$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3640f0f1-af1d-4f23-8fb0-4e5ae3084de4.roa File: 3640f0f1-af1d-4f23-8fb0-4e5ae3084de4.roa (raw, json) Hash identifier: Y9ZUU277WLpVSG+PZnclWNv5A3zPXDwRXJCubyXPUL4= Subject key identifier: 33:88:E7:B2:E7:B9:EF:3E:1E:7A:50:19:16:D9:D8:9D:7E:C1:28:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 63D7817E6C81FB1FB3BCEF277AE542C6F2B32758 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3640f0f1-af1d-4f23-8fb0-4e5ae3084de4.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f60:4000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d7:81:7e:6c:81:fb:1f:b3:bc:ef:27:7a:e5:42:c6:f2:b3:27:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=81b781d37148dca351c513bcf02b59074bc058719dd5e404eac2ef8da2674229, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ba:12:d5:2c:d0:1b:2b:22:7b:4a:79:dd:49: 3f:05:f4:26:4b:dc:96:86:98:e5:cf:df:43:c3:ec: 71:68:4a:48:01:1c:5b:9b:25:e8:04:1a:08:f5:86: ba:97:c7:47:2c:f9:c8:20:03:ab:bb:85:d7:a3:00: db:ef:98:0c:6d:a8:d0:7d:61:55:40:b1:d8:59:2d: 84:e4:cd:84:f9:09:f0:91:e1:69:8c:8d:0b:35:d2: c1:ef:7e:8a:03:37:fd:f7:4b:db:51:8e:ba:99:b3: db:bb:5a:36:a7:93:4c:98:2b:67:31:9b:48:2e:5e: ed:3a:ec:a7:65:47:0f:c2:40:c2:b2:58:eb:2d:08: c3:9d:6d:16:40:aa:8b:c7:fe:95:d4:34:c3:8e:95: 9b:4f:f2:49:e7:84:c1:64:09:2c:73:a3:1d:55:7f: f9:cc:9f:9f:4c:c8:7a:ac:bb:5f:11:6b:d8:f8:9b: a5:f8:29:47:7d:c4:e2:18:e5:32:b8:18:be:4a:a4: f9:45:29:f1:d4:3c:83:bf:00:15:75:39:d4:79:c7: fd:29:40:97:a0:81:6f:d0:51:94:17:8a:7a:38:a1: 39:a1:03:72:0e:59:62:be:35:53:86:e5:38:c2:07: db:e9:78:99:fc:d6:48:8c:79:1b:a0:85:e5:25:a9: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:88:E7:B2:E7:B9:EF:3E:1E:7A:50:19:16:D9:D8:9D:7E:C1:28:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3640f0f1-af1d-4f23-8fb0-4e5ae3084de4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f60:4000::/39 Signature Algorithm: sha256WithRSAEncryption 32:0a:90:e7:9c:5d:5a:69:33:4d:e7:5f:71:62:44:b7:a1:27: af:2d:36:67:8d:a2:6f:90:5b:64:a5:cc:a1:f3:e2:e4:d3:d9: 6b:09:7a:45:98:8e:f8:2e:7c:cc:0e:74:4c:c4:a4:eb:54:73: e2:3f:0f:0e:94:0e:3f:73:4a:f0:68:4a:1d:1c:0c:ed:ef:b0: cd:bd:9b:27:c2:ff:73:ce:06:00:10:0a:19:fa:ac:cd:ba:dc: 0b:aa:2b:de:1a:ea:57:87:80:f8:d0:43:e0:f1:76:d5:9c:9c: 6a:a7:7d:10:10:b2:88:ac:03:3f:1b:04:98:61:87:65:da:8b: 81:4c:ef:0d:bb:62:25:98:ef:5c:11:b2:b5:a0:f5:8b:fa:ca: 26:8d:dc:0d:4f:be:98:b0:7e:5e:b7:9b:33:31:6f:f0:51:40: fa:b7:a3:91:90:32:ad:b3:fb:f0:bc:7a:14:92:89:05:8f:7a: a4:df:ab:82:c0:3a:20:5e:52:31:0e:7e:fc:d9:f8:26:b5:fa: eb:68:1c:ce:43:b7:ae:a7:56:70:83:b4:bc:25:6b:cc:2b:4b: 08:b6:d8:d2:c7:72:5e:b5:42:b4:d4:40:cb:f3:56:d5:6e:1f: 61:4f:09:cd:10:35:ff:a6:09:6e:80:2c:da:3f:20:80:37:b6: d5:99:e6:ee -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUY9eBfmyB+x+zvO8neuVCxvKzJ1gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MWI3ODFkMzcxNDhkY2EzNTFjNTEzYmNmMDJiNTkwNzRi YzA1ODcxOWRkNWU0MDRlYWMyZWY4ZGEyNjc0MjI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCauhLVLNAbKyJ7SnndST8F9CZL3JaGmOXP30PD7HFoSkgB HFubJegEGgj1hrqXx0cs+cggA6u7hdejANvvmAxtqNB9YVVAsdhZLYTkzYT5CfCR 4WmMjQs10sHvfooDN/33S9tRjrqZs9u7Wjank0yYK2cxm0guXu067KdlRw/CQMKy WOstCMOdbRZAqovH/pXUNMOOlZtP8knnhMFkCSxzox1Vf/nMn59MyHqsu18Ra9j4 m6X4KUd9xOIY5TK4GL5KpPlFKfHUPIO/ABV1OdR5x/0pQJeggW/QUZQXino4oTmh A3IOWWK+NVOG5TjCB9vpeJn81kiMeRugheUlqb89AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUM4jnsue57z4eelAZFtnYnX7BKIIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM2NDBmMGYxLWFmMWQtNGYyMy04ZmIwLTRlNWFlMzA4NGRlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB9gQDANBgkqhkiG9w0BAQsFAAOCAQEAMgqQ55xdWmkzTedfcWJEt6En ry02Z42ib5BbZKXMofPi5NPZawl6RZiO+C58zA50TMSk61Rz4j8PDpQOP3NK8GhK HRwM7e+wzb2bJ8L/c84GABAKGfqszbrcC6or3hrqV4eA+NBD4PF21Zycaqd9EBCy iKwDPxsEmGGHZdqLgUzvDbtiJZjvXBGytaD1i/rKJo3cDU++mLB+XrebMzFv8FFA +rejkZAyrbP78Lx6FJKJBY96pN+rgsA6IF5SMQ5+/Nn4JrX662gczkO3rqdWcIO0 vCVrzCtLCLbY0sdyXrVCtNRAy/NW1W4fYU8JzRA1/6YJboAs2j8ggDe21Znm7g== -----END CERTIFICATE-----Generated at Sat Sep 23 00:18:53 2023 by rpki-client on console-fra.rpki-client.org