$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca6bffe-b0c2-452a-ba04-285ef047a139.roa File: 5ca6bffe-b0c2-452a-ba04-285ef047a139.roa (raw, json) Hash identifier: n/m0+xcV6LdhBZa1dnExAHeVI4nl/CtkTgRcOEMJvCI= Subject key identifier: 37:7C:6B:4D:7F:12:FE:81:B6:28:85:F3:07:8A:B4:BC:B7:11:2A:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2DA7C011AE56850CE1B8896710D519E11D682E0B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca6bffe-b0c2-452a-ba04-285ef047a139.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 56.49.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a7:c0:11:ae:56:85:0c:e1:b8:89:67:10:d5:19:e1:1d:68:2e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=46dec434f74856e3769beff5fb31c93f943cd3f416cdfeaefaee348c7b5d5f54, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:52:74:43:d3:8b:ee:dc:9e:28:67:23:7b:fa: 42:d5:f3:f5:6e:7e:e4:9b:a0:b5:c2:57:e9:3c:d0: 3a:e7:58:94:7c:e5:09:df:aa:c2:9b:42:3e:d1:2b: 99:ce:ec:95:39:dd:27:9e:31:c5:7e:8b:c2:0f:8a: be:c4:a7:93:a8:4f:f8:6c:41:93:de:a3:d0:09:9d: 88:23:e4:85:dc:3d:e1:49:f3:fa:2a:bf:c9:04:d8: 17:c9:9a:9e:6f:d9:58:03:71:eb:62:68:0b:29:b8: bf:c6:ef:c4:15:3d:b9:1b:5d:ce:74:57:74:4f:a0: 91:98:c4:e9:7f:13:77:65:14:04:9d:3d:4e:23:61: 37:34:f2:66:a0:0a:af:81:ab:4a:ee:79:ca:d6:25: 11:8c:c9:3b:12:3d:dc:fd:12:2e:32:9c:a0:24:b9: f7:41:34:85:ff:8c:51:79:83:35:e6:09:67:d4:a8: 25:cc:88:22:0b:75:06:56:57:72:f2:3a:d3:b9:42: 3b:b0:4a:fb:b3:09:12:95:57:51:14:2d:36:5d:9f: 03:10:0b:8b:e6:18:6a:01:95:2f:87:be:c8:79:da: 73:4d:fa:fc:c9:18:ca:d6:af:fd:53:80:5e:24:a1: f2:12:a4:d3:3f:e5:97:68:e6:5d:b5:64:1d:c3:87: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7C:6B:4D:7F:12:FE:81:B6:28:85:F3:07:8A:B4:BC:B7:11:2A:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca6bffe-b0c2-452a-ba04-285ef047a139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.49.0.0/16 Signature Algorithm: sha256WithRSAEncryption ad:6b:a8:de:8a:11:40:b4:a3:78:65:ab:32:03:38:81:ef:40: ef:ee:39:8e:2f:0d:03:8c:c1:b8:3a:91:98:a3:e2:df:5d:ac: 96:58:33:81:fd:13:72:33:17:6d:ed:ad:22:73:87:ec:73:6c: 45:ab:8a:e3:52:98:9a:e1:ef:0b:e8:2f:8a:3a:fa:94:40:88: ad:ed:e9:4b:68:8d:40:e8:ed:9a:4b:18:be:d7:bd:cb:8f:64: 23:71:6c:7a:f9:74:3e:ef:b7:67:f3:81:ef:12:b8:8a:1d:1d: e1:6c:94:28:42:5f:cf:94:4e:20:15:43:5a:cf:5f:56:2d:09: 96:e3:e4:32:30:10:c8:b3:62:14:85:f2:d8:cd:89:d1:ec:e1: c4:61:02:da:99:b4:42:77:1d:46:34:62:38:4d:d2:e6:49:a6: e6:6c:27:c3:da:db:3b:eb:cd:d5:12:a2:3c:0c:b9:65:f2:00: 5a:a5:5f:ef:bc:dd:b4:42:0a:f8:39:9c:2d:42:01:8f:74:e6: 54:2b:97:2c:5f:a4:78:56:59:ff:b9:e9:3b:9d:0d:92:bb:f1: 29:dc:60:b9:db:cd:3d:3f:a4:e3:db:67:b4:17:a4:75:a6:3b: 75:1d:a7:83:6e:2a:a2:c0:0e:60:f6:54:77:b9:da:f2:fd:df: 3a:fb:da:42 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULafAEa5WhQzhuIlnENUZ4R1oLgswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmRlYzQzNGY3NDg1NmUzNzY5YmVmZjVmYjMxYzkzZjk0 M2NkM2Y0MTZjZGZlYWVmYWVlMzQ4YzdiNWQ1ZjU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSUnRD04vu3J4oZyN7+kLV8/VufuSboLXCV+k80DrnWJR8 5QnfqsKbQj7RK5nO7JU53SeeMcV+i8IPir7Ep5OoT/hsQZPeo9AJnYgj5IXcPeFJ 8/oqv8kE2BfJmp5v2VgDcetiaAspuL/G78QVPbkbXc50V3RPoJGYxOl/E3dlFASd PU4jYTc08magCq+Bq0ruecrWJRGMyTsSPdz9Ei4ynKAkufdBNIX/jFF5gzXmCWfU qCXMiCILdQZWV3LyOtO5QjuwSvuzCRKVV1EULTZdnwMQC4vmGGoBlS+Hvsh52nNN +vzJGMrWr/1TgF4kofISpNM/5Zdo5l21ZB3Dh3J1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUN3xrTX8S/oG2KIXzB4q0vLcRKg4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjYTZiZmZlLWIwYzItNDUyYS1iYTA0LTI4NWVmMDQ3YTEzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4MTANBgkqhkiG9w0BAQsFAAOCAQEArWuo3ooRQLSjeGWrMgM4ge9A7+45 ji8NA4zBuDqRmKPi312sllgzgf0TcjMXbe2tInOH7HNsRauK41KYmuHvC+gvijr6 lECIre3pS2iNQOjtmksYvte9y49kI3Fsevl0Pu+3Z/OB7xK4ih0d4WyUKEJfz5RO IBVDWs9fVi0JluPkMjAQyLNiFIXy2M2J0ezhxGEC2pm0QncdRjRiOE3S5kmm5mwn w9rbO+vN1RKiPAy5ZfIAWqVf77zdtEIK+DmcLUIBj3TmVCuXLF+keFZZ/7npO50N krvxKdxgudvNPT+k49tntBekdaY7dR2ng24qosAOYPZUd7na8v3fOvvaQg== -----END CERTIFICATE-----Generated at Fri Sep 22 22:31:05 2023 by rpki-client on console-ams.rpki-client.org