$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/740d29af-9421-419c-bc0c-692574e59cf6.roa File: 740d29af-9421-419c-bc0c-692574e59cf6.roa (raw, json) Hash identifier: PXkJR9uvy3wkL4UY8bMJZ2wWzjx/zCI4iz8xJApNBpA= Subject key identifier: 04:FF:55:3D:D3:76:1E:FA:E5:B1:88:4F:96:4C:EA:13:31:4B:E0:D8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5EDD5216D8C9B790DA763FE46024BC55A9667BE4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/740d29af-9421-419c-bc0c-692574e59cf6.roa Signing time: Tue 29 Aug 2023 00:00:00 +0000 ROA not before: Tue 29 Aug 2023 00:00:00 +0000 ROA not after: Tue 03 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f60:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Aug 2023 12:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:dd:52:16:d8:c9:b7:90:da:76:3f:e4:60:24:bc:55:a9:66:7b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 00:00:00 2023 GMT Not After : Oct 3 23:59:59 2023 GMT Subject: serialNumber=5b4ca7132d78fad709256a212cb85b49b6732aac50a7f5f6a543373b97193506, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:55:e7:e4:f9:c4:5d:25:ca:5d:53:6f:dd: b8:d5:7c:1a:73:3f:ee:ea:08:ca:b8:ba:d4:3d:70: 18:fc:36:ac:40:21:aa:0f:8e:25:e6:8a:8a:9d:41: ae:de:6a:96:2c:fc:f5:37:0a:88:f5:e7:3c:9f:8d: e6:2b:da:94:8b:7d:89:2e:22:53:82:c6:99:0e:46: ef:81:3f:d7:ad:e6:d1:fb:a7:d4:62:33:42:5a:a5: b4:54:98:df:bb:21:85:19:d0:b4:29:6f:5b:8d:f7: c9:7c:f9:e0:22:d3:1b:4a:6f:3f:3e:61:f7:b5:86: d8:36:fe:2d:f0:b9:7e:7e:b6:e3:6a:28:4b:b6:4c: 86:9c:87:e4:40:cf:2c:57:ac:ba:c7:c1:d9:0b:13: ff:81:e2:e8:f5:3e:0a:9b:f6:77:81:6a:1f:95:7d: 79:be:e9:1f:5c:16:02:ec:4f:7e:65:1c:21:6c:cc: d1:29:89:36:ce:40:36:b4:e8:df:3d:78:a9:4a:a9: 47:64:3a:2f:da:3e:bb:2d:e8:7c:04:c9:37:f6:fb: a2:47:f2:09:30:22:9f:6e:89:d1:7b:2c:13:43:c1: 29:97:68:a4:24:1e:5d:00:07:e3:27:db:66:77:e1: a3:fe:85:f2:b0:6f:f4:f4:c5:8d:26:51:2c:b8:30: c1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FF:55:3D:D3:76:1E:FA:E5:B1:88:4F:96:4C:EA:13:31:4B:E0:D8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/740d29af-9421-419c-bc0c-692574e59cf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f60:1000::/40 Signature Algorithm: sha256WithRSAEncryption 5c:af:69:de:99:42:2b:d9:96:c5:b5:ed:c8:f6:5e:96:f4:66: 46:30:37:15:74:95:f9:3e:f5:9a:a2:90:f9:47:7f:23:0a:00: cf:4c:33:16:60:e9:52:7b:d8:c2:a5:2e:48:cb:67:5f:51:ff: 06:b6:9b:59:da:cf:84:50:9e:e3:99:b5:28:2c:7a:c1:cf:7d: e6:46:e8:8f:38:ca:7b:50:5f:88:36:01:a4:fb:e1:0b:8d:1e: a7:98:07:b8:02:61:4c:ab:a6:25:19:b9:bc:17:2d:40:9d:d1: 9f:ca:a4:75:45:4e:89:79:7e:e7:55:f0:2e:4c:10:bb:ce:10: 5c:99:d7:a1:56:d8:0c:17:13:f3:87:54:06:7a:1c:ca:9b:fa: 05:7b:84:76:40:f9:5e:3d:ce:83:f2:0e:64:f3:62:3f:72:13: d9:b2:5b:38:1a:51:a0:7c:8d:21:2f:6f:7f:8c:7e:bc:bd:20: b6:cb:d6:97:ce:46:fa:f7:b4:d4:11:05:a5:05:13:b5:e4:6d: 81:2c:0d:42:bc:6d:3c:76:28:a2:ee:f8:9a:77:d1:21:9e:6f: 12:2a:d2:12:58:6c:e7:b2:c1:6f:48:de:38:03:1f:01:bb:6d: 1a:c3:15:db:15:9a:5d:57:a4:95:a3:df:e1:d1:d5:25:4c:7d: ed:2b:e3:90 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXt1SFtjJt5Dadj/kYCS8Valme+QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI5MDAwMDAwWhcNMjMxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjRjYTcxMzJkNzhmYWQ3MDkyNTZhMjEyY2I4NWI0OWI2 NzMyYWFjNTBhN2Y1ZjZhNTQzMzczYjk3MTkzNTA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs0VXn5PnEXSXKXVNv3bjVfBpzP+7qCMq4utQ9cBj8NqxA IaoPjiXmioqdQa7eapYs/PU3Coj15zyfjeYr2pSLfYkuIlOCxpkORu+BP9et5tH7 p9RiM0JapbRUmN+7IYUZ0LQpb1uN98l8+eAi0xtKbz8+Yfe1htg2/i3wuX5+tuNq KEu2TIach+RAzyxXrLrHwdkLE/+B4uj1Pgqb9neBah+VfXm+6R9cFgLsT35lHCFs zNEpiTbOQDa06N89eKlKqUdkOi/aPrst6HwEyTf2+6JH8gkwIp9uidF7LBNDwSmX aKQkHl0AB+Mn22Z34aP+hfKwb/T0xY0mUSy4MME1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUBP9VPdN2HvrlsYhPlkzqEzFL4NgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc0MGQyOWFmLTk0MjEtNDE5Yy1iYzBjLTY5MjU3NGU1OWNmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9gEDANBgkqhkiG9w0BAQsFAAOCAQEAXK9p3plCK9mWxbXtyPZelvRm RjA3FXSV+T71mqKQ+Ud/IwoAz0wzFmDpUnvYwqUuSMtnX1H/BrabWdrPhFCe45m1 KCx6wc995kbojzjKe1BfiDYBpPvhC40ep5gHuAJhTKumJRm5vBctQJ3Rn8qkdUVO iXl+51XwLkwQu84QXJnXoVbYDBcT84dUBnocypv6BXuEdkD5Xj3Og/IOZPNiP3IT 2bJbOBpRoHyNIS9vf4x+vL0gtsvWl85G+ve01BEFpQUTteRtgSwNQrxtPHYoou74 mnfRIZ5vEirSElhs57LBb0jeOAMfAbttGsMV2xWaXVeklaPf4dHVJUx97SvjkA== -----END CERTIFICATE-----Generated at Tue Aug 29 00:48:24 2023 by rpki-client on console-ams.rpki-client.org