$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6004ddaf-e07f-4a7a-97b7-4a24d21690a5.roa File: 6004ddaf-e07f-4a7a-97b7-4a24d21690a5.roa (raw, json) Hash identifier: S7jfLjx31GfAXKUYBmAJe+IZBDl1JQ2zosZWHyAw/0A= Subject key identifier: 0F:62:71:44:24:D3:78:E7:CB:23:3E:92:4D:53:72:B7:19:40:06:06 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DFCEC8B529BE3F000B326512673F4C585AD7062 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6004ddaf-e07f-4a7a-97b7-4a24d21690a5.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:fc:ec:8b:52:9b:e3:f0:00:b3:26:51:26:73:f4:c5:85:ad:70:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=fa19ba2c98359770ffc96a595df52c1a3ab5ed8a7b44d43781ee018ab20a67d6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:f3:ed:f6:ef:7c:28:39:92:58:4f:dd:3e: 16:04:04:d1:95:5a:ce:a2:85:39:6d:2a:69:c3:3e: cc:72:01:19:21:c5:ea:2d:e7:9a:58:60:c9:34:ef: f8:78:e0:cd:a8:42:d5:b4:f7:0d:4a:14:99:68:93: 62:4f:4b:9e:55:16:46:de:55:32:48:37:d6:ce:f5: 99:e1:6f:d0:06:92:b2:31:98:80:ae:68:f6:89:3d: 82:df:db:1b:58:32:1e:bf:55:67:94:32:bc:de:85: 63:1e:c3:5f:05:f1:55:0b:cc:89:f7:c0:ef:2a:71: f2:2d:fb:a7:4c:bb:dd:96:51:b7:0e:e8:2f:d3:ac: fb:a0:ef:43:a4:23:84:22:68:d4:c6:c9:94:c3:a5: 56:c8:94:cd:32:a6:a6:31:2d:74:91:ca:55:1d:e0: da:24:6e:cf:6b:c1:f9:ed:73:a9:44:99:6b:f5:32: d2:90:b2:be:ce:c4:e1:9c:5a:ba:3e:d1:c8:a9:83: 5f:9f:ba:8e:b2:37:eb:58:39:31:0d:fb:27:36:c3: 02:b7:78:14:52:65:a9:c6:6c:76:5b:58:f2:3f:66: 8c:14:f8:4d:33:89:2d:ac:17:55:e8:66:2e:9d:92: c8:b6:fd:6c:18:26:5e:49:41:15:5d:5c:5b:bd:af: cd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:62:71:44:24:D3:78:E7:CB:23:3E:92:4D:53:72:B7:19:40:06:06 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6004ddaf-e07f-4a7a-97b7-4a24d21690a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:4000::/40 Signature Algorithm: sha256WithRSAEncryption d2:5b:c0:d6:e3:cc:53:d2:50:eb:e5:13:b3:d6:5e:7b:26:fc: 55:c8:84:f5:1f:e5:8c:47:42:5d:08:60:fd:43:6c:43:32:37: 50:c6:d1:4b:96:f5:5a:bb:17:d7:b6:e5:61:ad:64:67:d5:0a: bc:4d:23:7d:9c:f0:03:9b:28:d9:39:de:2a:2c:e6:00:df:24: 76:cc:27:2b:f3:db:b0:83:c6:a1:a6:02:71:da:ae:fc:5c:a3: ef:7e:de:c3:b1:1f:f5:1b:c9:c4:51:33:fe:b3:e0:61:f6:d1: 6c:7a:42:b0:53:a0:e5:7f:d5:5b:3c:80:33:ae:6f:57:34:39: 38:c8:94:ea:27:53:5c:f6:6f:3c:66:d4:47:9b:98:ec:ad:b2: 06:e4:87:a5:50:59:64:41:8e:4b:d3:2b:01:2c:6e:3a:4f:29: 77:c7:db:31:fa:a0:e4:f7:a4:22:dd:5a:5a:19:24:a6:08:90: 52:9f:73:10:6d:b3:2b:49:68:44:42:81:d0:00:9c:5e:91:fe: 56:fd:94:90:f4:aa:4a:23:55:f7:8a:94:30:d6:d2:73:41:72: 1a:29:0c:61:d5:9c:9b:79:fd:03:e4:87:44:3d:ff:31:1b:97: b8:0f:65:fc:7e:ea:ec:ef:82:71:c0:ca:66:20:33:64:2e:d6: 3b:69:47:45 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDfzsi1Kb4/AAsyZRJnP0xYWtcGIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTE5YmEyYzk4MzU5NzcwZmZjOTZhNTk1ZGY1MmMxYTNh YjVlZDhhN2I0NGQ0Mzc4MWVlMDE4YWIyMGE2N2Q2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZSPPt9u98KDmSWE/dPhYEBNGVWs6ihTltKmnDPsxyARkh xeot55pYYMk07/h44M2oQtW09w1KFJlok2JPS55VFkbeVTJIN9bO9Znhb9AGkrIx mICuaPaJPYLf2xtYMh6/VWeUMrzehWMew18F8VULzIn3wO8qcfIt+6dMu92WUbcO 6C/TrPug70OkI4QiaNTGyZTDpVbIlM0ypqYxLXSRylUd4Nokbs9rwfntc6lEmWv1 MtKQsr7OxOGcWro+0cipg1+fuo6yN+tYOTEN+yc2wwK3eBRSZanGbHZbWPI/ZowU +E0ziS2sF1XoZi6dksi2/WwYJl5JQRVdXFu9r83DAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUD2JxRCTTeOfLIz6STVNytxlABgYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYwMDRkZGFmLWUwN2YtNGE3YS05N2I3LTRhMjRkMjE2OTBhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//QDANBgkqhkiG9w0BAQsFAAOCAQEA0lvA1uPMU9JQ6+UTs9Zeeyb8 VciE9R/ljEdCXQhg/UNsQzI3UMbRS5b1WrsX17blYa1kZ9UKvE0jfZzwA5so2Tne KizmAN8kdswnK/PbsIPGoaYCcdqu/Fyj737ew7Ef9RvJxFEz/rPgYfbRbHpCsFOg 5X/VWzyAM65vVzQ5OMiU6idTXPZvPGbUR5uY7K2yBuSHpVBZZEGOS9MrASxuOk8p d8fbMfqg5PekIt1aWhkkpgiQUp9zEG2zK0loREKB0ACcXpH+Vv2UkPSqSiNV94qU MNbSc0FyGikMYdWcm3n9A+SHRD3/MRuXuA9l/H7q7O+CccDKZiAzZC7WO2lHRQ== -----END CERTIFICATE-----Generated at Fri Sep 22 22:27:00 2023 by rpki-client on console-fra.rpki-client.org