$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46c0be03-cc42-4491-b0cc-ccb850c58c62.roa File: 46c0be03-cc42-4491-b0cc-ccb850c58c62.roa (raw, json) Hash identifier: uJWAWBtkELhFCAFabcDAu4mYf4EfEiO6IOnxB6PZ0rc= Subject key identifier: 19:70:8C:75:D3:A9:CE:36:C7:EC:BB:F6:2A:A8:4C:04:CF:FA:2C:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2BF761D13E354351E4C2B62CDE3712B04FD1DCCA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46c0be03-cc42-4491-b0cc-ccb850c58c62.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:8285::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f7:61:d1:3e:35:43:51:e4:c2:b6:2c:de:37:12:b0:4f:d1:dc:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=f20d376f6468327095838a2e83572f8fe80ebfa33404d67044c1de3df0857dca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6d:86:51:bd:a7:bc:74:8c:78:89:3e:61:37: 93:41:4b:33:ce:cd:e6:74:ff:98:aa:e0:de:f8:13: 79:ed:61:cd:19:a8:7e:e3:ab:40:7b:bb:18:a3:47: 27:47:af:72:4b:b0:c8:21:14:22:1f:b0:ca:2c:7b: f7:10:f7:ec:27:b1:d7:7f:eb:2a:ec:85:e4:06:e6: f8:8f:bd:ab:d8:7c:96:47:2d:c6:b2:20:65:21:21: 6c:18:ff:e7:db:37:94:0b:6d:7d:46:70:fb:9e:29: 07:8c:39:cd:52:93:2c:81:8f:e7:5d:c5:ce:30:d1: 4c:c7:8e:c0:22:50:ff:3d:e8:2a:67:a0:66:c5:74: 3a:28:fc:35:03:2d:97:27:4d:16:21:0c:97:80:12: f9:93:a3:c2:6c:21:77:13:ac:4f:58:2f:67:85:d4: 16:0d:09:21:50:e1:62:e5:48:3d:92:99:45:4f:3d: 87:c7:b5:2f:f8:66:18:fc:8f:d3:02:00:20:e4:6a: 92:df:60:b6:d4:8d:0e:2e:52:05:9e:3d:4a:53:3c: 56:f1:dd:79:74:b8:6f:2b:f5:83:7a:7a:8e:78:a2: 07:5a:d8:5f:52:68:9b:af:24:73:46:8b:ec:2c:df: 9c:e7:e3:b3:73:4e:c4:45:02:33:36:be:28:fd:a8: 36:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:70:8C:75:D3:A9:CE:36:C7:EC:BB:F6:2A:A8:4C:04:CF:FA:2C:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46c0be03-cc42-4491-b0cc-ccb850c58c62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:8285::/48 Signature Algorithm: sha256WithRSAEncryption 82:d2:65:cd:6b:19:69:c6:4d:48:2d:a3:ae:29:bb:8d:0d:6d: 7c:fa:d6:05:fb:0f:55:d1:ff:7f:f1:ae:7e:0a:4d:e7:3c:f1: e0:ea:72:dd:df:df:e2:67:89:55:a6:4c:a5:49:47:1a:e2:9e: c4:c6:76:ed:73:02:0e:9c:55:d4:c0:6f:50:b3:81:18:1e:56: e1:30:ed:cf:08:b5:81:d5:56:e1:5a:02:d7:93:ae:1a:9f:0c: 58:0e:77:39:b4:26:4e:ca:14:40:64:60:7e:8a:06:22:17:5e: 8a:fb:9c:a7:e3:ff:a5:cf:58:76:1b:d5:d0:0d:4e:21:2d:57: 68:25:28:b3:bb:56:61:3f:ef:90:be:9e:ab:f7:aa:94:f2:84: b0:8c:db:52:a7:96:81:fa:b4:59:b8:4b:f8:e0:29:a9:5e:c1: d9:71:3f:4b:e6:9d:da:7a:d5:a8:81:3f:ff:d2:b1:2c:71:fc: 5a:39:d1:81:02:df:6e:b4:29:89:1c:0a:6e:db:a0:51:b2:1f: 6a:1a:97:3a:6d:c0:08:ab:fa:4b:82:93:fe:36:1b:d8:75:68: 4e:be:68:e7:a5:7f:a8:22:f4:61:9a:6f:cf:a3:7f:f3:51:0a: 71:6b:47:20:c3:92:c8:ea:0a:08:3b:87:e6:01:3c:2b:eb:48: 57:6c:99:2b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUK/dh0T41Q1HkwrYs3jcSsE/R3MowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjBkMzc2ZjY0NjgzMjcwOTU4MzhhMmU4MzU3MmY4ZmU4 MGViZmEzMzQwNGQ2NzA0NGMxZGUzZGYwODU3ZGNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHbYZRvae8dIx4iT5hN5NBSzPOzeZ0/5iq4N74E3ntYc0Z qH7jq0B7uxijRydHr3JLsMghFCIfsMose/cQ9+wnsdd/6yrsheQG5viPvavYfJZH LcayIGUhIWwY/+fbN5QLbX1GcPueKQeMOc1SkyyBj+ddxc4w0UzHjsAiUP896Cpn oGbFdDoo/DUDLZcnTRYhDJeAEvmTo8JsIXcTrE9YL2eF1BYNCSFQ4WLlSD2SmUVP PYfHtS/4Zhj8j9MCACDkapLfYLbUjQ4uUgWePUpTPFbx3Xl0uG8r9YN6eo54ogda 2F9SaJuvJHNGi+ws35zn47NzTsRFAjM2vij9qDYXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGXCMddOpzjbH7Lv2KqhMBM/6LIgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2YzBiZTAzLWNjNDItNDQ5MS1iMGNjLWNjYjg1MGM1OGM2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9goUwDQYJKoZIhvcNAQELBQADggEBAILSZc1rGWnGTUgto64pu40N bXz61gX7D1XR/3/xrn4KTec88eDqct3f3+JniVWmTKVJRxrinsTGdu1zAg6cVdTA b1CzgRgeVuEw7c8ItYHVVuFaAteTrhqfDFgOdzm0Jk7KFEBkYH6KBiIXXor7nKfj /6XPWHYb1dANTiEtV2glKLO7VmE/75C+nqv3qpTyhLCM21KnloH6tFm4S/jgKale wdlxP0vmndp61aiBP//SsSxx/Fo50YEC3260KYkcCm7boFGyH2oalzptwAir+kuC k/42G9h1aE6+aOelf6gi9GGab8+jf/NRCnFrRyDDksjqCgg7h+YBPCvrSFdsmSs= -----END CERTIFICATE-----Generated at Sat Sep 23 00:46:19 2023 by rpki-client on console-fra.rpki-client.org