$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13bed46e-4fff-4b4f-93d7-d272c4ec9046.roa File: 13bed46e-4fff-4b4f-93d7-d272c4ec9046.roa (raw, json) Hash identifier: xi3PoWmPengCo5550uHkvlkYm+j4n7KIqfgZp7hngjs= Subject key identifier: 23:23:54:8B:4A:4E:D2:10:11:1B:9B:84:54:74:E4:66:20:2D:82:4E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17FFDA39EE22161791900F62C5BF5ACE6551B586 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13bed46e-4fff-4b4f-93d7-d272c4ec9046.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 69.210.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ff:da:39:ee:22:16:17:91:90:0f:62:c5:bf:5a:ce:65:51:b5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=ccd3caf066faf3cf11f99a26fb8c0f886473fe33a9c7f96fa2fe9fc9a867fbd4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:22:3f:18:d6:c7:59:4f:99:9f:08:07:67:1f: 83:fa:d6:49:3f:1e:c3:54:af:fb:00:41:99:7b:a9: 89:b4:32:56:b0:c5:27:32:1c:3a:55:8b:26:0b:76: ce:60:b6:50:07:18:46:48:93:11:bb:6d:b2:b4:59: 89:bb:a0:c4:7c:d8:db:46:be:ca:57:6b:d5:5a:4c: f6:5c:63:a4:9c:c8:db:73:91:ea:af:c9:e0:86:69: ff:0e:be:05:cb:39:3a:00:fc:3f:a1:62:a3:ad:23: 58:1f:f1:9c:91:65:e8:fd:76:66:3d:c7:28:53:59: fb:ae:d6:4d:c4:a9:3c:27:ff:af:e3:1a:98:f8:2d: 84:f6:97:b6:90:f6:60:f9:99:18:5a:35:42:55:9b: 95:f2:5f:dc:2c:94:61:14:c9:a3:16:da:ee:9e:1e: d0:fc:9f:38:52:d2:df:e9:fd:9d:4c:37:ed:95:df: cf:aa:c3:93:cb:eb:08:64:8c:48:4e:27:30:51:83: 97:65:14:bb:3f:e6:32:40:a9:2b:53:27:ec:47:28: e9:c0:b8:44:fd:8f:23:a8:b0:b8:75:11:3a:7e:b7: c6:cb:45:25:c5:2d:57:be:ca:2d:77:c1:68:82:e9: fb:7b:60:45:26:92:89:c2:4d:ee:ab:16:a3:47:5c: cc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:23:54:8B:4A:4E:D2:10:11:1B:9B:84:54:74:E4:66:20:2D:82:4E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13bed46e-4fff-4b4f-93d7-d272c4ec9046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.210.76.0/22 Signature Algorithm: sha256WithRSAEncryption 41:e6:a2:8a:3e:01:dd:f2:2e:2a:d7:d7:9e:eb:0a:e6:73:30: bb:74:8c:76:e2:4b:f4:91:f1:6a:73:7e:38:e7:f8:d8:ca:ed: f6:6a:1e:bb:0a:76:d9:59:c8:09:cb:6a:10:2f:36:6a:00:f8: 6a:86:aa:d2:5f:30:2b:be:79:74:40:26:24:78:d9:73:48:d8: 3b:f5:e8:9b:e0:0d:d1:b6:5f:f0:21:70:99:2b:45:27:cd:7b: f2:a2:1a:d0:86:9e:c2:71:03:cf:0d:ed:72:98:82:31:82:2a: 0c:20:d9:d5:51:4f:b0:c3:22:a3:12:d8:b4:e1:ce:b4:9c:7d: a7:46:ad:a1:0e:a5:7d:10:07:df:6a:c9:8a:cc:7a:39:86:cb: c0:74:42:f9:3d:ad:1a:99:9e:1e:27:e1:35:e7:40:5a:dd:93: 0f:ba:d5:7e:20:55:97:38:8d:20:38:27:03:94:2a:21:dc:17: cd:50:14:b9:b0:eb:9e:3f:01:0c:74:0a:98:1b:9c:75:a3:65: 51:6c:b2:d0:97:d3:d4:55:03:f8:0f:9e:87:8d:bd:a8:35:bc: f6:e4:3f:ef:68:2d:79:6a:cf:64:81:05:fa:44:5c:5b:9f:1d: cb:d0:57:be:48:76:dd:2e:02:55:7b:fe:ab:60:7a:17:19:cb: e0:4e:24:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF//aOe4iFheRkA9ixb9azmVRtYYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjY2QzY2FmMDY2ZmFmM2NmMTFmOTlhMjZmYjhjMGY4ODY0 NzNmZTMzYTljN2Y5NmZhMmZlOWZjOWE4NjdmYmQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXIj8Y1sdZT5mfCAdnH4P61kk/HsNUr/sAQZl7qYm0Mlaw xScyHDpViyYLds5gtlAHGEZIkxG7bbK0WYm7oMR82NtGvspXa9VaTPZcY6ScyNtz keqvyeCGaf8OvgXLOToA/D+hYqOtI1gf8ZyRZej9dmY9xyhTWfuu1k3EqTwn/6/j Gpj4LYT2l7aQ9mD5mRhaNUJVm5XyX9wslGEUyaMW2u6eHtD8nzhS0t/p/Z1MN+2V 38+qw5PL6whkjEhOJzBRg5dlFLs/5jJAqStTJ+xHKOnAuET9jyOosLh1ETp+t8bL RSXFLVe+yi13wWiC6ft7YEUmkonCTe6rFqNHXMw1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIyNUi0pO0hARG5uEVHTkZiAtgk4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEzYmVkNDZlLTRmZmYtNGI0Zi05M2Q3LWQyNzJjNGVjOTA0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJF0kwwDQYJKoZIhvcNAQELBQADggEBAEHmooo+Ad3yLirX157rCuZzMLt0 jHbiS/SR8Wpzfjjn+NjK7fZqHrsKdtlZyAnLahAvNmoA+GqGqtJfMCu+eXRAJiR4 2XNI2Dv16JvgDdG2X/AhcJkrRSfNe/KiGtCGnsJxA88N7XKYgjGCKgwg2dVRT7DD IqMS2LThzrScfadGraEOpX0QB99qyYrMejmGy8B0Qvk9rRqZnh4n4TXnQFrdkw+6 1X4gVZc4jSA4JwOUKiHcF81QFLmw654/AQx0CpgbnHWjZVFsstCX09RVA/gPnoeN vag1vPbkP+9oLXlqz2SBBfpEXFufHcvQV75Idt0uAlV7/qtgehcZy+BOJJA= -----END CERTIFICATE-----Generated at Sat Sep 23 00:18:53 2023 by rpki-client on console-fra.rpki-client.org