$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78f5b473-02bd-4a3a-a396-ce1267992825.roa File: 78f5b473-02bd-4a3a-a396-ce1267992825.roa (raw, json) Hash identifier: 948cNgkmeppM9Sq71PZbvv6AD6xv3qmyL7BnDHeIAdo= Subject key identifier: AA:F7:DC:74:8B:26:7B:69:33:EA:1B:DC:E3:60:0F:C1:DE:1A:2D:60 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2278AB324448DAC007DDA05F47308C3810B84D42 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78f5b473-02bd-4a3a-a396-ce1267992825.roa Signing time: Mon 28 Aug 2023 00:00:00 +0000 ROA not before: Mon 28 Aug 2023 00:00:00 +0000 ROA not after: Mon 02 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 56.230.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Aug 2023 03:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:78:ab:32:44:48:da:c0:07:dd:a0:5f:47:30:8c:38:10:b8:4d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 28 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2023 GMT Subject: serialNumber=1e116aba3a61213e3abfb14a8eb86846bafc563cc107c4cb56f3dbefe8028838, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:1b:ff:ca:a9:27:84:6d:aa:31:e1:4d:8f: 69:aa:c7:1c:2e:c4:22:8a:56:9b:24:0b:f0:29:9e: dd:41:cc:37:68:13:e3:7d:b8:4d:64:08:dc:bc:74: 6f:9b:c2:bf:b0:cb:1c:5a:e5:2b:4b:60:ae:df:0a: c9:44:be:40:93:e8:40:a3:30:f4:0a:28:ff:30:1e: 16:31:cb:92:e1:1c:f3:92:15:c4:6a:1c:2e:f4:e3: 60:fb:93:41:9e:98:39:2b:89:54:c9:a2:af:7d:d2: ad:40:52:40:7d:df:62:9a:ae:b9:09:53:6b:45:92: bb:eb:54:2e:02:23:78:fa:07:82:88:af:d2:76:3d: 51:f6:d6:3d:79:b4:06:dd:16:2d:b2:23:da:d6:d9: a8:ad:0e:bb:57:ad:4c:8a:9c:c8:cd:62:f4:34:06: a2:9b:ed:92:60:41:53:a5:5a:87:81:d7:32:60:38: d8:62:cc:54:b8:6d:0c:41:f8:48:75:32:0e:86:49: d1:d6:dc:d6:fb:10:45:87:c3:27:cf:01:8f:e7:d2: 22:d1:03:01:11:87:3d:0a:8a:d2:b4:da:23:11:fe: a8:97:aa:aa:ef:6b:4c:97:e0:87:10:02:a9:73:d7: 7f:0f:28:23:e9:3e:2f:8f:ea:28:7b:f9:5e:58:75: ed:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F7:DC:74:8B:26:7B:69:33:EA:1B:DC:E3:60:0F:C1:DE:1A:2D:60 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78f5b473-02bd-4a3a-a396-ce1267992825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.230.0.0/16 Signature Algorithm: sha256WithRSAEncryption ab:7a:8c:ac:aa:65:6f:83:78:1a:bc:40:6e:4d:1d:22:62:5b: 18:da:ba:30:4b:e0:2d:5a:7f:a1:11:02:b9:83:d4:4f:df:d7: e3:07:44:b6:be:d9:3a:0a:99:44:03:30:31:60:98:84:f5:ba: f9:a4:6b:a9:29:04:b9:3f:4b:a8:9b:1f:4b:c8:b1:76:33:ab: 63:d1:a8:b2:4d:b0:11:72:38:5d:e8:d3:81:57:9b:d1:b5:4b: 92:d5:b5:dc:af:5f:da:37:6f:8f:61:af:8b:4a:23:27:c4:90: 16:4d:d1:6b:e3:f8:c9:61:49:94:02:48:64:32:92:84:ef:02: 33:88:8d:a2:71:86:54:e3:74:d9:41:69:3a:c4:8a:ea:89:33: b3:f1:97:40:9d:f0:e1:d6:0a:27:b0:58:d7:9e:5c:c3:b3:9e: 13:a7:0f:51:2d:fd:1e:9b:f3:30:06:39:a9:24:eb:5b:ea:98: ee:f0:05:f6:e7:b8:34:fd:3d:95:5b:7e:e1:3b:b9:64:2d:78: c0:1b:0a:4b:cc:97:c4:32:75:f7:f9:61:46:51:89:1e:12:cf: 5d:9e:ee:08:ab:89:f8:90:82:0e:c9:d9:d2:74:2c:7f:16:63: 99:da:65:88:cf:d8:9f:0f:52:fa:59:3c:8f:dd:f4:3f:ff:05: 4a:c5:5c:d3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUInirMkRI2sAH3aBfRzCMOBC4TUIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTExNmFiYTNhNjEyMTNlM2FiZmIxNGE4ZWI4Njg0NmJh ZmM1NjNjYzEwN2M0Y2I1NmYzZGJlZmU4MDI4ODM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwAxv/yqknhG2qMeFNj2mqxxwuxCKKVpskC/Apnt1BzDdo E+N9uE1kCNy8dG+bwr+wyxxa5StLYK7fCslEvkCT6ECjMPQKKP8wHhYxy5LhHPOS FcRqHC7042D7k0GemDkriVTJoq990q1AUkB932KarrkJU2tFkrvrVC4CI3j6B4KI r9J2PVH21j15tAbdFi2yI9rW2aitDrtXrUyKnMjNYvQ0BqKb7ZJgQVOlWoeB1zJg ONhizFS4bQxB+Eh1Mg6GSdHW3Nb7EEWHwyfPAY/n0iLRAwERhz0KitK02iMR/qiX qqrva0yX4IcQAqlz138PKCPpPi+P6ih7+V5Yde0tAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUqvfcdIsme2kz6hvc42APwd4aLWAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4ZjViNDczLTAyYmQtNGEzYS1hMzk2LWNlMTI2Nzk5MjgyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA45jANBgkqhkiG9w0BAQsFAAOCAQEAq3qMrKplb4N4GrxAbk0dImJbGNq6 MEvgLVp/oRECuYPUT9/X4wdEtr7ZOgqZRAMwMWCYhPW6+aRrqSkEuT9LqJsfS8ix djOrY9Gosk2wEXI4XejTgVeb0bVLktW13K9f2jdvj2Gvi0ojJ8SQFk3Ra+P4yWFJ lAJIZDKShO8CM4iNonGGVON02UFpOsSK6okzs/GXQJ3w4dYKJ7BY155cw7OeE6cP US39HpvzMAY5qSTrW+qY7vAF9ue4NP09lVt+4Tu5ZC14wBsKS8yXxDJ19/lhRlGJ HhLPXZ7uCKuJ+JCCDsnZ0nQsfxZjmdpliM/Ynw9S+lk8j930P/8FSsVc0w== -----END CERTIFICATE-----Generated at Mon Aug 28 15:21:31 2023 by rpki-client on console-fra.rpki-client.org