$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a0c6a2a-04fe-4fb8-a716-28629ceca3e9.roa File: 9a0c6a2a-04fe-4fb8-a716-28629ceca3e9.roa (raw, json) Hash identifier: vFLWkwFyxGsIqULbpv7O5YrT9ee8pl8hkPHYCnSV0U4= Subject key identifier: DC:78:62:ED:98:6C:94:C6:85:4A:37:59:45:CD:DC:9B:2C:6A:D4:D1 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 02724A82B107BDD3F8478814CC478C177BE2A50F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a0c6a2a-04fe-4fb8-a716-28629ceca3e9.roa Signing time: Sat 20 Apr 2024 00:00:00 +0000 ROA not before: Sat 20 Apr 2024 00:00:00 +0000 ROA not after: Sat 25 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:f027::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:72:4a:82:b1:07:bd:d3:f8:47:88:14:cc:47:8c:17:7b:e2:a5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 20 00:00:00 2024 GMT Not After : May 25 23:59:59 2024 GMT Subject: serialNumber=8d02e9242fa7dbb89f301cf669963ab1a7d2ba0813e00eaf2eabdc1ed2139bb2, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8c:03:b1:c4:ba:09:be:22:9d:10:e6:c0:eb: 04:f5:21:49:54:b3:75:75:42:0d:79:17:2d:d2:b8: 45:d2:6c:15:68:3e:14:1c:84:5c:55:1d:fd:59:f4: 8d:e8:93:2a:c1:a7:1d:f2:8e:03:27:a5:93:cd:e6: d6:4b:fd:2b:cc:a5:de:26:37:bc:ad:cf:67:b2:e2: f8:f4:27:b7:e8:e0:26:9a:72:bb:f5:24:0a:64:07: 3f:dd:a0:8a:c1:01:a1:43:3f:49:21:f9:ca:69:f8: ce:7d:75:54:95:62:4d:b8:56:35:84:47:c6:c3:5c: cb:00:b2:ee:19:ad:12:8c:67:f6:26:dd:b5:05:ae: 7b:ad:b1:b5:11:71:e0:9e:76:1c:1c:13:d7:e9:3a: f0:0e:0c:4c:5c:60:c0:c6:3c:c0:6e:86:30:6d:d8: 54:45:df:13:aa:8f:96:0d:56:04:4e:88:52:1e:7a: 3a:86:12:16:08:6c:73:53:30:1f:86:71:ad:c2:38: f0:21:79:24:44:7e:c5:d0:e8:cb:aa:7b:d3:04:d5: 59:b1:83:f2:73:1d:be:3f:64:f0:aa:4b:2c:ad:e5: 43:15:c4:fc:6c:82:bf:24:a0:76:f6:84:d5:15:b2: 62:75:5a:c2:ab:bc:ce:05:b4:4a:2c:bc:69:4d:e9: 7f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:78:62:ED:98:6C:94:C6:85:4A:37:59:45:CD:DC:9B:2C:6A:D4:D1 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a0c6a2a-04fe-4fb8-a716-28629ceca3e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f027::/48 Signature Algorithm: sha256WithRSAEncryption 64:ec:8c:46:e6:73:a1:94:4e:6a:0c:f9:46:19:90:6a:af:25: 7a:71:23:93:69:c4:e2:15:e7:7d:a0:7d:ae:b5:0e:78:9b:f4: b0:45:c5:65:8d:63:d7:46:d9:89:f5:0b:0b:ae:98:6a:89:d0: 42:e0:70:1e:6e:9d:7f:f2:13:26:93:91:6e:1f:02:48:02:1e: 78:65:3e:a6:38:e5:03:9c:36:4f:4c:af:63:7f:1b:98:63:fd: 69:a6:5a:bb:21:dc:94:0c:5a:0c:72:9c:15:0a:b9:ab:ac:9b: c1:1d:2f:ef:14:90:69:52:c2:28:9e:2d:39:1d:1f:53:71:a8: d7:68:63:cc:ef:39:7f:32:24:22:ca:3e:23:6b:18:98:ca:6f: 61:13:a8:a4:89:91:70:79:5d:8f:d1:89:c9:df:3b:0e:cc:13: a5:b0:31:ca:3d:4d:3b:26:02:2f:78:b6:3b:ce:6d:2a:32:e1: 54:2a:a7:f7:50:10:8b:37:e0:f2:1e:34:be:91:e5:21:03:8b: 0c:f2:c6:df:8b:3f:f0:88:6d:7d:00:6b:d1:5c:fb:3e:24:71: 02:b0:08:d3:23:62:27:c7:af:1a:1f:ee:48:23:af:b7:68:7c: c1:fe:cf:0e:50:6b:8f:51:8d:11:f1:3e:ed:bb:20:2d:f8:bf: 4a:36:ae:03 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAnJKgrEHvdP4R4gUzEeMF3vipQ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDIwMDAwMDAwWhcNMjQwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDAyZTkyNDJmYTdkYmI4OWYzMDFjZjY2OTk2M2FiMWE3 ZDJiYTA4MTNlMDBlYWYyZWFiZGMxZWQyMTM5YmIyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvjAOxxLoJviKdEObA6wT1IUlUs3V1Qg15Fy3SuEXSbBVo PhQchFxVHf1Z9I3okyrBpx3yjgMnpZPN5tZL/SvMpd4mN7ytz2ey4vj0J7fo4Caa crv1JApkBz/doIrBAaFDP0kh+cpp+M59dVSVYk24VjWER8bDXMsAsu4ZrRKMZ/Ym 3bUFrnutsbURceCedhwcE9fpOvAODExcYMDGPMBuhjBt2FRF3xOqj5YNVgROiFIe ejqGEhYIbHNTMB+Gca3COPAheSREfsXQ6Muqe9ME1Vmxg/JzHb4/ZPCqSyyt5UMV xPxsgr8koHb2hNUVsmJ1WsKrvM4FtEosvGlN6X9zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3Hhi7ZhslMaFSjdZRc3cmyxq1NEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzlhMGM2YTJhLTA0ZmUtNGZiOC1hNzE2LTI4NjI5Y2VjYTNlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8CcwDQYJKoZIhvcNAQELBQADggEBAGTsjEbmc6GUTmoM+UYZkGqv JXpxI5NpxOIV532gfa61Dnib9LBFxWWNY9dG2Yn1CwuumGqJ0ELgcB5unX/yEyaT kW4fAkgCHnhlPqY45QOcNk9Mr2N/G5hj/WmmWrsh3JQMWgxynBUKuausm8EdL+8U kGlSwiieLTkdH1NxqNdoY8zvOX8yJCLKPiNrGJjKb2ETqKSJkXB5XY/RicnfOw7M E6WwMco9TTsmAi94tjvObSoy4VQqp/dQEIs34PIeNL6R5SEDiwzyxt+LP/CIbX0A a9Fc+z4kcQKwCNMjYifHrxof7kgjr7dofMH+zw5Qa49RjRHxPu27IC34v0o2rgM= -----END CERTIFICATE-----Generated at Thu May 9 13:02:08 2024 by rpki-client on console-fra.rpki-client.org