$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/229fba94-3747-44e2-9a0d-72414597e6f0.roa File: 229fba94-3747-44e2-9a0d-72414597e6f0.roa (raw, json) Hash identifier: 0RMESJOE+qjmF6PrmO0rThD3PmU0RTM+eecECY5uLJc= Subject key identifier: EF:99:F4:BC:C7:3E:F5:C0:C2:F0:B8:3E:AA:10:FC:C5:96:8C:CE:C2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 63847B9ACD1FD912A9CAC952F8DD9E544D0F8C7F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/229fba94-3747-44e2-9a0d-72414597e6f0.roa Signing time: Mon 28 Aug 2023 00:00:00 +0000 ROA not before: Mon 28 Aug 2023 00:00:00 +0000 ROA not after: Mon 02 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 76.241.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Aug 2023 08:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:84:7b:9a:cd:1f:d9:12:a9:ca:c9:52:f8:dd:9e:54:4d:0f:8c:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 28 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2023 GMT Subject: serialNumber=286e70b283401d1d60d0607ca356121de90ddbb58022c9f9f2ae91ff3ba73eff, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:90:de:aa:23:e4:c0:ad:f5:87:da:10:d6: 30:c3:dc:fa:77:cc:ee:cc:cc:5f:49:a1:22:95:d0: 13:f9:ee:86:da:1f:6b:2d:4d:97:ca:93:33:14:89: f1:35:a7:51:bf:56:3b:77:0c:e9:f8:eb:2a:47:5b: ee:ce:e2:af:aa:14:bb:ea:f3:6a:c8:3e:34:66:18: d7:c4:98:37:39:c4:5a:9b:4c:90:f2:1e:2c:73:26: d3:0c:22:df:33:fd:0d:86:04:27:bd:ef:05:26:d7: ed:f7:da:44:cc:50:7e:1b:81:38:45:23:89:6b:88: 58:93:30:a1:57:82:40:ad:cd:d6:14:c5:67:4b:42: f9:f7:33:cd:5f:8c:ab:90:53:03:6e:03:64:99:0b: 78:93:73:04:c4:f0:a5:b1:bc:ce:74:53:c0:02:8c: 4f:f3:ca:77:24:bb:44:33:22:3b:19:ae:52:fc:23: 91:43:2c:86:41:5b:36:4f:46:5f:34:b6:e3:64:f8: 93:75:35:f1:1b:ab:96:95:a8:f9:70:14:a1:db:bb: d5:91:e2:8e:41:df:08:c3:68:d8:37:79:a2:5d:a9: 94:a5:15:06:be:d9:0d:22:e8:db:50:58:59:21:25: 43:a8:51:38:e1:7b:1e:2f:f4:03:fd:29:e0:fe:e0: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:99:F4:BC:C7:3E:F5:C0:C2:F0:B8:3E:AA:10:FC:C5:96:8C:CE:C2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/229fba94-3747-44e2-9a0d-72414597e6f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.241.64.0/18 Signature Algorithm: sha256WithRSAEncryption 35:b1:7a:f4:01:c9:4a:6c:89:77:88:6a:1f:e4:e7:83:c9:d8: 63:66:4b:6b:32:f8:30:6a:23:47:cf:6c:a1:ac:14:47:b5:4d: bd:ef:f9:9a:55:e5:e0:37:f1:ff:af:7a:f6:3c:b3:d6:48:df: d9:09:18:09:3d:bd:fd:3c:2c:b0:6f:86:e4:8c:c0:0e:e1:3c: 64:d1:9e:70:3b:17:9d:da:8f:f0:40:cc:3f:ef:78:a7:59:4d: 49:db:28:c9:39:27:8e:7b:f1:71:dc:69:f9:cf:16:5a:f1:7b: 5b:c6:62:4c:f2:5d:14:f8:fa:14:1a:e3:71:d1:ad:c1:30:10: c7:1d:27:3a:24:2b:bd:36:f8:d9:4c:a6:dc:cd:d9:82:b2:a4: 30:c1:c5:16:08:6f:c2:f5:06:88:8b:e3:d5:e2:3f:24:04:47: ad:5e:5b:54:7f:6a:6e:18:5a:cb:26:c4:0a:9e:53:8c:11:79: 35:7a:2b:06:a9:f3:d0:1c:23:40:9e:4c:47:b3:bd:ca:7c:8b: 77:53:60:a5:7f:95:6e:5f:71:d7:2f:71:6f:e8:b4:d5:d3:ae: 35:91:78:cb:af:03:8f:bb:a1:07:40:d1:a9:7a:f6:1b:c9:6d: 03:3e:46:3f:fd:6f:f8:74:c4:d3:01:07:d9:12:52:36:e6:bf: c0:91:da:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY4R7ms0f2RKpyslS+N2eVE0PjH8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyODZlNzBiMjgzNDAxZDFkNjBkMDYwN2NhMzU2MTIxZGU5 MGRkYmI1ODAyMmM5ZjlmMmFlOTFmZjNiYTczZWZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDW8JDeqiPkwK31h9oQ1jDD3Pp3zO7MzF9JoSKV0BP57oba H2stTZfKkzMUifE1p1G/Vjt3DOn46ypHW+7O4q+qFLvq82rIPjRmGNfEmDc5xFqb TJDyHixzJtMMIt8z/Q2GBCe97wUm1+332kTMUH4bgThFI4lriFiTMKFXgkCtzdYU xWdLQvn3M81fjKuQUwNuA2SZC3iTcwTE8KWxvM50U8ACjE/zyncku0QzIjsZrlL8 I5FDLIZBWzZPRl80tuNk+JN1NfEbq5aVqPlwFKHbu9WR4o5B3wjDaNg3eaJdqZSl FQa+2Q0i6NtQWFkhJUOoUTjhex4v9AP9KeD+4L2PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU75n0vMc+9cDC8Lg+qhD8xZaMzsIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyOWZiYTk0LTM3NDctNDRlMi05YTBkLTcyNDE0NTk3ZTZmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZM8UAwDQYJKoZIhvcNAQELBQADggEBADWxevQByUpsiXeIah/k54PJ2GNm S2sy+DBqI0fPbKGsFEe1Tb3v+ZpV5eA38f+vevY8s9ZI39kJGAk9vf08LLBvhuSM wA7hPGTRnnA7F53aj/BAzD/veKdZTUnbKMk5J4578XHcafnPFlrxe1vGYkzyXRT4 +hQa43HRrcEwEMcdJzokK702+NlMptzN2YKypDDBxRYIb8L1BoiL49XiPyQER61e W1R/am4YWssmxAqeU4wReTV6Kwap89AcI0CeTEezvcp8i3dTYKV/lW5fcdcvcW/o tNXTrjWReMuvA4+7oQdA0al69hvJbQM+Rj/9b/h0xNMBB9kSUjbmv8CR2r8= -----END CERTIFICATE-----Generated at Mon Aug 28 20:45:33 2023 by rpki-client on console-ams.rpki-client.org