$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44d98916-94ab-49fc-a073-76f25fab61e9.roa File: 44d98916-94ab-49fc-a073-76f25fab61e9.roa (raw, json) Hash identifier: FtvQfCSgUydlUAhSbjWpk77SHdwFh4N5+XQUyq2fJt0= Subject key identifier: 28:5C:6E:E8:85:CA:D7:FC:AA:35:DC:77:6D:C1:7C:51:D7:E7:D7:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 367787F115EC87493A7AD27CC3B508B857F1DB7C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44d98916-94ab-49fc-a073-76f25fab61e9.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 40.220.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:77:87:f1:15:ec:87:49:3a:7a:d2:7c:c3:b5:08:b8:57:f1:db:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=41da6541b05561fab82ffb27645d03f9994d22938a42989f4eb58b3f388afd4a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:34:20:ca:eb:4e:36:27:78:43:f4:d0:e8: c5:3f:31:49:df:73:42:e7:15:7a:fd:bd:b1:7c:91: 32:8a:c6:89:d7:e0:6f:af:bf:9a:31:c8:70:c4:ac: 61:66:0b:10:91:d0:5f:b0:4e:19:85:88:5a:42:7f: 5e:12:ad:de:a2:12:62:3e:5e:78:fb:4f:e9:21:59: 17:00:da:79:a0:5d:1d:27:cd:0f:8f:55:b6:f8:f4: da:24:1d:5c:f9:df:f5:6e:0f:37:75:00:5f:4c:9f: c9:77:0c:6d:4a:95:51:fa:53:69:ad:f4:95:f5:ce: c7:84:f4:e0:5d:ab:e6:17:3e:96:82:1b:c0:6e:4c: 51:d3:99:ff:a3:ca:d0:01:02:2d:e0:0e:66:be:e6: 41:dc:85:7b:b9:88:46:a0:62:9c:d6:c3:ab:37:63: 0e:ef:53:8e:72:ce:12:33:a6:47:cf:01:43:aa:6c: c5:02:6d:fe:51:e5:0f:90:93:87:33:cb:6a:5b:0b: 2e:11:c4:84:1d:7a:81:e8:33:d2:b1:59:12:bd:f5: 7b:31:c1:a3:e1:f5:e5:3b:86:55:14:d3:55:57:6e: ff:f9:49:77:90:d5:98:ee:81:9f:a5:9a:8d:c4:3a: 58:3f:5c:60:60:cb:98:2d:da:6c:c1:b4:00:26:68: 64:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5C:6E:E8:85:CA:D7:FC:AA:35:DC:77:6D:C1:7C:51:D7:E7:D7:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44d98916-94ab-49fc-a073-76f25fab61e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption 82:f2:e4:2d:f2:67:42:a9:b8:77:92:c2:5a:17:39:89:be:1f: 18:d4:97:b0:ac:b4:ac:b7:2c:52:28:22:19:b4:9d:84:e0:7d: b1:31:f4:75:4a:41:62:3d:f3:e7:24:17:ca:3b:97:42:97:97: 88:a1:5e:1a:d0:ca:99:25:1c:81:2d:e6:81:cd:23:ba:d8:64: 31:4d:a3:46:69:a4:59:8a:c5:0c:73:32:8e:a0:48:2f:6b:41: 3d:e8:f9:a1:50:09:a2:4a:eb:08:87:8c:62:51:cf:b3:3e:ea: 8f:c2:b3:ed:7d:aa:34:78:c3:cf:e0:de:85:3a:52:16:01:57: 4d:20:36:f5:c0:9f:28:6b:83:83:d4:fe:e7:de:5e:5e:95:b0: c9:07:38:a4:e2:57:18:1b:41:03:aa:46:fb:1e:07:ce:e5:cd: 33:07:20:6f:b3:2e:bd:28:d6:e8:7a:ec:b1:70:cf:43:9d:d5: 29:a3:8a:3e:c1:24:32:9b:7c:58:2e:96:19:07:be:35:8b:fa: e3:c1:37:31:33:a1:6d:7a:36:bc:79:f8:9f:44:58:8a:09:ea: 57:81:36:c2:0b:0d:8d:dc:09:59:6b:f0:3f:36:e5:c3:f5:9b: 4a:44:16:b8:f3:da:ba:bf:87:63:08:e8:56:b4:d7:f4:18:70: dd:8d:75:41 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNneH8RXsh0k6etJ8w7UIuFfx23wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MWRhNjU0MWIwNTU2MWZhYjgyZmZiMjc2NDVkMDNmOTk5 NGQyMjkzOGE0Mjk4OWY0ZWI1OGIzZjM4OGFmZDRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyZzQgyutONid4Q/TQ6MU/MUnfc0LnFXr9vbF8kTKKxonX 4G+vv5oxyHDErGFmCxCR0F+wThmFiFpCf14Srd6iEmI+Xnj7T+khWRcA2nmgXR0n zQ+PVbb49NokHVz53/VuDzd1AF9Mn8l3DG1KlVH6U2mt9JX1zseE9OBdq+YXPpaC G8BuTFHTmf+jytABAi3gDma+5kHchXu5iEagYpzWw6s3Yw7vU45yzhIzpkfPAUOq bMUCbf5R5Q+Qk4czy2pbCy4RxIQdeoHoM9KxWRK99XsxwaPh9eU7hlUU01VXbv/5 SXeQ1ZjugZ+lmo3EOlg/XGBgy5gt2mzBtAAmaGQFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUKFxu6IXK1/yqNdx3bcF8Udfn108wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ0ZDk4OTE2LTk0YWItNDlmYy1hMDczLTc2ZjI1ZmFiNjFlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo3DANBgkqhkiG9w0BAQsFAAOCAQEAgvLkLfJnQqm4d5LCWhc5ib4fGNSX sKy0rLcsUigiGbSdhOB9sTH0dUpBYj3z5yQXyjuXQpeXiKFeGtDKmSUcgS3mgc0j uthkMU2jRmmkWYrFDHMyjqBIL2tBPej5oVAJokrrCIeMYlHPsz7qj8Kz7X2qNHjD z+DehTpSFgFXTSA29cCfKGuDg9T+595eXpWwyQc4pOJXGBtBA6pG+x4HzuXNMwcg b7MuvSjW6HrssXDPQ53VKaOKPsEkMpt8WC6WGQe+NYv648E3MTOhbXo2vHn4n0RY ignqV4E2wgsNjdwJWWvwPzblw/WbSkQWuPPaur+HYwjoVrTX9Bhw3Y11QQ== -----END CERTIFICATE-----Generated at Fri Sep 22 17:25:45 2023 by rpki-client on console-fra.rpki-client.org