$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cb74c20c-0de6-4975-9680-3f4118596775.roa File: cb74c20c-0de6-4975-9680-3f4118596775.roa (raw, json) Hash identifier: H7gjRMUmpVy/UZkK4OJZyI6UK6gEZJ9cKf48ttKSlWg= Subject key identifier: 64:A8:E3:35:3D:ED:D4:F3:64:A5:5F:D0:97:60:7B:03:82:9B:82:18 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 47BACE2545D63204D56761DE2D627F03918D96BE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cb74c20c-0de6-4975-9680-3f4118596775.roa Signing time: Sat 20 Apr 2024 00:00:00 +0000 ROA not before: Sat 20 Apr 2024 00:00:00 +0000 ROA not after: Sat 25 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:f037::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ba:ce:25:45:d6:32:04:d5:67:61:de:2d:62:7f:03:91:8d:96:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 20 00:00:00 2024 GMT Not After : May 25 23:59:59 2024 GMT Subject: serialNumber=29bbbc125cd8291af0e5231d2899d62cf9beed896bb92a220a595322b7c6e2ff, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8f:6d:fa:29:25:6b:73:c9:c0:fa:e9:91:5e: 5b:4e:c1:5e:e7:a7:94:6e:d5:5c:99:6b:a3:fd:83: 3d:c1:0b:00:ae:cc:aa:55:26:3d:76:66:22:21:c8: 06:bf:1d:6f:f1:bd:7c:fe:ac:61:82:7a:65:1a:4f: 82:17:e6:00:28:25:f7:74:f9:43:ec:ef:bb:37:63: d2:45:08:c1:9b:b4:4b:fc:1b:31:0c:89:48:5b:1e: fc:bc:86:b1:32:25:0f:fd:bd:08:9d:f6:e7:27:5b: 97:23:da:e0:56:29:76:08:44:34:fa:da:68:b8:2f: e4:c3:c7:ac:7d:8e:c3:78:bd:61:e2:e9:5a:03:63: 5b:5e:16:67:41:85:25:5c:61:4b:38:1f:55:cd:23: 40:b8:79:02:95:03:c6:b8:ef:d6:5f:0b:ca:9f:9b: 7e:18:c5:00:de:ef:23:ea:98:31:c3:f0:ce:7a:7c: ae:7a:5a:9e:ee:f8:d7:ef:06:16:89:04:ed:02:d9: ef:91:b1:88:d5:c8:d0:68:6b:c2:ef:61:4e:83:7e: a3:ed:e0:54:a7:f3:ed:ca:18:85:78:dd:0a:18:d0: 34:7d:40:d7:c4:03:15:68:58:68:ee:5c:62:59:30: a3:13:cf:45:8d:66:65:01:3f:72:45:4f:a7:b5:1a: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A8:E3:35:3D:ED:D4:F3:64:A5:5F:D0:97:60:7B:03:82:9B:82:18 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cb74c20c-0de6-4975-9680-3f4118596775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f037::/48 Signature Algorithm: sha256WithRSAEncryption a9:93:e7:bc:42:66:db:06:ac:e3:0d:3e:0e:66:3d:13:6a:cc: 85:bd:01:97:a8:b0:f1:f0:f2:3f:a6:af:1a:50:87:6a:58:09: 08:e7:88:92:7d:77:93:c0:ea:96:c2:cf:08:0c:cb:42:2e:c4: e3:ba:23:62:0b:79:37:d9:b4:00:6f:af:77:44:eb:4d:20:d1: 49:c3:c7:72:84:bd:63:97:a9:2e:41:7c:93:39:8a:53:46:7d: c0:8b:4e:8f:b1:73:b5:2f:71:8f:a0:d9:ca:a3:c7:e7:26:c6: 06:45:41:28:fc:4b:e0:7c:26:ae:46:e2:67:ae:f2:ce:c3:d2: b2:42:07:bd:09:fa:e5:d6:b2:6c:6b:38:73:17:9a:3a:14:69: 20:bd:dd:25:09:dc:5e:e8:be:5d:f2:87:3c:22:60:9c:ee:8d: 2f:5f:52:08:4f:e3:c2:43:d8:63:07:d8:22:16:f1:dd:6d:50: 88:99:a9:ed:a6:19:a2:6b:a9:10:37:aa:79:9f:93:81:de:8f: b7:2b:34:4c:f5:8b:f0:dc:c9:1a:2c:c2:e2:91:14:50:03:bc: 58:b4:3e:09:3d:28:c8:5a:c7:de:1d:71:aa:77:5b:d9:f3:5c: ec:8d:e5:17:cc:6e:1e:5e:2f:c5:58:d1:2f:8d:e2:1b:72:26: 94:49:05:a7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUR7rOJUXWMgTVZ2HeLWJ/A5GNlr4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDIwMDAwMDAwWhcNMjQwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWJiYmMxMjVjZDgyOTFhZjBlNTIzMWQyODk5ZDYyY2Y5 YmVlZDg5NmJiOTJhMjIwYTU5NTMyMmI3YzZlMmZmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMj236KSVrc8nA+umRXltOwV7np5Ru1VyZa6P9gz3BCwCu zKpVJj12ZiIhyAa/HW/xvXz+rGGCemUaT4IX5gAoJfd0+UPs77s3Y9JFCMGbtEv8 GzEMiUhbHvy8hrEyJQ/9vQid9ucnW5cj2uBWKXYIRDT62mi4L+TDx6x9jsN4vWHi 6VoDY1teFmdBhSVcYUs4H1XNI0C4eQKVA8a479ZfC8qfm34YxQDe7yPqmDHD8M56 fK56Wp7u+NfvBhaJBO0C2e+RsYjVyNBoa8LvYU6DfqPt4FSn8+3KGIV43QoY0DR9 QNfEAxVoWGjuXGJZMKMTz0WNZmUBP3JFT6e1GvzBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZKjjNT3t1PNkpV/Ql2B7A4KbghgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2NiNzRjMjBjLTBkZTYtNDk3NS05NjgwLTNmNDExODU5Njc3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8DcwDQYJKoZIhvcNAQELBQADggEBAKmT57xCZtsGrOMNPg5mPRNq zIW9AZeosPHw8j+mrxpQh2pYCQjniJJ9d5PA6pbCzwgMy0IuxOO6I2ILeTfZtABv r3dE600g0UnDx3KEvWOXqS5BfJM5ilNGfcCLTo+xc7UvcY+g2cqjx+cmxgZFQSj8 S+B8Jq5G4meu8s7D0rJCB70J+uXWsmxrOHMXmjoUaSC93SUJ3F7ovl3yhzwiYJzu jS9fUghP48JD2GMH2CIW8d1tUIiZqe2mGaJrqRA3qnmfk4Hej7crNEz1i/DcyRos wuKRFFADvFi0Pgk9KMhax94dcap3W9nzXOyN5RfMbh5eL8VY0S+N4htyJpRJBac= -----END CERTIFICATE-----Generated at Thu May 2 00:10:30 2024 by rpki-client on console-ams.rpki-client.org