$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ed817bc-fe34-41fd-b5d4-b7805ecd2d73.roa File: 3ed817bc-fe34-41fd-b5d4-b7805ecd2d73.roa (raw, json) Hash identifier: dX2b6doIU6pKfa0hYTMDDnnb4H5QE2KhQwCFffA2INw= Subject key identifier: 4F:B8:54:7F:31:07:14:D0:45:55:0D:75:FB:67:0B:98:B8:98:51:7F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 69684E0797AD6928A4ED8450D05FED8C9564A318 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ed817bc-fe34-41fd-b5d4-b7805ecd2d73.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:68:4e:07:97:ad:69:28:a4:ed:84:50:d0:5f:ed:8c:95:64:a3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=f4cb63a303861083dc6d5388c955435eb400cdfc2681b62f51e71a82a0db7e1e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:88:97:07:d7:c2:bf:88:6e:3e:ba:02:b3: fa:3d:e5:02:ab:a9:e5:ba:fc:2e:42:38:21:83:7f: 6d:4e:9c:8c:cc:9c:47:d1:4d:49:d4:d9:2b:4a:4b: 87:0d:32:e5:f5:4d:89:c1:99:65:f1:6f:96:8d:a0: 04:60:b9:d7:dc:79:6c:43:2d:7e:13:2a:f1:2d:32: 67:a3:83:80:93:fe:fe:9e:ca:ac:eb:70:06:39:54: 15:26:95:3e:94:bf:8f:28:db:82:bb:7f:37:b9:1f: 48:c6:73:8a:e5:68:31:3e:90:05:9b:46:f5:bc:9a: fb:44:66:fe:60:fe:77:ac:21:61:bb:d8:4d:25:54: 18:1d:07:1e:40:12:52:a4:d6:d1:a9:bc:ec:65:c5: c8:3e:a2:41:b5:cc:bb:ff:72:33:1a:60:d2:4e:36: a2:02:2c:54:38:58:fc:81:90:e7:63:39:99:d6:a5: 91:0b:9a:1e:b8:ad:17:a9:28:a6:aa:50:ce:94:0c: 3b:9c:75:c0:85:77:71:5b:24:50:18:72:c9:c2:6a: 61:70:db:9f:d6:21:da:a6:e9:97:44:81:b3:aa:35: 45:ca:b8:5a:ce:4e:c4:b7:20:40:47:53:c2:d5:89: e1:2d:e1:fe:a6:ea:af:7a:e5:26:95:f1:9c:34:8a: a6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B8:54:7F:31:07:14:D0:45:55:0D:75:FB:67:0B:98:B8:98:51:7F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ed817bc-fe34-41fd-b5d4-b7805ecd2d73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.70.0/24 Signature Algorithm: sha256WithRSAEncryption c2:df:f1:b5:a9:78:bf:12:06:16:b3:7c:81:74:5e:ed:2b:b3: e4:22:31:d3:18:96:22:ec:b6:2f:75:05:8f:4c:f5:9f:a5:ab: 86:a6:ef:2f:fc:db:6f:b3:68:0d:92:d0:16:32:2e:b2:7d:49: 3a:47:9c:10:f6:95:1e:93:04:ad:bd:5b:24:43:d7:c4:02:b2: 44:69:7a:f7:f8:5e:fc:17:ed:e3:8f:41:2e:2e:a6:37:85:77: 98:85:b7:ed:cb:27:63:85:4f:64:a5:fa:8c:40:14:0f:90:ff: c4:59:6a:82:e9:2b:5d:10:35:b3:90:53:2b:02:47:e2:96:23: 66:e9:7c:24:9e:2f:51:ce:02:9a:6a:d8:47:5f:9d:24:38:6c: 4c:33:78:b3:ef:fe:2c:f8:fd:4d:aa:4a:83:9f:d2:56:9f:d9: fb:bd:59:56:6e:be:1f:61:cd:00:20:72:8c:75:b5:c6:5a:3c: 3b:78:ff:9d:e5:d8:e5:a9:87:41:41:09:d0:7f:3f:00:00:a1: 57:01:cf:bd:5c:61:fb:cc:18:4a:11:53:45:67:7d:6e:27:c5: c6:4e:02:dd:a0:79:a9:9e:70:81:9b:68:94:44:69:43:55:7d: 7f:af:1f:ea:60:06:6d:4c:33:45:93:cd:24:ca:c7:b9:0d:1e: 9a:c4:f8:13 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaWhOB5etaSik7YRQ0F/tjJVkoxgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNGNiNjNhMzAzODYxMDgzZGM2ZDUzODhjOTU1NDM1ZWI0 MDBjZGZjMjY4MWI2MmY1MWU3MWE4MmEwZGI3ZTFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/0IiXB9fCv4huProCs/o95QKrqeW6/C5COCGDf21OnIzM nEfRTUnU2StKS4cNMuX1TYnBmWXxb5aNoARgudfceWxDLX4TKvEtMmejg4CT/v6e yqzrcAY5VBUmlT6Uv48o24K7fze5H0jGc4rlaDE+kAWbRvW8mvtEZv5g/nesIWG7 2E0lVBgdBx5AElKk1tGpvOxlxcg+okG1zLv/cjMaYNJONqICLFQ4WPyBkOdjOZnW pZELmh64rRepKKaqUM6UDDucdcCFd3FbJFAYcsnCamFw25/WIdqm6ZdEgbOqNUXK uFrOTsS3IEBHU8LVieEt4f6m6q965SaV8Zw0iqbRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUT7hUfzEHFNBFVQ11+2cLmLiYUX8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlZDgxN2JjLWZlMzQtNDFmZC1iNWQ0LWI3ODA1ZWNkMmQ3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EYwDQYJKoZIhvcNAQELBQADggEBAMLf8bWpeL8SBhazfIF0Xu0rs+Qi MdMYliLsti91BY9M9Z+lq4am7y/822+zaA2S0BYyLrJ9STpHnBD2lR6TBK29WyRD 18QCskRpevf4XvwX7eOPQS4upjeFd5iFt+3LJ2OFT2Sl+oxAFA+Q/8RZaoLpK10Q NbOQUysCR+KWI2bpfCSeL1HOAppq2EdfnSQ4bEwzeLPv/iz4/U2qSoOf0laf2fu9 WVZuvh9hzQAgcox1tcZaPDt4/53l2OWph0FBCdB/PwAAoVcBz71cYfvMGEoRU0Vn fW4nxcZOAt2geamecIGbaJREaUNVfX+vH+pgBm1MM0WTzSTKx7kNHprE+BM= -----END CERTIFICATE-----Generated at Fri Sep 22 17:51:33 2023 by rpki-client on console-ams.rpki-client.org