$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa File: 5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa (raw, json) Hash identifier: m/fq4UVPQYscoQxbX1eKic+GNK/oZhwMRNey01Z4n+w= Subject key identifier: 20:93:93:C6:E5:F0:3F:50:30:35:EF:93:3D:C5:54:11:C4:36:A2:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40E5B0A1311B98E3DC6F39D820612FA7B57B1915 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:84af::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e5:b0:a1:31:1b:98:e3:dc:6f:39:d8:20:61:2f:a7:b5:7b:19:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=0100e6484040d624e101bec3a080ea402b7e3a52165836d922eef86fc13c7b78, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c7:94:6e:87:9c:e3:2e:3f:f9:00:98:b0:37: 2f:fc:5c:cf:e2:63:5c:86:8f:fa:85:7a:a5:f5:d4: 96:70:4c:75:55:85:19:0a:eb:ad:c5:e6:5b:72:ad: ec:9b:d9:02:a7:9e:03:84:ef:e3:5b:59:42:dd:76: 49:66:88:ce:0f:66:29:6f:4a:f8:04:40:94:d3:92: 0b:fa:0d:19:c3:3c:4b:ca:06:00:89:34:f0:41:4b: 9e:59:f3:51:45:e7:b5:3f:f6:b6:4a:e3:5a:3f:08: 28:cd:00:be:90:10:ae:c4:40:91:ae:fe:a0:ed:27: b2:96:98:01:d1:e1:7f:3f:98:5f:82:14:92:bf:cd: 89:28:00:ad:d6:95:2e:11:e2:a9:17:f0:0c:50:12: 4e:3b:01:29:66:7e:19:76:d4:8a:c0:c5:30:59:1a: 29:8c:3f:ec:16:58:b9:a5:f0:b5:e5:51:1b:c0:dc: e7:9e:4c:b5:fb:42:62:2e:28:5f:f6:ab:9b:7a:e4: 1a:85:11:c8:1e:52:0e:c3:e7:52:b2:62:fa:ef:9d: e9:26:f7:fc:eb:66:61:dc:83:b7:d1:a0:5d:f4:82: 74:93:e3:42:ce:82:d3:84:b3:fd:f4:0e:54:0d:f8: eb:52:c4:08:fd:0f:81:1a:d4:a3:4b:49:da:1e:43: 81:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:93:93:C6:E5:F0:3F:50:30:35:EF:93:3D:C5:54:11:C4:36:A2:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:84af::/48 Signature Algorithm: sha256WithRSAEncryption 30:84:5a:6f:b2:8a:f7:42:b1:5c:d8:02:ea:94:7c:6a:54:c5: 9b:ef:41:7d:67:c9:1e:aa:11:8a:f1:10:35:3a:15:bc:e9:0e: d2:2d:3f:03:9f:17:98:d4:7b:de:2c:ed:61:ca:00:ca:65:de: b1:50:5b:39:e1:8e:dc:b8:8d:83:65:dd:56:87:36:a0:c7:fd: dc:a7:fe:31:1c:ce:c7:8f:6f:c4:05:63:16:38:53:3f:f7:24: f8:50:86:d5:ea:1a:f1:3f:37:a9:62:a0:29:24:71:d8:5e:b5: 30:c8:8e:52:ad:64:64:26:a3:c5:03:f1:62:39:aa:cc:5e:47: 37:3f:b4:48:05:fd:09:44:dd:ee:f1:c1:7b:66:ff:66:14:d4: 3f:48:ef:f4:0a:63:f8:d4:50:2b:96:e8:1a:4d:ef:c1:0f:a6: 90:02:8c:97:5b:bc:b9:ad:b0:b4:ac:41:8b:73:50:a4:65:ac: f7:d8:fa:8b:72:ae:b2:85:ac:6e:08:9f:ce:9d:94:1f:bc:cf: f6:db:38:4b:c1:43:e2:5c:0e:c1:a7:41:32:ff:d7:7c:d8:e1: 3a:d8:1f:4e:a7:5e:41:0a:58:20:c1:c1:70:57:be:46:40:df: 99:ff:20:5e:fe:6a:b0:9d:58:13:13:c9:31:75:6d:80:18:e7: e9:ab:ad:10 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQOWwoTEbmOPcbznYIGEvp7V7GRUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTAwZTY0ODQwNDBkNjI0ZTEwMWJlYzNhMDgwZWE0MDJi N2UzYTUyMTY1ODM2ZDkyMmVlZjg2ZmMxM2M3Yjc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDex5Ruh5zjLj/5AJiwNy/8XM/iY1yGj/qFeqX11JZwTHVV hRkK663F5ltyreyb2QKnngOE7+NbWULddklmiM4PZilvSvgEQJTTkgv6DRnDPEvK BgCJNPBBS55Z81FF57U/9rZK41o/CCjNAL6QEK7EQJGu/qDtJ7KWmAHR4X8/mF+C FJK/zYkoAK3WlS4R4qkX8AxQEk47ASlmfhl21IrAxTBZGimMP+wWWLml8LXlURvA 3OeeTLX7QmIuKF/2q5t65BqFEcgeUg7D51KyYvrvnekm9/zrZmHcg7fRoF30gnST 40LOgtOEs/30DlQN+OtSxAj9D4Ea1KNLSdoeQ4F1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIJOTxuXwP1AwNe+TPcVUEcQ2ol8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkNzJkYmJlLTJiODgtNDhhMS04MWY1LWI1NTA4MmFhODk0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9hK8wDQYJKoZIhvcNAQELBQADggEBADCEWm+yivdCsVzYAuqUfGpU xZvvQX1nyR6qEYrxEDU6FbzpDtItPwOfF5jUe94s7WHKAMpl3rFQWznhjty4jYNl 3VaHNqDH/dyn/jEczsePb8QFYxY4Uz/3JPhQhtXqGvE/N6lioCkkcdhetTDIjlKt ZGQmo8UD8WI5qsxeRzc/tEgF/QlE3e7xwXtm/2YU1D9I7/QKY/jUUCuW6BpN78EP ppACjJdbvLmtsLSsQYtzUKRlrPfY+otyrrKFrG4In86dlB+8z/bbOEvBQ+JcDsGn QTL/13zY4TrYH06nXkEKWCDBwXBXvkZA35n/IF7+arCdWBMTyTF1bYAY5+mrrRA= -----END CERTIFICATE-----Generated at Fri Sep 22 16:30:53 2023 by rpki-client on console-fra.rpki-client.org