$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3533c782-4a8e-4b05-b23e-e3741e9fb02c.roa File: 3533c782-4a8e-4b05-b23e-e3741e9fb02c.roa (raw, json) Hash identifier: ER5d3vs4BPLsk8Ty9YLIwa7Wh9KMxFhCLg5Cs5D+2NM= Subject key identifier: B6:58:E4:3B:8A:04:3C:7D:C1:CE:9B:E8:D3:1B:54:07:E2:29:F6:BF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E3BCF206D33281DD764A840EE13333A2E3585F6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3533c782-4a8e-4b05-b23e-e3741e9fb02c.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3b:cf:20:6d:33:28:1d:d7:64:a8:40:ee:13:33:3a:2e:35:85:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=6d45b304327caa6f27440ef5be6e4335b61b0ae0429d40435589ee43c8abeab5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2c:f0:2b:8e:dd:c5:c5:57:57:6a:b7:57:c0: a7:d2:3f:e4:0f:d6:0b:70:86:29:25:85:08:75:87: 6a:fc:18:06:da:83:24:97:2d:0a:d5:95:e9:f0:8c: af:35:6c:07:87:37:cd:c5:0b:46:22:34:9a:e7:96: ed:aa:76:57:5e:9b:a5:5e:2b:d3:63:3a:e9:7c:c0: 5d:50:48:ea:42:5d:87:71:c6:02:5b:06:c6:6f:7b: ae:83:56:5a:dc:84:d5:3f:6c:ba:e4:8a:c9:42:e9: ff:e5:7c:5e:f1:4f:1d:89:22:22:a3:c1:da:6a:a8: 3f:22:f0:cd:92:e0:f1:63:8a:2b:ca:f5:bf:b5:83: e1:ed:14:8d:8a:e0:30:ac:13:07:c2:c4:0e:3a:f5: 19:26:50:01:29:ba:db:c4:88:d3:3b:1f:9a:86:f1: 70:d6:42:3f:b0:c8:2d:4c:a9:df:70:7b:90:b4:06: 41:df:89:24:78:bc:0d:e0:c5:83:4a:c4:68:7d:55: 40:b1:2b:89:4e:8d:a4:42:e3:c3:26:54:d9:50:6b: ba:3f:2a:fd:da:51:9b:1b:12:17:6d:11:a2:79:1a: f6:7b:35:85:b3:76:9f:ff:8d:55:87:e8:e9:45:12: 65:29:e6:c7:05:c5:c7:a5:8d:ec:6e:c9:0e:1a:66: 85:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:58:E4:3B:8A:04:3C:7D:C1:CE:9B:E8:D3:1B:54:07:E2:29:F6:BF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3533c782-4a8e-4b05-b23e-e3741e9fb02c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.186.0/24 Signature Algorithm: sha256WithRSAEncryption aa:21:5d:e0:3e:c6:19:8f:7e:c5:17:b3:91:d7:d1:c6:69:59: b7:0a:37:b6:d0:58:9b:7a:23:bf:7c:af:d3:64:71:04:79:8c: 4e:35:05:de:ea:89:c6:63:e7:1b:86:09:53:9e:87:eb:a5:2e: 99:92:3a:1c:e4:11:f0:da:c8:b7:c9:aa:47:fd:4e:3f:26:8d: cd:3a:b4:df:74:a3:d5:22:3a:f8:c3:3f:4e:33:38:dc:d4:d8: 9a:20:3d:af:82:ed:28:bd:2e:db:ac:01:c1:05:5f:e0:ac:cd: 94:7f:90:61:d7:6a:2c:4d:9a:0b:3b:b0:d1:7a:93:c7:61:68: 12:b0:25:d5:8f:68:21:6b:cd:61:9f:7e:00:8b:fb:db:86:7f: a3:a5:03:b7:fe:b5:bf:4a:52:a2:09:0e:10:a7:96:ed:0f:4a: 08:b6:d7:4e:c2:2b:95:e3:fc:2d:73:5f:db:24:a9:77:70:f2: d0:f5:53:eb:7f:c4:49:94:57:4c:af:81:2d:2b:7b:c8:61:cb: 15:91:9f:2d:56:21:c7:00:17:9c:0e:cd:9f:35:33:f8:43:a2: e4:f8:76:78:bb:06:61:14:ec:ae:f4:dd:cb:92:2b:97:fc:41: d8:6c:4c:d0:8c:1b:8b:23:7e:8f:fd:ed:58:be:d8:c0:40:d3: f5:08:bc:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTjvPIG0zKB3XZKhA7hMzOi41hfYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDQ1YjMwNDMyN2NhYTZmMjc0NDBlZjViZTZlNDMzNWI2 MWIwYWUwNDI5ZDQwNDM1NTg5ZWU0M2M4YWJlYWI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+LPArjt3FxVdXardXwKfSP+QP1gtwhiklhQh1h2r8GAba gySXLQrVlenwjK81bAeHN83FC0YiNJrnlu2qdldem6VeK9NjOul8wF1QSOpCXYdx xgJbBsZve66DVlrchNU/bLrkislC6f/lfF7xTx2JIiKjwdpqqD8i8M2S4PFjiivK 9b+1g+HtFI2K4DCsEwfCxA469RkmUAEputvEiNM7H5qG8XDWQj+wyC1Mqd9we5C0 BkHfiSR4vA3gxYNKxGh9VUCxK4lOjaRC48MmVNlQa7o/Kv3aUZsbEhdtEaJ5GvZ7 NYWzdp//jVWH6OlFEmUp5scFxceljexuyQ4aZoWrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtljkO4oEPH3Bzpvo0xtUB+Ip9r8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM1MzNjNzgyLTRhOGUtNGIwNS1iMjNlLWUzNzQxZTlmYjAyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTbowDQYJKoZIhvcNAQELBQADggEBAKohXeA+xhmPfsUXs5HX0cZpWbcK N7bQWJt6I798r9NkcQR5jE41Bd7qicZj5xuGCVOeh+ulLpmSOhzkEfDayLfJqkf9 Tj8mjc06tN90o9UiOvjDP04zONzU2JogPa+C7Si9LtusAcEFX+CszZR/kGHXaixN mgs7sNF6k8dhaBKwJdWPaCFrzWGffgCL+9uGf6OlA7f+tb9KUqIJDhCnlu0PSgi2 107CK5Xj/C1zX9skqXdw8tD1U+t/xEmUV0yvgS0re8hhyxWRny1WIccAF5wOzZ81 M/hDouT4dni7BmEU7K703cuSK5f8QdhsTNCMG4sjfo/97Vi+2MBA0/UIvH0= -----END CERTIFICATE-----Generated at Fri Sep 22 17:21:13 2023 by rpki-client on console-ams.rpki-client.org