$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cafe4c1-68f8-4701-986b-5ec06431a231.roa File: 0cafe4c1-68f8-4701-986b-5ec06431a231.roa (raw, json) Hash identifier: ArdqJdQsgxpeFkFQ158CAsnxRTx539rqqwkjz2y1v+8= Subject key identifier: 45:4C:90:1E:77:5D:54:F8:49:D9:AF:D8:11:3B:46:FA:92:2A:FE:15 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 23D57BF6E0A6E0D1087FCB3399F1A7FA535706CA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cafe4c1-68f8-4701-986b-5ec06431a231.roa Signing time: Mon 28 Aug 2023 00:00:00 +0000 ROA not before: Mon 28 Aug 2023 00:00:00 +0000 ROA not after: Mon 02 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 54.25.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Aug 2023 07:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d5:7b:f6:e0:a6:e0:d1:08:7f:cb:33:99:f1:a7:fa:53:57:06:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 28 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2023 GMT Subject: serialNumber=c3fdc18e3b8da1044f4c8cc9b02e8025191fccdc077811014481b27db8e6d56d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:5b:4c:25:f5:98:bb:a9:b7:dc:72:ca:ed: 87:24:cc:4a:bf:fa:02:dc:4a:82:88:f7:5e:5c:e3: 17:85:47:56:9b:fb:e9:c8:f5:2a:53:8f:08:1f:90: 00:20:7e:9d:a3:26:c7:77:91:da:69:26:5f:9a:54: af:73:6c:1f:af:96:e4:53:7e:f6:40:b3:aa:fc:c2: 71:88:2d:06:2f:5a:28:9f:87:a7:5c:f7:5b:4d:7a: e3:cd:18:aa:ce:dd:be:ea:5c:96:99:7a:c4:7b:c8: b2:f8:bc:e8:e6:06:29:6c:21:c7:4e:bf:89:1a:19: 41:f2:b8:b7:f0:49:19:46:7c:10:3f:c0:ac:cd:03: 6f:56:59:6b:d9:bd:7e:1a:ad:c2:2f:7c:92:9c:9c: 51:19:80:65:0e:a2:6b:38:f3:8a:34:57:84:33:0d: e1:69:a1:0a:b6:20:58:7d:e6:ad:9a:eb:ad:69:06: f2:59:95:2e:8a:35:01:83:97:87:df:42:74:3a:61: 24:5f:46:58:8a:db:f4:92:32:6b:2a:52:02:10:b9: cf:5e:1c:c1:44:38:66:4e:13:45:ca:51:7e:9c:93: e6:2a:ba:14:05:4e:32:34:e9:d8:eb:1f:c3:29:51: 7a:d2:5d:ce:a2:3a:30:b5:db:fb:97:67:05:46:3c: e5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4C:90:1E:77:5D:54:F8:49:D9:AF:D8:11:3B:46:FA:92:2A:FE:15 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cafe4c1-68f8-4701-986b-5ec06431a231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.0.0/16 Signature Algorithm: sha256WithRSAEncryption 06:cb:08:f8:c8:45:ce:84:f6:ea:64:48:b2:1a:f0:ca:2a:ae: b8:d7:00:7f:62:5a:e4:2d:f8:ea:34:a7:e3:17:e6:fd:64:bd: 29:08:d6:43:ef:c6:75:05:a4:23:e0:78:d0:23:65:0f:32:fc: c6:c9:a6:09:83:09:ac:31:38:9a:23:3b:14:86:35:eb:47:55: e7:3d:f7:32:94:bd:23:b8:8b:25:8a:02:9c:fe:3b:08:fd:1c: 50:a0:25:5b:cb:39:4f:d7:8b:92:a6:ec:c8:07:58:d4:8d:31: 94:f3:5b:01:f0:e8:c9:9f:76:e6:80:40:7a:12:3b:58:69:0d: e6:62:63:db:06:20:13:be:58:e2:62:b9:03:41:a4:15:1b:56: c8:7f:94:7c:7f:b8:bc:4d:dc:d4:d7:9f:99:88:be:c8:03:2f: 0b:cc:30:95:d2:a8:af:1d:52:0b:3f:6b:b7:20:60:0c:21:58: 12:1f:40:08:5d:d1:a2:82:cb:d1:72:8d:fc:08:9e:0b:7b:2f: 5c:06:85:1e:97:ea:a9:b1:bd:62:38:0a:63:0d:45:32:40:27: ab:7d:d5:d4:95:00:9e:96:c7:15:7b:30:cf:98:be:25:b9:c7: 77:fc:d0:87:79:7f:53:1c:58:5d:ac:91:67:8c:1b:7d:f9:6c: 27:58:72:6a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUI9V79uCm4NEIf8szmfGn+lNXBsowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjM2ZkYzE4ZTNiOGRhMTA0NGY0YzhjYzliMDJlODAyNTE5 MWZjY2RjMDc3ODExMDE0NDgxYjI3ZGI4ZTZkNTZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM7ltMJfWYu6m33HLK7YckzEq/+gLcSoKI915c4xeFR1ab ++nI9SpTjwgfkAAgfp2jJsd3kdppJl+aVK9zbB+vluRTfvZAs6r8wnGILQYvWiif h6dc91tNeuPNGKrO3b7qXJaZesR7yLL4vOjmBilsIcdOv4kaGUHyuLfwSRlGfBA/ wKzNA29WWWvZvX4arcIvfJKcnFEZgGUOoms484o0V4QzDeFpoQq2IFh95q2a661p BvJZlS6KNQGDl4ffQnQ6YSRfRliK2/SSMmsqUgIQuc9eHMFEOGZOE0XKUX6ck+Yq uhQFTjI06djrH8MpUXrSXc6iOjC12/uXZwVGPOUDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQURUyQHnddVPhJ2a/YETtG+pIq/hUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjYWZlNGMxLTY4ZjgtNDcwMS05ODZiLTVlYzA2NDMxYTIzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2GTANBgkqhkiG9w0BAQsFAAOCAQEABssI+MhFzoT26mRIshrwyiquuNcA f2Ja5C346jSn4xfm/WS9KQjWQ+/GdQWkI+B40CNlDzL8xsmmCYMJrDE4miM7FIY1 60dV5z33MpS9I7iLJYoCnP47CP0cUKAlW8s5T9eLkqbsyAdY1I0xlPNbAfDoyZ92 5oBAehI7WGkN5mJj2wYgE75Y4mK5A0GkFRtWyH+UfH+4vE3c1NefmYi+yAMvC8ww ldKorx1SCz9rtyBgDCFYEh9ACF3RooLL0XKN/AieC3svXAaFHpfqqbG9YjgKYw1F MkAnq33V1JUAnpbHFXswz5i+JbnHd/zQh3l/UxxYXayRZ4wbfflsJ1hyag== -----END CERTIFICATE-----Generated at Mon Aug 28 19:28:00 2023 by rpki-client on console-fra.rpki-client.org