$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa File: 7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa (raw, json) Hash identifier: Y6fPBx4NSZSduZvJ4YH1wKdbWGg5R62IrYmYrZGf2OY= Subject key identifier: 59:0C:BB:FB:B2:FE:28:79:44:5F:F0:58:D6:D1:14:98:52:1C:BE:6C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 460962481A41891735E3568E48DB4776356A1294 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:09:62:48:1a:41:89:17:35:e3:56:8e:48:db:47:76:35:6a:12:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=85dd218d9f10eb5089c8b2a020c4214e60fb49c6757a547b89c95513ae3577b5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:16:7d:42:97:58:fc:2c:fd:a3:3b:8e:25:b0: 31:d1:b4:a5:6c:e9:df:82:f4:9d:58:ea:92:83:99: 79:af:00:db:87:48:70:34:f3:00:6a:14:6f:a6:d8: c9:1f:14:7b:ad:9f:4b:58:00:87:be:7e:41:bc:8c: 46:20:c1:3d:19:6a:3a:19:81:2e:d4:34:89:66:f1: a8:e6:c8:e1:d5:9e:18:dd:11:13:57:b1:db:36:0c: cb:5e:c5:d9:40:26:56:c6:a7:95:6c:07:24:cc:bf: 8f:17:9a:8f:f0:f4:5e:5d:cc:41:e2:bc:d7:a2:6e: 44:97:ff:65:ec:15:0d:5a:fa:62:bf:0f:05:d0:58: 7d:76:4d:a2:57:32:ca:f8:8b:3a:d7:4d:a6:f1:2f: 5a:c6:16:ec:01:a3:d5:a9:26:ab:b9:f5:16:a4:96: f4:f4:3a:95:ed:ee:69:04:8f:7c:33:94:27:e7:15: 10:a6:6e:28:f0:c1:d4:6e:15:5d:3c:01:9c:2d:df: e5:c3:3c:05:8f:c8:80:6f:63:c7:eb:03:0a:56:4c: 2d:e1:72:da:5c:e0:ba:c0:f9:7d:fc:56:08:bd:61: 12:1d:a9:75:a0:dc:0d:b1:dd:48:9b:69:34:68:15: c5:88:fc:6f:ae:f8:54:7d:76:8d:48:2f:98:f5:1f: a9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0C:BB:FB:B2:FE:28:79:44:5F:F0:58:D6:D1:14:98:52:1C:BE:6C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.86.0/24 Signature Algorithm: sha256WithRSAEncryption d8:b4:93:af:8e:89:49:c6:6b:b4:98:c5:24:22:51:25:32:8d: c3:a3:51:b2:a1:ee:18:d2:29:31:05:e4:ef:ab:6e:2a:5f:1b: 43:74:e7:b2:78:22:4a:b7:fc:1b:96:a8:44:2d:30:3b:e6:ae: d6:15:71:2b:e1:ad:55:b5:32:1b:40:3b:50:00:ab:06:40:bd: 0b:c4:55:24:1a:6b:07:f3:13:8c:ee:2f:48:44:ce:05:dc:0b: 76:7a:bf:ad:21:3c:f5:6f:53:03:dd:5b:fa:7e:43:95:e1:b6: 9b:aa:f4:1c:95:c5:7d:4c:0e:38:e1:c9:f4:dc:bb:63:16:f6: 86:8d:9e:d5:34:05:62:93:f9:bf:ac:d2:3d:6e:6f:68:52:3c: 0a:e0:87:01:90:a9:89:d3:41:9b:47:f3:9c:f8:0c:da:9f:a8: 4a:57:4b:4a:f6:0b:eb:81:e7:ba:94:d2:de:ac:e5:a4:13:c5: 5c:0b:55:ae:ee:29:19:a1:41:3d:10:6a:0a:ba:95:c7:d1:43: 84:72:ce:3e:6b:0e:58:2c:08:b7:d8:24:0d:90:2c:77:46:c9: de:f2:b7:99:89:73:20:23:34:41:1a:dc:55:8e:8e:61:6d:f0: ae:5d:0d:f8:f6:a0:a1:8a:c5:f4:4f:5e:40:ef:63:ea:0b:ec: 73:51:2b:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURgliSBpBiRc141aOSNtHdjVqEpQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NWRkMjE4ZDlmMTBlYjUwODljOGIyYTAyMGM0MjE0ZTYw ZmI0OWM2NzU3YTU0N2I4OWM5NTUxM2FlMzU3N2I1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpFn1Cl1j8LP2jO44lsDHRtKVs6d+C9J1Y6pKDmXmvANuH SHA08wBqFG+m2MkfFHutn0tYAIe+fkG8jEYgwT0ZajoZgS7UNIlm8ajmyOHVnhjd ERNXsds2DMtexdlAJlbGp5VsByTMv48Xmo/w9F5dzEHivNeibkSX/2XsFQ1a+mK/ DwXQWH12TaJXMsr4izrXTabxL1rGFuwBo9WpJqu59RaklvT0OpXt7mkEj3wzlCfn FRCmbijwwdRuFV08AZwt3+XDPAWPyIBvY8frAwpWTC3hctpc4LrA+X38Vgi9YRId qXWg3A2x3UibaTRoFcWI/G+u+FR9do1IL5j1H6lRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWQy7+7L+KHlEX/BY1tEUmFIcvmwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdiMDY5ZjZiLWZmMGQtNDY0Zi1iZjkyLWMwNzVkN2Y5MWZiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/FYwDQYJKoZIhvcNAQELBQADggEBANi0k6+OiUnGa7SYxSQiUSUyjcOj UbKh7hjSKTEF5O+rbipfG0N057J4Ikq3/BuWqEQtMDvmrtYVcSvhrVW1MhtAO1AA qwZAvQvEVSQaawfzE4zuL0hEzgXcC3Z6v60hPPVvUwPdW/p+Q5Xhtpuq9ByVxX1M DjjhyfTcu2MW9oaNntU0BWKT+b+s0j1ub2hSPArghwGQqYnTQZtH85z4DNqfqEpX S0r2C+uB57qU0t6s5aQTxVwLVa7uKRmhQT0Qagq6lcfRQ4Ryzj5rDlgsCLfYJA2Q LHdGyd7yt5mJcyAjNEEa3FWOjmFt8K5dDfj2oKGKxfRPXkDvY+oL7HNRK+o= -----END CERTIFICATE-----Generated at Sat Sep 23 00:18:54 2023 by rpki-client on console-fra.rpki-client.org