$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4db3d32a-72d2-499c-a84b-5894b6f05a1b.roa File: 4db3d32a-72d2-499c-a84b-5894b6f05a1b.roa (raw, json) Hash identifier: Xz4W3oIZ03hpmzZolLgGTSYCnvMEFg2VznKgA5Ft1KI= Subject key identifier: 71:A6:F7:FA:3B:15:55:78:83:23:40:54:22:A9:B6:64:9E:5C:8C:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 642FA80614642F6709CE9B8EFCC5578C8B7A440F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4db3d32a-72d2-499c-a84b-5894b6f05a1b.roa Signing time: Mon 28 Aug 2023 00:00:00 +0000 ROA not before: Mon 28 Aug 2023 00:00:00 +0000 ROA not after: Mon 02 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f01:4820::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Aug 2023 11:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:2f:a8:06:14:64:2f:67:09:ce:9b:8e:fc:c5:57:8c:8b:7a:44:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 28 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2023 GMT Subject: serialNumber=7599417eb4a7d7585412d5fc3a0b02ed5b745b67c37f5acc409333f1aa895ab7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:69:df:84:c6:a5:d2:73:a0:4f:ec:16:66: 4d:a0:b7:db:88:4f:1d:90:a8:dc:d6:c2:ed:fa:78: 53:69:d4:96:4b:b4:64:73:ba:d1:5f:cf:bf:90:78: 3e:03:fc:25:f8:0b:ff:1f:37:21:42:20:5e:df:c8: c6:f9:a9:07:da:d4:2a:af:76:76:9c:8d:30:6d:65: 9e:a8:8a:6f:4c:8c:a1:b2:03:a7:45:06:a5:08:92: f7:bf:3c:6b:3d:8d:40:3a:f8:3b:16:18:eb:a3:8d: 2a:be:36:58:c5:9e:2b:d8:67:be:dc:6c:31:f2:ca: 72:fe:d7:e6:1c:dc:ed:da:87:a1:24:23:fb:3d:0e: 0f:fe:e9:a4:ae:a7:67:cb:40:c4:7b:c7:2c:58:5e: 10:7d:75:0c:47:6c:16:42:98:4b:00:2f:09:cb:43: 52:e9:b8:0d:e0:f8:3e:70:10:cd:9b:ec:fe:86:64: 4e:3c:d5:f8:f3:53:ca:21:9f:f8:1c:e3:be:53:31: 72:8a:5b:f0:a0:1e:86:9f:3f:2b:0d:68:ec:e8:02: 92:68:79:c2:85:11:61:8d:10:b0:b5:57:d1:0b:22: a7:d2:2b:76:c3:c0:23:88:eb:32:41:34:84:0a:44: 3c:0d:a1:87:6c:7f:af:09:97:48:c7:10:54:45:d4: 4d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A6:F7:FA:3B:15:55:78:83:23:40:54:22:A9:B6:64:9E:5C:8C:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4db3d32a-72d2-499c-a84b-5894b6f05a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:4820::/47 Signature Algorithm: sha256WithRSAEncryption cc:41:23:42:b7:fc:e0:6c:2d:12:1d:6f:e0:b2:6f:5a:d4:4a: 7d:0e:12:1a:af:2f:a9:70:1a:69:86:aa:27:a6:fe:3e:7a:34: 72:5c:80:25:0f:62:d6:ec:d5:6e:3c:92:ce:1d:73:60:3a:05: ad:d7:f4:23:a7:23:74:3d:fd:83:f6:29:00:1c:82:22:fa:23: 7e:c8:6b:3f:2a:71:fe:4a:6b:21:36:ad:2a:b0:d4:1d:44:a7: b4:2c:bd:8d:e1:56:09:96:ed:dc:d8:a8:fa:f0:a3:a9:a9:ac: bc:ed:eb:ff:e5:19:45:b6:a7:78:5d:a2:d2:d1:2f:95:54:c1: 62:f0:22:cb:4c:0a:a8:9b:3c:d3:33:0a:c1:84:12:9e:16:0d: 18:39:7e:f3:dd:98:fe:e3:cc:36:35:eb:08:c4:77:63:d5:86: 3c:7d:fa:b1:67:88:b5:b7:87:a0:31:8e:1d:91:e5:70:9e:d5: 3e:7a:ba:3a:91:a5:b8:7f:60:e3:78:16:4d:f5:a2:99:78:58: 63:3c:b5:95:8c:4d:a4:ac:d0:71:23:7e:06:fb:23:7c:95:6d: ca:66:e9:98:e6:7c:9b:6c:d8:cd:d4:08:ab:df:38:82:43:8a: 27:66:e6:18:66:b4:66:a6:ad:11:e2:8d:af:4e:6c:4e:9f:71: d3:e8:f8:d2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZC+oBhRkL2cJzpuO/MVXjIt6RA8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTk5NDE3ZWI0YTdkNzU4NTQxMmQ1ZmMzYTBiMDJlZDVi NzQ1YjY3YzM3ZjVhY2M0MDkzMzNmMWFhODk1YWI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDECmnfhMal0nOgT+wWZk2gt9uITx2QqNzWwu36eFNp1JZL tGRzutFfz7+QeD4D/CX4C/8fNyFCIF7fyMb5qQfa1CqvdnacjTBtZZ6oim9MjKGy A6dFBqUIkve/PGs9jUA6+DsWGOujjSq+NljFnivYZ77cbDHyynL+1+Yc3O3ah6Ek I/s9Dg/+6aSup2fLQMR7xyxYXhB9dQxHbBZCmEsALwnLQ1LpuA3g+D5wEM2b7P6G ZE481fjzU8ohn/gc475TMXKKW/CgHoafPysNaOzoApJoecKFEWGNELC1V9ELIqfS K3bDwCOI6zJBNIQKRDwNoYdsf68Jl0jHEFRF1E0bAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcab3+jsVVXiDI0BUIqm2ZJ5cjKcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkYjNkMzJhLTcyZDItNDk5Yy1hODRiLTU4OTRiNmYwNWExYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSCAwDQYJKoZIhvcNAQELBQADggEBAMxBI0K3/OBsLRIdb+Cyb1rU Sn0OEhqvL6lwGmmGqiem/j56NHJcgCUPYtbs1W48ks4dc2A6Ba3X9COnI3Q9/YP2 KQAcgiL6I37Iaz8qcf5KayE2rSqw1B1Ep7QsvY3hVgmW7dzYqPrwo6mprLzt6//l GUW2p3hdotLRL5VUwWLwIstMCqibPNMzCsGEEp4WDRg5fvPdmP7jzDY16wjEd2PV hjx9+rFniLW3h6Axjh2R5XCe1T56ujqRpbh/YON4Fk31opl4WGM8tZWMTaSs0HEj fgb7I3yVbcpm6ZjmfJts2M3UCKvfOIJDiidm5hhmtGamrRHija9ObE6fcdPo+NI= -----END CERTIFICATE-----Generated at Mon Aug 28 23:16:12 2023 by rpki-client on console-ams.rpki-client.org