$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d474a367-cc3b-4aad-be93-813f072d04c5.roa File: d474a367-cc3b-4aad-be93-813f072d04c5.roa (raw, json) Hash identifier: KXbXdv8UFX4JhZm7+PYMkVQBLARV8xkF0pQdYqpFWtA= Subject key identifier: CD:D1:C6:2D:91:A2:77:F7:EC:28:20:5F:62:69:1F:E8:66:98:59:B3 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1242ED46DCF7D91C1A117559DCE7810784FE26FF Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d474a367-cc3b-4aad-be93-813f072d04c5.roa Signing time: Tue 14 May 2024 00:00:00 +0000 ROA not before: Tue 14 May 2024 00:00:00 +0000 ROA not after: Tue 18 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:f013::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:42:ed:46:dc:f7:d9:1c:1a:11:75:59:dc:e7:81:07:84:fe:26:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 14 00:00:00 2024 GMT Not After : Jun 18 23:59:59 2024 GMT Subject: serialNumber=c0983d9a38f214f8973c9ad4e1f6c7790ee6ac9e8f56e97a6872df05b3e8b407, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e5:ec:2f:20:6e:10:af:32:7b:34:7f:3a:62: 74:ba:5d:db:03:3e:f0:77:22:03:30:21:85:73:e8: e2:22:e7:95:65:69:9c:fe:0c:df:e2:09:c4:f6:42: 40:21:75:10:87:31:9b:cd:57:df:ea:5e:cc:ad:0f: 65:e0:35:f5:89:6a:e8:bf:af:48:4b:52:27:5e:12: 49:23:a4:dd:03:d1:a6:f1:c0:b1:f2:cc:8f:b0:40: f9:74:4d:a4:a6:41:7a:70:e5:80:7f:a0:83:3a:ee: 82:a5:9a:31:06:ad:f1:28:9f:f3:4f:8a:00:c1:43: 03:1b:6c:d0:e6:26:71:73:1f:09:ec:db:57:26:84: 77:3c:85:34:d7:3d:19:e2:d3:95:51:f2:af:d4:89: 14:80:b5:00:2b:06:e0:33:b5:12:de:c2:e5:7e:b7: 96:da:e2:55:01:e0:db:82:5a:8c:cf:a7:02:21:8a: d6:a7:c8:fa:d8:20:e7:bb:77:c6:bf:ce:c3:05:dd: 84:bb:68:84:02:ca:d5:99:17:4c:c1:8e:3d:c3:a8: ce:02:3f:9e:9e:f5:7b:c8:dc:ac:9f:7e:51:7b:86: 87:7b:ea:eb:44:6f:c5:ac:36:e9:c3:5a:cf:e2:cd: e3:91:40:89:d0:b0:8f:d4:1d:60:39:4b:27:14:26: 75:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D1:C6:2D:91:A2:77:F7:EC:28:20:5F:62:69:1F:E8:66:98:59:B3 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d474a367-cc3b-4aad-be93-813f072d04c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f013::/48 Signature Algorithm: sha256WithRSAEncryption 5b:5f:2f:87:10:89:bb:5b:ec:94:4b:c9:3f:20:89:88:c0:66: 65:d2:8a:00:98:79:c3:a5:82:94:7b:de:22:7f:e2:6b:5e:54: f2:ec:fc:d9:ed:e0:e1:b7:68:2d:db:78:aa:a6:c2:20:d1:fd: e2:e9:ca:bc:4a:0d:32:db:6f:d2:e1:a6:a9:e4:5e:4b:cc:65: f3:53:03:35:d0:00:28:cd:43:a3:7d:8d:9d:ef:d6:b4:68:04: 63:5f:60:a2:e2:76:1b:4e:b1:02:9a:8f:4d:09:29:4d:00:ac: 7b:b0:5c:10:ca:1f:d6:5c:07:a2:32:b1:d8:16:6c:d0:b4:4f: 57:b5:5c:2a:41:82:2e:24:7b:ff:d0:ec:29:0b:37:a9:dd:5a: c6:a3:8d:3d:8e:8e:67:71:c4:6f:42:2f:67:c3:af:32:6b:81: bd:27:b2:3a:1f:83:7f:1c:0a:19:90:d8:2e:e4:ae:12:c9:54: 10:1d:18:21:dd:b1:09:d2:76:17:e6:d1:e2:dc:9b:06:b5:dc: 6b:d6:f0:e6:ad:85:c7:7f:59:2b:ca:24:2c:9c:29:33:2a:67: b2:78:ae:4e:90:50:ed:cf:da:3e:e0:a3:f4:4d:9c:a5:b8:4a: f8:be:f1:3b:62:a9:15:6e:8f:e1:6d:70:96:a5:14:ea:7c:b9: 74:4e:7d:73 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEkLtRtz32RwaEXVZ3OeBB4T+Jv8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNTE0MDAwMDAwWhcNMjQwNjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDk4M2Q5YTM4ZjIxNGY4OTczYzlhZDRlMWY2Yzc3OTBl ZTZhYzllOGY1NmU5N2E2ODcyZGYwNWIzZThiNDA3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDm5ewvIG4QrzJ7NH86YnS6XdsDPvB3IgMwIYVz6OIi55Vl aZz+DN/iCcT2QkAhdRCHMZvNV9/qXsytD2XgNfWJaui/r0hLUideEkkjpN0D0abx wLHyzI+wQPl0TaSmQXpw5YB/oIM67oKlmjEGrfEon/NPigDBQwMbbNDmJnFzHwns 21cmhHc8hTTXPRni05VR8q/UiRSAtQArBuAztRLewuV+t5ba4lUB4NuCWozPpwIh itanyPrYIOe7d8a/zsMF3YS7aIQCytWZF0zBjj3DqM4CP56e9XvI3KyfflF7hod7 6utEb8WsNunDWs/izeORQInQsI/UHWA5SycUJnUvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzdHGLZGid/fsKCBfYmkf6GaYWbMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q0NzRhMzY3LWNjM2ItNGFhZC1iZTkzLTgxM2YwNzJkMDRjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8BMwDQYJKoZIhvcNAQELBQADggEBAFtfL4cQibtb7JRLyT8giYjA ZmXSigCYecOlgpR73iJ/4mteVPLs/Nnt4OG3aC3beKqmwiDR/eLpyrxKDTLbb9Lh pqnkXkvMZfNTAzXQACjNQ6N9jZ3v1rRoBGNfYKLidhtOsQKaj00JKU0ArHuwXBDK H9ZcB6IysdgWbNC0T1e1XCpBgi4ke//Q7CkLN6ndWsajjT2OjmdxxG9CL2fDrzJr gb0nsjofg38cChmQ2C7krhLJVBAdGCHdsQnSdhfm0eLcmwa13GvW8Oathcd/WSvK JCycKTMqZ7J4rk6QUO3P2j7go/RNnKW4Svi+8TtiqRVuj+FtcJalFOp8uXROfXM= -----END CERTIFICATE-----Generated at Sun May 19 00:16:08 2024 by rpki-client on console-fra.rpki-client.org