$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52d9e855-1735-46c0-b370-0882a6987c98.roa File: 52d9e855-1735-46c0-b370-0882a6987c98.roa (raw, json) Hash identifier: GZSrtrNT63RCRAfbfxlSyck5vOXzY1/yM1q0hgCnqJU= Subject key identifier: 5A:86:7A:23:C5:BF:D6:7C:86:74:FA:6B:E2:91:5C:3A:CC:FE:7E:83 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38F3191AE226C90080E8E03606E4051FC51A7366 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52d9e855-1735-46c0-b370-0882a6987c98.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 16.12.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f3:19:1a:e2:26:c9:00:80:e8:e0:36:06:e4:05:1f:c5:1a:73:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=1cc5d2738cf16d63f042b06d528efd6538fdc44af4fcb25fbcddb03990dcc89b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8e:92:bb:2f:55:72:da:12:e4:22:15:8e:fe: 85:3e:5e:be:1f:ca:fe:48:d6:f6:4d:41:cd:82:6c: f5:fb:96:d7:26:65:35:69:39:9b:92:cc:34:88:fa: 07:33:8b:57:81:f1:44:8b:bf:06:a8:8a:18:7e:ce: 47:8b:24:50:44:f0:0f:9e:78:0c:f7:89:06:69:17: 52:45:41:1f:f6:06:3c:e7:90:02:10:f0:1f:fd:c6: 46:f3:63:d8:c0:aa:46:18:5c:ba:75:e4:cc:22:46: 71:67:95:8b:d6:62:b9:34:a7:13:83:93:fd:89:b1: 0f:0c:1d:26:de:2a:d6:3a:0c:0c:b6:ed:ca:fc:65: 60:d2:67:10:d1:ee:1a:c6:31:ff:a6:a3:b9:94:50: 6e:01:ea:eb:96:3e:70:ed:64:e9:c2:75:13:30:0e: 33:56:10:18:da:3a:9a:f4:98:f4:8d:a7:cf:7e:aa: 48:8b:55:59:76:d0:0d:cc:5f:4e:23:ad:ab:0d:ed: 05:4a:d3:c3:6d:08:6e:d5:e5:4b:f5:c2:c8:ce:9a: ae:fc:4f:9a:c3:dc:26:73:0a:06:e5:64:23:88:fb: 19:58:4a:98:46:bc:17:c6:af:74:25:1a:e9:25:13: 13:e0:a1:a4:4c:f3:9d:f3:fc:22:8d:d2:3f:56:82: d7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:86:7A:23:C5:BF:D6:7C:86:74:FA:6B:E2:91:5C:3A:CC:FE:7E:83 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52d9e855-1735-46c0-b370-0882a6987c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.12.9.0/24 Signature Algorithm: sha256WithRSAEncryption 51:5b:e9:d5:0a:de:d8:06:9e:60:7f:89:ce:17:63:42:42:22: 0e:c8:5f:2f:1b:87:f9:1d:7f:91:0f:25:ed:c7:42:a2:83:00: 7b:a7:25:d6:41:24:16:42:63:76:ca:4e:a1:95:38:a4:af:b5: 21:16:7e:46:cf:be:96:80:dd:2e:da:b0:bb:6d:a5:29:ac:40: 19:0f:16:55:cb:a3:3c:d1:36:e6:4b:cc:23:e9:ee:30:1a:70: e5:ec:02:db:cf:a0:c9:d6:39:5a:49:98:10:6c:c8:c8:c8:c8: 78:04:81:cf:d8:83:a2:63:2b:e2:92:10:67:c6:9b:01:dd:e1: 4b:17:6e:a7:35:46:e1:1f:c9:f9:4f:b3:f2:f1:4d:42:03:e3: b6:ec:f7:be:7f:69:0c:58:c6:f9:61:10:04:e5:07:99:c9:c5: cb:22:44:0d:ce:14:b5:f3:d7:a2:3e:42:32:e0:7f:90:dc:87: 4a:90:f5:ae:f6:cb:ff:b5:2c:28:e7:c5:88:64:a2:7c:9f:de: 3e:83:bf:52:08:6f:c9:2c:3e:ea:33:f6:7e:43:15:a4:b3:cf: 22:53:ce:c4:69:cd:7a:6d:a1:b3:af:b6:11:8b:56:44:c5:c1: d7:5b:eb:f9:4a:8a:c9:4e:fb:7d:21:89:3a:a7:75:e7:07:1f: 85:2a:60:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOPMZGuImyQCA6OA2BuQFH8Uac2YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxY2M1ZDI3MzhjZjE2ZDYzZjA0MmIwNmQ1MjhlZmQ2NTM4 ZmRjNDRhZjRmY2IyNWZiY2RkYjAzOTkwZGNjODliMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSjpK7L1Vy2hLkIhWO/oU+Xr4fyv5I1vZNQc2CbPX7ltcm ZTVpOZuSzDSI+gczi1eB8USLvwaoihh+zkeLJFBE8A+eeAz3iQZpF1JFQR/2Bjzn kAIQ8B/9xkbzY9jAqkYYXLp15MwiRnFnlYvWYrk0pxODk/2JsQ8MHSbeKtY6DAy2 7cr8ZWDSZxDR7hrGMf+mo7mUUG4B6uuWPnDtZOnCdRMwDjNWEBjaOpr0mPSNp89+ qkiLVVl20A3MX04jrasN7QVK08NtCG7V5Uv1wsjOmq78T5rD3CZzCgblZCOI+xlY SphGvBfGr3QlGuklExPgoaRM853z/CKN0j9Wgte/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWoZ6I8W/1nyGdPpr4pFcOsz+foMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUyZDllODU1LTE3MzUtNDZjMC1iMzcwLTA4ODJhNjk4N2M5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAQDAkwDQYJKoZIhvcNAQELBQADggEBAFFb6dUK3tgGnmB/ic4XY0JCIg7I Xy8bh/kdf5EPJe3HQqKDAHunJdZBJBZCY3bKTqGVOKSvtSEWfkbPvpaA3S7asLtt pSmsQBkPFlXLozzRNuZLzCPp7jAacOXsAtvPoMnWOVpJmBBsyMjIyHgEgc/Yg6Jj K+KSEGfGmwHd4UsXbqc1RuEfyflPs/LxTUID47bs975/aQxYxvlhEATlB5nJxcsi RA3OFLXz16I+QjLgf5Dch0qQ9a72y/+1LCjnxYhkonyf3j6Dv1IIb8ksPuoz9n5D FaSzzyJTzsRpzXptobOvthGLVkTFwddb6/lKislO+30hiTqndecHH4UqYGo= -----END CERTIFICATE-----Generated at Fri Sep 22 17:21:13 2023 by rpki-client on console-ams.rpki-client.org