$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83a9fd6b-1dc1-43d8-975b-de4fce896249.roa File: 83a9fd6b-1dc1-43d8-975b-de4fce896249.roa (raw, json) Hash identifier: c8ZpgEWnwtFamIYaqjFAs4BEyoYPI49FpKjzLp713is= Subject key identifier: 90:35:DE:5C:74:D1:49:25:D0:D3:0F:73:8F:2E:E0:D3:66:07:E8:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CFD8196B4E1A81BF4C452BA612BD37C1855924D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83a9fd6b-1dc1-43d8-975b-de4fce896249.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 63.246.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fd:81:96:b4:e1:a8:1b:f4:c4:52:ba:61:2b:d3:7c:18:55:92:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=2c18e4e7c303e49031c7b2623b301d9d8cc256208472920f43ec1662c8a3be4e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:64:d0:9a:38:a1:54:1b:90:c0:a8:8d:87:04: 53:a2:f6:9b:92:cc:20:b9:04:3c:f4:6b:4c:df:46: 6e:99:04:77:cf:90:fe:2d:35:45:91:3a:62:c6:1b: a1:d9:25:c6:84:e0:3e:22:a1:82:79:48:1f:73:d8: 74:f4:2e:15:06:dd:c9:5e:2b:a8:6e:65:ac:52:2d: f6:81:83:42:84:0e:67:5a:d8:d1:ff:5d:80:bc:63: 6e:0d:f9:43:e2:d6:94:12:f7:f0:c0:9f:a7:94:bf: b3:85:58:16:05:88:2e:e6:44:c8:61:79:3a:91:6e: fa:79:c9:4c:9d:71:d6:0c:a4:bf:9c:c4:c4:e4:4d: 58:4d:bc:61:da:d0:92:50:18:44:01:2d:6f:01:1b: 73:ed:4f:f7:2f:08:7c:2c:19:a9:87:be:64:17:cc: ac:d9:a4:f8:37:03:bf:34:28:55:0a:a4:d4:61:1a: 25:1a:03:d7:82:d7:90:70:a3:c6:d5:b6:d4:45:a7: 06:df:11:60:f0:d2:b4:d5:7a:4b:80:df:e5:ba:93: 74:b5:51:ed:f3:0a:aa:c6:0e:5c:87:fc:c3:82:fb: 17:9c:67:6e:cb:2e:e4:4b:5f:ed:67:5c:58:ce:b9: f6:3a:44:15:aa:69:3f:f3:01:f4:86:52:58:13:85: 20:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:35:DE:5C:74:D1:49:25:D0:D3:0F:73:8F:2E:E0:D3:66:07:E8:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83a9fd6b-1dc1-43d8-975b-de4fce896249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.246.117.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:4b:36:d1:6c:c3:23:67:1c:26:e2:ef:cf:6e:ea:fe:c4:58: f4:07:c4:87:78:a1:28:1b:9f:e7:9c:13:58:ff:e5:93:d9:36: 0c:4b:60:d0:bd:ab:5c:3d:d2:3a:5a:cd:b7:d3:80:33:88:98: 7c:2b:ea:d2:9a:fa:18:ee:c8:30:0a:68:ee:52:70:ff:0a:55: 43:c6:98:2d:fd:49:05:b7:d2:d6:a0:d6:59:a8:7f:ae:2f:a0: 58:c1:83:9f:a3:57:a0:60:9a:e1:00:28:36:19:94:1d:c4:f9: d7:49:22:ec:3c:e1:c3:68:7d:f0:e4:70:3d:eb:ba:24:af:3a: 1c:e7:4c:de:32:be:18:05:4b:d4:bc:c0:f7:ea:52:a0:64:42: bd:82:7d:83:b8:57:82:2e:dd:88:a5:04:b3:a0:ef:5a:6d:ab: 08:4a:40:fb:8f:b2:f6:ba:d5:b2:f0:bf:d5:85:91:24:a2:f1: db:98:77:fd:b4:4a:f2:1c:70:49:46:60:13:ff:a7:b5:fe:eb: b5:3a:f7:08:83:e2:43:ae:bc:d3:c5:fc:4d:ee:3d:0d:f6:39: c3:0e:39:6e:21:f4:80:15:cf:87:08:6f:17:d1:ff:81:f4:ad: c2:e6:de:4a:04:b3:89:22:5b:dd:dc:28:e7:f0:97:8c:45:57: 1f:6c:48:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfP2BlrThqBv0xFK6YSvTfBhVkk0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzE4ZTRlN2MzMDNlNDkwMzFjN2IyNjIzYjMwMWQ5ZDhj YzI1NjIwODQ3MjkyMGY0M2VjMTY2MmM4YTNiZTRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUZNCaOKFUG5DAqI2HBFOi9puSzCC5BDz0a0zfRm6ZBHfP kP4tNUWROmLGG6HZJcaE4D4ioYJ5SB9z2HT0LhUG3cleK6huZaxSLfaBg0KEDmda 2NH/XYC8Y24N+UPi1pQS9/DAn6eUv7OFWBYFiC7mRMhheTqRbvp5yUydcdYMpL+c xMTkTVhNvGHa0JJQGEQBLW8BG3PtT/cvCHwsGamHvmQXzKzZpPg3A780KFUKpNRh GiUaA9eC15Bwo8bVttRFpwbfEWDw0rTVekuA3+W6k3S1Ue3zCqrGDlyH/MOC+xec Z27LLuRLX+1nXFjOufY6RBWqaT/zAfSGUlgThSC1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkDXeXHTRSSXQ0w9zjy7g02YH6JcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgzYTlmZDZiLTFkYzEtNDNkOC05NzViLWRlNGZjZTg5NjI0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA/9nUwDQYJKoZIhvcNAQELBQADggEBAGxLNtFswyNnHCbi789u6v7EWPQH xId4oSgbn+ecE1j/5ZPZNgxLYNC9q1w90jpazbfTgDOImHwr6tKa+hjuyDAKaO5S cP8KVUPGmC39SQW30tag1lmof64voFjBg5+jV6BgmuEAKDYZlB3E+ddJIuw84cNo ffDkcD3ruiSvOhznTN4yvhgFS9S8wPfqUqBkQr2CfYO4V4Iu3YilBLOg71ptqwhK QPuPsva61bLwv9WFkSSi8duYd/20SvIccElGYBP/p7X+67U69wiD4kOuvNPF/E3u PQ32OcMOOW4h9IAVz4cIbxfR/4H0rcLm3koEs4kiW93cKOfwl4xFVx9sSD4= -----END CERTIFICATE-----Generated at Sat Sep 23 00:18:54 2023 by rpki-client on console-fra.rpki-client.org