$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31e04893-2663-4326-973c-b384c5d0a982.roa File: 31e04893-2663-4326-973c-b384c5d0a982.roa (raw, json) Hash identifier: zWKDTH6+Fl1eTmqFIx5/NuFYNn0K1BqhP3QSA7nBBZk= Subject key identifier: C0:A2:F9:67:F0:CC:0F:60:A1:92:92:47:69:E1:FE:62:C0:D7:7C:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04565DC9CE54B4FDD795EFA7D5DA84E63DB2FC46 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31e04893-2663-4326-973c-b384c5d0a982.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 12:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:56:5d:c9:ce:54:b4:fd:d7:95:ef:a7:d5:da:84:e6:3d:b2:fc:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=ab5c46e5f9aded09dc44937a39a9fa55f1bef7589d74866e909a5bb4e6cd1370, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:51:bf:6f:37:96:fd:53:1b:98:27:ce:3c:62: db:a9:cc:50:f9:a0:e6:2e:59:12:da:32:13:3f:9a: ff:ea:b4:f5:42:6f:1e:e6:cb:c6:31:e2:4f:74:b2: b4:a4:09:a3:49:c6:0c:14:fe:02:3f:73:30:b8:2f: d6:b6:1c:90:63:2d:f5:ca:11:27:5e:73:14:2b:83: 7c:6d:03:48:eb:8d:ac:a8:cf:0c:d8:f6:0e:b5:d0: f0:64:fc:64:a6:e8:c0:6c:35:c0:22:10:e1:b4:9c: e2:b8:4f:36:51:4b:1f:f1:53:72:5e:80:21:a7:28: de:1e:7f:4a:91:96:55:ff:ac:a5:68:22:c7:fa:f1: f7:21:ce:70:a3:71:9b:83:b2:03:25:f7:01:da:e0: 94:cf:a2:45:90:97:e7:bd:14:18:5e:f5:5a:e6:05: 8d:80:8f:46:49:db:5e:35:fe:3b:fd:35:da:16:a2: f9:80:a1:aa:a8:ab:f6:83:5e:d8:99:e9:97:82:0f: d8:87:2d:72:62:cf:f7:c2:aa:6f:22:ac:25:fe:da: 2a:ec:35:ac:c5:07:4e:14:95:37:69:71:0f:1c:5e: 34:15:f3:40:a8:90:14:46:1d:93:fe:1c:2f:9d:a1: 5d:00:e3:e8:6c:9d:ed:b5:fb:93:de:e6:25:b3:28: df:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A2:F9:67:F0:CC:0F:60:A1:92:92:47:69:E1:FE:62:C0:D7:7C:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31e04893-2663-4326-973c-b384c5d0a982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8000::/39 Signature Algorithm: sha256WithRSAEncryption 55:3e:4d:e9:b1:56:49:cb:88:9b:a1:62:8c:5f:cd:c0:09:00: 9d:40:81:1c:c6:3b:e2:d2:aa:ca:09:4d:3a:41:86:ce:bc:a3: db:0e:c3:88:5a:79:7e:79:e1:cd:76:d6:66:d6:27:ee:96:c6: 5a:fc:6b:cc:96:28:67:fb:db:90:6f:b7:7f:fe:b0:ab:3e:16: ec:76:cb:2a:20:9d:77:fa:00:16:8d:b9:d1:74:ed:59:2d:64: d5:fa:e3:8d:fe:0e:bd:06:aa:6b:45:d1:9c:0a:70:6c:de:4b: c8:66:5f:11:a6:88:b2:47:ef:0b:09:4f:35:ec:e1:3a:ee:2f: e8:26:2b:8f:5b:87:e0:1b:75:a7:2e:ca:23:77:d8:3d:aa:14: 41:21:4d:37:8d:9e:6b:2a:af:0e:b6:2c:f7:2e:ea:18:e7:65: ee:07:9d:27:cc:ed:f7:d9:31:52:9c:77:72:ef:f3:4a:ad:d8: 2e:fe:ab:ef:74:dc:96:93:a3:40:41:ba:6f:c9:d7:f5:12:5a: b4:c6:90:86:b3:55:22:96:13:4d:08:65:aa:19:81:17:1d:e8: 6d:0a:8e:a0:de:d8:0a:66:5f:fb:74:6c:ab:a6:15:15:9f:e5: 34:6c:78:67:50:2f:ce:53:fa:ce:a8:e1:a4:2b:20:09:b4:c8: e7:29:1f:64 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBFZdyc5UtP3Xle+n1dqE5j2y/EYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjVjNDZlNWY5YWRlZDA5ZGM0NDkzN2EzOWE5ZmE1NWYx YmVmNzU4OWQ3NDg2NmU5MDlhNWJiNGU2Y2QxMzcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4Ub9vN5b9UxuYJ848YtupzFD5oOYuWRLaMhM/mv/qtPVC bx7my8Yx4k90srSkCaNJxgwU/gI/czC4L9a2HJBjLfXKESdecxQrg3xtA0jrjayo zwzY9g610PBk/GSm6MBsNcAiEOG0nOK4TzZRSx/xU3JegCGnKN4ef0qRllX/rKVo Isf68fchznCjcZuDsgMl9wHa4JTPokWQl+e9FBhe9VrmBY2Aj0ZJ2141/jv9NdoW ovmAoaqoq/aDXtiZ6ZeCD9iHLXJiz/fCqm8irCX+2irsNazFB04UlTdpcQ8cXjQV 80CokBRGHZP+HC+doV0A4+hsne21+5Pe5iWzKN+NAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUwKL5Z/DMD2ChkpJHaeH+YsDXfPAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMxZTA0ODkzLTI2NjMtNDMyNi05NzNjLWIzODRjNWQwYTk4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB8AgDANBgkqhkiG9w0BAQsFAAOCAQEAVT5N6bFWScuIm6FijF/NwAkA nUCBHMY74tKqyglNOkGGzryj2w7DiFp5fnnhzXbWZtYn7pbGWvxrzJYoZ/vbkG+3 f/6wqz4W7HbLKiCdd/oAFo250XTtWS1k1frjjf4OvQaqa0XRnApwbN5LyGZfEaaI skfvCwlPNezhOu4v6CYrj1uH4Bt1py7KI3fYPaoUQSFNN42eayqvDrYs9y7qGOdl 7gedJ8zt99kxUpx3cu/zSq3YLv6r73TclpOjQEG6b8nX9RJatMaQhrNVIpYTTQhl qhmBFx3obQqOoN7YCmZf+3Rsq6YVFZ/lNGx4Z1AvzlP6zqjhpCsgCbTI5ykfZA== -----END CERTIFICATE-----Generated at Fri Sep 22 00:30:05 2023 by rpki-client on console-fra.rpki-client.org