$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/db19b724-fc6b-44ab-b5ba-64c1d3b7081e.roa File: db19b724-fc6b-44ab-b5ba-64c1d3b7081e.roa (raw, json) Hash identifier: hVJkZVFsI3FG4Jyh+HAYfKVJGBzNGgWdz+bBgZ6os5E= Subject key identifier: E2:92:A8:EC:45:D8:67:14:AA:B4:05:50:35:04:74:80:5C:C5:B4:B1 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 63D174E2B6A7C29C6996767D3156BD3D1E5C164E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/db19b724-fc6b-44ab-b5ba-64c1d3b7081e.roa Signing time: Sat 20 Apr 2024 00:00:00 +0000 ROA not before: Sat 20 Apr 2024 00:00:00 +0000 ROA not after: Sat 25 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:f026::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d1:74:e2:b6:a7:c2:9c:69:96:76:7d:31:56:bd:3d:1e:5c:16:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 20 00:00:00 2024 GMT Not After : May 25 23:59:59 2024 GMT Subject: serialNumber=e237ec0849388269a085745fea24e7415575d03be0ddeb980d0d9254135e173f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:56:21:e0:30:b0:60:94:c7:b2:e3:80:cf:7c: 93:bb:81:64:20:e3:46:fa:08:87:4b:c6:63:8a:6c: dd:0c:82:0b:82:e6:cf:36:10:de:6b:a3:92:03:9c: e7:74:01:8f:f4:3b:69:c7:2e:c0:cc:35:57:b2:05: d8:cb:4d:60:e5:ef:45:e1:ce:58:ee:8b:3b:32:06: 64:3f:c0:7b:b8:61:9e:e3:1b:2d:ad:e4:22:54:c3: 61:e3:66:18:27:43:b2:54:5a:7c:a6:a9:e3:96:0e: bf:03:2d:99:b9:9c:87:34:2c:2a:31:3a:a8:e0:19: 54:24:54:a9:14:dc:f7:65:b7:b1:4a:36:d1:9d:95: d0:59:66:f4:86:24:58:7e:a7:98:19:d8:f6:11:0d: ca:6d:3c:87:c0:11:95:73:8a:85:b5:b6:c6:97:3b: 5e:14:fe:aa:3a:1a:88:07:06:d5:52:7b:75:87:ad: 01:56:75:13:14:42:45:df:20:03:0f:e6:82:7e:de: 51:3e:1f:6c:88:ab:0f:2f:9f:34:37:5e:8e:c3:55: 73:ad:b0:e8:23:9e:08:db:32:09:2f:ac:af:58:2e: dd:50:26:17:39:5b:20:e9:8b:32:c6:44:c5:69:19: 55:53:75:a5:a5:0c:b8:5d:03:90:f9:32:a4:4b:14: 41:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:92:A8:EC:45:D8:67:14:AA:B4:05:50:35:04:74:80:5C:C5:B4:B1 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/db19b724-fc6b-44ab-b5ba-64c1d3b7081e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f026::/48 Signature Algorithm: sha256WithRSAEncryption 1a:b7:6d:85:95:76:25:2b:62:cb:ec:8c:f0:59:73:d4:cb:44: 9e:24:73:53:4d:ce:3e:51:02:a6:e7:41:17:6c:79:ff:db:d3: 7e:ed:f9:3a:4f:f7:a9:6e:ca:db:01:67:a6:e8:94:9f:29:be: 06:4f:ea:d2:a9:ee:a4:ea:8e:79:30:30:f4:07:a0:ca:92:e4: 75:b1:ab:2a:f2:71:6a:56:5f:66:4c:fc:00:7f:83:95:0d:68: 97:14:bb:11:db:d4:cf:12:b3:79:62:c4:94:6d:45:5b:17:08: c0:08:bb:3d:19:90:44:bb:0d:fe:b4:a4:1b:80:5c:15:96:b9: 11:60:48:cd:f7:cd:69:2e:4f:da:5d:2d:d8:a2:e9:bf:83:a8: 06:cb:0f:80:e9:c2:0c:43:ea:f5:96:43:1c:8a:f4:71:68:f9: 7a:f4:58:d3:47:b4:c8:d2:54:a1:6e:a8:cb:46:87:24:7f:8f: e7:aa:1f:17:19:a3:c6:81:b9:ee:5f:24:e8:10:45:9f:cb:0d: c1:4f:02:68:e2:8d:51:ad:5a:65:07:ba:42:bf:dd:9f:d2:0b: 40:9b:b5:4e:51:77:9e:cb:7f:6a:14:da:9f:4a:75:85:03:3a: 9d:01:b0:ae:dd:4d:74:6f:ca:2b:99:14:6d:d7:df:b7:c6:6b: b7:d3:1d:5d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUY9F04ranwpxplnZ9MVa9PR5cFk4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDIwMDAwMDAwWhcNMjQwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjM3ZWMwODQ5Mzg4MjY5YTA4NTc0NWZlYTI0ZTc0MTU1 NzVkMDNiZTBkZGViOTgwZDBkOTI1NDEzNWUxNzNmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWViHgMLBglMey44DPfJO7gWQg40b6CIdLxmOKbN0MgguC 5s82EN5ro5IDnOd0AY/0O2nHLsDMNVeyBdjLTWDl70XhzljuizsyBmQ/wHu4YZ7j Gy2t5CJUw2HjZhgnQ7JUWnymqeOWDr8DLZm5nIc0LCoxOqjgGVQkVKkU3Pdlt7FK NtGdldBZZvSGJFh+p5gZ2PYRDcptPIfAEZVzioW1tsaXO14U/qo6GogHBtVSe3WH rQFWdRMUQkXfIAMP5oJ+3lE+H2yIqw8vnzQ3Xo7DVXOtsOgjngjbMgkvrK9YLt1Q Jhc5WyDpizLGRMVpGVVTdaWlDLhdA5D5MqRLFEEfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4pKo7EXYZxSqtAVQNQR0gFzFtLEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2RiMTliNzI0LWZjNmItNDRhYi1iNWJhLTY0YzFkM2I3MDgxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8CYwDQYJKoZIhvcNAQELBQADggEBABq3bYWVdiUrYsvsjPBZc9TL RJ4kc1NNzj5RAqbnQRdsef/b037t+TpP96luytsBZ6bolJ8pvgZP6tKp7qTqjnkw MPQHoMqS5HWxqyrycWpWX2ZM/AB/g5UNaJcUuxHb1M8Ss3lixJRtRVsXCMAIuz0Z kES7Df60pBuAXBWWuRFgSM33zWkuT9pdLdii6b+DqAbLD4DpwgxD6vWWQxyK9HFo +Xr0WNNHtMjSVKFuqMtGhyR/j+eqHxcZo8aBue5fJOgQRZ/LDcFPAmjijVGtWmUH ukK/3Z/SC0CbtU5Rd57Lf2oU2p9KdYUDOp0BsK7dTXRvyiuZFG3X37fGa7fTHV0= -----END CERTIFICATE-----Generated at Thu May 9 07:41:24 2024 by rpki-client on console-fra.rpki-client.org