$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d7da08a-f15f-40ea-ac7f-4dcc5efc60f9.roa File: 4d7da08a-f15f-40ea-ac7f-4dcc5efc60f9.roa (raw, json) Hash identifier: iyXn+6uHVq9tkooJASgznpTFOj8cDij1treYs+/7lu4= Subject key identifier: 6B:BB:87:BC:5E:FA:7B:7A:81:3E:7B:A4:C2:CF:CD:A1:FC:CB:0F:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2F0310AF012661675369BD9F42AC8719CD2DD9BA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d7da08a-f15f-40ea-ac7f-4dcc5efc60f9.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 63.134.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:03:10:af:01:26:61:67:53:69:bd:9f:42:ac:87:19:cd:2d:d9:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=7a76113f815bac1bf8f09df32f8a72902dfc0419c8b3e32cea34f363ed540d2b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:da:a7:55:ec:67:63:46:2a:90:1f:5f:24:49: e3:4a:18:f7:29:1e:77:d6:c8:ec:d0:ae:34:c9:33: a4:69:b1:82:a0:d5:f0:34:68:a3:d2:09:2c:79:64: b9:6b:eb:ac:b2:2e:e1:db:76:e0:f0:a5:91:60:92: 8a:86:0c:30:3c:ac:54:c5:3a:ee:ac:ef:ef:80:66: 70:ec:34:91:36:f2:68:d1:10:dd:3f:0f:2d:41:4a: 6e:f4:32:0d:31:96:66:2c:a6:2b:1f:6f:0c:7c:04: cb:d5:82:bc:81:1a:bb:f5:42:ca:e4:2b:75:b8:51: ec:37:56:0b:1a:6f:fd:fb:80:d9:31:f5:5d:dc:37: e3:58:8a:68:26:18:a0:cd:6c:e3:00:4d:69:16:db: 46:e0:16:90:ba:f0:20:3f:41:82:5a:e9:ad:29:3a: 43:73:e1:ee:09:f7:77:70:c3:5e:51:aa:2c:1b:e5: 7b:d9:72:ad:0d:7d:27:a8:79:c6:33:94:fe:32:1f: 9a:30:a7:50:aa:77:3b:27:70:a3:1a:7b:c3:2d:b3: 50:0f:9c:ee:1b:da:e8:44:ac:da:a1:b4:d2:16:26: db:57:85:a9:55:ec:b0:ea:85:5a:ca:a9:66:66:fa: f3:8b:54:9b:89:4e:ad:92:5e:e3:79:de:07:eb:dc: 88:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BB:87:BC:5E:FA:7B:7A:81:3E:7B:A4:C2:CF:CD:A1:FC:CB:0F:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d7da08a-f15f-40ea-ac7f-4dcc5efc60f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.134.0.0/17 Signature Algorithm: sha256WithRSAEncryption 4b:89:3a:5d:19:88:81:9c:90:7f:98:b0:76:5e:58:ab:51:ce: cd:5d:11:43:3c:0f:ee:4a:d6:3f:1e:76:93:41:5d:ce:2c:0e: 6c:df:52:d6:e6:9e:c3:fc:d5:96:6a:6f:ae:9f:34:f2:94:13: 0f:d4:b2:38:31:a7:92:af:bd:68:6c:b4:c5:f9:06:58:a3:2c: 31:52:79:41:28:d1:f6:b2:aa:6d:e9:3e:a5:c9:ae:05:92:4e: 93:1b:7e:2f:68:0e:74:af:18:33:72:66:ec:48:a5:c8:5f:80: 47:e3:9b:ee:5d:7b:88:e0:b6:4e:6b:fe:e0:aa:f2:e7:e8:cd: 8a:95:39:2b:98:11:a6:02:9e:b8:cc:42:f2:6a:f2:a3:5c:4c: 0f:21:d4:2d:96:cc:ee:f6:2e:d8:8e:6a:c0:92:f0:7c:a8:f0: 7a:fb:0a:e2:6a:6c:c5:7c:16:9b:6a:2e:30:7d:5f:ae:e2:1c: d0:67:d7:93:19:3f:8e:7b:12:3f:32:94:73:34:74:f9:c7:40: 62:e3:89:77:17:9f:da:21:87:c8:92:b2:b0:05:3e:85:6e:73: f7:26:2f:f2:e4:82:1f:2c:a7:38:84:24:a2:e3:ab:ec:17:76: 3b:f0:b6:37:7c:c9:18:41:7c:f9:b8:67:42:e3:83:7c:b3:f2: 0c:c8:be:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULwMQrwEmYWdTab2fQqyHGc0t2bowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTc2MTEzZjgxNWJhYzFiZjhmMDlkZjMyZjhhNzI5MDJk ZmMwNDE5YzhiM2UzMmNlYTM0ZjM2M2VkNTQwZDJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDh2qdV7GdjRiqQH18kSeNKGPcpHnfWyOzQrjTJM6RpsYKg 1fA0aKPSCSx5ZLlr66yyLuHbduDwpZFgkoqGDDA8rFTFOu6s7++AZnDsNJE28mjR EN0/Dy1BSm70Mg0xlmYspisfbwx8BMvVgryBGrv1QsrkK3W4Uew3Vgsab/37gNkx 9V3cN+NYimgmGKDNbOMATWkW20bgFpC68CA/QYJa6a0pOkNz4e4J93dww15Rqiwb 5XvZcq0NfSeoecYzlP4yH5owp1CqdzsncKMae8Mts1APnO4b2uhErNqhtNIWJttX halV7LDqhVrKqWZm+vOLVJuJTq2SXuN53gfr3IgXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUa7uHvF76e3qBPnukws/NofzLDwwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkN2RhMDhhLWYxNWYtNDBlYS1hYzdmLTRkY2M1ZWZjNjBmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc/hgAwDQYJKoZIhvcNAQELBQADggEBAEuJOl0ZiIGckH+YsHZeWKtRzs1d EUM8D+5K1j8edpNBXc4sDmzfUtbmnsP81ZZqb66fNPKUEw/Usjgxp5KvvWhstMX5 BlijLDFSeUEo0fayqm3pPqXJrgWSTpMbfi9oDnSvGDNyZuxIpchfgEfjm+5de4jg tk5r/uCq8ufozYqVOSuYEaYCnrjMQvJq8qNcTA8h1C2WzO72LtiOasCS8Hyo8Hr7 CuJqbMV8FptqLjB9X67iHNBn15MZP457Ej8ylHM0dPnHQGLjiXcXn9ohh8iSsrAF PoVuc/cmL/Lkgh8spziEJKLjq+wXdjvwtjd8yRhBfPm4Z0Ljg3yz8gzIvq4= -----END CERTIFICATE-----Generated at Fri Sep 22 17:51:33 2023 by rpki-client on console-ams.rpki-client.org