$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bb4c791-bbe0-4038-bbb8-fd743b6dac1e.roa File: 6bb4c791-bbe0-4038-bbb8-fd743b6dac1e.roa (raw, json) Hash identifier: essKFR0dDhtpj3GMoLMKpuFQjH5Z2ctQZMw3V+C9DiA= Subject key identifier: 5C:D9:20:AF:B8:EB:49:73:52:51:D1:BD:BA:19:12:6D:F7:37:5D:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 251F28FD4E21DC63707C4AD18AEDA5304D153F4A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bb4c791-bbe0-4038-bbb8-fd743b6dac1e.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 156.4.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:1f:28:fd:4e:21:dc:63:70:7c:4a:d1:8a:ed:a5:30:4d:15:3f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=ceb1ae8251e11ce89e8f1ff7993738947fa100fb939492d255af9f9701b1038d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:d1:ea:aa:fc:2e:ce:64:b0:44:42:4a:79: 7e:be:d0:ea:7b:10:29:47:79:77:a2:52:9b:5a:ad: e8:e4:66:e6:f0:a3:20:0b:78:94:f7:4c:6b:6a:e7: aa:f1:e2:0b:24:91:ee:6b:65:8e:3f:72:f8:fc:d1: 1c:5b:4e:fc:1b:4a:ac:20:2e:b9:fb:73:4a:b2:1d: 3c:a2:14:dc:e2:d2:0e:89:83:7c:01:04:93:35:13: 14:84:10:52:17:eb:24:18:01:9f:a6:8c:18:bf:76: cc:ee:96:2e:03:5b:18:dc:c5:38:13:6e:cd:66:ed: 7b:a0:3e:ea:7c:1d:1b:c2:5a:77:3a:de:99:9d:30: 9a:27:f1:88:1c:51:13:f9:fe:2e:11:29:24:d1:01: 67:ae:13:ef:3e:33:94:b1:4f:42:6d:2b:ea:10:f5: be:57:ae:3f:bd:74:f6:eb:b9:20:5f:60:65:4c:ee: 1a:a1:d9:d4:64:41:a8:36:67:04:da:d0:11:32:96: a3:e7:60:e9:e5:f7:72:9f:76:56:9b:3a:d0:73:f0: 94:d2:0a:77:a6:b5:d8:71:7a:12:06:2f:58:2e:e1: 97:64:f1:0d:6c:41:71:3d:a2:42:59:31:22:9b:a5: 75:58:17:5b:1b:3f:68:c7:b2:c5:2c:cd:a0:f8:03: 90:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D9:20:AF:B8:EB:49:73:52:51:D1:BD:BA:19:12:6D:F7:37:5D:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bb4c791-bbe0-4038-bbb8-fd743b6dac1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.4.0.0/16 Signature Algorithm: sha256WithRSAEncryption 54:56:58:f4:12:e9:3a:1b:22:31:ba:bb:fa:c9:a2:04:3a:d8: 33:e5:67:db:bd:64:dd:5f:11:63:08:fa:fd:0b:11:1f:1f:72: 82:47:9c:7b:64:38:47:85:26:bc:03:98:e2:4e:cb:3b:c6:fb: 52:91:f9:89:d4:34:94:58:ed:06:ce:04:9a:6e:e0:62:b2:34: b2:aa:f4:0f:e8:ce:d9:fb:2d:06:00:83:ed:84:ec:5d:d0:32: 75:0d:a7:3a:13:c8:06:8a:9c:29:35:f3:78:79:f0:53:15:46: 9b:7d:98:af:92:d0:f9:f1:a6:83:15:49:89:c2:d3:36:5a:62: 37:3b:fb:b0:9a:1a:7d:89:a2:2d:0e:7f:73:3a:f8:c8:3b:ea: 41:de:be:9f:33:1f:76:14:22:6f:f7:73:e6:44:52:64:17:c3: be:21:9a:d5:ce:94:ce:57:76:bc:d0:07:de:f7:9a:78:5f:57: 33:20:a7:94:b5:eb:2e:6a:65:9b:d8:67:3b:bf:fa:2d:23:7c: 2c:79:db:ea:a4:f4:4f:d5:40:3e:88:59:7f:37:6f:f7:d6:ab: 21:46:6c:91:db:d1:61:ac:5e:e5:61:26:61:f5:f5:29:56:85: 1e:95:8e:a1:24:0e:2a:a3:bc:1e:38:10:09:a8:61:e0:d6:05: f4:ab:77:27 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJR8o/U4h3GNwfErRiu2lME0VP0owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWIxYWU4MjUxZTExY2U4OWU4ZjFmZjc5OTM3Mzg5NDdm YTEwMGZiOTM5NDkyZDI1NWFmOWY5NzAxYjEwMzhkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+DdHqqvwuzmSwREJKeX6+0Op7EClHeXeiUptarejkZubw oyALeJT3TGtq56rx4gskke5rZY4/cvj80RxbTvwbSqwgLrn7c0qyHTyiFNzi0g6J g3wBBJM1ExSEEFIX6yQYAZ+mjBi/dszuli4DWxjcxTgTbs1m7XugPup8HRvCWnc6 3pmdMJon8YgcURP5/i4RKSTRAWeuE+8+M5SxT0JtK+oQ9b5Xrj+9dPbruSBfYGVM 7hqh2dRkQag2ZwTa0BEylqPnYOnl93KfdlabOtBz8JTSCnemtdhxehIGL1gu4Zdk 8Q1sQXE9okJZMSKbpXVYF1sbP2jHssUszaD4A5DbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUXNkgr7jrSXNSUdG9uhkSbfc3XZEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZiYjRjNzkxLWJiZTAtNDAzOC1iYmI4LWZkNzQzYjZkYWMxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCcBDANBgkqhkiG9w0BAQsFAAOCAQEAVFZY9BLpOhsiMbq7+smiBDrYM+Vn 271k3V8RYwj6/QsRHx9ygkece2Q4R4UmvAOY4k7LO8b7UpH5idQ0lFjtBs4Emm7g YrI0sqr0D+jO2fstBgCD7YTsXdAydQ2nOhPIBoqcKTXzeHnwUxVGm32Yr5LQ+fGm gxVJicLTNlpiNzv7sJoafYmiLQ5/czr4yDvqQd6+nzMfdhQib/dz5kRSZBfDviGa 1c6Uzld2vNAH3veaeF9XMyCnlLXrLmplm9hnO7/6LSN8LHnb6qT0T9VAPohZfzdv 99arIUZskdvRYaxe5WEmYfX1KVaFHpWOoSQOKqO8HjgQCahh4NYF9Kt3Jw== -----END CERTIFICATE-----Generated at Fri Sep 22 15:45:16 2023 by rpki-client on console-ams.rpki-client.org