$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa File: 09200eb5-786c-452c-91b5-6e7b43daf2f1.roa (raw, json) Hash identifier: YKpnDxP6URdkLP7k+g+B96jaT2+Ku4IkAwWEuD4faT0= Subject key identifier: BE:14:90:61:EA:EB:74:A5:CD:4C:8C:6E:36:53:43:6F:33:78:A2:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 402107E00E737C0C0806BD696D3B9EB1922A3C75 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:21:07:e0:0e:73:7c:0c:08:06:bd:69:6d:3b:9e:b1:92:2a:3c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=00ca2b8bdeff55f1acd4c600e45ecdb7cdd3dfc25134905a9c27adb3046fb881, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cb:48:61:31:e7:fd:55:28:0e:7a:ab:e7:67: fe:84:f2:4f:fb:35:2c:ce:5f:41:70:56:89:aa:5a: 91:7a:68:da:be:19:08:38:23:d0:a1:e5:44:65:1d: a9:a6:1d:63:a9:e9:09:3a:53:04:3c:99:ca:2a:37: a6:f6:94:66:cb:6d:4e:af:ec:f9:08:93:74:a9:92: 12:c4:88:c9:2a:c7:90:ff:69:3a:c2:a7:8f:24:3c: 0a:ee:61:b1:85:42:df:58:b5:ea:f9:9f:12:74:36: 25:03:b8:cb:f7:0d:b1:e5:88:00:96:89:52:26:bc: ac:80:37:ba:af:c9:61:e9:db:92:d2:7d:57:39:aa: b3:dc:05:41:5d:35:6e:e8:a1:48:01:20:c6:1b:5a: d5:35:7b:e0:6b:0c:5f:d5:29:92:dd:e8:0a:93:c9: a9:77:a8:bb:9c:49:04:fd:dd:58:e1:08:d0:e8:b0: ff:bf:5e:0b:a6:65:c5:7c:f8:c3:18:73:6d:64:ed: 4e:14:8f:bf:0c:9d:1e:a7:03:a6:b1:e5:48:1e:be: 62:e3:d9:cc:d3:cc:23:94:43:a9:6f:eb:4a:7e:06: f6:7f:63:cb:4c:41:c6:0c:7e:27:e7:d0:d6:a1:d9: 3d:fc:2c:36:58:b5:17:a1:f5:89:c4:68:e1:a8:84: b0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:14:90:61:EA:EB:74:A5:CD:4C:8C:6E:36:53:43:6F:33:78:A2:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2e::/36 Signature Algorithm: sha256WithRSAEncryption 23:86:cb:21:5a:d8:4f:bc:c1:62:72:f1:3f:f7:97:b4:d5:1a: d8:65:3c:f7:21:24:20:f1:4c:95:70:55:6d:60:e3:be:06:cb: 60:01:27:a2:7a:4a:ca:aa:06:60:40:a7:2f:27:6f:c0:e2:47: 03:66:9b:cf:1e:ac:81:e2:5c:b0:07:c7:7f:1e:a9:bf:30:de: 52:d6:8f:61:ab:1a:62:35:70:33:06:73:d5:c6:9f:14:d3:cb: df:d8:a0:b1:0d:91:98:2c:59:f1:46:f2:f1:98:08:db:13:69: 2a:8b:1f:29:51:3a:f8:55:10:55:2d:e8:1c:7e:43:e9:13:a9: 67:70:f7:e5:9e:9d:d2:b7:65:fc:e3:d5:1e:d6:a9:47:ec:c8: ac:1d:00:62:6a:1d:bb:bd:8a:8f:6b:f7:bb:e3:9a:9d:09:99: 5d:c4:d4:d4:8f:6b:7d:d4:21:cd:93:7f:80:ca:11:eb:68:22: 30:5b:09:a7:61:af:23:f7:92:7d:f4:63:ab:3a:1e:19:bb:78: 8f:0a:2a:e2:e8:93:01:a1:41:7b:1e:30:a6:ee:ec:37:24:62: 63:8a:79:65:c0:d2:73:6a:f8:d2:36:3f:ee:72:22:02:9a:85: 3e:e3:22:ef:7d:dd:f3:85:f0:3c:fb:d2:98:dc:02:bf:59:4f: b8:ab:92:3c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQCEH4A5zfAwIBr1pbTuesZIqPHUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMGNhMmI4YmRlZmY1NWYxYWNkNGM2MDBlNDVlY2RiN2Nk ZDNkZmMyNTEzNDkwNWE5YzI3YWRiMzA0NmZiODgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfy0hhMef9VSgOeqvnZ/6E8k/7NSzOX0FwVomqWpF6aNq+ GQg4I9Ch5URlHammHWOp6Qk6UwQ8mcoqN6b2lGbLbU6v7PkIk3SpkhLEiMkqx5D/ aTrCp48kPAruYbGFQt9Yter5nxJ0NiUDuMv3DbHliACWiVImvKyAN7qvyWHp25LS fVc5qrPcBUFdNW7ooUgBIMYbWtU1e+BrDF/VKZLd6AqTyal3qLucSQT93VjhCNDo sP+/XgumZcV8+MMYc21k7U4Uj78MnR6nA6ax5UgevmLj2czTzCOUQ6lv60p+BvZ/ Y8tMQcYMfifn0Nah2T38LDZYtReh9YnEaOGohLD7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUvhSQYerrdKXNTIxuNlNDbzN4osAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA5MjAwZWI1LTc4NmMtNDUyYy05MWI1LTZlN2I0M2RhZjJmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8uADANBgkqhkiG9w0BAQsFAAOCAQEAI4bLIVrYT7zBYnLxP/eXtNUa 2GU89yEkIPFMlXBVbWDjvgbLYAEnonpKyqoGYECnLydvwOJHA2abzx6sgeJcsAfH fx6pvzDeUtaPYasaYjVwMwZz1cafFNPL39igsQ2RmCxZ8Uby8ZgI2xNpKosfKVE6 +FUQVS3oHH5D6ROpZ3D35Z6d0rdl/OPVHtapR+zIrB0AYmodu72Kj2v3u+OanQmZ XcTU1I9rfdQhzZN/gMoR62giMFsJp2GvI/eSffRjqzoeGbt4jwoq4uiTAaFBex4w pu7sNyRiY4p5ZcDSc2r40jY/7nIiApqFPuMi733d84XwPPvSmNwCv1lPuKuSPA== -----END CERTIFICATE-----Generated at Fri Sep 22 19:40:12 2023 by rpki-client on console-fra.rpki-client.org