$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79483f1f-35c5-4ee2-9db8-c98fac055e03.roa File: 79483f1f-35c5-4ee2-9db8-c98fac055e03.roa (raw, json) Hash identifier: T3aJNfWATyUgcH08Y/FNQ6MwYKcx+t3yzHewvNN2NPI= Subject key identifier: D7:54:8C:57:2B:D3:FD:E8:88:AD:F7:97:EF:84:7D:A3:ED:07:6B:5B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79F8E3B4EEA4478DD54056EDCA0E59757B19AFFE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79483f1f-35c5-4ee2-9db8-c98fac055e03.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f68:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f8:e3:b4:ee:a4:47:8d:d5:40:56:ed:ca:0e:59:75:7b:19:af:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=689c91bc49589c0fcd5d20b90e96fe726dc5100a9476ac496aec3155778fa19b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:a1:17:18:b1:b9:b0:d7:a7:45:7c:ad:50: a0:bb:5c:ac:3e:64:75:c5:02:01:88:4a:87:52:bc: 0c:0e:10:14:19:76:3e:dc:0a:5e:25:5a:80:12:65: cf:46:65:b4:97:30:23:60:73:f2:ff:ff:95:18:e5: 15:4c:9f:7c:41:68:f7:f0:92:22:aa:6a:28:50:77: 9f:f7:4d:16:52:a9:d8:50:58:ae:cc:f6:cd:58:33: 78:c7:0a:04:70:24:53:77:0f:58:56:16:7d:a8:17: 03:9a:ac:9e:4b:75:aa:2f:60:d5:71:b7:f8:3f:32: 6e:bb:98:2d:d1:b1:15:cf:2b:22:c0:e5:01:d3:53: a2:c4:af:3e:dc:05:29:55:3f:5a:12:b4:7a:09:cc: 82:ad:6e:3d:22:4e:a2:38:bd:45:bf:dd:6d:9b:12: b3:ad:d7:ff:00:5b:1e:fc:34:d1:67:8d:71:e0:04: 3a:50:b3:56:c4:ad:90:2f:d3:fc:e1:88:3c:c7:3c: 84:0e:58:d7:43:a8:e7:95:7b:d1:db:7d:3a:48:ee: 27:25:fd:f8:72:7f:b8:65:3f:cd:31:35:00:98:4c: 95:3b:72:51:a7:cd:33:ad:cc:ac:d6:c5:87:f8:e4: 9e:37:f7:c8:b5:3f:90:70:3a:63:d8:29:ba:26:9a: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:54:8C:57:2B:D3:FD:E8:88:AD:F7:97:EF:84:7D:A3:ED:07:6B:5B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79483f1f-35c5-4ee2-9db8-c98fac055e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:a400::/40 Signature Algorithm: sha256WithRSAEncryption 82:e8:aa:a1:b1:c4:61:d2:95:68:da:6f:16:48:c2:9d:82:f3: b1:82:2a:f6:ef:2f:3c:ca:60:c2:47:41:0d:6e:a5:7a:d2:ce: 83:e5:a6:a1:a2:05:1e:bd:9d:3d:a0:09:ae:f8:34:f3:72:55: 5c:49:a3:1c:be:e4:55:b8:12:02:59:e2:d7:fa:e6:0c:9e:17: 16:20:5b:91:50:3b:44:bf:5a:fd:de:34:c5:ec:d5:59:b4:e8: a2:c6:d5:4a:b7:b2:3c:84:49:94:3f:fe:a7:a0:d0:2f:be:c4: 63:00:f6:58:90:a0:6e:cf:ae:9a:1f:77:37:cc:66:07:75:0a: 77:f1:cb:68:42:07:51:15:c1:8a:6d:41:c4:48:33:df:a3:4a: 22:b8:9a:b9:31:ed:f9:be:ed:cf:e8:54:5c:51:14:0f:f5:a4: bd:41:86:5c:3c:f5:a3:5e:16:e2:26:7e:45:c1:29:59:e5:15: 22:3b:9b:0d:1e:e4:43:57:27:a0:d8:50:ff:2e:23:96:7e:72: 57:cb:8e:e5:1a:cb:32:85:14:e7:ff:b4:fc:ce:1d:98:ec:fc: 08:8b:4b:91:28:98:d5:a1:c5:68:ba:ea:ff:e0:ee:97:50:d6: 6c:58:81:4c:5d:da:b2:ba:c1:33:56:26:6f:6a:3d:a0:da:45: 75:04:86:e8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUefjjtO6kR43VQFbtyg5ZdXsZr/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODljOTFiYzQ5NTg5YzBmY2Q1ZDIwYjkwZTk2ZmU3MjZk YzUxMDBhOTQ3NmFjNDk2YWVjMzE1NTc3OGZhMTliMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC17aEXGLG5sNenRXytUKC7XKw+ZHXFAgGISodSvAwOEBQZ dj7cCl4lWoASZc9GZbSXMCNgc/L//5UY5RVMn3xBaPfwkiKqaihQd5/3TRZSqdhQ WK7M9s1YM3jHCgRwJFN3D1hWFn2oFwOarJ5LdaovYNVxt/g/Mm67mC3RsRXPKyLA 5QHTU6LErz7cBSlVP1oStHoJzIKtbj0iTqI4vUW/3W2bErOt1/8AWx78NNFnjXHg BDpQs1bErZAv0/zhiDzHPIQOWNdDqOeVe9HbfTpI7icl/fhyf7hlP80xNQCYTJU7 clGnzTOtzKzWxYf45J4398i1P5BwOmPYKbommu8fAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU11SMVyvT/eiIrfeX74R9o+0Ha1swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc5NDgzZjFmLTM1YzUtNGVlMi05ZGI4LWM5OGZhYzA1NWUwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9opDANBgkqhkiG9w0BAQsFAAOCAQEAguiqobHEYdKVaNpvFkjCnYLz sYIq9u8vPMpgwkdBDW6letLOg+WmoaIFHr2dPaAJrvg083JVXEmjHL7kVbgSAlni 1/rmDJ4XFiBbkVA7RL9a/d40xezVWbToosbVSreyPIRJlD/+p6DQL77EYwD2WJCg bs+umh93N8xmB3UKd/HLaEIHURXBim1BxEgz36NKIriauTHt+b7tz+hUXFEUD/Wk vUGGXDz1o14W4iZ+RcEpWeUVIjubDR7kQ1cnoNhQ/y4jln5yV8uO5RrLMoUU5/+0 /M4dmOz8CItLkSiY1aHFaLrq/+Dul1DWbFiBTF3asrrBM1Ymb2o9oNpFdQSG6A== -----END CERTIFICATE-----Generated at Fri Sep 22 21:31:19 2023 by rpki-client on console-fra.rpki-client.org