$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c379533-471a-4cbe-aed4-7def1622dde9.roa File: 4c379533-471a-4cbe-aed4-7def1622dde9.roa (raw, json) Hash identifier: ukdIVQibb1ihQzueUVCikX9FWUQzPGDZvcmETOC4fDE= Subject key identifier: 1D:89:7D:A4:F7:93:7F:A2:56:12:15:FD:AD:13:D5:D3:17:11:69:E7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7095DE3C29FEC17E2704028EC1D0785431B209A3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c379533-471a-4cbe-aed4-7def1622dde9.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:95:de:3c:29:fe:c1:7e:27:04:02:8e:c1:d0:78:54:31:b2:09:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=42679503f204a7b72753c4c1c38ab7cd8a6e7beef382d000ab49043ac94515c8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:36:c1:fd:11:4d:58:8b:67:b5:d3:81:fd:b3: 9a:91:02:73:f8:6c:0e:09:51:e6:3f:1d:a3:5b:1c: b5:9b:c0:8f:0f:fb:ac:bc:f9:e6:3c:c9:54:36:7d: ca:30:ca:30:cf:28:76:38:92:81:44:2f:0b:2c:98: ac:75:d2:bc:ed:81:24:5a:c9:20:b7:27:0f:7d:88: 4c:10:91:f4:f5:41:66:4e:ca:51:62:97:0a:db:95: b3:71:cb:1e:5d:83:4b:fb:a2:27:38:d6:1d:e3:00: b6:5d:a7:ed:1b:a1:18:5e:2c:2c:73:b8:1a:9a:ad: 34:ef:c5:57:71:8b:1a:1d:f6:f8:9f:73:30:56:f3: 68:10:44:d3:64:13:37:99:35:f7:24:cb:71:9e:2f: bd:ff:fe:86:1e:64:3b:31:b9:59:9c:61:0a:60:7f: cc:da:ee:f0:89:7e:d3:47:df:ef:8a:4f:c9:8d:cd: 79:4c:47:45:ab:23:25:d6:f8:d3:dc:78:55:ac:42: dd:c7:a0:5a:a8:b4:01:e1:aa:93:10:8d:6f:d4:d6: 80:d6:5e:87:d6:c0:4a:36:3f:17:58:0e:7d:ba:59: e2:e1:67:25:05:3e:39:a0:d1:d9:52:25:0c:44:4d: 80:83:10:75:b3:35:fd:02:60:34:c9:fa:9a:2d:93: 79:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:89:7D:A4:F7:93:7F:A2:56:12:15:FD:AD:13:D5:D3:17:11:69:E7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c379533-471a-4cbe-aed4-7def1622dde9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.112.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:f7:df:98:c9:c6:c9:11:61:ab:a1:b1:2a:be:48:4e:9a:45: 4e:42:15:cc:d7:c1:dd:36:23:5e:8b:4d:f7:03:3b:3c:3c:ec: 3b:77:58:e8:81:e2:ba:d5:f2:21:d9:f4:2c:8f:b7:e1:02:b1: a3:6d:02:eb:05:11:a0:ca:eb:e3:44:61:cc:73:7e:ee:c7:27: 34:ca:9b:b0:9b:c7:be:38:3b:85:53:3d:c1:d0:63:e3:71:98: b5:52:32:25:68:15:ce:11:9f:62:95:80:1d:8c:af:48:12:8b: 67:1a:1e:0c:4c:63:28:71:f5:e5:8b:e4:9f:cd:7c:eb:70:42: ef:b7:71:da:dc:48:dc:c1:2c:03:a9:ba:12:e4:b4:b0:94:2b: c2:48:c7:86:00:6c:a1:91:31:37:be:d4:5b:ee:e1:ca:fa:07: cb:c9:ad:ff:bc:7c:26:25:43:b6:03:10:bb:15:c6:a3:c1:59: ae:0c:68:a5:2b:40:f3:16:7c:ea:e7:e6:9c:ad:85:e6:78:07: bb:8c:92:b5:e8:bd:5a:4d:24:d9:5e:e7:ac:83:f1:d9:37:df: bd:83:ce:10:88:9f:c2:9d:8e:f2:0a:7f:1c:fd:2f:a8:60:97: 61:3e:52:57:10:29:0c:84:89:be:ee:f5:78:e8:00:b3:56:8a: c4:53:d1:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcJXePCn+wX4nBAKOwdB4VDGyCaMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjY3OTUwM2YyMDRhN2I3Mjc1M2M0YzFjMzhhYjdjZDhh NmU3YmVlZjM4MmQwMDBhYjQ5MDQzYWM5NDUxNWM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYNsH9EU1Yi2e104H9s5qRAnP4bA4JUeY/HaNbHLWbwI8P +6y8+eY8yVQ2fcowyjDPKHY4koFELwssmKx10rztgSRaySC3Jw99iEwQkfT1QWZO ylFilwrblbNxyx5dg0v7oic41h3jALZdp+0boRheLCxzuBqarTTvxVdxixod9vif czBW82gQRNNkEzeZNfcky3GeL73//oYeZDsxuVmcYQpgf8za7vCJftNH3++KT8mN zXlMR0WrIyXW+NPceFWsQt3HoFqotAHhqpMQjW/U1oDWXofWwEo2PxdYDn26WeLh ZyUFPjmg0dlSJQxETYCDEHWzNf0CYDTJ+potk3mhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHYl9pPeTf6JWEhX9rRPV0xcRaecwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjMzc5NTMzLTQ3MWEtNGNiZS1hZWQ0LTdkZWYxNjIyZGRlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl3AwDQYJKoZIhvcNAQELBQADggEBAAr335jJxskRYauhsSq+SE6aRU5C FczXwd02I16LTfcDOzw87Dt3WOiB4rrV8iHZ9CyPt+ECsaNtAusFEaDK6+NEYcxz fu7HJzTKm7Cbx744O4VTPcHQY+NxmLVSMiVoFc4Rn2KVgB2Mr0gSi2caHgxMYyhx 9eWL5J/NfOtwQu+3cdrcSNzBLAOpuhLktLCUK8JIx4YAbKGRMTe+1Fvu4cr6B8vJ rf+8fCYlQ7YDELsVxqPBWa4MaKUrQPMWfOrn5pytheZ4B7uMkrXovVpNJNle56yD 8dk3372DzhCIn8KdjvIKfxz9L6hgl2E+UlcQKQyEib7u9XjoALNWisRT0UQ= -----END CERTIFICATE-----Generated at Fri Sep 22 22:31:05 2023 by rpki-client on console-ams.rpki-client.org