$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3bcfc7c5-30f5-4636-8288-dbfd6d6b024c.roa File: 3bcfc7c5-30f5-4636-8288-dbfd6d6b024c.roa (raw, json) Hash identifier: iYG3h5GWlH2IQPr7TZWr/pa2xoOjOzBI7XTrlC8CapU= Subject key identifier: 2B:53:B8:71:0E:57:B0:E4:11:13:A6:C1:14:17:65:71:2F:C4:5E:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2DD458755DBA7E8A8BD9AE0B81B9A589455106E4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3bcfc7c5-30f5-4636-8288-dbfd6d6b024c.roa Signing time: Mon 28 Aug 2023 00:00:00 +0000 ROA not before: Mon 28 Aug 2023 00:00:00 +0000 ROA not after: Mon 02 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 216.39.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Aug 2023 09:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d4:58:75:5d:ba:7e:8a:8b:d9:ae:0b:81:b9:a5:89:45:51:06:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 28 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2023 GMT Subject: serialNumber=b70d133e1d316c6ac5c94b212f17596991494434cb24fb08733265acc2e93840, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2a:e9:a8:cf:6d:bf:a9:e0:e6:63:2a:db:41: 03:9f:e4:fb:9c:0d:03:86:00:4e:b7:65:ae:88:9b: 52:38:ca:61:69:4a:6c:28:f1:94:22:d9:10:2f:c5: 9c:01:74:7d:8e:3d:bc:05:70:e4:17:e5:db:43:89: e4:71:c1:b7:c6:93:75:ab:f7:ef:f2:cd:9e:47:81: 90:ff:19:c5:ec:5d:dd:3d:89:44:f6:fc:92:ff:60: 21:a0:a8:7c:3e:99:8f:7a:fa:9a:54:19:b1:b4:34: 83:53:04:c3:0e:94:d8:5a:bc:ce:b9:50:e0:2c:45: 81:83:dd:a3:5c:fd:3f:ca:b4:8b:f7:5f:7f:96:80: 5b:db:6c:29:d1:4f:32:46:82:b6:f0:e0:61:32:5d: ff:3d:09:a2:e5:2a:f3:12:b0:9d:da:bc:0d:97:8f: 6d:b9:39:aa:c0:ec:d4:4c:3c:b1:e4:9e:24:24:b0: 36:ba:be:b8:55:74:eb:00:c2:e0:57:5e:e9:cb:da: cb:49:0a:ee:2b:80:38:15:e1:a8:f6:11:44:64:11: fa:ee:54:8f:09:09:4c:59:e9:cf:f2:d4:09:82:7d: c5:d6:57:9b:26:a5:5b:d5:78:44:42:a0:b3:59:f0: 3b:d4:a2:1e:60:31:05:93:3e:01:1c:ed:c0:27:ef: 5c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:53:B8:71:0E:57:B0:E4:11:13:A6:C1:14:17:65:71:2F:C4:5E:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3bcfc7c5-30f5-4636-8288-dbfd6d6b024c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.39.152.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:7d:0a:d7:4f:1c:c8:29:35:21:b0:18:67:03:d5:b6:d6:fb: a7:25:1d:a5:3a:36:a5:29:b1:8b:40:63:99:cc:d2:99:7b:24: 3a:af:31:f6:7f:00:7c:6e:17:b6:43:27:03:57:21:4b:a8:2a: 3d:79:8b:bc:27:fe:ea:84:b7:a5:be:92:71:88:b2:c1:c2:1a: 49:32:57:41:85:14:08:ba:da:d0:c5:6d:bc:4a:68:8d:e9:b4: 9c:4f:d9:c3:bb:0a:02:44:57:14:96:59:6d:c1:c1:50:09:f2: ba:9f:77:de:ba:3b:fa:85:1e:3d:0e:92:ea:61:e0:f6:c9:44: 58:ee:1c:be:88:4e:6f:15:d4:30:64:bc:88:24:1b:ce:de:32: f2:11:d3:24:0c:67:67:df:c9:11:8f:37:0a:30:75:66:a9:62: fb:86:72:6a:61:d2:e4:b0:6c:cb:5a:77:b6:21:c0:7b:72:18: a1:16:dd:8c:a8:e2:c1:1b:2e:9b:e7:88:1b:71:9c:31:93:d5: 53:20:7a:45:8c:f7:e3:90:6d:09:de:a3:4b:15:59:56:de:a5: ee:b5:e6:70:3a:32:24:60:3a:80:91:e9:8d:9f:4d:3a:97:db: 75:2c:46:eb:1e:e8:f4:f9:01:80:ae:a4:56:ea:a9:2d:c3:51: c1:87:99:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULdRYdV26foqL2a4LgbmliUVRBuQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzBkMTMzZTFkMzE2YzZhYzVjOTRiMjEyZjE3NTk2OTkx NDk0NDM0Y2IyNGZiMDg3MzMyNjVhY2MyZTkzODQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrKumoz22/qeDmYyrbQQOf5PucDQOGAE63Za6Im1I4ymFp Smwo8ZQi2RAvxZwBdH2OPbwFcOQX5dtDieRxwbfGk3Wr9+/yzZ5HgZD/GcXsXd09 iUT2/JL/YCGgqHw+mY96+ppUGbG0NINTBMMOlNhavM65UOAsRYGD3aNc/T/KtIv3 X3+WgFvbbCnRTzJGgrbw4GEyXf89CaLlKvMSsJ3avA2Xj225OarA7NRMPLHkniQk sDa6vrhVdOsAwuBXXunL2stJCu4rgDgV4aj2EURkEfruVI8JCUxZ6c/y1AmCfcXW V5smpVvVeERCoLNZ8DvUoh5gMQWTPgEc7cAn71yHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUK1O4cQ5XsOQRE6bBFBdlcS/EXl4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiY2ZjN2M1LTMwZjUtNDYzNi04Mjg4LWRiZmQ2ZDZiMDI0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPYJ5gwDQYJKoZIhvcNAQELBQADggEBAB59CtdPHMgpNSGwGGcD1bbW+6cl HaU6NqUpsYtAY5nM0pl7JDqvMfZ/AHxuF7ZDJwNXIUuoKj15i7wn/uqEt6W+knGI ssHCGkkyV0GFFAi62tDFbbxKaI3ptJxP2cO7CgJEVxSWWW3BwVAJ8rqfd966O/qF Hj0Okuph4PbJRFjuHL6ITm8V1DBkvIgkG87eMvIR0yQMZ2ffyRGPNwowdWapYvuG cmph0uSwbMtad7YhwHtyGKEW3Yyo4sEbLpvniBtxnDGT1VMgekWM9+OQbQneo0sV WVbepe615nA6MiRgOoCR6Y2fTTqX23UsRuse6PT5AYCupFbqqS3DUcGHmQI= -----END CERTIFICATE-----Generated at Mon Aug 28 21:31:53 2023 by rpki-client on console-fra.rpki-client.org