$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42a2bbd2-8c5f-4cb3-a587-1cfd7c28078f.roa File: 42a2bbd2-8c5f-4cb3-a587-1cfd7c28078f.roa (raw, json) Hash identifier: ljbXJLGGwRZN0+jqpLcvVHT8z0nIrWuhhP+LLyelxj4= Subject key identifier: CB:A1:AE:63:ED:86:EA:38:65:94:A3:44:4E:0F:57:C5:C2:E6:77:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 391C3E493428CFDAD9CD8626C2E6282D321225A7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42a2bbd2-8c5f-4cb3-a587-1cfd7c28078f.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 16.117.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:1c:3e:49:34:28:cf:da:d9:cd:86:26:c2:e6:28:2d:32:12:25:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=cd1ee3019e66a17fc6655b7a37c510913a1fdaf20fa957c92542180ac8e8bf34, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:f9:ee:d6:50:68:e9:02:e3:04:74:f6:c4: 93:67:3d:5e:d4:cc:8b:46:37:ee:dd:1b:7a:a1:92: d7:14:21:1d:2a:67:80:9b:99:7a:c0:b1:2e:29:9b: 3a:a3:17:f2:63:ce:a9:ce:5d:2a:21:de:de:58:26: ab:5b:4b:05:0b:0a:53:a7:21:05:87:2b:df:37:18: 18:6f:20:c4:f7:ca:3c:b1:cd:7e:78:6e:0c:e4:72: 18:72:2e:c4:5c:17:f6:e3:c3:0f:09:15:4b:51:1e: 52:74:f6:5a:c7:15:f1:c7:94:6a:e3:9d:76:10:f1: 00:b9:65:c4:94:68:0b:27:dc:66:58:55:59:a0:d0: cf:a5:16:36:4b:bc:cb:35:9f:56:3f:55:08:c9:b8: 25:bf:df:73:a7:33:36:67:f4:80:af:d7:a4:6a:8e: 58:8d:db:73:83:a0:cc:25:11:3b:12:12:76:cb:59: e8:2d:6d:6d:b6:01:e8:23:fc:3d:8e:ad:64:18:67: a4:27:e9:b8:d7:bf:42:34:9c:a6:e9:e6:b0:4d:18: 63:0a:68:c7:32:02:6f:9e:6c:c5:1e:d4:c5:bc:ed: 96:c6:1b:72:8c:bd:b0:e5:44:48:a9:43:18:81:3e: 65:ac:bb:82:12:11:33:03:e9:63:38:4d:5f:2c:35: 6d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A1:AE:63:ED:86:EA:38:65:94:A3:44:4E:0F:57:C5:C2:E6:77:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42a2bbd2-8c5f-4cb3-a587-1cfd7c28078f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.117.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4b:64:1a:26:88:34:2b:27:54:85:94:72:4e:fc:90:bc:b8:75: 58:a6:74:aa:8b:69:07:84:01:54:3e:77:c3:dc:f1:14:21:98: d6:79:8f:ec:27:17:65:5b:8c:2d:11:d1:ad:c8:82:7d:f9:79: 53:60:9c:1d:8b:e5:61:e0:5e:02:39:86:d1:02:6c:17:0a:eb: 9f:b2:98:9a:9d:f1:c1:58:dc:7b:85:f0:2d:16:96:d7:e6:e1: 90:f4:5f:fc:5d:bb:18:64:d8:bc:0f:90:35:44:cf:ed:c5:77: 1a:78:6e:1a:8c:f7:e2:68:4d:49:90:8c:92:88:3c:85:b9:1b: dd:27:f5:00:65:87:9f:21:50:f3:56:71:83:56:64:fa:08:18: 96:7d:fb:c9:71:ed:c7:2d:08:bd:cb:96:41:c0:7e:54:2f:56: aa:76:36:0b:47:4a:3e:25:b2:47:48:72:3a:a7:81:70:1e:77: af:14:84:c3:14:0d:42:2b:34:28:98:f5:03:32:ee:00:c8:39: f4:1c:a6:c2:9b:d7:ed:f1:05:d2:06:b1:8a:da:9b:6d:7b:61: a0:a4:36:d1:5e:8a:61:7a:a6:4a:70:5f:26:60:41:14:87:3a: 21:d1:21:83:f2:03:8b:22:11:1f:98:b9:4a:b4:04:24:27:2b: 04:77:04:ca -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUORw+STQoz9rZzYYmwuYoLTISJacwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDFlZTMwMTllNjZhMTdmYzY2NTViN2EzN2M1MTA5MTNh MWZkYWYyMGZhOTU3YzkyNTQyMTgwYWM4ZThiZjM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtnfnu1lBo6QLjBHT2xJNnPV7UzItGN+7dG3qhktcUIR0q Z4CbmXrAsS4pmzqjF/JjzqnOXSoh3t5YJqtbSwULClOnIQWHK983GBhvIMT3yjyx zX54bgzkchhyLsRcF/bjww8JFUtRHlJ09lrHFfHHlGrjnXYQ8QC5ZcSUaAsn3GZY VVmg0M+lFjZLvMs1n1Y/VQjJuCW/33OnMzZn9ICv16RqjliN23ODoMwlETsSEnbL WegtbW22Aegj/D2OrWQYZ6Qn6bjXv0I0nKbp5rBNGGMKaMcyAm+ebMUe1MW87ZbG G3KMvbDlREipQxiBPmWsu4ISETMD6WM4TV8sNW39AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUy6GuY+2G6jhllKNETg9XxcLmd+MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyYTJiYmQyLThjNWYtNGNiMy1hNTg3LTFjZmQ3YzI4MDc4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQdTANBgkqhkiG9w0BAQsFAAOCAQEAS2QaJog0KydUhZRyTvyQvLh1WKZ0 qotpB4QBVD53w9zxFCGY1nmP7CcXZVuMLRHRrciCffl5U2CcHYvlYeBeAjmG0QJs Fwrrn7KYmp3xwVjce4XwLRaW1+bhkPRf/F27GGTYvA+QNUTP7cV3GnhuGoz34mhN SZCMkog8hbkb3Sf1AGWHnyFQ81Zxg1Zk+ggYln37yXHtxy0IvcuWQcB+VC9WqnY2 C0dKPiWyR0hyOqeBcB53rxSEwxQNQis0KJj1AzLuAMg59BymwpvX7fEF0gaxitqb bXthoKQ20V6KYXqmSnBfJmBBFIc6IdEhg/IDiyIRH5i5SrQEJCcrBHcEyg== -----END CERTIFICATE-----Generated at Fri Sep 22 19:21:56 2023 by rpki-client on console-ams.rpki-client.org