$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51ef0a8e-d88a-4741-b2d5-94acdff50c1e.roa File: 51ef0a8e-d88a-4741-b2d5-94acdff50c1e.roa (raw, json) Hash identifier: rP+c27RPq2+v9lmjVBX7DOKyf/yy15oIZq8b48deC6w= Subject key identifier: 7D:D4:65:B4:16:10:8B:12:BC:D4:A4:59:D8:4E:03:D2:67:C8:8A:1F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E8C1775BD14D39DD9A0D87F2134E809108C2313 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51ef0a8e-d88a-4741-b2d5-94acdff50c1e.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff1:4000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 12:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8c:17:75:bd:14:d3:9d:d9:a0:d8:7f:21:34:e8:09:10:8c:23:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=8ae26216ee7ff43d986843d74d31ad2afdb5f002faaae79cfdfa6d502c4f22e1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:dd:59:93:d2:29:33:f6:b7:d7:83:70:72: e6:35:5f:63:dd:f4:f0:cd:dd:7b:45:62:29:8c:50: a6:d6:84:4c:0e:a6:f7:3d:06:45:a5:be:59:aa:bd: 55:4a:be:98:e1:f2:8d:21:26:ca:b7:40:4a:71:05: 04:20:49:78:09:10:21:56:a6:07:c1:1d:11:2f:bd: a8:4f:57:43:04:93:35:98:7d:19:a8:df:14:42:dd: d3:64:34:d5:ea:ca:e8:ac:c9:e4:4a:3f:10:fa:b5: 97:a2:0e:e2:d5:a4:f7:58:59:08:4d:81:8f:6e:49: 8c:41:07:c8:d9:be:db:92:ef:be:3f:cf:01:5d:3c: f4:61:61:fd:10:51:50:ac:35:22:3f:1f:d9:ab:ee: 23:f5:ff:e6:45:78:50:9d:af:20:64:d2:61:67:67: 5d:b4:49:54:f3:32:a3:85:22:e4:bb:61:8e:80:a1: c5:38:e9:3d:51:8e:a3:59:51:97:d1:f8:88:11:fa: d6:4d:5a:05:79:da:c6:7b:75:a6:e8:28:16:ec:37: 24:2e:19:e1:c8:da:27:d6:0f:aa:f5:5a:d2:ba:9f: eb:41:d7:15:89:31:61:04:de:23:cc:6b:28:5b:80: ac:33:89:89:d0:ae:16:26:83:01:f5:8a:9d:19:fb: fb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D4:65:B4:16:10:8B:12:BC:D4:A4:59:D8:4E:03:D2:67:C8:8A:1F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51ef0a8e-d88a-4741-b2d5-94acdff50c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:4000::/39 Signature Algorithm: sha256WithRSAEncryption c8:7d:8d:62:14:2d:ed:6b:fd:f8:69:83:4a:ac:52:3f:f0:3c: 4f:93:9d:5c:19:46:be:d6:63:38:ec:7d:36:71:fa:1d:e5:03: ae:29:36:01:b4:86:88:92:82:31:52:af:e2:63:23:2d:7f:b8: 10:7e:d0:15:4b:c4:be:a2:e2:51:63:ee:aa:22:6f:95:5d:12: d3:81:e6:ad:97:fd:77:73:9f:bf:46:9c:41:44:cb:4f:78:12: 54:35:56:ca:ed:ae:ae:b5:5b:67:15:4a:c2:6a:84:2c:b2:24: 80:a5:8c:fd:19:c4:a5:06:56:8a:fb:30:0f:52:a6:e8:b5:a8: 7e:e7:11:17:8f:e5:2a:5b:46:d0:3c:98:4a:66:a8:3c:05:2e: 91:5f:e9:81:8f:7b:a2:97:72:9f:58:6c:18:ed:c5:59:37:3c: 25:4c:0e:fa:3e:23:84:88:66:63:46:a1:5e:f9:56:52:e5:f9: 89:e5:55:32:85:d2:5a:76:6a:f0:65:4e:a5:32:9a:3a:b6:b6: 24:83:e5:59:ef:98:a3:78:85:74:66:15:d3:37:4e:5d:b1:7d: cd:74:88:94:35:78:41:2c:65:bd:f6:e0:3a:73:f3:30:d3:85: 6a:d3:fa:a6:c7:18:eb:1e:32:d6:cb:25:68:e8:b3:ab:d9:76: b1:b9:89:45 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXowXdb0U053ZoNh/ITToCRCMIxMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWUyNjIxNmVlN2ZmNDNkOTg2ODQzZDc0ZDMxYWQyYWZk YjVmMDAyZmFhYWU3OWNmZGZhNmQ1MDJjNGYyMmUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV6t1Zk9IpM/a314NwcuY1X2Pd9PDN3XtFYimMUKbWhEwO pvc9BkWlvlmqvVVKvpjh8o0hJsq3QEpxBQQgSXgJECFWpgfBHREvvahPV0MEkzWY fRmo3xRC3dNkNNXqyuisyeRKPxD6tZeiDuLVpPdYWQhNgY9uSYxBB8jZvtuS774/ zwFdPPRhYf0QUVCsNSI/H9mr7iP1/+ZFeFCdryBk0mFnZ120SVTzMqOFIuS7YY6A ocU46T1RjqNZUZfR+IgR+tZNWgV52sZ7daboKBbsNyQuGeHI2ifWD6r1WtK6n+tB 1xWJMWEE3iPMayhbgKwziYnQrhYmgwH1ip0Z+/tnAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUfdRltBYQixK81KRZ2E4D0mfIih8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUxZWYwYThlLWQ4OGEtNDc0MS1iMmQ1LTk0YWNkZmY1MGMxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/xQDANBgkqhkiG9w0BAQsFAAOCAQEAyH2NYhQt7Wv9+GmDSqxSP/A8 T5OdXBlGvtZjOOx9NnH6HeUDrik2AbSGiJKCMVKv4mMjLX+4EH7QFUvEvqLiUWPu qiJvlV0S04HmrZf9d3Ofv0acQUTLT3gSVDVWyu2urrVbZxVKwmqELLIkgKWM/RnE pQZWivswD1Km6LWofucRF4/lKltG0DyYSmaoPAUukV/pgY97opdyn1hsGO3FWTc8 JUwO+j4jhIhmY0ahXvlWUuX5ieVVMoXSWnZq8GVOpTKaOra2JIPlWe+Yo3iFdGYV 0zdOXbF9zXSIlDV4QSxlvfbgOnPzMNOFatP6pscY6x4y1sslaOizq9l2sbmJRQ== -----END CERTIFICATE-----Generated at Fri Sep 22 00:30:06 2023 by rpki-client on console-fra.rpki-client.org