$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e67bb1-41b8-4b01-a081-a5673b59c73d.roa File: 38e67bb1-41b8-4b01-a081-a5673b59c73d.roa (raw, json) Hash identifier: fSay983h78xm9smTkFcaUFSh4MsHevBoFkytd5/jTcY= Subject key identifier: 90:05:38:BD:0A:2A:2E:AB:C3:97:45:C0:27:6B:CA:75:6E:01:95:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7A418FAAB97D05C931CA1216FDABDFC551885C4F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e67bb1-41b8-4b01-a081-a5673b59c73d.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 104.153.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:41:8f:aa:b9:7d:05:c9:31:ca:12:16:fd:ab:df:c5:51:88:5c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=fe282eaba1680380f23b6819fed5985a4e9d5897d8d5c2f3ac1299b4142137aa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c5:75:de:0c:23:5a:88:40:f8:59:e2:b4:bd: 5e:c5:54:e8:96:df:61:94:3a:55:2e:c5:51:60:f9: 31:a7:e3:37:4c:14:33:bc:1b:d7:1c:9f:77:6f:03: 5e:13:57:59:90:fc:c9:7a:a6:5d:c3:71:a7:08:e8: 01:5c:c4:50:07:a5:2c:ac:bd:ff:b7:d6:1c:a2:00: d1:39:8e:6d:a0:2f:5a:b9:4b:65:57:57:b6:ac:f5: aa:32:b5:d9:fe:53:ed:ba:3f:f3:aa:af:7f:84:32: ea:f6:c9:b5:ec:f7:11:c3:44:1c:ec:7a:46:e8:73: f2:9b:80:55:7f:ea:aa:a1:ff:6e:cc:ce:5e:72:74: cf:6f:4a:1b:34:99:19:5f:14:66:31:cb:d6:22:b7: 0a:9c:a4:dc:34:aa:25:ed:f9:6a:e1:fd:32:0a:38: 8e:88:3d:d6:06:ad:69:61:b3:e4:f3:49:8e:b4:85: 67:89:29:0a:75:c6:58:84:f7:e7:b2:71:7a:13:3b: 09:83:c8:13:5b:71:eb:64:f1:81:e2:6f:f2:1c:b1: 9a:cb:73:a0:34:b3:28:30:b2:91:80:a7:c5:37:de: 24:6a:c0:32:79:ca:a3:6d:25:58:8d:a9:9d:8e:b1: f5:6b:a9:15:ac:42:07:b9:24:70:a4:17:0f:6c:c5: 7c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:38:BD:0A:2A:2E:AB:C3:97:45:C0:27:6B:CA:75:6E:01:95:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e67bb1-41b8-4b01-a081-a5673b59c73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.153.114.0/24 Signature Algorithm: sha256WithRSAEncryption 85:d1:d7:91:d2:f0:5d:4e:93:1d:e2:84:24:0d:fb:0e:b9:a7: 70:8f:99:8f:e7:b7:7c:a7:b1:f6:cb:e0:d3:ac:de:ef:23:3e: cf:85:be:ce:0c:12:9d:d7:9c:ae:bc:03:bc:d7:f6:57:e7:9c: 73:f7:00:8d:31:77:cf:a1:32:48:13:e7:18:97:cd:92:e0:8e: 47:16:3c:37:bd:61:70:6e:47:13:84:de:ac:14:c8:db:5d:76: 9b:45:d3:b5:6d:c9:ff:74:6a:54:f7:8a:c7:8b:49:03:17:10: ac:9e:a3:25:49:16:6a:75:d7:d4:f4:d8:b7:ee:59:4f:36:e7: 74:83:bf:4a:44:8d:9d:48:48:92:a2:57:23:0c:19:a8:c9:79: 12:dc:50:98:39:3c:b5:e8:20:35:4e:84:ba:c9:78:0d:e6:0b: 16:d6:52:d6:73:34:5b:0d:09:15:ef:23:18:0f:7b:da:26:e3: c4:1b:d6:9b:ef:64:10:ab:88:48:f0:f4:72:7b:8c:81:ac:dd: eb:f2:a0:7f:d1:18:7c:7c:77:92:1e:62:a8:fe:46:f7:cd:3d: 0d:4f:ae:e6:63:f1:af:f2:a0:51:e9:cc:96:26:39:61:97:3d: f6:6d:40:db:03:4e:ee:6e:44:4e:8b:e4:f0:2e:1e:9a:69:ef: 32:e7:12:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUekGPqrl9BckxyhIW/avfxVGIXE8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTI4MmVhYmExNjgwMzgwZjIzYjY4MTlmZWQ1OTg1YTRl OWQ1ODk3ZDhkNWMyZjNhYzEyOTliNDE0MjEzN2FhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrxXXeDCNaiED4WeK0vV7FVOiW32GUOlUuxVFg+TGn4zdM FDO8G9ccn3dvA14TV1mQ/Ml6pl3DcacI6AFcxFAHpSysvf+31hyiANE5jm2gL1q5 S2VXV7as9aoytdn+U+26P/Oqr3+EMur2ybXs9xHDRBzsekboc/KbgFV/6qqh/27M zl5ydM9vShs0mRlfFGYxy9YitwqcpNw0qiXt+Wrh/TIKOI6IPdYGrWlhs+TzSY60 hWeJKQp1xliE9+eycXoTOwmDyBNbcetk8YHib/IcsZrLc6A0sygwspGAp8U33iRq wDJ5yqNtJViNqZ2OsfVrqRWsQge5JHCkFw9sxXxDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkAU4vQoqLqvDl0XAJ2vKdW4BlakwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4ZTY3YmIxLTQxYjgtNGIwMS1hMDgxLWE1NjczYjU5YzczZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABomXIwDQYJKoZIhvcNAQELBQADggEBAIXR15HS8F1Okx3ihCQN+w65p3CP mY/nt3ynsfbL4NOs3u8jPs+Fvs4MEp3XnK68A7zX9lfnnHP3AI0xd8+hMkgT5xiX zZLgjkcWPDe9YXBuRxOE3qwUyNtddptF07Vtyf90alT3iseLSQMXEKyeoyVJFmp1 19T02LfuWU8253SDv0pEjZ1ISJKiVyMMGajJeRLcUJg5PLXoIDVOhLrJeA3mCxbW UtZzNFsNCRXvIxgPe9om48Qb1pvvZBCriEjw9HJ7jIGs3evyoH/RGHx8d5IeYqj+ RvfNPQ1PruZj8a/yoFHpzJYmOWGXPfZtQNsDTu5uRE6L5PAuHppp7zLnErI= -----END CERTIFICATE-----Generated at Sat Sep 23 00:38:44 2023 by rpki-client on console-ams.rpki-client.org