$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0baad54a-dc1f-452b-8384-51f385f5e3c5.roa File: 0baad54a-dc1f-452b-8384-51f385f5e3c5.roa (raw, json) Hash identifier: gUnS8jxBPZctgXPpYg7u1fSqmFKRgbZbsvW0mEaVitQ= Subject key identifier: FD:8E:82:0E:D3:24:E0:4E:CB:AF:01:12:F3:2F:87:5C:88:1C:88:6B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0D90E86E445EBA904C95094EEC341C16E2D28F71 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0baad54a-dc1f-452b-8384-51f385f5e3c5.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 149.190.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:90:e8:6e:44:5e:ba:90:4c:95:09:4e:ec:34:1c:16:e2:d2:8f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=50cb055a9c02f882239729609f1b23e3daf74d55e3be1096aa15658829599e5f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:33:88:c2:25:a5:88:a0:90:1d:99:fc:1e: 7a:49:87:b4:2b:8c:70:49:e8:16:cb:df:4f:40:9f: 7b:b2:4e:bd:c6:32:e4:da:5a:38:03:01:c8:a5:e7: 8a:e5:e8:88:06:1c:b0:d7:0b:e9:c6:21:a2:ff:80: 84:78:3a:87:70:23:ab:1a:71:79:d4:b2:86:a7:cb: cf:4b:5d:7b:7d:31:90:c4:d3:ee:f4:0f:b0:e6:85: ba:bd:6f:f8:fc:3b:19:ec:50:08:d9:41:e7:1f:38: 25:d8:02:42:8b:65:b2:36:5b:e1:66:e6:d2:ff:06: 44:4a:38:1f:e3:4f:93:52:98:aa:14:13:d2:f8:8c: 04:bb:f9:12:cb:da:f4:ff:25:4c:cb:02:06:a5:28: 0e:37:00:a5:35:74:b9:a4:83:a1:62:80:2c:32:c7: 83:5d:3d:36:f9:a6:c9:96:b6:0e:ba:d1:67:77:50: 6e:ea:d7:f7:b4:c7:96:18:e9:14:d3:be:4d:ae:d7: 28:38:60:8b:1a:70:2b:7f:67:ab:5e:fc:bc:b7:fe: 8b:2b:48:d0:9c:3a:be:fc:11:7d:e2:87:a2:c4:cb: 39:89:13:99:5b:2f:6d:37:79:45:f8:f9:a1:87:14: d7:46:fc:31:25:6d:17:36:02:1e:43:b2:7a:60:b6: ec:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8E:82:0E:D3:24:E0:4E:CB:AF:01:12:F3:2F:87:5C:88:1C:88:6B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0baad54a-dc1f-452b-8384-51f385f5e3c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.190.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6c:0c:d0:a2:83:9e:f2:61:0b:db:ab:ca:25:3f:e4:00:08:7a: 0b:b3:82:9c:37:d1:56:fd:68:e3:dc:90:19:08:6f:2c:cb:1a: 0a:fe:23:09:e9:1f:df:56:09:4f:8d:16:82:7d:3d:24:f5:5e: 7e:1a:ba:02:14:a6:81:ce:83:ca:1a:c8:34:68:36:66:db:5e: 79:9b:14:2d:70:3f:39:c7:52:57:83:06:22:b0:e4:2f:48:22: b4:8a:3c:48:8a:fa:32:93:8b:80:0a:3c:6b:ff:51:70:8c:48: f5:87:aa:ce:31:9b:56:5f:6b:27:91:3a:be:1f:5c:66:df:e9: d6:b0:3f:0a:0d:19:17:a5:c6:ca:0b:39:52:1d:38:bd:72:c0: 16:c2:16:2f:08:f5:06:07:36:7a:ba:bc:e5:6b:e2:0d:fb:00: e9:e3:dd:e6:52:8a:25:9a:c4:56:c5:cb:0c:2d:02:93:3b:b4: 42:a9:9b:ed:c3:e6:8f:b2:8f:f1:13:80:05:96:f2:55:70:c6: 03:ba:b2:a4:62:85:58:35:e0:d4:08:ae:8e:b6:1b:b5:e5:1c: f8:fb:4f:71:bb:dd:8b:9a:d6:0f:c3:9e:ea:40:1a:c7:f8:b9: d2:8e:49:0f:6a:aa:a0:ac:b3:e0:a6:19:c6:a6:25:a2:46:21: 2b:b4:8a:9c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDZDobkReupBMlQlO7DQcFuLSj3EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGNiMDU1YTljMDJmODgyMjM5NzI5NjA5ZjFiMjNlM2Rh Zjc0ZDU1ZTNiZTEwOTZhYTE1NjU4ODI5NTk5ZTVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH7zOIwiWliKCQHZn8HnpJh7QrjHBJ6BbL309An3uyTr3G MuTaWjgDAcil54rl6IgGHLDXC+nGIaL/gIR4OodwI6sacXnUsoany89LXXt9MZDE 0+70D7Dmhbq9b/j8OxnsUAjZQecfOCXYAkKLZbI2W+Fm5tL/BkRKOB/jT5NSmKoU E9L4jAS7+RLL2vT/JUzLAgalKA43AKU1dLmkg6FigCwyx4NdPTb5psmWtg660Wd3 UG7q1/e0x5YY6RTTvk2u1yg4YIsacCt/Z6te/Ly3/osrSNCcOr78EX3ih6LEyzmJ E5lbL203eUX4+aGHFNdG/DElbRc2Ah5DsnpgtuyBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/Y6CDtMk4E7LrwES8y+HXIgciGswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBiYWFkNTRhLWRjMWYtNDUyYi04Mzg0LTUxZjM4NWY1ZTNjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCVvjANBgkqhkiG9w0BAQsFAAOCAQEAbAzQooOe8mEL26vKJT/kAAh6C7OC nDfRVv1o49yQGQhvLMsaCv4jCekf31YJT40Wgn09JPVefhq6AhSmgc6DyhrINGg2 ZtteeZsULXA/OcdSV4MGIrDkL0gitIo8SIr6MpOLgAo8a/9RcIxI9YeqzjGbVl9r J5E6vh9cZt/p1rA/Cg0ZF6XGygs5Uh04vXLAFsIWLwj1Bgc2erq85WviDfsA6ePd 5lKKJZrEVsXLDC0Ckzu0Qqmb7cPmj7KP8ROABZbyVXDGA7qypGKFWDXg1AiujrYb teUc+PtPcbvdi5rWD8Oe6kAax/i50o5JD2qqoKyz4KYZxqYlokYhK7SKnA== -----END CERTIFICATE-----Generated at Fri Sep 22 20:36:13 2023 by rpki-client on console-fra.rpki-client.org