$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa File: 6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa (raw, json) Hash identifier: Y8NH5IxVB4YFun0LeYs3PbGtTM5RDcA4XjKKlRM/g50= Subject key identifier: 7C:25:96:21:54:C0:AF:98:15:5A:E8:B6:6E:74:A5:BB:D0:4A:6D:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 334427EAE0436FE26890AA9CD5D52F72E28A60D3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffe:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:44:27:ea:e0:43:6f:e2:68:90:aa:9c:d5:d5:2f:72:e2:8a:60:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=fe7d14212d2d4385be17ac4e0eb4f3ce815aa28189699b3f4772a6b30c7cea3f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:19:71:9c:4d:f1:2f:91:0e:41:8a:04:c9: 66:e6:01:55:8a:d3:a3:c4:34:7c:d4:e3:fc:4a:cd: 87:26:0f:2f:d2:1f:ee:86:3e:db:13:15:b9:e5:a4: b1:9f:56:7d:54:a4:85:b4:c2:73:63:11:bd:ea:b7: ca:e6:ed:fe:fa:06:f8:c4:5a:67:7a:33:c5:ba:61: 97:62:d7:f0:22:a6:38:66:29:20:7e:db:cd:1e:bf: 42:93:16:0b:b6:04:a0:65:75:0b:74:3f:c7:2a:98: 4c:e2:2a:dd:15:0d:cf:10:0e:35:c0:66:37:b9:9e: a7:70:76:8f:e4:c2:bb:b8:d4:9b:ab:c6:03:fc:e5: 70:0b:6f:5a:57:0d:70:21:5f:ec:09:2b:74:8b:86: 51:9e:f4:93:ee:00:06:50:a8:2e:e9:37:30:2f:2b: d8:07:3c:bb:ff:07:87:93:44:2a:0f:2d:94:c1:1b: 04:0c:7d:6e:01:07:8e:1e:33:18:0f:43:56:10:2f: 47:1f:9f:35:29:96:3b:00:14:39:59:71:b7:29:c0: 64:76:27:0c:52:5e:8a:ab:9b:6f:97:77:48:8f:5c: 6b:5b:0a:60:b1:a9:38:b6:99:ad:96:1c:9e:a1:11: c3:5d:54:3c:da:29:43:c1:84:bd:01:05:74:eb:6e: d3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:25:96:21:54:C0:AF:98:15:5A:E8:B6:6E:74:A5:BB:D0:4A:6D:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4a4e8f-b361-4d80-901d-67d3df6fa470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffe:5000::/40 Signature Algorithm: sha256WithRSAEncryption 0c:c3:b2:57:5a:f8:f8:d1:bb:02:51:65:75:c2:9e:7c:40:1f: 12:cf:14:95:7e:0a:e8:cb:4d:ea:3e:5b:ed:49:b9:45:57:6f: 7b:99:ad:8b:7e:1e:f5:7d:8e:0d:29:16:34:58:f4:0e:ac:79: 0f:9a:ba:50:9a:e9:b6:66:2d:22:18:0c:e2:54:22:95:3e:b2: 22:4e:57:c2:19:e7:50:d4:21:2f:97:de:55:93:31:9e:42:46: c5:18:f0:2e:40:1b:53:59:65:b4:a9:32:4c:40:de:13:97:80: 32:a5:4a:56:97:d1:cb:f5:14:c8:84:76:c4:f1:82:b4:b1:33: ad:69:5c:eb:7a:6f:0a:5d:c6:97:87:de:d3:8f:14:2d:db:0f: 3d:d4:19:20:16:43:52:c5:97:54:96:d1:8f:2f:8d:42:fc:f0: c8:69:cb:14:96:84:67:db:34:6e:b5:c3:d5:dc:10:27:e1:a8: 2a:62:da:8a:58:58:c1:cf:c6:8b:67:9a:0b:65:31:3e:33:ce: e4:a8:2f:82:d7:dc:69:13:bb:52:7d:54:da:1b:a0:76:51:06: f2:a3:88:91:fe:18:77:97:84:af:a6:0f:5a:31:3c:56:84:e6: df:43:be:50:33:ac:8e:8a:9b:01:23:b8:5c:4f:0a:5b:c5:2b: 21:9e:08:a7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUM0Qn6uBDb+JokKqc1dUvcuKKYNMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTdkMTQyMTJkMmQ0Mzg1YmUxN2FjNGUwZWI0ZjNjZTgx NWFhMjgxODk2OTliM2Y0NzcyYTZiMzBjN2NlYTNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHZBlxnE3xL5EOQYoEyWbmAVWK06PENHzU4/xKzYcmDy/S H+6GPtsTFbnlpLGfVn1UpIW0wnNjEb3qt8rm7f76BvjEWmd6M8W6YZdi1/Aipjhm KSB+280ev0KTFgu2BKBldQt0P8cqmEziKt0VDc8QDjXAZje5nqdwdo/kwru41Jur xgP85XALb1pXDXAhX+wJK3SLhlGe9JPuAAZQqC7pNzAvK9gHPLv/B4eTRCoPLZTB GwQMfW4BB44eMxgPQ1YQL0cfnzUpljsAFDlZcbcpwGR2JwxSXoqrm2+Xd0iPXGtb CmCxqTi2ma2WHJ6hEcNdVDzaKUPBhL0BBXTrbtNxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUfCWWIVTAr5gVWui2bnSlu9BKbW8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZhNGE0ZThmLWIzNjEtNGQ4MC05MDFkLTY3ZDNkZjZmYTQ3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/+UDANBgkqhkiG9w0BAQsFAAOCAQEADMOyV1r4+NG7AlFldcKefEAf Es8UlX4K6MtN6j5b7Um5RVdve5mti34e9X2ODSkWNFj0Dqx5D5q6UJrptmYtIhgM 4lQilT6yIk5XwhnnUNQhL5feVZMxnkJGxRjwLkAbU1lltKkyTEDeE5eAMqVKVpfR y/UUyIR2xPGCtLEzrWlc63pvCl3Gl4fe048ULdsPPdQZIBZDUsWXVJbRjy+NQvzw yGnLFJaEZ9s0brXD1dwQJ+GoKmLailhYwc/Gi2eaC2UxPjPO5KgvgtfcaRO7Un1U 2hugdlEG8qOIkf4Yd5eEr6YPWjE8VoTm30O+UDOsjoqbASO4XE8KW8UrIZ4Ipw== -----END CERTIFICATE-----Generated at Fri Sep 22 21:31:19 2023 by rpki-client on console-fra.rpki-client.org