$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09c9f1a8-72fd-43d4-8dab-550f1c20cd4b.roa File: 09c9f1a8-72fd-43d4-8dab-550f1c20cd4b.roa (raw, json) Hash identifier: umHkmmvomuHhcCi7T5PeGYWSryhzf156x/4/+uQVEhI= Subject key identifier: 9A:41:57:18:83:15:90:6F:20:8C:FF:37:4C:24:FE:45:91:5A:98:4E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FA19B364972712CAF259E10396A13EED0E4AF32 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09c9f1a8-72fd-43d4-8dab-550f1c20cd4b.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 12:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a1:9b:36:49:72:71:2c:af:25:9e:10:39:6a:13:ee:d0:e4:af:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=f0b437babc1cd9624934b703a10863912fc60995868600eafeb61e89b49b73af, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:b3:ad:44:87:04:cd:eb:b1:c4:97:6e:70: 09:cf:65:29:97:f8:33:9e:10:a7:ab:eb:e3:54:3a: 80:ec:46:cc:aa:cf:cd:3d:5f:60:20:a8:fb:8e:95: e0:e3:9e:c1:51:38:13:51:6a:0f:3b:d6:ee:80:15: 20:c7:44:44:e7:1a:a5:fc:75:53:3f:39:46:24:9f: 47:78:44:66:e4:37:ab:71:78:2f:10:db:c6:9c:d7: 8b:d8:db:50:3e:2f:ab:e0:1b:89:50:a8:05:b7:98: ff:57:d8:ac:a4:49:d7:39:d5:42:ff:eb:f7:f7:ab: d2:08:d1:d4:c0:10:4d:3e:8a:37:6f:79:7d:a2:8e: 45:04:f1:8d:86:27:61:8f:90:f4:04:78:e6:09:d6: 9f:b1:61:13:c9:ef:fd:ad:87:af:61:37:c0:48:ec: d3:bb:a9:19:7e:fa:05:eb:36:43:b5:0e:ce:57:ea: 6a:ef:8e:fb:2b:c7:c0:9b:d2:df:49:57:a4:59:ca: 4f:7a:08:f8:f4:6f:72:89:73:dd:15:10:21:f6:aa: da:8f:bd:35:8a:d7:e1:eb:95:61:7d:8c:3d:fd:e5: c4:22:8c:cf:d4:65:d3:2b:5c:08:b3:2d:15:c9:9b: 1e:09:25:78:9a:1d:d7:22:0b:8c:cb:4c:60:8c:7f: aa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:41:57:18:83:15:90:6F:20:8C:FF:37:4C:24:FE:45:91:5A:98:4E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09c9f1a8-72fd-43d4-8dab-550f1c20cd4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.96.0/21 Signature Algorithm: sha256WithRSAEncryption 3d:ba:c6:b2:81:36:8e:70:9a:6b:58:f4:06:fa:86:75:4c:3a: 05:ce:21:c2:8a:f8:fc:5e:4b:e8:75:1d:77:38:cd:dd:0f:eb: 78:c3:84:5b:36:75:bf:b0:5c:80:34:81:52:2a:80:da:a0:7c: df:6f:cc:e6:cf:32:fb:6a:cd:34:3e:c1:48:3b:57:ff:de:1f: 64:a2:6e:33:7d:bc:a0:ef:37:8d:76:6b:a7:6e:f5:72:e0:d8: 10:e1:cc:a0:da:cc:01:d9:fd:28:84:d0:21:78:ee:ec:cf:b2: da:2d:ea:8d:c3:b1:fe:7f:b6:07:d9:03:d4:61:f4:a4:39:e6: bf:f3:3a:a6:79:97:58:93:8b:80:99:27:0b:db:5e:64:f0:28: 08:48:fc:8e:85:bb:0b:9b:a0:b1:bc:dd:bb:e5:86:d3:8d:79: 67:01:3e:d2:95:39:b9:1e:84:95:4f:58:35:82:a4:fb:1d:50: 22:6f:b0:c7:a1:83:1c:ac:bd:56:dc:fb:9f:86:88:34:e2:70: 46:cb:1b:df:69:92:67:42:72:ce:d9:18:b1:b2:34:f4:be:3e: 25:19:97:70:9d:b3:9c:14:83:e7:b6:68:3f:14:96:b3:7e:2f: ca:9d:fc:c7:16:9e:9b:6f:fe:77:7f:fb:f1:39:2a:f7:54:79: ab:b2:db:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb6GbNklycSyvJZ4QOWoT7tDkrzIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMGI0MzdiYWJjMWNkOTYyNDkzNGI3MDNhMTA4NjM5MTJm YzYwOTk1ODY4NjAwZWFmZWI2MWU4OWI0OWI3M2FmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0AbOtRIcEzeuxxJducAnPZSmX+DOeEKer6+NUOoDsRsyq z809X2AgqPuOleDjnsFROBNRag871u6AFSDHRETnGqX8dVM/OUYkn0d4RGbkN6tx eC8Q28ac14vY21A+L6vgG4lQqAW3mP9X2KykSdc51UL/6/f3q9II0dTAEE0+ijdv eX2ijkUE8Y2GJ2GPkPQEeOYJ1p+xYRPJ7/2th69hN8BI7NO7qRl++gXrNkO1Ds5X 6mrvjvsrx8Cb0t9JV6RZyk96CPj0b3KJc90VECH2qtqPvTWK1+HrlWF9jD395cQi jM/UZdMrXAizLRXJmx4JJXiaHdciC4zLTGCMf6pRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmkFXGIMVkG8gjP83TCT+RZFamE4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA5YzlmMWE4LTcyZmQtNDNkNC04ZGFiLTU1MGYxYzIwY2Q0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl2AwDQYJKoZIhvcNAQELBQADggEBAD26xrKBNo5wmmtY9Ab6hnVMOgXO IcKK+PxeS+h1HXc4zd0P63jDhFs2db+wXIA0gVIqgNqgfN9vzObPMvtqzTQ+wUg7 V//eH2SibjN9vKDvN412a6du9XLg2BDhzKDazAHZ/SiE0CF47uzPstot6o3Dsf5/ tgfZA9Rh9KQ55r/zOqZ5l1iTi4CZJwvbXmTwKAhI/I6FuwuboLG83bvlhtONeWcB PtKVObkehJVPWDWCpPsdUCJvsMehgxysvVbc+5+GiDTicEbLG99pkmdCcs7ZGLGy NPS+PiUZl3Cds5wUg+e2aD8UlrN+L8qd/McWnptv/nd/+/E5KvdUeauy260= -----END CERTIFICATE-----Generated at Fri Sep 22 00:27:52 2023 by rpki-client on console-ams.rpki-client.org