$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa File: 27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa (raw, json) Hash identifier: TbDgcV3h/W04/Dqd6PdgpiDbGgBCuSYEnxa2sBs630A= Subject key identifier: D2:83:85:1D:83:40:A0:F7:75:73:65:D0:B9:F7:18:A6:F1:F2:B1:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68C6B88B6C94E1BE9AAAF4BD6FA16445CB698CC9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 70.240.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c6:b8:8b:6c:94:e1:be:9a:aa:f4:bd:6f:a1:64:45:cb:69:8c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=719b2425cd22c14dc9835299dad431b7157cbd1d44b6125e5641158ad8e5c05a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:2f:e5:02:3d:95:c2:a4:6e:a8:32:38:79: d3:55:7b:a0:40:27:70:72:aa:4b:73:5b:5a:1f:73: 12:63:cd:85:e7:5e:4a:44:3d:d2:5c:9d:71:47:d9: 3a:fb:44:17:d5:ac:d6:2b:61:b1:ef:73:2d:51:53: 78:dc:37:74:75:0b:bd:8f:25:02:3a:a7:e4:2b:41: d7:8e:15:1d:96:98:f0:e0:e8:dd:e3:b5:cb:b4:b7: 7b:cd:2f:da:9f:82:fb:24:c0:27:99:d3:ca:3f:e6: 30:29:86:31:39:af:da:4a:7d:44:64:c4:04:68:de: 8e:e8:f0:b7:60:1b:bb:5d:01:37:ad:a2:6e:3a:df: e4:37:54:b2:44:b7:f9:99:bf:77:26:41:76:ae:4c: d2:4a:cb:4d:06:fe:59:fa:09:7f:0c:cb:af:5b:d9: 66:c2:04:3d:96:74:e9:20:3e:18:0c:bc:50:05:82: bd:0f:29:49:43:ce:4f:cf:6a:1e:78:e5:db:94:f3: 58:f7:7e:86:66:99:bc:ae:63:93:e9:d5:01:cb:a5: 9b:e3:20:dc:9e:fa:b2:01:fa:4e:20:a7:1a:1d:13: 8e:88:61:80:87:76:71:7e:f5:73:5b:41:54:b7:e2: c9:7d:03:71:32:42:27:f4:ff:b6:f2:8f:8c:01:9d: fa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:83:85:1D:83:40:A0:F7:75:73:65:D0:B9:F7:18:A6:F1:F2:B1:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.240.64.0/18 Signature Algorithm: sha256WithRSAEncryption 3f:87:df:04:18:c4:e4:65:80:aa:1c:33:bd:b1:d2:bc:2b:63: fd:b5:d9:4a:9f:dd:cc:93:af:8a:17:a6:3c:ce:2a:46:91:55: 50:56:24:47:75:6c:54:1d:ba:e5:ed:da:45:58:0b:75:9a:40: 26:7d:aa:cf:06:18:a7:34:c6:2e:6e:38:6f:87:64:55:ca:b1: 42:e7:d6:f8:82:a4:ba:4a:d0:7b:31:ae:e4:0c:5a:e9:77:5f: ab:1b:98:e1:87:69:a1:8e:5a:45:f9:66:c5:72:ba:a1:03:7e: e5:11:64:4d:70:36:11:e5:cd:2a:4f:72:19:a7:7b:36:83:c7: 29:55:b2:a0:76:ea:0f:8e:66:17:99:f1:14:cc:47:4d:32:88: b7:d5:b8:b9:a1:d1:16:5b:9f:e6:33:7e:61:da:22:e3:8e:e7: af:c6:8e:60:20:6c:a2:ee:4e:e0:3c:fd:a7:80:7b:e4:07:5e: 32:d6:66:d9:9c:18:86:b0:4d:da:75:6d:15:54:af:c4:0f:3b: bd:96:5a:d1:52:c0:d8:83:45:d5:aa:44:c7:4e:46:9e:13:90: e4:9f:f9:4a:d6:9d:5e:aa:0e:48:85:90:78:ef:dd:a9:9b:95: 82:bd:af:6b:bd:8e:01:ed:09:8d:09:e3:76:b2:34:c0:da:39: 4e:75:9c:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaMa4i2yU4b6aqvS9b6FkRctpjMkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTliMjQyNWNkMjJjMTRkYzk4MzUyOTlkYWQ0MzFiNzE1 N2NiZDFkNDRiNjEyNWU1NjQxMTU4YWQ4ZTVjMDVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmGy/lAj2VwqRuqDI4edNVe6BAJ3ByqktzW1ofcxJjzYXn XkpEPdJcnXFH2Tr7RBfVrNYrYbHvcy1RU3jcN3R1C72PJQI6p+QrQdeOFR2WmPDg 6N3jtcu0t3vNL9qfgvskwCeZ08o/5jAphjE5r9pKfURkxARo3o7o8LdgG7tdATet om463+Q3VLJEt/mZv3cmQXauTNJKy00G/ln6CX8My69b2WbCBD2WdOkgPhgMvFAF gr0PKUlDzk/Pah545duU81j3foZmmbyuY5Pp1QHLpZvjINye+rIB+k4gpxodE46I YYCHdnF+9XNbQVS34sl9A3EyQif0/7byj4wBnfrHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0oOFHYNAoPd1c2XQufcYpvHysUwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI3YzhhNjFlLTRiNTQtNDllNi05YThlLWUzMjI5NjU2YTlhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZG8EAwDQYJKoZIhvcNAQELBQADggEBAD+H3wQYxORlgKocM72x0rwrY/21 2Uqf3cyTr4oXpjzOKkaRVVBWJEd1bFQduuXt2kVYC3WaQCZ9qs8GGKc0xi5uOG+H ZFXKsULn1viCpLpK0HsxruQMWul3X6sbmOGHaaGOWkX5ZsVyuqEDfuURZE1wNhHl zSpPchmnezaDxylVsqB26g+OZheZ8RTMR00yiLfVuLmh0RZbn+YzfmHaIuOO56/G jmAgbKLuTuA8/aeAe+QHXjLWZtmcGIawTdp1bRVUr8QPO72WWtFSwNiDRdWqRMdO Rp4TkOSf+UrWnV6qDkiFkHjv3amblYK9r2u9jgHtCY0J43ayNMDaOU51nKw= -----END CERTIFICATE-----Generated at Fri Sep 22 17:25:45 2023 by rpki-client on console-fra.rpki-client.org