$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437896c3-1adc-47d1-8b8d-f18b07422dc2.roa File: 437896c3-1adc-47d1-8b8d-f18b07422dc2.roa (raw, json) Hash identifier: CfCuAjvrC4gaublR0sRGlyADDBtPxjEEYnHQaMDT3ak= Subject key identifier: C9:97:D7:E9:89:FC:63:B8:4C:F9:31:6D:A0:53:C2:8F:60:59:46:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2272E436C9F4A2DFCA551063ED4C8B272B0CB60E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437896c3-1adc-47d1-8b8d-f18b07422dc2.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f01:4810::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:72:e4:36:c9:f4:a2:df:ca:55:10:63:ed:4c:8b:27:2b:0c:b6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=b25b78da97283fdf443074b0765f6b75aca9cf2d2bd0a1e6e3dba56fa8df15ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:64:19:a7:a9:a3:27:3c:42:76:a9:9b:05: 18:b2:56:d4:8f:41:87:a5:2f:00:24:31:4c:26:1e: 91:b5:28:c2:d0:e8:87:c7:df:0f:30:92:7c:6e:db: 02:4b:9c:01:14:bf:e9:6b:b8:45:66:61:b9:a9:21: 34:9a:dd:6d:f1:48:0f:42:05:6f:e4:b4:d0:67:e6: 7a:ee:a9:df:79:50:f7:48:63:7c:a9:85:02:d7:7c: 90:bd:ce:86:44:3d:e2:94:40:7b:4e:d1:4d:97:5f: 12:a3:1d:12:a9:da:a3:60:c6:45:c4:3c:89:b9:47: 80:cc:6c:73:06:10:a4:1a:21:3e:e1:63:77:dc:03: 4c:94:f0:7a:ae:d7:fc:33:fb:21:55:99:b8:ed:c4: e8:48:26:50:49:5a:69:d9:5f:46:4e:f1:72:86:92: dd:f9:0e:ec:6a:27:83:8c:db:85:57:b8:be:0d:3f: cc:17:b7:c0:c9:29:95:4f:98:fe:9d:5b:e5:70:8b: a9:6a:bb:ae:20:a5:78:29:f3:78:1c:ba:2b:28:48: ca:de:79:34:ec:9f:fa:aa:38:bc:4b:21:ff:e0:c2: d8:f2:14:07:31:b6:4f:ef:7c:a5:db:de:36:bf:b8: 55:ff:65:6c:8b:38:a9:e8:54:4f:dd:ce:46:dd:de: a2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:D7:E9:89:FC:63:B8:4C:F9:31:6D:A0:53:C2:8F:60:59:46:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437896c3-1adc-47d1-8b8d-f18b07422dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:4810::/47 Signature Algorithm: sha256WithRSAEncryption d7:21:67:22:4c:ae:10:51:5f:3f:af:87:67:94:f0:31:d4:4e: 1a:89:88:c3:69:c9:83:73:a0:54:1c:04:9c:02:71:f7:52:dd: 78:02:24:85:f7:51:f5:d4:69:9a:a4:7c:7c:de:c9:21:62:8b: 18:22:5f:79:3b:21:d1:46:7f:fa:90:d9:9f:35:83:fa:66:b1: bf:45:25:a6:b9:fb:a7:28:dc:8d:e8:cd:a5:07:7f:73:13:c2: dc:ae:73:92:fa:48:46:39:d5:b8:49:4c:ba:8b:4c:c1:75:29: 6c:45:b1:58:21:65:5d:7a:b6:d6:7d:c4:89:6d:3f:00:50:1b: 3d:2f:fa:a7:ee:92:2d:aa:74:d8:4e:3f:c3:8b:71:59:bc:4e: aa:d7:d9:26:03:dc:f6:59:99:ba:a4:f2:d9:67:c7:e9:84:46: 7c:8f:38:22:0a:fb:f6:26:54:58:18:62:a6:d3:55:96:3a:23: 38:bf:23:04:a8:12:c5:1e:8e:d6:36:10:10:a6:ad:1c:99:bf: e3:eb:4c:fc:22:b0:ab:40:11:0b:9e:0f:19:80:0c:a7:a4:a8: 97:ec:d4:a1:0b:59:06:7f:9c:03:c5:3c:f5:a8:84:a4:9a:dc: 9e:c1:b8:ba:25:77:fd:b5:60:dc:7e:60:e0:95:ca:85:49:93: f7:a9:63:11 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUInLkNsn0ot/KVRBj7UyLJysMtg4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjViNzhkYTk3MjgzZmRmNDQzMDc0YjA3NjVmNmI3NWFj YTljZjJkMmJkMGExZTZlM2RiYTU2ZmE4ZGYxNWVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2BmQZp6mjJzxCdqmbBRiyVtSPQYelLwAkMUwmHpG1KMLQ 6IfH3w8wknxu2wJLnAEUv+lruEVmYbmpITSa3W3xSA9CBW/ktNBn5nruqd95UPdI Y3yphQLXfJC9zoZEPeKUQHtO0U2XXxKjHRKp2qNgxkXEPIm5R4DMbHMGEKQaIT7h Y3fcA0yU8Hqu1/wz+yFVmbjtxOhIJlBJWmnZX0ZO8XKGkt35DuxqJ4OM24VXuL4N P8wXt8DJKZVPmP6dW+Vwi6lqu64gpXgp83gcuisoSMreeTTsn/qqOLxLIf/gwtjy FAcxtk/vfKXb3ja/uFX/ZWyLOKnoVE/dzkbd3qJxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyZfX6Yn8Y7hM+TFtoFPCj2BZRnEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQzNzg5NmMzLTFhZGMtNDdkMS04YjhkLWYxOGIwNzQyMmRjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSBAwDQYJKoZIhvcNAQELBQADggEBANchZyJMrhBRXz+vh2eU8DHU ThqJiMNpyYNzoFQcBJwCcfdS3XgCJIX3UfXUaZqkfHzeySFiixgiX3k7IdFGf/qQ 2Z81g/pmsb9FJaa5+6co3I3ozaUHf3MTwtyuc5L6SEY51bhJTLqLTMF1KWxFsVgh ZV16ttZ9xIltPwBQGz0v+qfuki2qdNhOP8OLcVm8TqrX2SYD3PZZmbqk8tlnx+mE RnyPOCIK+/YmVFgYYqbTVZY6Izi/IwSoEsUejtY2EBCmrRyZv+PrTPwisKtAEQue DxmADKekqJfs1KELWQZ/nAPFPPWohKSa3J7BuLold/21YNx+YOCVyoVJk/epYxE= -----END CERTIFICATE-----Generated at Fri Sep 22 21:31:18 2023 by rpki-client on console-fra.rpki-client.org