$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4a00d42-dc23-4b56-aeb0-6d7155be2f0a.roa File: d4a00d42-dc23-4b56-aeb0-6d7155be2f0a.roa (raw, json) Hash identifier: 0DSxP36Yn2WGJYgUCVCeo4SzbgGbUJaFaOoZS+DVomU= Subject key identifier: 47:9E:28:C1:77:61:9B:60:AC:55:70:E1:75:FA:D0:5A:18:CC:01:F9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 279A6D4E9DCDEBDBA882FD7184CC2FD3936E8862 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4a00d42-dc23-4b56-aeb0-6d7155be2f0a.roa Signing time: Sat 20 Apr 2024 00:00:00 +0000 ROA not before: Sat 20 Apr 2024 00:00:00 +0000 ROA not after: Sat 25 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:f03b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9a:6d:4e:9d:cd:eb:db:a8:82:fd:71:84:cc:2f:d3:93:6e:88:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 20 00:00:00 2024 GMT Not After : May 25 23:59:59 2024 GMT Subject: serialNumber=b1c7f9935b227b28f28f3f733a3c0a761471a464874a7ad9d0b3e921bfa3ae96, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:20:2f:38:33:d6:fb:f6:0a:6b:fe:d4:5e: 7d:7d:d1:af:f6:72:16:fa:de:34:c5:fe:ff:04:12: 5e:55:83:06:ec:cf:3c:3b:de:5c:e0:27:05:6d:8b: 25:56:be:b2:1b:9e:16:59:d1:53:20:a2:1f:ed:3b: f8:bd:88:bb:b4:21:52:9e:a5:e2:00:4f:67:ae:1b: 15:2d:a8:f2:53:a2:b9:51:b3:8b:84:fc:0d:98:50: 6c:e2:23:1f:d0:89:47:65:18:dc:95:0a:e0:39:79: 1e:48:95:69:4a:ca:1d:87:42:6e:aa:85:03:3d:a0: 8d:01:0a:06:b2:fd:65:34:0e:5b:5f:25:af:b4:c1: 83:b6:43:f4:68:49:34:a0:91:52:12:05:03:4e:e4: 31:10:75:4c:8d:9b:ce:4c:11:ea:0f:72:97:93:42: e4:5d:f8:fe:9e:73:02:6e:eb:1c:e8:7c:b1:cc:f3: 21:b3:9d:ae:5c:5f:4f:fe:ad:54:92:02:0a:44:c6: 33:42:a2:58:91:15:2d:f6:55:fa:b1:41:4e:ff:7c: 5a:f3:ee:d0:13:c1:c3:1e:59:65:6b:61:4f:c9:f8: 53:63:48:3a:a8:f8:a7:af:db:21:ad:24:32:ba:4e: cb:a9:e5:a6:d4:6c:bd:ca:59:7c:10:fc:b5:74:7a: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9E:28:C1:77:61:9B:60:AC:55:70:E1:75:FA:D0:5A:18:CC:01:F9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4a00d42-dc23-4b56-aeb0-6d7155be2f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03b::/48 Signature Algorithm: sha256WithRSAEncryption 5f:3d:19:fa:ab:41:71:cb:96:29:4d:10:36:4d:d4:8b:ed:75: d5:2f:21:78:5b:c4:7c:95:9e:68:0f:7a:73:a4:8a:6d:2e:61: 88:c4:5e:07:c3:dd:c2:6f:e8:c3:8c:c2:df:e1:88:c2:76:ba: a3:5e:5e:94:40:f8:4a:3d:bc:ce:c0:8d:32:4b:88:b0:f1:d6: 19:23:9a:4d:d4:72:3a:a0:ed:dc:1d:e1:54:6f:93:7e:7c:02: 55:e4:08:fd:a2:87:1e:fe:67:fc:a2:f0:03:1f:75:19:1a:01: 2d:fe:d0:8a:ff:84:fe:50:60:ee:ed:60:ab:50:23:b5:d1:e5: 69:68:80:b6:c0:c9:42:fa:9e:ca:a0:07:f1:d1:e4:7c:8d:81: df:c0:b2:f7:6c:9f:01:38:28:c6:67:5c:fe:eb:7b:67:41:e5: 29:ef:85:3d:2a:0a:3e:36:eb:5d:37:8b:3a:8a:8a:42:2d:99: ef:69:47:33:56:a2:42:5a:70:ac:0b:af:89:20:5f:c5:3e:4c: 58:cf:ab:fd:39:16:a1:11:67:44:44:61:d6:40:37:ff:05:ce: 6c:05:64:dc:77:0f:92:7e:ad:5f:b6:25:54:6b:17:ed:28:ec: 95:b9:47:17:8d:90:a1:7b:4f:a4:68:25:c0:5c:2f:09:57:00: 15:06:61:d0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJ5ptTp3N69uogv1xhMwv05NuiGIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDIwMDAwMDAwWhcNMjQwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWM3Zjk5MzViMjI3YjI4ZjI4ZjNmNzMzYTNjMGE3NjE0 NzFhNDY0ODc0YTdhZDlkMGIzZTkyMWJmYTNhZTk2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7dSAvODPW+/YKa/7UXn190a/2chb63jTF/v8EEl5Vgwbs zzw73lzgJwVtiyVWvrIbnhZZ0VMgoh/tO/i9iLu0IVKepeIAT2euGxUtqPJTorlR s4uE/A2YUGziIx/QiUdlGNyVCuA5eR5IlWlKyh2HQm6qhQM9oI0BCgay/WU0Dltf Ja+0wYO2Q/RoSTSgkVISBQNO5DEQdUyNm85MEeoPcpeTQuRd+P6ecwJu6xzofLHM 8yGzna5cX0/+rVSSAgpExjNColiRFS32VfqxQU7/fFrz7tATwcMeWWVrYU/J+FNj SDqo+Kev2yGtJDK6Tsup5abUbL3KWXwQ/LV0egshAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUR54owXdhm2CsVXDhdfrQWhjMAfkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q0YTAwZDQyLWRjMjMtNGI1Ni1hZWIwLTZkNzE1NWJlMmYwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8DswDQYJKoZIhvcNAQELBQADggEBAF89GfqrQXHLlilNEDZN1Ivt ddUvIXhbxHyVnmgPenOkim0uYYjEXgfD3cJv6MOMwt/hiMJ2uqNeXpRA+Eo9vM7A jTJLiLDx1hkjmk3Ucjqg7dwd4VRvk358AlXkCP2ihx7+Z/yi8AMfdRkaAS3+0Ir/ hP5QYO7tYKtQI7XR5WlogLbAyUL6nsqgB/HR5HyNgd/AsvdsnwE4KMZnXP7re2dB 5SnvhT0qCj426103izqKikItme9pRzNWokJacKwLr4kgX8U+TFjPq/05FqERZ0RE YdZAN/8FzmwFZNx3D5J+rV+2JVRrF+0o7JW5RxeNkKF7T6RoJcBcLwlXABUGYdA= -----END CERTIFICATE-----Generated at Thu May 2 10:17:56 2024 by rpki-client on console-ams.rpki-client.org