$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a394da0-b9e1-4544-b143-d3b9d73fe845.roa File: 1a394da0-b9e1-4544-b143-d3b9d73fe845.roa (raw, json) Hash identifier: nxRURR+WiRxPQiG6kdy6yH0nIAZMI6jrfav9od/6tcM= Subject key identifier: 27:BB:CA:BB:57:C4:AB:17:11:E3:7A:E2:D2:E3:BD:B6:84:13:BE:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 687E1ED9F938B163CE33A6BA1A77F8A8C03ED16E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a394da0-b9e1-4544-b143-d3b9d73fe845.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f68:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 12:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7e:1e:d9:f9:38:b1:63:ce:33:a6:ba:1a:77:f8:a8:c0:3e:d1:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=ee3d3e8ee33d2baf219c65be5d92d9f6a0a7c0b6b872c168ca7bd2a168c1d2fc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:7f:51:1f:eb:ac:af:00:30:a6:fa:59:f8: 1b:21:f5:69:2c:f5:ac:cc:d5:25:3d:ac:5e:29:47: dd:49:7f:47:41:c7:3c:b4:c2:60:3b:2d:64:57:aa: a2:02:aa:aa:c7:9d:3e:3a:40:8d:00:8a:ef:a4:75: 01:88:fb:ee:aa:a1:9d:82:d7:ca:59:50:b6:51:aa: 8a:28:8f:0f:e9:7d:99:4b:61:7f:78:d4:e8:69:c7: 78:4d:93:3d:56:a0:46:82:72:4c:8e:09:6d:73:71: 3c:ec:4d:4e:d3:00:90:03:d6:75:a7:86:b1:55:42: 95:54:9b:86:aa:ed:0d:7a:ba:bd:ac:c6:f7:15:c5: 8c:ac:1e:ed:c5:7e:c3:75:4f:da:b0:ae:ae:f1:f6: 19:c9:9b:3f:d8:0b:84:90:fe:51:c9:e9:90:1a:35: 3d:5e:c5:47:95:9d:ea:48:51:07:12:f4:fc:0b:a3: 91:d3:c9:28:e7:3d:cc:7a:42:c8:fc:b9:03:e5:89: ff:6e:17:e5:aa:e6:d7:f0:28:fc:49:19:9a:c4:a2: 8d:5a:ee:e5:c0:ea:16:5c:02:e9:f4:1e:99:27:90: 98:b5:4e:ec:e7:a9:5a:4a:70:4e:4f:7d:17:c2:e5: e3:5f:1e:00:b9:ff:ae:0d:0e:ff:8d:f4:01:8f:2e: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BB:CA:BB:57:C4:AB:17:11:E3:7A:E2:D2:E3:BD:B6:84:13:BE:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a394da0-b9e1-4544-b143-d3b9d73fe845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:e000::/40 Signature Algorithm: sha256WithRSAEncryption cf:f0:af:4e:37:d9:cb:09:b5:99:70:52:37:79:69:83:45:86: 4c:1d:d6:58:45:5f:d1:b0:4d:46:9e:c4:4f:da:cb:01:70:5e: f9:03:5e:a6:77:bf:96:85:ba:fa:68:5d:99:36:6e:80:d2:a5: ec:92:6a:50:9e:c7:be:c2:d0:ce:93:1c:cc:cd:f5:19:47:c7: cb:f0:29:24:e5:dc:5f:2a:cb:f6:b3:d9:10:ff:2e:e1:e8:c4: 8c:f9:f4:cb:60:da:cb:0f:9b:30:18:f8:3f:ce:d0:42:59:c6: a3:ce:b0:f1:63:11:7b:63:d3:b6:0e:96:c3:67:42:14:00:98: 02:a0:28:70:71:ca:a1:fc:38:30:06:54:62:ff:f9:dd:bb:28: b5:39:81:08:ee:d9:41:8a:98:f0:41:a3:3d:59:42:5f:3e:58: 77:32:46:05:e2:b4:b0:f2:d2:07:a2:e1:2a:97:1f:74:7d:9c: e7:e5:4e:12:c9:71:cb:8a:c2:b7:f5:c6:83:54:3b:77:55:14: ba:fc:ed:22:d3:ad:cc:da:c2:5e:80:2b:c7:fc:98:17:c4:61: 6a:b0:5b:d6:17:82:7f:fa:f7:5a:a8:f6:88:aa:6b:04:73:8d: 94:b6:94:58:69:e6:f0:58:14:68:47:ec:50:8f:4c:81:1e:e8: 29:64:0b:ac -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaH4e2fk4sWPOM6a6Gnf4qMA+0W4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTNkM2U4ZWUzM2QyYmFmMjE5YzY1YmU1ZDkyZDlmNmEw YTdjMGI2Yjg3MmMxNjhjYTdiZDJhMTY4YzFkMmZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFMn9RH+usrwAwpvpZ+Bsh9Wks9azM1SU9rF4pR91Jf0dB xzy0wmA7LWRXqqICqqrHnT46QI0Aiu+kdQGI++6qoZ2C18pZULZRqooojw/pfZlL YX941Ohpx3hNkz1WoEaCckyOCW1zcTzsTU7TAJAD1nWnhrFVQpVUm4aq7Q16ur2s xvcVxYysHu3FfsN1T9qwrq7x9hnJmz/YC4SQ/lHJ6ZAaNT1exUeVnepIUQcS9PwL o5HTySjnPcx6Qsj8uQPlif9uF+Wq5tfwKPxJGZrEoo1a7uXA6hZcAun0HpknkJi1 TuznqVpKcE5PfRfC5eNfHgC5/64NDv+N9AGPLpE9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUJ7vKu1fEqxcR43ri0uO9toQTvi0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFhMzk0ZGEwLWI5ZTEtNDU0NC1iMTQzLWQzYjlkNzNmZTg0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9o4DANBgkqhkiG9w0BAQsFAAOCAQEAz/CvTjfZywm1mXBSN3lpg0WG TB3WWEVf0bBNRp7ET9rLAXBe+QNepne/loW6+mhdmTZugNKl7JJqUJ7HvsLQzpMc zM31GUfHy/ApJOXcXyrL9rPZEP8u4ejEjPn0y2Dayw+bMBj4P87QQlnGo86w8WMR e2PTtg6Ww2dCFACYAqAocHHKofw4MAZUYv/53bsotTmBCO7ZQYqY8EGjPVlCXz5Y dzJGBeK0sPLSB6LhKpcfdH2c5+VOEslxy4rCt/XGg1Q7d1UUuvztItOtzNrCXoAr x/yYF8RharBb1heCf/r3Wqj2iKprBHONlLaUWGnm8FgUaEfsUI9MgR7oKWQLrA== -----END CERTIFICATE-----Generated at Fri Sep 22 00:30:05 2023 by rpki-client on console-fra.rpki-client.org