$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45481046-38a5-409c-a78c-876f51ced0e5.roa File: 45481046-38a5-409c-a78c-876f51ced0e5.roa (raw, json) Hash identifier: ndATPxoa7TaVEWfy945hpVsKeVrlfF3WSwoqkqM2Vh4= Subject key identifier: EA:18:FF:43:C1:1B:1F:F2:70:FC:10:CE:D7:E2:00:3F:42:46:25:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5BC41CBDF58FEFD1A199C528D2ECDB39000A5830 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45481046-38a5-409c-a78c-876f51ced0e5.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 56.53.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c4:1c:bd:f5:8f:ef:d1:a1:99:c5:28:d2:ec:db:39:00:0a:58:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=a58e998efecad25c2fae9460074baf2b945a11c363ae3a6c35d833f486acda27, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:5e:d5:de:cb:b3:11:1a:bc:82:86:b5:7a: 8c:4c:4a:bb:44:94:e1:6e:7e:bd:7b:02:1e:26:b4: a6:75:71:d9:4c:b4:76:c4:84:09:ea:40:19:38:b6: 79:58:21:88:4d:c5:a6:3a:2e:ce:7f:b7:49:1c:63: 84:5b:2d:c0:58:f6:f8:aa:70:4e:02:7c:46:08:aa: 7a:ac:69:f6:6b:ed:bc:73:1e:ed:92:d8:3d:bd:7d: 36:eb:75:0f:06:1c:b8:fb:8d:6d:0a:53:d5:72:6d: be:47:a8:6b:58:2d:05:91:f2:9d:7b:7d:b1:ca:0f: 46:d8:bc:30:36:53:93:9d:8f:3f:c5:00:56:3c:ae: 76:90:ad:dd:db:c1:da:2a:fb:de:48:94:4b:e0:78: 17:65:40:d7:24:fa:d3:56:d6:d1:77:46:5e:f8:97: 6e:fb:fd:a3:be:91:29:53:e7:05:6e:fc:f0:73:44: 31:8e:90:b0:fd:0e:ac:da:ca:d6:f1:08:97:8d:00: 78:45:ed:12:8a:10:6e:06:59:1d:d2:e9:a6:17:cc: 11:c1:62:5d:29:ed:d6:3a:03:dd:4e:70:e9:48:d5: 74:82:9e:a0:28:06:e4:a0:ff:a1:aa:7b:06:0d:47: 0b:8b:e0:f2:c1:99:bb:fa:a2:a0:0d:c6:ad:15:d1: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:18:FF:43:C1:1B:1F:F2:70:FC:10:CE:D7:E2:00:3F:42:46:25:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45481046-38a5-409c-a78c-876f51ced0e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.53.0.0/16 Signature Algorithm: sha256WithRSAEncryption b0:0f:9f:a6:1b:14:37:63:31:f7:63:ae:d5:f9:34:7b:e1:66: 05:4c:dc:35:95:84:0c:fe:3f:09:cd:b3:9a:7d:9b:7f:48:08: 42:e1:96:77:7b:dd:28:f0:bc:ec:26:d2:e1:e7:9f:9f:f8:52: 62:a8:ee:9d:83:06:4a:8b:b5:49:54:e9:e0:1c:e6:de:b1:20: b2:be:98:ba:ce:fe:fe:62:32:5d:9e:8b:86:62:84:70:b6:10: 8b:92:d1:88:d4:cb:f5:43:35:52:fd:c8:7f:1b:b6:88:2a:73: 92:fc:6a:a3:d1:b6:a1:41:49:35:09:87:2e:4c:25:b7:8f:24: ae:9e:df:cb:fd:65:2f:8b:85:76:09:48:07:84:e8:80:a8:12: d0:1f:d9:43:f9:3c:2b:5e:21:35:76:05:42:4e:f3:4a:de:0d: cc:63:34:78:52:28:de:1a:1e:57:2b:1e:ce:d8:04:17:2f:d0: 22:ea:7a:d9:5a:50:26:8e:79:2a:cf:07:0b:fd:48:06:7a:9c: eb:ab:2a:24:43:82:2a:1c:82:2c:a6:e0:12:88:b8:4b:5c:df: a8:e7:6c:2c:25:91:10:8d:e8:c0:f2:2f:32:49:fc:dc:b5:a5: 76:9d:c6:65:04:5f:8f:b0:49:2c:b6:26:82:60:d5:c1:4d:64: ed:90:9d:c1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUW8QcvfWP79GhmcUo0uzbOQAKWDAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNThlOTk4ZWZlY2FkMjVjMmZhZTk0NjAwNzRiYWYyYjk0 NWExMWMzNjNhZTNhNmMzNWQ4MzNmNDg2YWNkYTI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLMV7V3suzERq8goa1eoxMSrtElOFufr17Ah4mtKZ1cdlM tHbEhAnqQBk4tnlYIYhNxaY6Ls5/t0kcY4RbLcBY9viqcE4CfEYIqnqsafZr7bxz Hu2S2D29fTbrdQ8GHLj7jW0KU9Vybb5HqGtYLQWR8p17fbHKD0bYvDA2U5Odjz/F AFY8rnaQrd3bwdoq+95IlEvgeBdlQNck+tNW1tF3Rl74l277/aO+kSlT5wVu/PBz RDGOkLD9DqzaytbxCJeNAHhF7RKKEG4GWR3S6aYXzBHBYl0p7dY6A91OcOlI1XSC nqAoBuSg/6GqewYNRwuL4PLBmbv6oqANxq0V0YdTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU6hj/Q8EbH/Jw/BDO1+IAP0JGJRQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1NDgxMDQ2LTM4YTUtNDA5Yy1hNzhjLTg3NmY1MWNlZDBlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4NTANBgkqhkiG9w0BAQsFAAOCAQEAsA+fphsUN2Mx92Ou1fk0e+FmBUzc NZWEDP4/Cc2zmn2bf0gIQuGWd3vdKPC87CbS4eefn/hSYqjunYMGSou1SVTp4Bzm 3rEgsr6Yus7+/mIyXZ6LhmKEcLYQi5LRiNTL9UM1Uv3Ifxu2iCpzkvxqo9G2oUFJ NQmHLkwlt48krp7fy/1lL4uFdglIB4TogKgS0B/ZQ/k8K14hNXYFQk7zSt4NzGM0 eFIo3hoeVyseztgEFy/QIup62VpQJo55Ks8HC/1IBnqc66sqJEOCKhyCLKbgEoi4 S1zfqOdsLCWREI3owPIvMkn83LWldp3GZQRfj7BJLLYmgmDVwU1k7ZCdwQ== -----END CERTIFICATE-----Generated at Fri Sep 22 17:25:45 2023 by rpki-client on console-fra.rpki-client.org