$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68796c7a-7f37-4084-9ec4-be542d3131a6.roa File: 68796c7a-7f37-4084-9ec4-be542d3131a6.roa (raw, json) Hash identifier: NmcMG6jJaFZpqKCU3z05Yd9SzIqGTuarNEhjCIuzomw= Subject key identifier: 1A:0E:C0:10:36:2B:6A:14:B4:86:E7:2D:BE:EA:C4:D5:5A:27:B3:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2756C515D9A8A50343935894D6949254547C005F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68796c7a-7f37-4084-9ec4-be542d3131a6.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 216.39.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:56:c5:15:d9:a8:a5:03:43:93:58:94:d6:94:92:54:54:7c:00:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=c62c40f3f9da1900a7aeb8ce1bea52db9915f44849fe60cbbdf07469556a1877, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:36:53:3e:d8:49:c4:b9:e3:42:e6:6a:fc: 9a:33:b4:29:c8:bf:d9:e5:50:d4:4a:8f:e8:27:9b: fd:14:ed:89:5f:4d:29:d7:dc:b7:24:41:29:56:6c: de:c6:03:cc:bc:9e:98:67:be:95:61:3a:fc:d6:3f: ba:c3:92:a4:63:a3:4a:43:ea:e9:f2:55:ea:be:c4: ba:52:ab:90:dc:41:94:60:c3:92:3f:cc:35:09:e8: c0:9b:51:bb:90:df:67:87:99:0b:3d:5e:b6:dc:54: 1b:47:90:5b:a3:ab:27:0b:59:79:97:b8:49:1d:e0: 46:59:50:cd:4f:2b:c9:d1:a8:44:b0:50:af:9a:c3: 53:af:46:e7:8a:19:e8:de:1d:f7:9f:b7:22:e5:fe: 6e:b7:d6:4f:e0:80:5c:7f:d9:c8:04:3a:d3:a0:b8: a2:e6:1f:0a:c9:5e:47:a0:2b:1e:b2:49:b7:b4:0c: 62:02:6a:97:0a:e6:a0:b7:ff:a5:81:39:70:5d:e1: 2c:28:00:ba:7c:6a:85:61:16:b2:bc:1a:c5:48:0e: c8:09:36:58:f3:e1:50:dd:1a:da:ee:e4:e0:9e:1c: 62:f6:f8:8a:64:b0:16:1e:7e:33:ff:42:85:47:35: 63:73:59:c7:d8:56:74:38:f3:47:7f:02:8e:75:4b: 61:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0E:C0:10:36:2B:6A:14:B4:86:E7:2D:BE:EA:C4:D5:5A:27:B3:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68796c7a-7f37-4084-9ec4-be542d3131a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.39.136.0/21 Signature Algorithm: sha256WithRSAEncryption a0:b5:a6:07:b7:40:19:1e:51:7a:a5:e4:a9:8b:df:08:04:ea: 61:dc:c9:3c:99:52:a7:d0:a7:da:6e:1a:73:a4:57:ee:4f:b5: 9b:e5:0d:de:ea:18:9a:7a:cb:e5:b6:53:dd:26:e8:ab:2c:f3: 74:33:9d:d4:f8:8d:76:17:43:48:ed:b4:fd:44:cf:3a:1a:16: a7:28:d2:fe:af:79:e9:d6:68:3c:78:61:4c:aa:a2:4a:df:8a: 91:c4:f7:15:95:e9:74:4d:46:23:3b:98:b7:18:79:e9:c7:06: 97:6b:d0:46:3b:8b:6b:11:b0:3e:f2:19:b6:98:73:6b:6b:cd: f5:44:2d:7f:ca:5a:64:18:c7:18:e7:c8:f8:fa:61:4c:d0:c2: 88:fc:02:97:be:15:66:eb:bb:b0:73:40:6b:fb:46:23:f4:6a: fd:4a:a5:b8:a6:e9:47:11:08:97:6a:fb:1a:ca:8a:5d:b9:2d: cb:ed:95:49:46:80:69:d8:b5:cc:f6:61:82:f6:6b:81:82:73: f0:d7:a2:80:71:fe:cf:cd:73:2b:b7:03:ee:39:1e:fe:a6:8f: ea:be:70:15:4d:80:c7:9d:40:01:f6:12:71:4b:26:0b:b0:7f: 04:8f:51:f5:b6:fb:2c:7c:c0:44:90:f1:90:f1:1c:d1:47:6c: 08:ac:5d:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ1bFFdmopQNDk1iU1pSSVFR8AF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjJjNDBmM2Y5ZGExOTAwYTdhZWI4Y2UxYmVhNTJkYjk5 MTVmNDQ4NDlmZTYwY2JiZGYwNzQ2OTU1NmExODc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAKDZTPthJxLnjQuZq/JoztCnIv9nlUNRKj+gnm/0U7Ylf TSnX3LckQSlWbN7GA8y8nphnvpVhOvzWP7rDkqRjo0pD6unyVeq+xLpSq5DcQZRg w5I/zDUJ6MCbUbuQ32eHmQs9XrbcVBtHkFujqycLWXmXuEkd4EZZUM1PK8nRqESw UK+aw1OvRueKGejeHfeftyLl/m631k/ggFx/2cgEOtOguKLmHwrJXkegKx6ySbe0 DGICapcK5qC3/6WBOXBd4SwoALp8aoVhFrK8GsVIDsgJNljz4VDdGtru5OCeHGL2 +IpksBYefjP/QoVHNWNzWcfYVnQ480d/Ao51S2HzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGg7AEDYrahS0huctvurE1Vons4kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4Nzk2YzdhLTdmMzctNDA4NC05ZWM0LWJlNTQyZDMxMzFhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPYJ4gwDQYJKoZIhvcNAQELBQADggEBAKC1pge3QBkeUXql5KmL3wgE6mHc yTyZUqfQp9puGnOkV+5PtZvlDd7qGJp6y+W2U90m6Kss83QzndT4jXYXQ0jttP1E zzoaFqco0v6veenWaDx4YUyqokrfipHE9xWV6XRNRiM7mLcYeenHBpdr0EY7i2sR sD7yGbaYc2trzfVELX/KWmQYxxjnyPj6YUzQwoj8Ape+FWbru7BzQGv7RiP0av1K pbim6UcRCJdq+xrKil25LcvtlUlGgGnYtcz2YYL2a4GCc/DXooBx/s/Ncyu3A+45 Hv6mj+q+cBVNgMedQAH2EnFLJguwfwSPUfW2+yx8wESQ8ZDxHNFHbAisXcI= -----END CERTIFICATE-----Generated at Sat Sep 23 00:38:45 2023 by rpki-client on console-ams.rpki-client.org