$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cd90e405-d871-4560-b003-3b0f6407405c.roa File: cd90e405-d871-4560-b003-3b0f6407405c.roa (raw, json) Hash identifier: e0u5WCdErHWUJ0GGxE+3EWkRjUUJV7fai9FU25kaIDU= Subject key identifier: 8C:80:D2:0A:0B:26:26:D8:9E:1C:73:3C:7F:74:90:93:34:7C:3F:7F Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2F5D065662334591B3FC130AB17989695541913F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cd90e405-d871-4560-b003-3b0f6407405c.roa Signing time: Fri 19 Apr 2024 00:00:00 +0000 ROA not before: Fri 19 Apr 2024 00:00:00 +0000 ROA not after: Fri 24 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:f015::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5d:06:56:62:33:45:91:b3:fc:13:0a:b1:79:89:69:55:41:91:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 19 00:00:00 2024 GMT Not After : May 24 23:59:59 2024 GMT Subject: serialNumber=c5dfc0791c6d8ac4a77d14a01ae7b7ff8d4ab508736832f1212e86699e7eac57, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:a2:2b:7e:49:e6:18:1b:25:10:d1:f0:de: 7b:52:77:e7:64:58:d8:b4:43:9d:82:a6:e1:61:7e: 37:7f:1c:af:ee:9f:ff:38:e7:f4:96:d4:9d:8b:8a: 98:1c:c2:43:b3:18:7c:d9:f4:f0:a1:98:f4:f6:e0: 02:21:02:f6:00:3f:5b:1e:a7:07:08:cd:1d:33:82: 48:30:cd:56:6b:11:4f:7f:d4:f6:5a:4e:68:ce:4c: e8:14:a5:e7:fa:e3:1f:21:1e:10:07:41:93:9a:8f: c6:1a:16:4a:67:25:04:18:17:98:c2:90:1c:52:30: e9:a1:50:25:60:5f:f3:b1:18:b2:9b:1f:bd:45:9b: c8:59:65:7a:ac:13:c2:1e:a6:f7:83:c5:34:7a:98: 98:be:4d:19:5e:91:ad:7e:e5:c6:b1:3b:38:96:7e: 33:eb:5f:98:b6:aa:7f:99:fb:86:70:72:c9:f3:79: ab:d2:39:1d:fd:00:4b:0d:12:c9:e7:31:82:0e:ef: ef:2e:4c:b4:17:24:af:a2:00:c2:1f:3e:13:b7:bd: ab:eb:aa:ec:d2:e9:76:c0:9e:e8:44:32:90:3e:66: cb:c0:c3:19:93:8b:1f:cb:af:56:53:ba:18:fe:92: 43:15:d2:75:a9:eb:87:38:55:3e:e4:0e:a6:3c:93: 9b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:80:D2:0A:0B:26:26:D8:9E:1C:73:3C:7F:74:90:93:34:7C:3F:7F X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cd90e405-d871-4560-b003-3b0f6407405c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f015::/48 Signature Algorithm: sha256WithRSAEncryption 27:29:a7:78:6e:67:4f:4c:a3:41:73:2a:4e:14:92:1a:10:44: 40:ad:d7:0c:02:a5:50:58:6f:bc:57:44:77:af:2f:46:58:ca: d7:2f:1e:58:a4:ec:81:da:25:84:6b:68:c0:68:5a:f0:1b:70: 8e:48:c4:29:ee:9e:d0:36:77:dc:0c:89:69:cf:ed:4f:f5:a1: 2c:5c:8d:ff:19:b9:18:57:81:2f:42:48:de:19:c3:b0:2f:4d: 70:05:0b:6b:42:11:ba:b5:88:52:b3:4c:70:de:4c:94:47:70: a8:9d:6e:6a:92:eb:f2:59:d6:6c:87:ed:6c:26:fc:41:0e:5e: d6:fd:bd:10:a7:22:15:a4:5b:84:62:bf:09:30:6f:75:1e:99: 12:22:c5:8f:22:44:aa:4f:58:bd:5c:2b:3e:33:3a:7d:15:ea: 46:d5:f4:f2:69:ed:04:33:b5:d8:1d:3c:da:d5:14:19:9c:6f: 97:55:d9:ce:3e:8c:28:9f:44:a4:65:a5:0a:20:ed:95:af:1b: 15:3e:81:04:4b:bc:34:d6:bc:ca:9e:9c:49:6a:20:d1:f6:d5: 75:5f:af:fb:2a:bd:cf:99:9b:03:78:e8:b6:9c:bc:3c:f5:07: ec:a6:cc:7c:a7:92:71:ee:b2:ca:cb:9d:06:6f:a5:e7:86:b6: b8:86:7b:49 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUL10GVmIzRZGz/BMKsXmJaVVBkT8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDE5MDAwMDAwWhcNMjQwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNWRmYzA3OTFjNmQ4YWM0YTc3ZDE0YTAxYWU3YjdmZjhk NGFiNTA4NzM2ODMyZjEyMTJlODY2OTllN2VhYzU3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX3aIrfknmGBslENHw3ntSd+dkWNi0Q52CpuFhfjd/HK/u n/845/SW1J2LipgcwkOzGHzZ9PChmPT24AIhAvYAP1sepwcIzR0zgkgwzVZrEU9/ 1PZaTmjOTOgUpef64x8hHhAHQZOaj8YaFkpnJQQYF5jCkBxSMOmhUCVgX/OxGLKb H71Fm8hZZXqsE8IepveDxTR6mJi+TRleka1+5caxOziWfjPrX5i2qn+Z+4Zwcsnz eavSOR39AEsNEsnnMYIO7+8uTLQXJK+iAMIfPhO3vavrquzS6XbAnuhEMpA+ZsvA wxmTix/Lr1ZTuhj+kkMV0nWp64c4VT7kDqY8k5vZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjIDSCgsmJtieHHM8f3SQkzR8P38wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2NkOTBlNDA1LWQ4NzEtNDU2MC1iMDAzLTNiMGY2NDA3NDA1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8BUwDQYJKoZIhvcNAQELBQADggEBACcpp3huZ09Mo0FzKk4UkhoQ RECt1wwCpVBYb7xXRHevL0ZYytcvHlik7IHaJYRraMBoWvAbcI5IxCnuntA2d9wM iWnP7U/1oSxcjf8ZuRhXgS9CSN4Zw7AvTXAFC2tCEbq1iFKzTHDeTJRHcKidbmqS 6/JZ1myH7Wwm/EEOXtb9vRCnIhWkW4Rivwkwb3UemRIixY8iRKpPWL1cKz4zOn0V 6kbV9PJp7QQztdgdPNrVFBmcb5dV2c4+jCifRKRlpQog7ZWvGxU+gQRLvDTWvMqe nElqINH21XVfr/sqvc+ZmwN46LacvDz1B+ymzHynknHussrLnQZvpeeGtriGe0k= -----END CERTIFICATE-----Generated at Thu May 9 04:27:45 2024 by rpki-client on console-ams.rpki-client.org