$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/168ff039-d152-4e1c-9769-2848d23797c6.roa File: 168ff039-d152-4e1c-9769-2848d23797c6.roa (raw, json) Hash identifier: UbvtDgCjBES2b0NynQtZs/CSPeboqt+i83b6AVWrzEg= Subject key identifier: A8:78:89:50:13:30:75:FB:FA:63:F7:20:B7:82:AD:3B:9B:B2:CE:4A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F7CD367A1865B5B68F11E2AC8B25A67309C67D2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/168ff039-d152-4e1c-9769-2848d23797c6.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 161.193.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7c:d3:67:a1:86:5b:5b:68:f1:1e:2a:c8:b2:5a:67:30:9c:67:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=caa99ecc19adb9d4a62d0f8c8985b510ea0fbf10dfebf883d587737971c3e95a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:df:b9:51:a6:51:ea:d2:87:9e:e8:d7:da: 44:36:f4:78:d8:aa:67:5b:c7:58:3c:4a:e7:60:b3: 13:81:97:e1:0f:7d:57:4f:6a:4f:a5:4b:cd:35:4a: e2:f3:5d:fd:9f:8c:76:f4:72:75:97:2a:f2:89:98: 82:64:7b:c1:d1:fc:8f:17:63:20:a8:97:d8:d5:e2: a4:aa:9f:59:fe:bd:14:bc:74:4f:33:8a:f6:d1:40: 20:d4:c9:2b:0e:76:87:db:b2:8e:87:18:b4:85:48: fd:87:a1:3f:94:cf:32:20:45:35:4b:97:4e:c7:f1: 4e:a5:f0:7a:7e:e6:10:54:fc:f4:9f:78:ac:ec:f8: 87:e4:ed:c4:fc:52:ff:46:62:05:23:d1:f3:13:b4: ba:20:d5:06:81:14:c4:ab:6e:72:16:21:a1:d8:3a: 04:32:d0:79:b4:96:b0:83:0d:ac:70:c9:8f:25:18: 74:5a:66:ce:92:f5:83:fb:9d:09:03:1e:e3:39:49: 2c:92:13:5e:37:df:30:d8:af:b7:22:74:12:0e:95: 06:12:dd:aa:2a:05:ac:f2:55:76:d7:9a:81:61:c6: 9e:4b:57:a8:d9:98:70:da:57:e3:0b:ca:81:ea:45: 9a:52:02:5c:b0:ca:2d:a1:2a:e3:ae:3c:28:55:37: bf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:78:89:50:13:30:75:FB:FA:63:F7:20:B7:82:AD:3B:9B:B2:CE:4A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/168ff039-d152-4e1c-9769-2848d23797c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.193.0.0/16 Signature Algorithm: sha256WithRSAEncryption 23:ba:30:e6:25:d2:74:04:1d:81:99:c7:55:45:7a:84:6c:2c: fe:ab:91:68:4e:5b:ce:b8:1a:9e:6f:c5:d8:b1:37:29:08:c0: 75:78:7d:57:bb:aa:f3:e8:66:2a:02:95:4e:95:cf:f4:8e:c0: 4e:82:22:ff:dd:4e:e6:56:ce:db:ac:13:ae:61:78:59:19:66: 7d:71:da:43:9e:2e:a7:28:1f:74:5f:7d:dd:ce:b5:b5:d1:b2: 94:29:80:27:0d:8c:3d:20:0c:14:0d:28:72:00:c8:77:61:6e: d7:76:27:2a:64:c7:cd:34:28:4b:89:86:70:a5:19:c6:47:11: a8:b6:6c:38:08:99:7c:50:32:2a:61:d9:2c:7a:91:2f:00:74: e5:a4:44:0c:04:8f:25:ec:cb:f1:d6:1e:95:c7:01:94:f1:46: 60:26:02:a0:9a:d2:de:a5:e6:ce:0b:67:15:15:a1:42:7a:ee: 2f:ef:d2:6a:b2:fe:f8:ab:76:9c:75:b8:33:d6:6d:98:34:7c: 37:c3:87:cf:45:4c:27:8a:9e:1f:58:20:1f:2a:a6:57:60:a2: 04:1e:df:e5:9f:19:e4:54:f7:6b:00:5b:3f:27:94:09:ff:49: 58:00:35:5d:27:19:80:b9:cf:cb:1c:58:61:5c:cd:c1:9c:69: 4d:cc:7e:86 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUX3zTZ6GGW1to8R4qyLJaZzCcZ9IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYWE5OWVjYzE5YWRiOWQ0YTYyZDBmOGM4OTg1YjUxMGVh MGZiZjEwZGZlYmY4ODNkNTg3NzM3OTcxYzNlOTVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0Zd+5UaZR6tKHnujX2kQ29HjYqmdbx1g8SudgsxOBl+EP fVdPak+lS801SuLzXf2fjHb0cnWXKvKJmIJke8HR/I8XYyCol9jV4qSqn1n+vRS8 dE8zivbRQCDUySsOdofbso6HGLSFSP2HoT+UzzIgRTVLl07H8U6l8Hp+5hBU/PSf eKzs+Ifk7cT8Uv9GYgUj0fMTtLog1QaBFMSrbnIWIaHYOgQy0Hm0lrCDDaxwyY8l GHRaZs6S9YP7nQkDHuM5SSySE1433zDYr7cidBIOlQYS3aoqBazyVXbXmoFhxp5L V6jZmHDaV+MLyoHqRZpSAlywyi2hKuOuPChVN7/jAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUqHiJUBMwdfv6Y/cgt4KtO5uyzkowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE2OGZmMDM5LWQxNTItNGUxYy05NzY5LTI4NDhkMjM3OTdjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwChwTANBgkqhkiG9w0BAQsFAAOCAQEAI7ow5iXSdAQdgZnHVUV6hGws/quR aE5bzrganm/F2LE3KQjAdXh9V7uq8+hmKgKVTpXP9I7AToIi/91O5lbO26wTrmF4 WRlmfXHaQ54upygfdF993c61tdGylCmAJw2MPSAMFA0ocgDId2Fu13YnKmTHzTQo S4mGcKUZxkcRqLZsOAiZfFAyKmHZLHqRLwB05aREDASPJezL8dYelccBlPFGYCYC oJrS3qXmzgtnFRWhQnruL+/SarL++Kt2nHW4M9ZtmDR8N8OHz0VMJ4qeH1ggHyqm V2CiBB7f5Z8Z5FT3awBbPyeUCf9JWAA1XScZgLnPyxxYYVzNwZxpTcx+hg== -----END CERTIFICATE-----Generated at Fri Sep 22 17:51:33 2023 by rpki-client on console-ams.rpki-client.org