$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/330c9f9f-fd15-45ce-9483-bc877672941d.roa File: 330c9f9f-fd15-45ce-9483-bc877672941d.roa (raw, json) Hash identifier: pGYPOYj4UcGlNmZ9yomhGA32d3pagQiRi7BNAg4V+C4= Subject key identifier: 02:38:BA:20:8C:68:59:67:35:DD:13:84:06:3C:DA:67:72:1C:43:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30432584A94CDC3EC78DBCB9140EB43E874253F3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/330c9f9f-fd15-45ce-9483-bc877672941d.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffe:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:43:25:84:a9:4c:dc:3e:c7:8d:bc:b9:14:0e:b4:3e:87:42:53:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=fd39f1ff881d113d1d427c0c8ba131691ad81e25ef6c3c003fab8a2620b6c697, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:b8:a7:a5:1a:ec:86:4c:fd:a6:d9:30:c5: 99:02:98:60:2e:97:6b:f8:7b:c8:80:30:a7:0a:36: 77:70:a5:29:83:fe:e2:ad:96:32:81:08:28:52:f5: 88:fc:a6:c0:50:78:cb:9c:3e:2e:df:79:25:6e:d4: e5:07:64:ca:49:a3:70:60:f8:ef:cd:02:4b:6e:6a: 30:60:f2:3e:e1:e5:f5:e9:b4:99:3c:b7:aa:23:fe: c7:4a:bd:f8:69:05:2c:33:83:f9:54:ad:22:38:bc: b3:fe:7c:72:76:f2:d3:cb:57:5b:08:e5:a1:22:c9: f6:84:68:4f:a5:35:3f:b4:08:10:3a:03:ca:90:0a: e1:c7:10:ac:1f:b3:18:18:02:ce:5d:6f:e7:88:1a: 8d:77:b1:b5:cd:2f:1b:0f:9d:35:d6:6c:fc:63:f8: 34:41:e2:c9:b7:07:bf:2c:70:02:72:d4:c0:97:85: 4a:07:fd:dc:db:6a:ee:b1:d7:4c:8a:2d:32:42:63: bd:5f:14:7e:de:8c:04:df:66:69:82:81:ad:f1:5f: 05:ef:8d:a5:ca:ad:33:61:1c:5e:2e:9c:6e:2a:49: a0:d9:f5:32:02:5c:2a:78:a6:5b:1e:48:11:cd:1d: 01:0e:ff:d4:d0:f8:77:4c:e4:2a:7d:dc:ab:e2:01: 3e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:38:BA:20:8C:68:59:67:35:DD:13:84:06:3C:DA:67:72:1C:43:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/330c9f9f-fd15-45ce-9483-bc877672941d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffe:c000::/40 Signature Algorithm: sha256WithRSAEncryption ce:e6:d7:cb:de:0e:51:e8:82:cd:27:7b:a7:17:8e:6a:7b:b7: 5f:fc:75:43:da:15:5f:de:df:3d:55:07:c0:28:e5:b1:9b:34: ee:8c:01:9a:20:f9:c4:19:3f:74:63:88:67:1f:a9:a5:83:64: 08:8a:fd:2b:a8:46:e7:7c:d6:ba:61:04:c8:07:02:01:1e:33: 7f:22:28:57:ff:89:55:1c:60:d6:28:9b:87:96:49:2e:b9:93: 6b:c3:2c:73:bd:e0:59:1c:43:9d:f6:90:85:1e:54:8e:b4:90: 25:bb:bc:bd:e9:f8:ed:88:7c:d1:a2:f0:f5:e1:13:3c:68:9b: e4:0d:2b:eb:71:44:4f:7e:5e:eb:ba:7d:a1:72:40:f3:c7:d2: db:22:07:63:ab:05:9c:91:a2:96:39:a0:ed:ed:85:9c:60:48: dc:d5:d0:c1:53:80:66:a6:45:37:c2:b8:4b:6f:36:3d:97:4e: b9:01:28:84:43:89:50:6e:50:de:ac:37:61:ed:3f:69:14:a4: 2b:63:64:47:87:5a:2d:d5:e8:c2:f9:33:b1:c3:d1:47:3a:41: 82:2a:e5:e8:4e:2d:ab:70:b3:5c:e9:bb:ba:6a:2e:74:1b:2d: 9f:53:29:08:f5:7d:e4:8b:70:c4:c5:26:b8:c1:71:c9:29:12: 1a:6d:a6:a2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMEMlhKlM3D7Hjby5FA60PodCU/MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDM5ZjFmZjg4MWQxMTNkMWQ0MjdjMGM4YmExMzE2OTFh ZDgxZTI1ZWY2YzNjMDAzZmFiOGEyNjIwYjZjNjk3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9v7inpRrshkz9ptkwxZkCmGAul2v4e8iAMKcKNndwpSmD /uKtljKBCChS9Yj8psBQeMucPi7feSVu1OUHZMpJo3Bg+O/NAktuajBg8j7h5fXp tJk8t6oj/sdKvfhpBSwzg/lUrSI4vLP+fHJ28tPLV1sI5aEiyfaEaE+lNT+0CBA6 A8qQCuHHEKwfsxgYAs5db+eIGo13sbXNLxsPnTXWbPxj+DRB4sm3B78scAJy1MCX hUoH/dzbau6x10yKLTJCY71fFH7ejATfZmmCga3xXwXvjaXKrTNhHF4unG4qSaDZ 9TICXCp4plseSBHNHQEO/9TQ+HdM5Cp93KviAT6lAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUAji6IIxoWWc13ROEBjzaZ3IcQ60wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzMGM5ZjlmLWZkMTUtNDVjZS05NDgzLWJjODc3NjcyOTQxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/+wDANBgkqhkiG9w0BAQsFAAOCAQEAzubXy94OUeiCzSd7pxeOanu3 X/x1Q9oVX97fPVUHwCjlsZs07owBmiD5xBk/dGOIZx+ppYNkCIr9K6hG53zWumEE yAcCAR4zfyIoV/+JVRxg1iibh5ZJLrmTa8Msc73gWRxDnfaQhR5UjrSQJbu8ven4 7Yh80aLw9eETPGib5A0r63FET35e67p9oXJA88fS2yIHY6sFnJGiljmg7e2FnGBI 3NXQwVOAZqZFN8K4S282PZdOuQEohEOJUG5Q3qw3Ye0/aRSkK2NkR4daLdXowvkz scPRRzpBgirl6E4tq3CzXOm7umoudBstn1MpCPV95ItwxMUmuMFxySkSGm2mog== -----END CERTIFICATE-----Generated at Sat Sep 23 00:38:43 2023 by rpki-client on console-ams.rpki-client.org