$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9c1d0b-d9ec-4455-97bd-0d6a4062a922.roa File: bc9c1d0b-d9ec-4455-97bd-0d6a4062a922.roa (raw, json) Hash identifier: yO2xkP0DAxeFabwNVaR1L5JsViCClDRgvRUKCDujpks= Subject key identifier: E5:0D:C2:FC:76:1C:7D:79:37:D0:57:D8:2D:5E:15:B3:D3:67:B5:67 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 233F20CE72006CB5A304FF3F941776C3BEBE7F5D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9c1d0b-d9ec-4455-97bd-0d6a4062a922.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:398::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:3f:20:ce:72:00:6c:b5:a3:04:ff:3f:94:17:76:c3:be:be:7f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=940b668171d746af1b61f8c6abb1d5ac442dfcd8c3babb9e8f15a6050545fcd5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:8f:c0:a1:a9:6d:2a:20:98:56:66:70:f3: e8:02:ed:1c:30:b3:46:a0:48:59:3d:b1:b4:0e:84: 6e:ae:6f:53:0e:e4:d0:9c:34:e9:20:5f:13:c4:ec: 5d:e0:ac:cd:ae:2e:b4:b0:a9:e2:9a:c6:57:e6:8f: 7b:b1:f6:95:f1:4c:eb:d8:0a:14:81:7f:c4:b1:40: 7d:40:5f:da:75:73:90:01:67:55:cb:86:6d:04:0e: 87:2a:0e:41:c7:04:5b:1b:60:56:6a:5f:a1:72:d4: d3:c7:5b:76:6f:c0:46:3f:58:e5:11:fc:37:fc:cc: 50:4e:ac:07:60:38:d2:35:a4:d6:79:f6:9d:a4:5c: a8:74:73:b5:6a:25:70:44:7f:33:94:b5:15:f4:7a: 64:9d:c4:8e:c7:8a:8d:10:ec:05:d1:06:2f:8c:90: ce:79:54:4a:73:06:06:24:5e:c2:ca:cb:9d:17:c1: 31:a4:7e:87:9f:ab:34:c2:b8:04:9d:88:e0:b1:71: fa:fb:3d:7f:ab:0e:49:e3:b0:8b:84:ad:8f:76:a5: db:e1:d9:c0:5e:6a:56:d2:9c:a0:83:81:37:ca:15: 25:60:fd:7a:12:49:30:da:b9:33:64:a4:51:4c:af: b0:41:5e:57:6a:75:e3:54:fe:c2:f4:4f:0a:8e:ed: 49:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0D:C2:FC:76:1C:7D:79:37:D0:57:D8:2D:5E:15:B3:D3:67:B5:67 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9c1d0b-d9ec-4455-97bd-0d6a4062a922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:398::/48 Signature Algorithm: sha256WithRSAEncryption 10:42:d7:00:04:0a:9d:b3:81:06:a5:ba:90:43:17:dd:10:3b: b0:99:9c:03:d3:56:5f:58:1d:26:31:bd:7e:5e:d3:29:eb:50: ec:87:0f:99:9c:52:b7:a1:2f:eb:6a:d8:d4:86:16:65:a3:c7: 84:d4:a4:36:69:0f:88:c5:28:64:ad:83:cb:62:d2:e6:15:43: ed:2a:fa:e9:5c:08:89:40:2d:55:b8:ce:27:84:f3:0e:34:da: 33:5d:02:08:d2:33:21:cf:7e:dd:2c:75:3a:93:7f:24:72:46: e0:e0:30:e5:fa:6d:b9:50:cd:30:66:e2:8a:2b:08:d0:5b:d6: 1c:8a:f9:76:d4:04:27:d3:2e:8d:b8:6e:a0:18:e1:7e:3e:83: 7e:08:81:e4:e1:9c:f5:a6:91:67:4f:ea:dd:5e:85:60:93:1e: d5:f4:49:d3:5d:ce:ac:68:0f:c0:37:a5:92:78:20:2f:34:6f: 52:fe:50:08:0c:dd:9f:e5:4c:98:75:57:85:f6:77:06:e5:13: b3:27:ca:7e:c2:e6:3e:fa:f9:07:75:3c:39:f1:e6:9e:d0:24: 2a:e1:84:32:6f:4a:1b:a5:3c:a5:c9:a3:be:c2:70:78:a7:27: 7b:8f:0b:a7:f4:b2:50:b9:d0:bf:60:29:04:58:df:da:23:36: 72:90:fe:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIz8gznIAbLWjBP8/lBd2w76+f10wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDBiNjY4MTcxZDc0NmFmMWI2MWY4YzZhYmIxZDVhYzQ0 MmRmY2Q4YzNiYWJiOWU4ZjE1YTYwNTA1NDVmY2Q1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0dY/AoaltKiCYVmZw8+gC7Rwws0agSFk9sbQOhG6ub1MO 5NCcNOkgXxPE7F3grM2uLrSwqeKaxlfmj3ux9pXxTOvYChSBf8SxQH1AX9p1c5AB Z1XLhm0EDocqDkHHBFsbYFZqX6Fy1NPHW3ZvwEY/WOUR/Df8zFBOrAdgONI1pNZ5 9p2kXKh0c7VqJXBEfzOUtRX0emSdxI7Hio0Q7AXRBi+MkM55VEpzBgYkXsLKy50X wTGkfoefqzTCuASdiOCxcfr7PX+rDknjsIuErY92pdvh2cBealbSnKCDgTfKFSVg /XoSSTDauTNkpFFMr7BBXldqdeNU/sL0TwqO7UnDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5Q3C/HYcfXk30FfYLV4Vs9NntWcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JjOWMxZDBiLWQ5ZWMtNDQ1NS05N2JkLTBkNmE0MDYyYTkyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5gwDQYJKoZIhvcNAQELBQADggEBABBC1wAECp2zgQalupBDF90Q O7CZnAPTVl9YHSYxvX5e0ynrUOyHD5mcUrehL+tq2NSGFmWjx4TUpDZpD4jFKGSt g8ti0uYVQ+0q+ulcCIlALVW4zieE8w402jNdAgjSMyHPft0sdTqTfyRyRuDgMOX6 bblQzTBm4oorCNBb1hyK+XbUBCfTLo24bqAY4X4+g34IgeThnPWmkWdP6t1ehWCT HtX0SdNdzqxoD8A3pZJ4IC80b1L+UAgM3Z/lTJh1V4X2dwblE7Mnyn7C5j76+Qd1 PDnx5p7QJCrhhDJvShulPKXJo77CcHinJ3uPC6f0slC50L9gKQRY39ojNnKQ/tE= -----END CERTIFICATE-----Generated at Thu May 2 11:34:01 2024 by rpki-client on console-fra.rpki-client.org