$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/547e1a6d-6655-448f-a7d4-2f6205e19360.roa File: 547e1a6d-6655-448f-a7d4-2f6205e19360.roa (raw, json) Hash identifier: wlOYsbPPYLKGuc2Pfoy4dGv/HQ8/JQ73vm5aXJJLfK4= Subject key identifier: 8B:40:09:5A:D0:17:B5:BF:10:A6:B0:E1:CF:96:93:F4:5A:40:76:10 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68366CD7C23392508779E5EDAFE0FCFB3D13B693 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/547e1a6d-6655-448f-a7d4-2f6205e19360.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:36:6c:d7:c2:33:92:50:87:79:e5:ed:af:e0:fc:fb:3d:13:b6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=04556fe7e75b8a68f52db57502daa7382af72271ab5a0761845f21fcceaba740, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6f:26:de:d7:4a:07:79:d8:20:39:25:56:40: 69:77:cc:0f:4c:d1:f1:e9:54:f0:77:e7:88:5c:a7: 98:ed:00:05:01:f8:18:bf:15:42:54:46:51:32:8e: 19:f9:de:09:b3:3d:4a:16:dc:2e:98:ac:77:6b:ab: 42:ec:f5:7b:d4:ad:95:18:6c:8e:27:0c:ab:a0:c2: 34:07:3a:75:e6:35:c3:16:d7:b9:07:35:c7:11:63: 4a:cc:f6:16:c0:6e:20:4c:4f:d3:ff:7d:8a:a9:de: 84:57:2d:58:8f:71:05:cb:be:bb:79:8f:4d:42:82: 94:a5:1f:07:ae:15:fb:7a:8a:8e:63:26:ca:27:9c: 2e:cd:c6:73:a7:46:4d:9f:b3:6e:d5:e1:00:6f:fd: a8:51:24:53:00:6e:e9:4d:a6:0b:03:1f:df:65:c1: 74:4b:98:f9:32:a0:af:02:55:a5:99:e9:88:7e:34: c7:d4:bf:c5:0c:b0:66:1a:69:ed:b3:5d:78:81:ce: 94:49:06:6c:88:94:36:b1:af:dd:5b:cc:c7:8a:d4: 9e:8a:83:25:e4:11:97:2c:d8:d1:f0:5b:2e:c7:cc: a5:b7:5f:b3:55:88:ad:66:df:42:77:96:c6:a1:bc: be:37:c3:81:33:2b:aa:2e:c0:0c:ac:6d:ca:9d:e6: f7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:40:09:5A:D0:17:B5:BF:10:A6:B0:E1:CF:96:93:F4:5A:40:76:10 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/547e1a6d-6655-448f-a7d4-2f6205e19360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.240.0/24 Signature Algorithm: sha256WithRSAEncryption 73:12:c1:26:36:fa:6b:c2:1c:09:f6:dc:59:d8:89:37:67:e0: b2:7f:c7:96:ec:37:c6:58:0d:90:96:14:d1:b3:e7:b7:73:dd: 3d:ed:33:8e:f7:bf:8d:d8:6b:68:d0:17:4a:63:a8:86:13:ec: 4c:2a:c4:b0:c6:4c:51:45:8f:1c:a2:57:0f:32:3a:c2:54:b9: 4d:0b:70:3c:70:62:84:70:23:42:0e:64:80:00:78:07:33:b5: a0:de:61:be:20:28:e6:14:6c:88:77:73:02:92:00:86:d9:9d: 1f:f0:64:7b:4a:01:e3:54:15:95:2f:04:55:ce:2e:3b:87:9e: 14:cf:10:00:d6:32:aa:fb:f0:05:78:af:97:ab:bb:d8:0d:df: 0e:95:88:99:56:04:c6:e1:c1:ad:14:51:e2:a6:13:f8:6d:2c: 15:8c:69:a3:f2:25:87:e8:e7:e1:35:dd:2c:ed:c8:3e:66:9a: de:34:98:5a:a1:91:b4:ef:fd:aa:08:78:d3:f8:bc:81:76:5a: 30:15:07:3a:22:56:8d:9e:0b:08:1a:04:6b:00:b7:23:76:89: f5:f5:69:d5:fd:21:f5:f1:f5:52:52:47:07:66:f3:47:45:db: 0c:64:94:6c:09:32:23:33:c8:1f:d7:e7:30:69:ff:90:9b:ad: 3f:59:39:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaDZs18IzklCHeeXtr+D8+z0TtpMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDU1NmZlN2U3NWI4YTY4ZjUyZGI1NzUwMmRhYTczODJh ZjcyMjcxYWI1YTA3NjE4NDVmMjFmY2NlYWJhNzQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIbybe10oHedggOSVWQGl3zA9M0fHpVPB354hcp5jtAAUB +Bi/FUJURlEyjhn53gmzPUoW3C6YrHdrq0Ls9XvUrZUYbI4nDKugwjQHOnXmNcMW 17kHNccRY0rM9hbAbiBMT9P/fYqp3oRXLViPcQXLvrt5j01CgpSlHweuFft6io5j JsonnC7NxnOnRk2fs27V4QBv/ahRJFMAbulNpgsDH99lwXRLmPkyoK8CVaWZ6Yh+ NMfUv8UMsGYaae2zXXiBzpRJBmyIlDaxr91bzMeK1J6KgyXkEZcs2NHwWy7HzKW3 X7NViK1m30J3lsahvL43w4EzK6ouwAysbcqd5vdXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUi0AJWtAXtb8QprDhz5aT9FpAdhAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU0N2UxYTZkLTY2NTUtNDQ4Zi1hN2Q0LTJmNjIwNWUxOTM2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTfAwDQYJKoZIhvcNAQELBQADggEBAHMSwSY2+mvCHAn23FnYiTdn4LJ/ x5bsN8ZYDZCWFNGz57dz3T3tM473v43Ya2jQF0pjqIYT7EwqxLDGTFFFjxyiVw8y OsJUuU0LcDxwYoRwI0IOZIAAeAcztaDeYb4gKOYUbIh3cwKSAIbZnR/wZHtKAeNU FZUvBFXOLjuHnhTPEADWMqr78AV4r5eru9gN3w6ViJlWBMbhwa0UUeKmE/htLBWM aaPyJYfo5+E13SztyD5mmt40mFqhkbTv/aoIeNP4vIF2WjAVBzoiVo2eCwgaBGsA tyN2ifX1adX9IfXx9VJSRwdm80dF2wxklGwJMiMzyB/X5zBp/5CbrT9ZOcI= -----END CERTIFICATE-----Generated at Fri Sep 22 20:24:23 2023 by rpki-client on console-ams.rpki-client.org