$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa File: 3b6f98f3-b828-4069-9b64-8122ea365d59.roa (raw, json) Hash identifier: /bkGSfn99iTKQOR9GYkaNEEW5jUaJAaOjGi/r1glNW0= Subject key identifier: 5B:69:B1:65:15:70:C4:82:48:85:20:81:8B:20:BB:99:A0:25:4D:A1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 23F11CDD7E6D88F0E6EE64F271EABC48A26A9616 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f1:1c:dd:7e:6d:88:f0:e6:ee:64:f2:71:ea:bc:48:a2:6a:96:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=faed87e42422c062571e6f43c95720e8d00ff2115b8ffdd923364808f4add0de, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:5c:c0:87:d2:1a:7b:b2:14:72:2f:59:4a: 2b:e7:73:68:b3:17:7f:46:87:be:f2:5b:32:f8:5e: a8:6c:40:95:df:54:f1:0c:8c:43:fe:a8:03:b3:27: d4:1d:b5:b6:41:ce:f6:b5:82:f5:77:80:6a:b9:24: ab:57:73:17:fa:47:a6:6b:e4:b7:f8:f3:7e:89:8b: 12:aa:5b:de:77:07:f2:ad:4d:60:fb:cf:19:99:bc: 70:cc:6f:52:a5:bc:4d:8c:d7:c4:92:52:db:9e:13: bf:26:e2:e2:3d:ee:f3:05:52:c9:fd:77:d1:1f:10: f0:11:55:ee:61:7d:09:05:76:de:46:08:f9:73:e1: be:fb:f5:98:27:e6:ae:5c:57:4e:72:5e:82:fe:9b: a6:08:b5:7e:0b:a8:19:76:64:88:8e:86:cc:1e:f8: 7c:66:c0:37:0a:fc:a7:1f:0b:a3:54:83:e3:ff:18: 50:a3:aa:eb:a4:2c:1c:f6:8b:d8:9b:c2:1f:63:aa: d7:74:6f:1a:54:66:ac:ad:8d:71:5f:4c:1c:75:3e: 02:4b:7a:d2:80:b9:bc:dc:5c:61:8e:10:0f:33:28: af:ee:00:b1:92:4b:e7:fe:9c:5e:a7:54:7f:91:2d: d5:9c:32:00:2d:5b:54:20:a1:93:23:ce:41:6e:85: ed:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:69:B1:65:15:70:C4:82:48:85:20:81:8B:20:BB:99:A0:25:4D:A1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:1000::/40 Signature Algorithm: sha256WithRSAEncryption c6:7e:a2:eb:50:3e:3f:d4:75:2a:75:70:8c:ac:11:f6:15:45: 44:b9:1b:c7:cb:2b:f5:2b:ca:c7:1c:bc:e5:81:5b:05:76:29: 96:84:0d:69:1f:38:96:13:06:ac:5e:35:6a:f5:9c:f8:cf:cf: b3:f6:e1:b6:89:d1:29:a5:3d:9d:1b:4f:48:65:86:c3:9c:0f: 3b:ce:61:06:a2:ca:89:14:03:88:be:eb:03:2f:82:6d:bd:dc: 10:a8:4f:e6:4f:ee:e6:8a:89:7c:93:8c:13:92:74:44:69:74: 8d:a9:49:b5:a4:0c:c3:ef:56:b9:9f:0d:b6:32:03:2d:e6:ee: 1f:dd:6c:8a:da:32:0f:f5:cf:b7:76:ec:c7:30:1f:15:d2:2a: 30:f4:b1:29:ae:f4:5c:a3:c6:99:d7:bb:58:90:98:6c:82:e2: d9:ab:9e:95:8a:c2:18:41:5e:b6:f7:b9:32:aa:a0:79:34:fa: fe:b3:97:a8:94:d3:42:6a:77:1a:a2:25:6f:37:37:a5:ae:fb: 5a:39:a4:dd:6f:a7:83:5f:8b:d7:61:51:9e:ad:72:6d:df:fc: 17:9d:30:d0:8a:dc:da:da:da:64:e6:44:b7:0b:ba:2d:0e:fd: 8d:f9:29:cc:88:62:be:e9:18:24:88:80:ca:dc:ba:da:8d:7e: f6:6c:46:7f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUI/Ec3X5tiPDm7mTyceq8SKJqlhYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYWVkODdlNDI0MjJjMDYyNTcxZTZmNDNjOTU3MjBlOGQw MGZmMjExNWI4ZmZkZDkyMzM2NDgwOGY0YWRkMGRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAeFzAh9Iae7IUci9ZSivnc2izF39Gh77yWzL4XqhsQJXf VPEMjEP+qAOzJ9QdtbZBzva1gvV3gGq5JKtXcxf6R6Zr5Lf4836JixKqW953B/Kt TWD7zxmZvHDMb1KlvE2M18SSUtueE78m4uI97vMFUsn9d9EfEPARVe5hfQkFdt5G CPlz4b779Zgn5q5cV05yXoL+m6YItX4LqBl2ZIiOhswe+HxmwDcK/KcfC6NUg+P/ GFCjquukLBz2i9ibwh9jqtd0bxpUZqytjXFfTBx1PgJLetKAubzcXGGOEA8zKK/u ALGSS+f+nF6nVH+RLdWcMgAtW1QgoZMjzkFuhe3ZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUW2mxZRVwxIJIhSCBiyC7maAlTaEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiNmY5OGYzLWI4MjgtNDA2OS05YjY0LTgxMjJlYTM2NWQ1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+gEDANBgkqhkiG9w0BAQsFAAOCAQEAxn6i61A+P9R1KnVwjKwR9hVF RLkbx8sr9SvKxxy85YFbBXYploQNaR84lhMGrF41avWc+M/Ps/bhtonRKaU9nRtP SGWGw5wPO85hBqLKiRQDiL7rAy+Cbb3cEKhP5k/u5oqJfJOME5J0RGl0jalJtaQM w+9WuZ8NtjIDLebuH91sitoyD/XPt3bsxzAfFdIqMPSxKa70XKPGmde7WJCYbILi 2auelYrCGEFetve5MqqgeTT6/rOXqJTTQmp3GqIlbzc3pa77Wjmk3W+ng1+L12FR nq1ybd/8F50w0Irc2traZOZEtwu6LQ79jfkpzIhivukYJIiAyty62o1+9mxGfw== -----END CERTIFICATE-----Generated at Fri Sep 22 20:36:14 2023 by rpki-client on console-fra.rpki-client.org