$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7511727c-3470-481c-a527-6610004e3acd.roa File: 7511727c-3470-481c-a527-6610004e3acd.roa (raw, json) Hash identifier: o/rUA56JNPEntedaT4/9Cs/oS0EomOFS6GFs5ETHrcA= Subject key identifier: 41:F1:BF:36:FE:0D:9E:44:A7:6D:6D:63:99:37:43:E0:F2:A4:00:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6870D37CCC3A22A87F71F50D172DF4E60B88D58F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7511727c-3470-481c-a527-6610004e3acd.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:70:d3:7c:cc:3a:22:a8:7f:71:f5:0d:17:2d:f4:e6:0b:88:d5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=b394a3a473aac8e68d993d86a42737a1feeff805f5ffda4896586eb1b9d6d146, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d6:03:8f:77:ef:76:43:24:16:7f:3b:ae:ed: 41:66:ae:b9:33:7b:82:4a:a7:f9:40:0a:bf:4f:c5: a8:3b:c5:26:82:d6:96:40:15:7a:32:53:a7:03:4a: 14:a4:06:1f:22:aa:f0:46:4b:8c:b5:11:bc:f0:2f: 49:ed:a1:22:23:a6:22:90:9d:53:46:06:d8:be:d5: 26:ee:a6:09:4e:4b:fa:59:be:09:d9:84:2a:36:83: dd:48:93:3e:2e:8b:69:18:8a:3b:fd:4b:e2:b4:90: 2e:69:31:c6:a4:01:1d:bd:c1:7d:2c:e9:e6:5e:c8: 5c:cb:6b:0f:ed:7b:ad:cf:8e:73:1d:7a:2b:33:60: 3e:03:c6:3e:9f:d6:c7:10:52:25:4b:01:4c:db:93: fa:de:b0:19:4c:1f:26:b8:a7:1b:84:33:57:7a:15: 70:30:3c:42:10:e6:d5:31:5c:bc:83:11:09:e8:05: 52:d2:c0:e5:9f:f8:2e:71:22:4b:e7:6d:9f:2c:38: c9:ff:c7:10:f9:2c:33:0a:aa:1b:20:d1:40:a8:2c: 51:de:c1:99:74:41:8c:fa:2a:83:9a:00:3c:35:b0: 25:68:ca:bc:8d:91:db:40:3d:fe:d8:84:93:50:6c: a8:c1:dc:42:23:60:bf:07:bc:16:97:7e:ae:2c:98: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F1:BF:36:FE:0D:9E:44:A7:6D:6D:63:99:37:43:E0:F2:A4:00:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7511727c-3470-481c-a527-6610004e3acd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.124.0/24 Signature Algorithm: sha256WithRSAEncryption 85:79:81:f5:b7:9c:52:e6:e4:36:4e:f4:1e:da:b7:ba:b9:1c: 13:f3:34:d6:a7:49:c1:7a:18:b1:6a:10:37:37:5b:dd:a8:2d: 39:1c:1a:d9:c2:37:95:59:0a:9c:08:ab:e6:c5:83:08:18:89: 96:53:ec:24:5d:ae:aa:12:81:35:fc:51:ae:90:d8:7c:80:09: 6a:ea:6b:bc:85:7c:52:34:02:ef:76:09:33:b2:d1:94:a4:34: 48:38:c2:09:74:08:3a:b6:a5:09:76:e0:5a:06:9a:a0:be:8a: 59:2c:08:73:3a:69:14:26:9a:95:0f:8a:cc:e0:2f:c3:60:4d: 39:32:0b:4b:bc:39:b7:ee:75:76:64:4c:84:81:ac:a3:a1:1f: c7:d6:28:1c:3f:26:e5:13:32:68:48:a9:0c:0e:22:24:c0:9b: db:7a:81:e5:9a:52:07:3f:d8:f5:ff:ac:db:fb:c3:7d:f3:33: ee:82:a2:e1:be:3e:19:e7:18:48:a0:35:45:05:ee:31:76:85: be:8f:fe:53:a5:42:7b:62:d7:e2:f5:ff:82:34:c8:45:56:8f: cd:1c:65:1a:ea:92:4b:27:bd:78:42:b2:42:cc:06:aa:c3:71: d0:73:a3:e0:19:0f:a1:66:a7:2e:9d:bf:13:bf:5e:73:01:3e: f7:4f:41:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaHDTfMw6Iqh/cfUNFy305guI1Y8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzk0YTNhNDczYWFjOGU2OGQ5OTNkODZhNDI3MzdhMWZl ZWZmODA1ZjVmZmRhNDg5NjU4NmViMWI5ZDZkMTQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz1gOPd+92QyQWfzuu7UFmrrkze4JKp/lACr9Pxag7xSaC 1pZAFXoyU6cDShSkBh8iqvBGS4y1EbzwL0ntoSIjpiKQnVNGBti+1SbupglOS/pZ vgnZhCo2g91Ikz4ui2kYijv9S+K0kC5pMcakAR29wX0s6eZeyFzLaw/te63PjnMd eiszYD4Dxj6f1scQUiVLAUzbk/resBlMHya4pxuEM1d6FXAwPEIQ5tUxXLyDEQno BVLSwOWf+C5xIkvnbZ8sOMn/xxD5LDMKqhsg0UCoLFHewZl0QYz6KoOaADw1sCVo yryNkdtAPf7YhJNQbKjB3EIjYL8HvBaXfq4smFIZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQfG/Nv4NnkSnbW1jmTdD4PKkABkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1MTE3MjdjLTM0NzAtNDgxYy1hNTI3LTY2MTAwMDRlM2FjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/HwwDQYJKoZIhvcNAQELBQADggEBAIV5gfW3nFLm5DZO9B7at7q5HBPz NNanScF6GLFqEDc3W92oLTkcGtnCN5VZCpwIq+bFgwgYiZZT7CRdrqoSgTX8Ua6Q 2HyACWrqa7yFfFI0Au92CTOy0ZSkNEg4wgl0CDq2pQl24FoGmqC+ilksCHM6aRQm mpUPiszgL8NgTTkyC0u8ObfudXZkTISBrKOhH8fWKBw/JuUTMmhIqQwOIiTAm9t6 geWaUgc/2PX/rNv7w33zM+6CouG+PhnnGEigNUUF7jF2hb6P/lOlQnti1+L1/4I0 yEVWj80cZRrqkksnvXhCskLMBqrDcdBzo+AZD6Fmpy6dvxO/XnMBPvdPQXc= -----END CERTIFICATE-----Generated at Sat Sep 23 00:18:54 2023 by rpki-client on console-fra.rpki-client.org