$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0327027b-1093-4d52-982e-7633219ee2ec.roa File: 0327027b-1093-4d52-982e-7633219ee2ec.roa (raw, json) Hash identifier: Yny0vPaFJb9Xiiity5tnzwJJSDHHbep/2roLELkecHo= Subject key identifier: C7:33:96:4F:E1:2A:5C:AF:C6:2C:8D:5B:13:17:DF:68:7C:DF:D8:35 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D28F15C5FC4403C60B1D05B1F92757EB73885D4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0327027b-1093-4d52-982e-7633219ee2ec.roa Signing time: Mon 28 Aug 2023 00:00:00 +0000 ROA not before: Mon 28 Aug 2023 00:00:00 +0000 ROA not after: Mon 02 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 76.162.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Aug 2023 08:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:28:f1:5c:5f:c4:40:3c:60:b1:d0:5b:1f:92:75:7e:b7:38:85:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 28 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2023 GMT Subject: serialNumber=a5b56e2dcc71cdc2578bea3b19ba4cb32bd234d82fe7fcc805cd8c31e0adf5e4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:4c:84:30:8a:fc:97:0d:53:8e:9c:71:b5: 71:d3:74:39:9d:85:01:aa:7a:aa:06:e8:f9:72:12: a6:b9:0d:e1:66:a5:98:ab:93:52:f7:63:2a:a1:e7: 3a:a7:db:77:f1:21:a8:5c:7a:8c:c4:e9:51:3a:8c: c1:f9:7d:b6:10:71:0c:5e:0d:aa:bd:11:69:38:61: 91:e3:f0:50:db:cd:39:01:5d:1d:ca:d3:85:da:3e: c0:45:b2:9f:43:65:cf:49:d6:3d:ea:e0:8f:a2:1d: b4:58:19:a5:e1:fe:15:58:6c:c5:78:92:47:cc:f2: 74:ed:ba:09:24:62:c0:5a:56:f6:c5:14:a5:f9:e3: 8f:67:19:55:4f:1f:07:a4:a3:48:f1:b0:63:59:45: 42:e0:50:ea:5e:31:87:ab:cf:63:25:d4:c1:43:d6: b2:ea:61:da:73:cc:6b:83:d8:51:36:96:38:6e:0c: 47:8f:03:7f:5e:e0:71:1b:8a:03:8c:1f:ac:39:14: ac:37:3e:da:4e:ab:42:15:58:b0:a7:86:12:51:b3: 8d:ee:db:3c:95:5f:b8:4a:dd:60:25:5b:96:fe:3e: 8a:6e:38:46:a3:98:8a:b4:b6:a7:1b:51:6d:ed:e0: b4:0d:b2:a4:5a:b5:c0:64:e0:25:6a:5d:1e:e4:a5: 59:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:33:96:4F:E1:2A:5C:AF:C6:2C:8D:5B:13:17:DF:68:7C:DF:D8:35 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0327027b-1093-4d52-982e-7633219ee2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.162.0.0/15 Signature Algorithm: sha256WithRSAEncryption 1f:95:1d:da:ea:93:a6:cd:eb:03:5e:c3:d8:3f:76:09:29:87: d6:95:d3:c8:99:27:d0:bc:00:1d:60:97:96:2c:91:2a:24:01: 39:f0:5f:e0:d5:19:48:70:7b:2c:a8:39:9d:1c:69:cd:f5:14: a6:ac:1e:f6:3e:3a:1a:d1:e5:89:80:10:2d:38:45:50:4f:7f: 47:2a:d3:91:fd:37:83:06:cd:7c:fa:cf:90:b2:07:66:32:82: cc:d8:7a:47:4a:ba:02:2b:86:ad:ac:7c:07:8e:a7:f6:4b:56: f8:cb:68:b8:b4:3e:8a:bf:82:c8:5b:98:a9:6f:d5:6b:d4:7d: 28:da:f1:21:66:2d:f9:7e:62:1d:96:43:1a:89:db:9e:23:a3: 89:f4:fb:fc:71:57:7d:97:97:7a:1d:c5:ee:91:7f:00:33:87: a7:f7:11:01:ee:64:6d:9d:08:60:83:3d:9c:1c:1f:aa:70:b6: 9d:b9:28:51:50:5e:6d:34:7b:e8:67:f1:b6:67:02:1b:42:5b: 39:83:d1:3c:55:36:9d:04:9d:86:42:49:b8:3e:62:a2:7e:e2: 9a:55:d9:96:d2:9a:6d:73:9b:d7:ba:07:2b:51:78:ab:1c:50: 41:40:1c:5a:a7:c4:f3:81:69:62:8e:25:7f:9c:08:d4:a4:47: 6a:d2:5f:13 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULSjxXF/EQDxgsdBbH5J1frc4hdQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNWI1NmUyZGNjNzFjZGMyNTc4YmVhM2IxOWJhNGNiMzJi ZDIzNGQ4MmZlN2ZjYzgwNWNkOGMzMWUwYWRmNWU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvAUyEMIr8lw1TjpxxtXHTdDmdhQGqeqoG6PlyEqa5DeFm pZirk1L3Yyqh5zqn23fxIahceozE6VE6jMH5fbYQcQxeDaq9EWk4YZHj8FDbzTkB XR3K04XaPsBFsp9DZc9J1j3q4I+iHbRYGaXh/hVYbMV4kkfM8nTtugkkYsBaVvbF FKX5449nGVVPHweko0jxsGNZRULgUOpeMYerz2Ml1MFD1rLqYdpzzGuD2FE2ljhu DEePA39e4HEbigOMH6w5FKw3PtpOq0IVWLCnhhJRs43u2zyVX7hK3WAlW5b+Popu OEajmIq0tqcbUW3t4LQNsqRatcBk4CVqXR7kpVnLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUxzOWT+EqXK/GLI1bExffaHzf2DUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzMjcwMjdiLTEwOTMtNGQ1Mi05ODJlLTc2MzMyMTllZTJlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFMojANBgkqhkiG9w0BAQsFAAOCAQEAH5Ud2uqTps3rA17D2D92CSmH1pXT yJkn0LwAHWCXliyRKiQBOfBf4NUZSHB7LKg5nRxpzfUUpqwe9j46GtHliYAQLThF UE9/RyrTkf03gwbNfPrPkLIHZjKCzNh6R0q6AiuGrax8B46n9ktW+MtouLQ+ir+C yFuYqW/Va9R9KNrxIWYt+X5iHZZDGonbniOjifT7/HFXfZeXeh3F7pF/ADOHp/cR Ae5kbZ0IYIM9nBwfqnC2nbkoUVBebTR76GfxtmcCG0JbOYPRPFU2nQSdhkJJuD5i on7imlXZltKabXOb17oHK1F4qxxQQUAcWqfE84FpYo4lf5wI1KRHatJfEw== -----END CERTIFICATE-----Generated at Mon Aug 28 20:17:36 2023 by rpki-client on console-fra.rpki-client.org