d64, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:05:eb:a6:5f:04:f5:93:e3:44:ef:27:dd: cf:f2:34:66:f3:5c:6a:5f:9b:e6:17:4f:44:ab:20: 02:72:d9:44:0b:b3:b5:50:52:aa:01:0f:0f:e6:f1: 47:69:b7:77:63:44:f9:72:3d:d0:57:40:9d:2d:7c: 97:50:ef:f0:98:05:72:62:d3:3e:86:6e:7f:3d:88: 03:8c:8d:14:ac:6a:e1:64:8e:0e:6f:39:9f:2f:4d: 1b:b2:30:fc:1c:4e:f7:0f:9d:eb:2d:06:ed:df:61: d8:29:c7:db:c9:92:dc:5b:af:77:23:c0:46:b8:93: 0b:93:d0:30:7d:ad:a0:f0:df:58:96:a4:53:bc:ac: ae:dd:9f:3c:59:9f:33:70:16:52:60:bf:8b:5e:c4: df:94:71:af:75:be:23:e9:75:d8:ce:34:2f:5a:5c: 7a:1e:fe:07:b1:c3:c1:92:4b:d7:64:3e:da:23:3a: af:e4:c6:a4:f2:35:a3:9c:52:9f:0b:72:aa:3f:64: 8f:3e:4a:41:ae:c4:57:59:01:57:4d:38:88:4e:19: 29:87:e5:9f:3d:6b:1e:19:22:d3:24:15:89:ab:1d: cd:f7:b0:23:5f:05:86:97:60:8f:f0:01:e2:d3:2b: 6d:88:11:6c:19:53:e5:06:22:36:21:2a:60:de:80: e6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5D:78:4B:C9:4B:89:35:12:D4:BC:DD:42:1C:3E:88:F8:71:BE:49 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6d22e3ab-59b8-41bb-8685-0758081d8424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:64b::/48 Signature Algorithm: sha256WithRSAEncryption 71:89:3b:9c:d0:2c:a5:cc:67:03:a3:37:c5:3e:31:1a:b0:91: 82:e1:ca:95:60:5e:68:1b:12:f3:d4:c0:92:e7:0e:c8:c2:9b: b1:14:fa:0a:44:06:6d:c3:ce:50:22:59:b0:cd:b6:5b:d0:b0: 8c:a8:64:81:16:7a:30:2d:ca:1b:02:c9:fd:11:a3:d0:ee:a3: af:c9:3f:89:98:e1:22:5a:c4:fb:4d:06:d8:1c:30:58:fb:b6: 28:9e:1b:6e:9e:99:89:35:bc:59:e1:e6:09:43:85:c2:99:04: c1:28:2c:e1:16:4d:9f:87:bb:94:d4:df:d2:d0:3f:ce:8b:e3: 9d:bf:d9:95:92:30:5e:48:98:f5:98:f2:30:ae:79:8d:f1:92: 32:60:6f:b1:86:9f:e4:a1:80:c4:bf:e1:93:89:61:96:71:2a: 42:c6:eb:0f:a7:70:16:f8:db:ee:23:f7:85:cf:bc:e8:b7:37: c1:a3:dc:3b:4f:fb:ba:0e:5b:31:65:25:76:b7:3e:d9:bb:b4: 63:b0:d0:b3:74:29:6f:09:66:dc:0d:32:e7:00:68:dd:bf:3d: be:4b:e0:ba:26:4b:a2:23:b5:13:d5:f3:36:d3:b0:34:0e:db: 27:bd:c2:f5:54:68:51:fd:9d:ea:fb:5b:20:5b:e6:56:58:6e: 80:af:6d:d6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdRAc+x/9xjjSun3yNxJmOZE1wGkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjAxZGEwOTU3MmY2ZTM5ODVhNmQxNjljZjk1MmZkNTAw NTFlNjg3NjBkZWUxNTFkZjliM2ExZjE5ZWUwZDY0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF1wXrpl8E9ZPjRO8n3c/yNGbzXGpfm+YXT0SrIAJy2UQL s7VQUqoBDw/m8Udpt3djRPlyPdBXQJ0tfJdQ7/CYBXJi0z6Gbn89iAOMjRSsauFk jg5vOZ8vTRuyMPwcTvcPnestBu3fYdgpx9vJktxbr3cjwEa4kwuT0DB9raDw31iW pFO8rK7dnzxZnzNwFlJgv4texN+Uca91viPpddjONC9aXHoe/gexw8GSS9dkPtoj Oq/kxqTyNaOcUp8Lcqo/ZI8+SkGuxFdZAVdNOIhOGSmH5Z89ax4ZItMkFYmrHc33 sCNfBYaXYI/wAeLTK22IEWwZU+UGIjYhKmDegOYFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjF14S8lLiTUS1LzdQhw+iPhxvkkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzZkMjJlM2FiLTU5YjgtNDFiYi04Njg1LTA3NTgwODFkODQyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABkswDQYJKoZIhvcNAQELBQADggEBAHGJO5zQLKXMZwOjN8U+MRqw kYLhypVgXmgbEvPUwJLnDsjCm7EU+gpEBm3DzlAiWbDNtlvQsIyoZIEWejAtyhsC yf0Ro9Duo6/JP4mY4SJaxPtNBtgcMFj7tiieG26emYk1vFnh5glDhcKZBMEoLOEW TZ+Hu5TU39LQP86L452/2ZWSMF5ImPWY8jCueY3xkjJgb7GGn+ShgMS/4ZOJYZZx KkLG6w+ncBb42+4j94XPvOi3N8Gj3DtP+7oOWzFlJXa3Ptm7tGOw0LN0KW8JZtwN MucAaN2/Pb5L4LomS6IjtRPV8zbTsDQO2ye9wvVUaFH9ner7WyBb5lZYboCvbdY= -----END CERTIFICATE-----Generated at Sun May 19 00:30:01 2024 by rpki-client on console-ams.rpki-client.org