$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aec067d-d861-49fc-af71-b63181af6267.roa File: 3aec067d-d861-49fc-af71-b63181af6267.roa (raw, json) Hash identifier: zG1wWJ9jEdwefiTMt6r79catWLX1cZ+OzIYn3N0WcTw= Subject key identifier: B0:CF:E7:A9:D4:78:B6:6E:F8:F9:B8:93:E1:E2:49:CC:7D:23:D0:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11E247E046B8186DEE8038724DE919766ABD18CC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aec067d-d861-49fc-af71-b63181af6267.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f68:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e2:47:e0:46:b8:18:6d:ee:80:38:72:4d:e9:19:76:6a:bd:18:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=37fc57b34917f948b16a314304d6dc5e9ff076198c424f30a0601a0a6c76c3ee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dc:9a:12:d7:1d:f5:c9:56:f8:96:dc:30:e6: ff:55:91:85:c0:32:25:44:90:2c:8a:b7:e8:4b:e7: 76:11:e7:12:c3:21:e5:ac:34:65:65:f7:81:24:00: 4d:da:f4:d4:62:0c:f8:42:40:57:76:c1:23:49:9f: 50:10:5c:87:5b:55:5f:9d:e8:f0:3d:2e:cb:e0:70: 93:90:06:1c:6f:f2:84:11:e4:2e:18:98:f0:24:c0: ad:ca:a7:b5:30:85:b8:5e:60:29:5a:0f:bc:be:b8: 31:45:22:41:d3:36:e9:96:fe:dd:28:53:00:3a:09: 1a:63:6b:35:39:d9:f2:e3:cf:4d:38:7c:a3:e6:e3: 04:fd:97:e1:39:66:ac:3e:bc:64:59:f8:a5:24:81: fb:5d:7b:47:53:8c:cf:f0:36:99:89:8b:16:7b:53: 9a:f7:39:8b:74:53:01:51:0e:1a:52:55:c2:f1:a1: b0:d9:ba:cd:0a:bc:dd:17:2f:d7:38:6d:91:9b:ea: ae:e4:bb:08:36:d8:af:23:2c:36:21:22:31:35:4d: f6:9e:50:39:9f:9d:1f:48:fa:54:50:fb:9d:94:ca: 99:34:c4:14:59:08:56:dd:d6:bb:45:fc:33:55:e9: 61:a9:e8:bc:b5:75:9c:13:9f:9e:0a:2d:14:eb:29: cd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CF:E7:A9:D4:78:B6:6E:F8:F9:B8:93:E1:E2:49:CC:7D:23:D0:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aec067d-d861-49fc-af71-b63181af6267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:1000::/40 Signature Algorithm: sha256WithRSAEncryption c4:54:ff:32:a3:07:b5:59:18:f5:fe:ce:2d:78:69:49:c9:c7: 71:2e:4b:8d:5f:65:ed:48:e6:a7:88:df:f9:9d:a1:ce:42:08: c8:f7:e4:ed:98:53:67:20:9d:c7:bc:41:16:e4:0c:e6:30:23: 80:ed:02:58:88:9f:a8:69:b7:52:ac:5b:3e:d9:82:5d:90:81: 57:07:a4:f9:1b:0a:3f:57:10:a6:da:8d:18:2b:fb:0d:74:c5: 69:2e:c1:ec:f7:7b:fa:2f:fc:1f:ef:9d:d8:b9:29:b2:46:41: eb:f4:7c:59:de:59:14:50:4e:4d:bd:3f:6b:72:2d:22:b8:49: 4b:2a:54:e2:7c:63:77:78:37:7b:01:f7:3b:45:5b:e7:5e:18: 1b:f9:76:56:e5:50:70:5c:45:ce:91:77:a6:4c:21:d3:58:f6: e5:c9:c7:31:1b:4c:fa:bd:df:0f:4f:3b:dc:d7:04:5d:26:e4: 5f:d6:48:fe:2d:fd:f1:6a:47:fc:01:b3:e8:14:8e:6e:7c:8e: 05:c8:91:52:d7:e7:f7:38:da:3b:ae:e7:c0:cb:e1:58:28:b7: a8:92:14:a0:45:9f:5d:b7:b2:ea:52:b2:fe:17:6b:80:fd:7a: c3:39:01:e6:0e:7d:83:f9:e4:cf:f5:c5:ad:f3:51:7f:72:a0: 7d:df:c0:d3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEeJH4Ea4GG3ugDhyTekZdmq9GMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzN2ZjNTdiMzQ5MTdmOTQ4YjE2YTMxNDMwNGQ2ZGM1ZTlm ZjA3NjE5OGM0MjRmMzBhMDYwMWEwYTZjNzZjM2VlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQ3JoS1x31yVb4ltww5v9VkYXAMiVEkCyKt+hL53YR5xLD IeWsNGVl94EkAE3a9NRiDPhCQFd2wSNJn1AQXIdbVV+d6PA9LsvgcJOQBhxv8oQR 5C4YmPAkwK3Kp7UwhbheYClaD7y+uDFFIkHTNumW/t0oUwA6CRpjazU52fLjz004 fKPm4wT9l+E5Zqw+vGRZ+KUkgftde0dTjM/wNpmJixZ7U5r3OYt0UwFRDhpSVcLx obDZus0KvN0XL9c4bZGb6q7kuwg22K8jLDYhIjE1TfaeUDmfnR9I+lRQ+52Uypk0 xBRZCFbd1rtF/DNV6WGp6Ly1dZwTn54KLRTrKc1PAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUsM/nqdR4tm74+biT4eJJzH0j0G0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhZWMwNjdkLWQ4NjEtNDlmYy1hZjcxLWI2MzE4MWFmNjI2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9oEDANBgkqhkiG9w0BAQsFAAOCAQEAxFT/MqMHtVkY9f7OLXhpScnH cS5LjV9l7Ujmp4jf+Z2hzkIIyPfk7ZhTZyCdx7xBFuQM5jAjgO0CWIifqGm3Uqxb PtmCXZCBVwek+RsKP1cQptqNGCv7DXTFaS7B7Pd7+i/8H++d2LkpskZB6/R8Wd5Z FFBOTb0/a3ItIrhJSypU4nxjd3g3ewH3O0Vb514YG/l2VuVQcFxFzpF3pkwh01j2 5cnHMRtM+r3fD0873NcEXSbkX9ZI/i398WpH/AGz6BSObnyOBciRUtfn9zjaO67n wMvhWCi3qJIUoEWfXbey6lKy/hdrgP16wzkB5g59g/nkz/XFrfNRf3Kgfd/A0w== -----END CERTIFICATE-----Generated at Fri Sep 22 16:18:48 2023 by rpki-client on console-ams.rpki-client.org