$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa File: 81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa (raw, json) Hash identifier: 9sfeH9W/atPf38kucwpi7t/oNWgNAqVbkcHJ9djEBqk= Subject key identifier: 91:B2:B1:08:15:0C:5F:B3:8E:A3:B9:15:2A:1B:58:47:E9:A9:C0:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B4BAB4A219248BEC008E2EAAF6796453E779857 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 96.0.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4b:ab:4a:21:92:48:be:c0:08:e2:ea:af:67:96:45:3e:77:98:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=fa6911bc2ba077c17f45801c98a7a143d042dab72df119f84051550b2f045e7a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:e0:29:d3:dc:45:97:e9:c5:48:0a:fe:79: 41:4f:f0:c7:7c:8b:13:a2:bd:3a:45:e7:5b:eb:bd: 1d:e1:32:3d:43:62:09:1a:9d:23:20:88:49:03:4a: f0:71:5e:62:7e:11:c7:8c:0d:75:7d:e1:47:a1:81: 00:da:a0:5b:9d:d9:5f:5e:49:01:ec:e7:04:4f:60: 50:b0:f6:d9:53:41:2e:20:80:7b:42:da:3b:5b:75: dc:2f:4a:c2:1c:4d:3f:dc:b8:b2:66:7f:93:fb:d2: 3a:4f:ea:e1:f1:b3:56:52:b1:10:6d:af:ec:8a:63: 7a:ec:35:44:00:35:56:e3:3d:1f:42:57:f8:6a:d5: d8:57:61:0a:5f:c0:24:fe:b2:70:10:43:97:8c:26: 07:a3:5c:6f:d7:f5:ff:ff:81:87:d6:53:25:a9:24: 70:34:5a:66:2e:0d:39:c0:a0:0e:26:20:3f:37:f0: c9:4b:09:14:54:a5:1b:3f:c4:5e:24:d2:c8:16:47: a8:7d:2b:8e:88:ca:3c:70:4c:99:35:26:e8:cf:c8: 1c:e5:8d:55:fa:b7:ae:22:28:0a:74:24:a2:5c:56: a9:4a:68:24:6b:f5:c7:ab:3a:73:cb:db:4d:ac:c2: d0:39:81:11:3f:57:51:9a:5d:7c:73:b4:91:e5:f1: 00:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B2:B1:08:15:0C:5F:B3:8E:A3:B9:15:2A:1B:58:47:E9:A9:C0:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81878b4e-555a-43d4-b0a9-a77d4beb38d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.88.0/22 Signature Algorithm: sha256WithRSAEncryption a0:76:d6:1b:db:f4:51:f0:27:5e:e4:81:29:67:3d:ea:1c:ad: 71:43:cc:22:50:80:5e:e1:e8:b2:82:57:23:96:ba:92:c9:30: a8:dd:d6:08:fd:9e:48:fb:44:50:9a:df:41:2d:8b:f7:1a:ae: 97:5a:79:4f:16:a4:90:da:64:69:b0:17:9e:7e:65:79:31:88: 06:f2:14:5b:e6:d7:79:9e:d0:bf:d4:1e:3e:1b:05:20:b7:8f: dd:5f:f3:d5:69:12:eb:b9:87:13:11:69:b2:a0:b6:89:7f:a7: f9:55:d0:47:12:75:5a:e9:31:36:36:4b:81:a1:d7:45:65:ab: 58:83:e0:f9:95:f4:3c:06:fa:a0:f6:6f:a3:3b:24:c3:5d:1a: fc:58:6a:20:e8:42:00:52:47:42:d5:12:3e:6a:a2:9d:94:e1: b7:ff:e1:06:39:ee:68:95:ac:c4:ec:dc:b6:20:21:66:14:4b: 39:a2:5b:f7:30:e7:71:53:ed:39:4e:3d:23:de:cc:bc:c9:d1: e1:c3:97:34:7c:cd:e7:8e:78:8d:55:a3:07:c3:4f:03:c5:a7: b1:1d:b4:5e:ea:80:e2:6f:98:22:24:2e:77:6f:13:05:7e:0a: 0e:8f:2e:58:a4:81:44:c5:16:89:c4:16:0d:5a:32:5b:9d:59: de:87:f4:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC0urSiGSSL7ACOLqr2eWRT53mFcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTY5MTFiYzJiYTA3N2MxN2Y0NTgwMWM5OGE3YTE0M2Qw NDJkYWI3MmRmMTE5Zjg0MDUxNTUwYjJmMDQ1ZTdhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyC+Ap09xFl+nFSAr+eUFP8Md8ixOivTpF51vrvR3hMj1D YgkanSMgiEkDSvBxXmJ+EceMDXV94UehgQDaoFud2V9eSQHs5wRPYFCw9tlTQS4g gHtC2jtbddwvSsIcTT/cuLJmf5P70jpP6uHxs1ZSsRBtr+yKY3rsNUQANVbjPR9C V/hq1dhXYQpfwCT+snAQQ5eMJgejXG/X9f//gYfWUyWpJHA0WmYuDTnAoA4mID83 8MlLCRRUpRs/xF4k0sgWR6h9K46IyjxwTJk1JujPyBzljVX6t64iKAp0JKJcVqlK aCRr9cerOnPL202swtA5gRE/V1GaXXxztJHl8QCHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkbKxCBUMX7OOo7kVKhtYR+mpwN0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxODc4YjRlLTU1NWEtNDNkNC1iMGE5LWE3N2Q0YmViMzhkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJgAFgwDQYJKoZIhvcNAQELBQADggEBAKB21hvb9FHwJ17kgSlnPeocrXFD zCJQgF7h6LKCVyOWupLJMKjd1gj9nkj7RFCa30Eti/carpdaeU8WpJDaZGmwF55+ ZXkxiAbyFFvm13me0L/UHj4bBSC3j91f89VpEuu5hxMRabKgtol/p/lV0EcSdVrp MTY2S4Gh10Vlq1iD4PmV9DwG+qD2b6M7JMNdGvxYaiDoQgBSR0LVEj5qop2U4bf/ 4QY57miVrMTs3LYgIWYUSzmiW/cw53FT7TlOPSPezLzJ0eHDlzR8zeeOeI1VowfD TwPFp7EdtF7qgOJvmCIkLndvEwV+Cg6PLlikgUTFFonEFg1aMludWd6H9OM= -----END CERTIFICATE-----Generated at Fri Sep 22 22:27:00 2023 by rpki-client on console-fra.rpki-client.org