$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ffab4039-aa02-4010-b0a8-bcadfb5eba51.roa File: ffab4039-aa02-4010-b0a8-bcadfb5eba51.roa (raw, json) Hash identifier: PaJS2UzHLTfhId5X02Fr6rAw77KxB3xOddX6opgqwf4= Subject key identifier: 6A:37:26:1C:E9:47:0D:9F:07:3C:73:7A:66:76:BD:27:49:19:EF:7B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 74A7886B0EF1459398221EC2A0A28CF37E84EFEC Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ffab4039-aa02-4010-b0a8-bcadfb5eba51.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 2606:8140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a7:88:6b:0e:f1:45:93:98:22:1e:c2:a0:a2:8c:f3:7e:84:ef:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=9fcf3d0181d58a2039254129eadc1f693af4044a4b9881f142d9768fbcdcf1d6, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:24:66:45:c6:45:ac:9d:b5:1d:92:8a:f5:e6: 5d:b2:d1:f5:1e:d5:68:0a:a2:dd:70:f1:ae:c9:c9: 89:6d:53:98:04:89:42:66:21:ee:02:4b:76:d2:a0: 75:0a:d8:f0:9c:7d:35:bb:0d:62:fc:01:3d:0e:a6: f3:3e:7c:fb:51:02:98:b9:18:ff:6f:e7:d5:d9:8c: d1:e6:5d:6e:cf:ab:99:69:19:84:e6:5b:5b:b8:0b: 4e:06:f6:90:49:08:f1:82:27:0e:fe:90:97:65:6a: 4f:05:cc:78:98:4c:2d:d0:0b:15:33:72:da:a0:71: 5f:17:2f:9d:f4:1a:d5:a3:5b:2d:b2:51:d8:54:b3: 19:6b:e0:58:17:2b:d4:30:be:62:c1:fb:a4:43:a1: 30:70:c2:72:19:da:0b:f4:4a:f5:3f:96:8b:c1:9a: 53:9f:6e:53:4c:a4:b0:c6:38:fc:dc:41:78:8b:bb: 63:5c:40:d7:f4:89:94:2a:c9:fb:df:36:f0:1d:a0: 2c:ce:f7:e4:d0:21:41:2b:67:c1:20:a4:25:a0:c4: 1f:34:47:54:a9:9f:96:53:7e:fb:c8:bb:eb:83:0c: 32:d3:9f:95:25:7f:e9:ad:c2:27:e0:82:00:aa:90: 69:2b:47:b3:8a:70:24:d3:c9:ae:d8:af:4f:3b:3c: 6c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:37:26:1C:E9:47:0D:9F:07:3C:73:7A:66:76:BD:27:49:19:EF:7B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ffab4039-aa02-4010-b0a8-bcadfb5eba51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140::/32 Signature Algorithm: sha256WithRSAEncryption 8f:0b:2e:f7:50:b1:8b:63:1d:30:c2:19:ae:af:85:0d:cb:5d: 24:5d:f8:6d:24:be:14:82:5e:13:6f:c3:d6:7c:78:7a:ea:64: 40:60:58:79:9e:c8:e9:b6:c6:dc:55:cc:ea:8b:c2:e6:e2:d1: 5a:6d:ea:18:b8:85:a7:1e:5f:9c:93:09:6e:af:16:fe:40:60: 39:bc:9a:0d:02:e2:54:7a:9d:f1:24:f6:b6:ac:38:12:48:f7: 10:60:01:95:f0:ac:34:0c:fd:0e:b2:19:a3:ef:52:ea:03:d8: 0d:3b:fe:d9:9d:ac:66:26:e8:fa:b8:a6:d8:fa:d3:48:73:7a: 1f:c5:c9:41:94:45:d5:93:1c:66:cd:bd:c4:3d:ce:5b:47:e0: 3e:3f:a9:6d:2a:ca:d2:da:da:62:99:9c:0f:40:4d:aa:08:7b: 5f:c0:7e:ee:5d:49:33:17:14:0b:53:f8:2b:e0:88:c7:1d:5e: 20:07:fb:a8:76:94:c7:b2:6f:8d:d0:32:92:aa:ad:b5:43:9a: 0d:6c:4c:92:7f:b4:29:7d:af:4c:a3:7f:fe:c1:7b:30:23:89: c0:5d:2c:59:d6:4c:92:f1:be:40:6e:e0:d1:37:36:4b:dd:07: 3e:93:64:10:04:ec:f3:21:66:af:06:01:15:d2:b5:9f:28:0e: aa:a0:43:e1 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUdKeIaw7xRZOYIh7CoKKM836E7+wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZmNmM2QwMTgxZDU4YTIwMzkyNTQxMjllYWRjMWY2OTNh ZjQwNDRhNGI5ODgxZjE0MmQ5NzY4ZmJjZGNmMWQ2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSJGZFxkWsnbUdkor15l2y0fUe1WgKot1w8a7JyYltU5gE iUJmIe4CS3bSoHUK2PCcfTW7DWL8AT0OpvM+fPtRApi5GP9v59XZjNHmXW7Pq5lp GYTmW1u4C04G9pBJCPGCJw7+kJdlak8FzHiYTC3QCxUzctqgcV8XL530GtWjWy2y UdhUsxlr4FgXK9QwvmLB+6RDoTBwwnIZ2gv0SvU/lovBmlOfblNMpLDGOPzcQXiL u2NcQNf0iZQqyfvfNvAdoCzO9+TQIUErZ8EgpCWgxB80R1Spn5ZTfvvIu+uDDDLT n5Ulf+mtwifgggCqkGkrR7OKcCTTya7Yr087PGx9AgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUajcmHOlHDZ8HPHN6Zna9J0kZ73swHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2ZmYWI0MDM5LWFhMDItNDAxMC1iMGE4LWJjYWRmYjVlYmE1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBoFAMA0GCSqGSIb3DQEBCwUAA4IBAQCPCy73ULGLYx0wwhmur4UNy10k XfhtJL4Ugl4Tb8PWfHh66mRAYFh5nsjptsbcVczqi8Lm4tFabeoYuIWnHl+ckwlu rxb+QGA5vJoNAuJUep3xJPa2rDgSSPcQYAGV8Kw0DP0Oshmj71LqA9gNO/7Znaxm Juj6uKbY+tNIc3ofxclBlEXVkxxmzb3EPc5bR+A+P6ltKsrS2tpimZwPQE2qCHtf wH7uXUkzFxQLU/gr4IjHHV4gB/uodpTHsm+N0DKSqq21Q5oNbEySf7Qpfa9Mo3/+ wXswI4nAXSxZ1kyS8b5AbuDRNzZL3Qc+k2QQBOzzIWavBgEV0rWfKA6qoEPh -----END CERTIFICATE-----Generated at Thu Apr 25 00:31:13 2024 by rpki-client on console-fra.rpki-client.org