$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a5a0eca-be57-4d66-b22c-1868a61ecbf9.roa File: 3a5a0eca-be57-4d66-b22c-1868a61ecbf9.roa (raw, json) Hash identifier: KCjqYLLUGprdGEAm6ydX6uFGu9/n4YBTizA5INae27Y= Subject key identifier: D1:C2:E1:83:21:59:E7:B4:9D:13:14:CF:BC:16:69:FE:E9:90:7D:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3DD1B9C2E9B77403731A30B36D5E6F5A16D126B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a5a0eca-be57-4d66-b22c-1868a61ecbf9.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 12:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d1:b9:c2:e9:b7:74:03:73:1a:30:b3:6d:5e:6f:5a:16:d1:26:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=28707dc10e7581d28a71c32c33b823f5f9fc79d98c1e0f74debbdee039a48c6e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:04:47:48:11:e5:41:69:9d:cc:90:78:05: d5:a8:13:36:9a:a5:83:23:20:66:0b:dc:52:2d:fc: d3:01:67:c6:74:a5:8f:c5:ea:a3:19:19:62:33:fd: 87:d9:77:f8:c1:34:9b:4b:7a:a5:9e:de:8e:c4:6c: e8:62:d6:31:02:9f:38:93:56:e4:88:75:54:12:97: d1:3a:d1:fc:27:a3:76:a9:99:26:c8:09:ac:dd:6e: 1f:ac:e5:07:a8:b8:28:33:89:d6:40:04:0c:a2:22: 2b:2d:7e:8d:39:ea:42:31:35:5f:f6:a9:97:89:20: d4:37:0c:b9:20:e3:4f:1c:c7:43:15:67:3d:b7:cd: eb:16:86:8f:d3:b2:27:e7:b0:53:c2:67:79:a5:33: e1:c3:96:b7:99:2e:64:b0:34:a3:78:0d:0d:f5:40: 2c:fc:b9:34:82:18:d9:a3:74:e2:63:bb:56:77:76: 31:af:2c:ef:c3:67:39:4c:de:4b:d9:e9:ad:c5:2a: c3:43:07:1e:d5:d1:83:ed:86:74:ae:16:b5:7c:a5: 80:11:82:4d:49:0f:fd:7e:60:24:8a:85:cc:c4:42: f7:bc:90:c3:66:59:21:e8:6a:a8:64:af:18:d5:34: 00:55:a0:ed:40:6f:f3:44:1f:c5:b6:cf:85:52:7f: c6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C2:E1:83:21:59:E7:B4:9D:13:14:CF:BC:16:69:FE:E9:90:7D:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a5a0eca-be57-4d66-b22c-1868a61ecbf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.64.0/18 Signature Algorithm: sha256WithRSAEncryption 4b:6d:a3:e5:51:b9:31:1e:02:ec:49:29:d9:5b:52:e0:34:7a: 9a:03:40:73:9a:02:ba:46:22:e8:1c:5b:dc:1d:b8:5a:43:2d: ec:ce:30:29:bc:30:d3:20:a8:df:a0:db:15:a7:63:bb:32:da: 85:a7:dc:fc:33:db:33:b5:90:32:d1:15:4a:cf:3f:95:79:e6: f3:f5:b4:44:f6:40:df:a5:01:3e:ee:70:13:e2:4d:09:77:6c: b3:6e:6f:b5:4a:36:e0:6f:83:19:4c:85:3f:5a:22:32:16:aa: a0:31:b5:28:bd:2d:5f:59:93:32:e1:14:f8:5b:c2:7d:79:1a: 25:7e:bc:76:2e:00:68:d0:b4:26:4a:ea:84:85:9d:0a:86:f1: 8e:c9:42:95:88:04:9d:e1:00:d1:3e:1b:fc:00:46:5b:f4:9c: ad:1a:4e:d9:ed:b9:8f:42:aa:0a:dc:dc:75:2b:36:fb:88:40: 6c:c7:d5:09:09:ba:28:57:37:e5:0e:ab:d4:9e:b5:5d:de:e8: ed:09:1f:d7:8c:2b:f4:40:ff:d3:b0:d6:c8:6e:aa:8b:12:0e: 6a:99:9a:bb:59:b1:86:ec:1d:b9:9a:c8:70:6f:4a:91:f1:42: c1:04:1c:e1:3a:c2:34:14:74:84:e3:4e:24:a6:78:ae:89:dc: 70:9d:1b:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPdG5wum3dANzGjCzbV5vWhbRJrEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyODcwN2RjMTBlNzU4MWQyOGE3MWMzMmMzM2I4MjNmNWY5 ZmM3OWQ5OGMxZTBmNzRkZWJiZGVlMDM5YTQ4YzZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIGwRHSBHlQWmdzJB4BdWoEzaapYMjIGYL3FIt/NMBZ8Z0 pY/F6qMZGWIz/YfZd/jBNJtLeqWe3o7EbOhi1jECnziTVuSIdVQSl9E60fwno3ap mSbICazdbh+s5QeouCgzidZABAyiIistfo056kIxNV/2qZeJINQ3DLkg408cx0MV Zz23zesWho/TsifnsFPCZ3mlM+HDlreZLmSwNKN4DQ31QCz8uTSCGNmjdOJju1Z3 djGvLO/DZzlM3kvZ6a3FKsNDBx7V0YPthnSuFrV8pYARgk1JD/1+YCSKhczEQve8 kMNmWSHoaqhkrxjVNABVoO1Ab/NEH8W2z4VSf8avAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0cLhgyFZ57SdExTPvBZp/umQfQkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhNWEwZWNhLWJlNTctNGQ2Ni1iMjJjLTE4NjhhNjFlY2JmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaIEkAwDQYJKoZIhvcNAQELBQADggEBAEtto+VRuTEeAuxJKdlbUuA0epoD QHOaArpGIugcW9wduFpDLezOMCm8MNMgqN+g2xWnY7sy2oWn3Pwz2zO1kDLRFUrP P5V55vP1tET2QN+lAT7ucBPiTQl3bLNub7VKNuBvgxlMhT9aIjIWqqAxtSi9LV9Z kzLhFPhbwn15GiV+vHYuAGjQtCZK6oSFnQqG8Y7JQpWIBJ3hANE+G/wARlv0nK0a TtntuY9Cqgrc3HUrNvuIQGzH1QkJuihXN+UOq9SetV3e6O0JH9eMK/RA/9Ow1shu qosSDmqZmrtZsYbsHbmayHBvSpHxQsEEHOE6wjQUdITjTiSmeK6J3HCdGwc= -----END CERTIFICATE-----Generated at Fri Sep 22 00:30:06 2023 by rpki-client on console-fra.rpki-client.org