$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86af0cc4-d9cd-4257-a45a-89c1f975bf72.roa File: 86af0cc4-d9cd-4257-a45a-89c1f975bf72.roa (raw, json) Hash identifier: EmZgHP0cJK9jcuzZmBKZxXLDHjkoxsgN0lzZ5G6ebO8= Subject key identifier: 8A:5F:41:86:05:C0:25:15:DA:ED:E3:C0:C0:7E:A9:3E:D9:EA:99:37 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 60B6ACAF31AD9D7CA541A6B6F557A2D585E73B53 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86af0cc4-d9cd-4257-a45a-89c1f975bf72.roa Signing time: Fri 19 Apr 2024 00:00:00 +0000 ROA not before: Fri 19 Apr 2024 00:00:00 +0000 ROA not after: Fri 24 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b6:ac:af:31:ad:9d:7c:a5:41:a6:b6:f5:57:a2:d5:85:e7:3b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 19 00:00:00 2024 GMT Not After : May 24 23:59:59 2024 GMT Subject: serialNumber=26b9aee7e73523e6d6e4fa7e0b1a75731bd079446b98428e8a8206539b70eea7, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fd:19:8a:4f:b9:90:c8:1b:d8:c1:bb:80:14: 69:ac:a3:c2:25:ad:80:0a:89:0d:ab:e6:9e:74:5a: 88:7a:75:67:cb:21:6b:fd:73:59:c1:4e:59:46:92: 55:36:8c:7b:1a:e2:df:67:04:96:c3:a9:e3:c1:06: 89:9e:af:48:d0:7b:53:32:f7:f1:3d:41:ba:a7:ed: d9:56:73:c6:2f:1c:88:ac:3c:98:eb:eb:39:b5:b7: 1f:ed:46:5c:dd:14:06:fc:49:00:05:c8:b3:74:a1: e7:ef:9d:c9:36:1a:bd:a2:ee:9e:28:0c:b3:b0:1f: 50:39:18:e7:dc:05:40:61:e2:f6:bc:10:5e:67:62: d4:14:fe:b2:16:b5:e2:b8:d3:6d:5d:9a:c2:df:b7: 8c:38:1a:f5:13:05:d4:81:ef:ff:19:29:30:c2:d8: 6a:a4:cc:53:0e:43:d1:c7:b4:b7:aa:c9:a8:96:60: e4:58:54:19:32:1d:98:0c:b9:87:8a:ae:0b:3a:97: 02:14:38:0e:a5:17:c4:06:f3:a3:f3:fa:1a:1c:0c: 29:a8:70:9f:25:9a:e8:dd:c6:22:54:a3:86:ff:13: 33:ce:13:cc:f0:d3:a3:a3:d5:21:6a:45:a9:e8:cf: e4:2e:d5:49:26:1f:08:13:cb:ed:cc:e9:bc:15:fc: ed:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5F:41:86:05:C0:25:15:DA:ED:E3:C0:C0:7E:A9:3E:D9:EA:99:37 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86af0cc4-d9cd-4257-a45a-89c1f975bf72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0c::/48 Signature Algorithm: sha256WithRSAEncryption 89:77:32:51:92:dc:a9:da:6e:96:e6:94:6f:2b:3e:41:34:e8: f2:5e:0a:05:76:6c:b0:7f:52:e5:a3:08:9c:db:31:af:ec:43: e2:fb:80:60:30:22:fb:a8:78:f9:f1:b4:b1:15:99:c7:3d:9c: 93:34:46:77:41:53:f7:78:48:63:22:89:64:a8:5d:dd:70:b9: f3:54:b6:bf:91:09:70:a2:96:66:21:7f:cd:b6:46:44:4f:a0: 92:e8:27:da:72:df:86:f1:4b:93:05:fe:c3:da:c3:f1:ec:ad: 82:18:4f:19:fa:fb:25:c4:9f:e4:bc:c1:e0:33:96:b7:d9:bc: a8:cb:c5:21:ff:45:07:8d:30:ef:ee:bf:03:96:73:7d:d2:09: d3:45:6c:d1:15:8b:08:58:f0:ae:d3:e8:45:86:3d:f1:25:ea: b1:4a:4d:2d:35:57:da:62:85:28:cd:dc:65:95:d4:10:39:ce: 41:c6:10:a9:e6:9a:e7:07:4e:1f:ab:6a:6f:3b:57:f7:d8:f6: bb:c0:72:53:b2:9f:e7:09:d7:96:41:ec:e5:0d:16:76:da:b8: 19:8b:e1:15:8b:a5:1f:ff:51:dc:f9:db:a7:88:c8:c0:7e:27: 50:56:e5:86:43:11:1f:73:e1:66:9e:37:57:f4:57:c8:3d:86: 98:0c:5b:22 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYLasrzGtnXylQaa29Vei1YXnO1MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDE5MDAwMDAwWhcNMjQwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNmI5YWVlN2U3MzUyM2U2ZDZlNGZhN2UwYjFhNzU3MzFi ZDA3OTQ0NmI5ODQyOGU4YTgyMDY1MzliNzBlZWE3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCW/RmKT7mQyBvYwbuAFGmso8IlrYAKiQ2r5p50Woh6dWfL IWv9c1nBTllGklU2jHsa4t9nBJbDqePBBomer0jQe1My9/E9Qbqn7dlWc8YvHIis PJjr6zm1tx/tRlzdFAb8SQAFyLN0oefvnck2Gr2i7p4oDLOwH1A5GOfcBUBh4va8 EF5nYtQU/rIWteK4021dmsLft4w4GvUTBdSB7/8ZKTDC2GqkzFMOQ9HHtLeqyaiW YORYVBkyHZgMuYeKrgs6lwIUOA6lF8QG86Pz+hocDCmocJ8lmujdxiJUo4b/EzPO E8zw06Oj1SFqRanoz+Qu1UkmHwgTy+3M6bwV/O3ZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUil9BhgXAJRXa7ePAwH6pPtnqmTcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg2YWYwY2M0LWQ5Y2QtNDI1Ny1hNDVhLTg5YzFmOTc1YmY3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAwwDQYJKoZIhvcNAQELBQADggEBAIl3MlGS3KnabpbmlG8rPkE0 6PJeCgV2bLB/UuWjCJzbMa/sQ+L7gGAwIvuoePnxtLEVmcc9nJM0RndBU/d4SGMi iWSoXd1wufNUtr+RCXCilmYhf822RkRPoJLoJ9py34bxS5MF/sPaw/HsrYIYTxn6 +yXEn+S8weAzlrfZvKjLxSH/RQeNMO/uvwOWc33SCdNFbNEViwhY8K7T6EWGPfEl 6rFKTS01V9pihSjN3GWV1BA5zkHGEKnmmucHTh+ram87V/fY9rvAclOyn+cJ15ZB 7OUNFnbauBmL4RWLpR//Udz526eIyMB+J1BW5YZDER9z4WaeN1f0V8g9hpgMWyI= -----END CERTIFICATE-----Generated at Thu May 2 14:33:18 2024 by rpki-client on console-fra.rpki-client.org