$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b212d8c-b3f3-4dca-ac6f-3e2b7d10757a.roa File: 6b212d8c-b3f3-4dca-ac6f-3e2b7d10757a.roa (raw, json) Hash identifier: mUwht+SBzIgxkQcvwuyRjdw6+zkdzi2dzdxRkvs1i6c= Subject key identifier: 42:4C:27:25:68:FD:51:C6:71:33:8E:FE:1A:1A:D1:48:3E:E4:32:CB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6843C7841D1ACA35276EBEC91AA05D381369F9E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b212d8c-b3f3-4dca-ac6f-3e2b7d10757a.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 68.158.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 12:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:43:c7:84:1d:1a:ca:35:27:6e:be:c9:1a:a0:5d:38:13:69:f9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=ced7c3825a5b31f0ab2bbcab21a2e3adfc5a90d852b0c9f2e2b0d5a0883720bc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:1b:61:b6:3b:87:1f:3b:42:eb:5b:71:8e: d2:18:e1:67:3e:6e:6e:d4:3c:35:69:52:fb:8c:23: 0a:b4:0d:e0:8e:25:ab:c3:47:2e:5b:82:f8:40:2b: 61:00:57:06:ee:85:e2:b5:9c:63:e3:b1:81:8b:fe: ab:10:ee:95:a3:f4:d6:35:90:1f:ea:ba:f1:12:8c: f5:8b:59:37:cc:b0:3a:6e:ea:79:96:07:ad:bf:06: 09:d9:8f:0b:71:84:02:b7:6c:c7:a7:58:5f:be:87: 08:9d:08:da:c1:5d:ca:9f:25:1e:03:12:3f:8c:05: 36:68:56:9c:f0:fd:90:ff:61:44:f0:27:99:23:c6: 33:c9:4c:dc:97:55:4a:66:c8:ae:af:e2:44:d4:3c: 44:50:70:fb:48:e0:44:b3:96:97:de:7f:79:c2:71: c6:66:7c:a5:b5:de:fd:c1:f2:3c:aa:5d:a1:65:e2: 43:0c:4e:18:9c:6f:bb:83:24:ba:1a:cb:0f:b5:5b: 68:de:e1:30:17:0a:dd:67:35:c9:01:50:e3:79:1b: 3e:ac:11:2c:06:94:48:3f:b4:7b:b9:e5:b1:57:82: 4f:be:3e:eb:31:df:7e:bb:10:34:d5:1c:ab:7e:95: 61:42:90:ae:5b:24:c9:46:f9:95:99:b6:23:6b:98: cf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4C:27:25:68:FD:51:C6:71:33:8E:FE:1A:1A:D1:48:3E:E4:32:CB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b212d8c-b3f3-4dca-ac6f-3e2b7d10757a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 68.158.0.0/16 Signature Algorithm: sha256WithRSAEncryption 70:66:cb:a4:46:ac:ea:4a:0c:04:88:49:b2:ef:33:e2:95:07: 5f:44:c3:8b:cd:99:65:1f:77:ae:ed:cf:1e:9b:9d:24:16:44: 79:62:8c:eb:79:d2:61:f1:9d:85:ef:28:c4:cd:5b:ca:3a:5e: 08:45:50:0d:ab:09:5c:f7:7c:4e:6c:45:7e:73:9b:77:b0:ee: fe:7b:31:58:14:66:a7:ce:c8:e7:76:41:b0:41:ce:e0:5f:44: be:4b:6e:bc:35:98:5b:5f:70:7d:c7:c4:08:13:e1:27:56:f2: 18:29:c5:38:7f:59:a1:24:de:1b:f0:9f:48:f0:79:a8:05:47: b4:00:59:15:d1:f3:36:1e:6d:28:d0:45:ec:b2:3c:ad:da:b5: ee:3c:fb:73:20:ca:db:e9:bb:03:f7:61:d6:3c:10:c3:f8:2a: 47:9b:78:7d:3c:3b:46:cf:c0:bd:55:07:86:be:52:d1:1f:f4: f6:a9:c6:6e:aa:a5:f2:f2:b3:2c:8a:f2:ad:54:56:70:c8:91: 1e:a2:f3:37:36:8f:4e:f2:c7:a1:bf:67:13:b3:73:af:a8:99: 75:79:92:ca:55:5d:78:a4:62:d2:4e:3b:6b:ea:16:03:65:74: f1:e7:05:45:9b:90:c3:df:3e:c4:42:66:3b:5a:f4:92:ea:07: 55:66:34:79 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaEPHhB0ayjUnbr7JGqBdOBNp+ekwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWQ3YzM4MjVhNWIzMWYwYWIyYmJjYWIyMWEyZTNhZGZj NWE5MGQ4NTJiMGM5ZjJlMmIwZDVhMDg4MzcyMGJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv6hthtjuHHztC61txjtIY4Wc+bm7UPDVpUvuMIwq0DeCO JavDRy5bgvhAK2EAVwbuheK1nGPjsYGL/qsQ7pWj9NY1kB/quvESjPWLWTfMsDpu 6nmWB62/BgnZjwtxhAK3bMenWF++hwidCNrBXcqfJR4DEj+MBTZoVpzw/ZD/YUTw J5kjxjPJTNyXVUpmyK6v4kTUPERQcPtI4ESzlpfef3nCccZmfKW13v3B8jyqXaFl 4kMMThicb7uDJLoayw+1W2je4TAXCt1nNckBUON5Gz6sESwGlEg/tHu55bFXgk++ Pusx3367EDTVHKt+lWFCkK5bJMlG+ZWZtiNrmM91AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQkwnJWj9UcZxM47+GhrRSD7kMsswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZiMjEyZDhjLWIzZjMtNGRjYS1hYzZmLTNlMmI3ZDEwNzU3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBEnjANBgkqhkiG9w0BAQsFAAOCAQEAcGbLpEas6koMBIhJsu8z4pUHX0TD i82ZZR93ru3PHpudJBZEeWKM63nSYfGdhe8oxM1byjpeCEVQDasJXPd8TmxFfnOb d7Du/nsxWBRmp87I53ZBsEHO4F9EvktuvDWYW19wfcfECBPhJ1byGCnFOH9ZoSTe G/CfSPB5qAVHtABZFdHzNh5tKNBF7LI8rdq17jz7cyDK2+m7A/dh1jwQw/gqR5t4 fTw7Rs/AvVUHhr5S0R/09qnGbqql8vKzLIryrVRWcMiRHqLzNzaPTvLHob9nE7Nz r6iZdXmSylVdeKRi0k47a+oWA2V08ecFRZuQw98+xEJmO1r0kuoHVWY0eQ== -----END CERTIFICATE-----Generated at Fri Sep 22 00:27:52 2023 by rpki-client on console-ams.rpki-client.org