$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa File: 82d434d3-74fc-47a3-89ec-ed37a23ae562.roa (raw, json) Hash identifier: X5DRNOxq2gpGldDcbNgAA06awEH/VOe09N5cLMfBT6M= Subject key identifier: 4A:D5:D0:A1:6F:2E:0F:29:14:A3:ED:44:32:9A:90:42:CF:E9:A1:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 317C332D7A1CBCE0FFED2CDDCE551EFC79FC78BF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f22:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:7c:33:2d:7a:1c:bc:e0:ff:ed:2c:dd:ce:55:1e:fc:79:fc:78:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=9ac7dde0e27fc2270eee6d3d73ccbe34f45261e805daf14d2f9929f5efd8aff5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5f:e2:3e:25:5d:68:ab:60:90:45:fb:91:b2: b6:61:f4:f5:c9:4e:8e:02:cf:d7:47:e4:cb:0e:1d: 9b:7b:24:4b:f8:39:e6:7b:98:8a:a0:e3:ee:0c:e4: 09:b6:fe:a4:87:11:7b:9f:43:7c:3c:f3:ca:4a:38: 07:bc:67:f7:ba:c3:44:63:4e:24:c2:f0:b6:97:3e: 8b:47:0e:9e:9f:49:da:f2:d9:f8:e9:d2:03:48:6b: 2f:ed:9a:30:75:5e:a7:57:8e:99:27:27:fe:65:56: 67:7a:8e:a4:3f:1f:b1:18:80:87:d3:97:9a:88:87: 60:88:4c:4a:e8:38:6d:5b:47:24:6f:3f:3d:1f:72: e7:dc:97:13:80:fb:7a:d2:15:14:df:6c:1c:2e:b1: a7:bb:00:fd:37:ed:28:70:49:0a:a4:5a:94:1d:18: 52:62:c3:9a:3b:40:82:25:82:76:32:b5:69:d9:4c: b1:84:da:95:fb:aa:6e:a7:3f:5b:02:55:3a:44:dd: e0:e5:f6:e5:c9:98:49:43:66:f5:a1:ea:df:a2:97: 3e:c0:75:c2:70:c8:e6:cd:a4:f5:fe:c4:4d:8b:08: 93:21:f7:64:e3:56:7a:ac:72:aa:58:03:3f:f7:b2: 0d:94:b9:a7:23:65:c7:af:63:c0:8e:7c:67:c4:1d: e0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D5:D0:A1:6F:2E:0F:29:14:A3:ED:44:32:9A:90:42:CF:E9:A1:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f22:8000::/36 Signature Algorithm: sha256WithRSAEncryption a3:c7:ed:a7:56:c6:89:26:36:2c:57:6a:0f:61:cf:6a:04:5e: 27:cf:a4:9f:fd:80:3f:2a:ce:a9:f8:8e:a6:4e:45:4a:24:7a: 01:e0:33:14:f2:79:5a:df:10:a6:29:1c:cd:60:bf:0e:c6:23: 42:0b:65:3d:56:f3:4b:be:c1:45:f7:45:84:bf:0f:b9:ab:5a: 41:dd:69:b2:14:38:22:1f:b2:f9:b7:94:8e:53:63:a3:2c:fa: 36:ca:3c:7e:e0:46:62:16:e1:43:3e:88:3c:9f:48:4a:5e:28: 53:8c:61:7e:45:cb:9e:e0:80:29:12:e0:94:bb:47:e4:6e:34: de:af:67:c1:aa:97:37:73:ca:21:43:bd:e3:30:32:09:be:57: 88:4a:01:8f:86:71:e1:7f:19:c4:40:7d:9b:ae:a7:6a:9f:db: e5:32:12:d4:8d:4c:aa:93:5a:db:1f:de:4a:62:54:82:b4:dd: 44:68:5d:a7:d5:dc:df:aa:33:f4:a3:98:01:cd:fe:13:df:0c: 31:86:8b:93:99:42:50:c1:e4:87:0f:64:90:e2:a0:03:f3:12: 8f:3c:13:f7:2e:21:ce:64:a1:65:4d:f8:88:0f:94:a7:84:ec: 19:52:25:21:67:55:0a:08:5b:36:23:e5:f7:dc:19:38:cc:df: 45:25:64:47 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMXwzLXocvOD/7SzdzlUe/Hn8eL8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YWM3ZGRlMGUyN2ZjMjI3MGVlZTZkM2Q3M2NjYmUzNGY0 NTI2MWU4MDVkYWYxNGQyZjk5MjlmNWVmZDhhZmY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdX+I+JV1oq2CQRfuRsrZh9PXJTo4Cz9dH5MsOHZt7JEv4 OeZ7mIqg4+4M5Am2/qSHEXufQ3w888pKOAe8Z/e6w0RjTiTC8LaXPotHDp6fSdry 2fjp0gNIay/tmjB1XqdXjpknJ/5lVmd6jqQ/H7EYgIfTl5qIh2CITEroOG1bRyRv Pz0fcufclxOA+3rSFRTfbBwusae7AP037ShwSQqkWpQdGFJiw5o7QIIlgnYytWnZ TLGE2pX7qm6nP1sCVTpE3eDl9uXJmElDZvWh6t+ilz7AdcJwyObNpPX+xE2LCJMh 92TjVnqscqpYAz/3sg2UuacjZcevY8COfGfEHeAvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUStXQoW8uDykUo+1EMpqQQs/poQEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgyZDQzNGQzLTc0ZmMtNDdhMy04OWVjLWVkMzdhMjNhZTU2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8igDANBgkqhkiG9w0BAQsFAAOCAQEAo8ftp1bGiSY2LFdqD2HPagRe J8+kn/2APyrOqfiOpk5FSiR6AeAzFPJ5Wt8QpikczWC/DsYjQgtlPVbzS77BRfdF hL8PuataQd1pshQ4Ih+y+beUjlNjoyz6Nso8fuBGYhbhQz6IPJ9ISl4oU4xhfkXL nuCAKRLglLtH5G403q9nwaqXN3PKIUO94zAyCb5XiEoBj4Zx4X8ZxEB9m66nap/b 5TIS1I1MqpNa2x/eSmJUgrTdRGhdp9Xc36oz9KOYAc3+E98MMYaLk5lCUMHkhw9k kOKgA/MSjzwT9y4hzmShZU34iA+Up4TsGVIlIWdVCghbNiPl99wZOMzfRSVkRw== -----END CERTIFICATE-----Generated at Fri Sep 22 22:27:00 2023 by rpki-client on console-fra.rpki-client.org