$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d95bd62-e681-4cef-a026-fbb2d2eb1ef1.roa File: 2d95bd62-e681-4cef-a026-fbb2d2eb1ef1.roa (raw, json) Hash identifier: TH4ddFSM2jDJRrllJBU2sFqdRVtRncvHsqlLcFOJYcA= Subject key identifier: 39:FE:40:9C:D7:79:35:C2:56:42:80:F5:23:32:AC:FA:F1:C4:B4:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 650602A8ECAF450C81BCB449444B04926C621518 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d95bd62-e681-4cef-a026-fbb2d2eb1ef1.roa Signing time: Mon 28 Aug 2023 00:00:00 +0000 ROA not before: Mon 28 Aug 2023 00:00:00 +0000 ROA not after: Mon 02 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 99.87.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Aug 2023 07:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:06:02:a8:ec:af:45:0c:81:bc:b4:49:44:4b:04:92:6c:62:15:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 28 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2023 GMT Subject: serialNumber=baeb1543fc0f5fb0ebf123b464e0d7c1846f7d93887c3ffbbf1a5b942f93eda5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:cb:ae:1c:50:92:9f:62:70:b7:09:fe:16: 96:0b:61:3c:f8:9c:76:c1:21:4a:ab:07:96:eb:72: b7:9e:20:7c:c4:d4:4d:d0:97:b3:37:39:21:67:94: 18:fe:15:bd:9a:c9:ba:2f:1d:01:fa:de:b9:3d:20: f8:cc:8d:1b:8a:cf:85:ce:d6:3d:da:c4:4b:28:fe: c2:d2:c8:a6:20:3f:75:13:76:25:c4:a9:b3:7c:71: 85:81:7a:d9:38:11:77:45:e3:f8:cf:52:51:03:d8: e9:90:87:7d:aa:71:e9:69:e4:dc:da:ba:7c:ab:5a: 34:ac:a2:7b:3d:de:49:14:b0:63:dc:3e:4e:81:5d: 19:b2:37:04:e9:a2:5d:97:76:ca:1f:eb:53:e3:36: 7c:ee:3e:e0:ce:c1:da:eb:00:e5:1b:7d:2a:60:0a: ab:b9:30:c4:28:97:03:b0:aa:8c:8d:a9:c7:88:be: 91:30:61:0c:0e:3b:73:72:bb:53:15:eb:06:da:53: 71:e8:34:0e:78:cf:c8:e9:e4:5a:41:89:81:58:37: de:1e:3c:55:04:6f:9d:70:3b:db:f9:85:91:81:62: ff:7d:a4:b7:97:f4:f7:e9:e2:e8:9e:ff:43:86:44: 02:e0:a7:ba:04:b8:40:76:0e:6d:37:73:f5:20:be: 5d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FE:40:9C:D7:79:35:C2:56:42:80:F5:23:32:AC:FA:F1:C4:B4:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d95bd62-e681-4cef-a026-fbb2d2eb1ef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.87.128.0/18 Signature Algorithm: sha256WithRSAEncryption 86:17:d2:ec:8b:dc:9b:51:74:53:fb:13:96:d3:66:f3:5d:e7: 8a:9e:f2:ab:b1:9b:ad:e9:b5:cf:71:0d:8f:1f:09:30:06:c8: 68:b3:81:b4:c1:f2:8c:df:ee:26:09:64:18:fe:27:25:44:26: c1:dc:7d:0f:ff:c2:e7:61:e6:02:3e:af:7c:ae:48:c2:59:f9: 15:7c:3e:ad:5a:17:3c:35:f7:7a:5f:ca:4b:df:d3:03:e4:57: 80:de:fe:bd:8e:75:2e:36:e0:10:6e:18:0a:08:7e:bd:2a:0c: 19:6e:eb:42:2b:9c:27:21:32:49:23:d3:8d:b7:32:ef:0e:a2: 4b:66:69:d7:15:d7:5c:23:3b:f6:65:bf:96:66:d3:b0:0f:4c: f1:74:69:5a:a8:6e:66:a8:2d:ab:92:90:2f:0b:88:55:5f:b1: 64:6e:2e:c4:bc:0c:fc:85:c8:fb:58:db:0d:b7:d1:6b:dc:7b: 5c:02:02:b3:2e:bf:9b:c2:9a:51:96:f0:9f:e8:c5:9f:a0:ee: 79:0a:09:bc:9a:80:41:cf:9f:85:e9:69:b9:44:18:e0:f9:d0: 57:28:5e:09:52:0b:de:8a:02:1a:a7:b1:a1:50:e5:e8:a8:ae: ad:d4:30:66:a7:e8:2b:4a:38:fb:35:5d:bf:68:40:d4:48:6f: 50:5f:02:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZQYCqOyvRQyBvLRJREsEkmxiFRgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYWViMTU0M2ZjMGY1ZmIwZWJmMTIzYjQ2NGUwZDdjMTg0 NmY3ZDkzODg3YzNmZmJiZjFhNWI5NDJmOTNlZGE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEB8uuHFCSn2Jwtwn+FpYLYTz4nHbBIUqrB5brcreeIHzE 1E3Ql7M3OSFnlBj+Fb2aybovHQH63rk9IPjMjRuKz4XO1j3axEso/sLSyKYgP3UT diXEqbN8cYWBetk4EXdF4/jPUlED2OmQh32qcelp5NzaunyrWjSsons93kkUsGPc Pk6BXRmyNwTpol2Xdsof61PjNnzuPuDOwdrrAOUbfSpgCqu5MMQolwOwqoyNqceI vpEwYQwOO3Nyu1MV6wbaU3HoNA54z8jp5FpBiYFYN94ePFUEb51wO9v5hZGBYv99 pLeX9Pfp4uie/0OGRALgp7oEuEB2Dm03c/Ugvl0RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOf5AnNd5NcJWQoD1IzKs+vHEtJowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkOTViZDYyLWU2ODEtNGNlZi1hMDI2LWZiYjJkMmViMWVmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZjV4AwDQYJKoZIhvcNAQELBQADggEBAIYX0uyL3JtRdFP7E5bTZvNd54qe 8quxm63ptc9xDY8fCTAGyGizgbTB8ozf7iYJZBj+JyVEJsHcfQ//wudh5gI+r3yu SMJZ+RV8Pq1aFzw193pfykvf0wPkV4De/r2OdS424BBuGAoIfr0qDBlu60IrnCch Mkkj0423Mu8OoktmadcV11wjO/Zlv5Zm07APTPF0aVqobmaoLauSkC8LiFVfsWRu LsS8DPyFyPtY2w230Wvce1wCArMuv5vCmlGW8J/oxZ+g7nkKCbyagEHPn4XpablE GOD50FcoXglSC96KAhqnsaFQ5eiorq3UMGan6CtKOPs1Xb9oQNRIb1BfAo4= -----END CERTIFICATE-----Generated at Mon Aug 28 19:28:01 2023 by rpki-client on console-fra.rpki-client.org