$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87d50d0d-9072-45a0-bc30-4e32f5859c0b.roa File: 87d50d0d-9072-45a0-bc30-4e32f5859c0b.roa (raw, json) Hash identifier: y46j9Xs1fmiFXEQljwIbMPwZjaqLgkj7JOjUVhbBbb8= Subject key identifier: 47:9B:D5:FF:53:C6:12:99:84:AB:91:72:0F:92:D1:2F:87:06:A1:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 568FB398DAE4D142E2ED7295BDB654F85690E768 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87d50d0d-9072-45a0-bc30-4e32f5859c0b.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 56.107.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8f:b3:98:da:e4:d1:42:e2:ed:72:95:bd:b6:54:f8:56:90:e7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=550037b7561ab5427d21595058127339a6e2e4ae0d4c84fe499439a58eeb18a4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:27:f3:af:3d:b5:74:24:74:e7:26:b3:2b:ce: 29:c7:7f:68:33:35:cb:c9:e0:8e:dd:2d:2d:f2:f4: 24:68:00:7a:3d:31:5c:b7:44:2e:cb:1d:e3:76:36: 1d:74:de:dc:9a:68:40:8c:32:ec:6d:04:d1:14:f4: 5c:ef:3c:c4:16:93:c0:6a:b6:c0:22:87:0c:fe:c6: b9:af:46:22:5c:71:ad:9b:a5:c7:f3:6a:10:2c:b4: 41:a9:ec:c4:07:9c:1a:ea:95:29:dc:79:e6:37:c3: 7d:91:f0:eb:0c:71:00:7b:a7:1d:53:a3:28:60:0b: 33:76:44:97:d9:9b:25:46:d6:27:ca:15:de:7d:a5: 07:12:39:4b:84:6a:8c:29:72:67:f2:56:73:07:4a: 51:46:5a:14:de:10:2a:a1:aa:81:57:7b:cf:70:64: 8b:b8:e4:f7:49:55:cb:1e:e4:1d:6a:85:5c:c6:f9: f4:b0:7a:b3:e3:45:8a:72:97:2d:1a:62:a5:76:24: 85:31:33:04:68:24:0e:a2:df:d1:56:a6:e3:d2:3c: cc:7f:25:c5:ca:86:9c:d1:e4:99:c8:2f:1c:9a:e5: 91:c1:d6:09:e2:b8:84:7a:d4:9b:76:bc:d6:10:43: b3:d2:2f:74:ef:23:26:34:2b:e4:82:95:9f:17:0a: a5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9B:D5:FF:53:C6:12:99:84:AB:91:72:0F:92:D1:2F:87:06:A1:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87d50d0d-9072-45a0-bc30-4e32f5859c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.107.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6c:a3:8f:c9:d1:24:b7:bb:ae:c8:4b:e8:8f:49:7e:e4:7d:12: 42:8a:81:b7:34:02:51:df:8f:80:9a:04:dc:58:cb:d4:6a:3b: 03:be:0d:36:ad:9b:a9:35:d6:4a:6b:fa:d8:87:6f:2f:14:73: 1a:f4:9c:a8:a9:01:b0:08:28:86:15:db:e9:90:ab:c7:77:92: 56:8e:54:1e:1a:48:74:30:84:4d:54:34:e8:0f:b7:9c:72:f8: dd:77:b1:4f:ab:d8:84:12:3d:81:90:83:55:be:92:f0:8e:a7: d0:a1:49:d8:d7:52:4e:5f:a5:3f:c0:7d:45:52:45:55:9a:ef: 60:d2:1f:7e:7a:45:5f:e1:55:62:78:2f:76:ea:57:b4:a0:2e: 52:26:59:d4:12:20:b7:62:c7:0b:08:35:e9:64:9c:da:17:99: e6:b3:c5:23:4b:d9:e6:61:78:cf:fe:c6:19:38:c4:4a:8c:02: d7:5f:5e:8f:ca:aa:3f:6d:e5:bc:2d:64:13:fa:95:13:da:5c: 54:7e:40:9f:62:51:2a:e6:2c:4a:6c:9f:77:bf:87:a2:18:b1: f3:e8:ce:d9:f8:c3:40:16:aa:69:af:ea:cb:81:df:d2:f2:dd: 04:4d:84:f4:58:ca:ca:0a:12:65:91:66:aa:82:e2:93:ba:bd: 72:e2:88:25 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVo+zmNrk0ULi7XKVvbZU+FaQ52gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTAwMzdiNzU2MWFiNTQyN2QyMTU5NTA1ODEyNzMzOWE2 ZTJlNGFlMGQ0Yzg0ZmU0OTk0MzlhNThlZWIxOGE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiJ/OvPbV0JHTnJrMrzinHf2gzNcvJ4I7dLS3y9CRoAHo9 MVy3RC7LHeN2Nh103tyaaECMMuxtBNEU9FzvPMQWk8BqtsAihwz+xrmvRiJcca2b pcfzahAstEGp7MQHnBrqlSnceeY3w32R8OsMcQB7px1ToyhgCzN2RJfZmyVG1ifK Fd59pQcSOUuEaowpcmfyVnMHSlFGWhTeECqhqoFXe89wZIu45PdJVcse5B1qhVzG +fSwerPjRYpyly0aYqV2JIUxMwRoJA6i39FWpuPSPMx/JcXKhpzR5JnILxya5ZHB 1gniuIR61Jt2vNYQQ7PSL3TvIyY0K+SClZ8XCqVlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUR5vV/1PGEpmEq5FyD5LRL4cGocMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg3ZDUwZDBkLTkwNzItNDVhMC1iYzMwLTRlMzJmNTg1OWMwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4azANBgkqhkiG9w0BAQsFAAOCAQEAbKOPydEkt7uuyEvoj0l+5H0SQoqB tzQCUd+PgJoE3FjL1Go7A74NNq2bqTXWSmv62IdvLxRzGvScqKkBsAgohhXb6ZCr x3eSVo5UHhpIdDCETVQ06A+3nHL43XexT6vYhBI9gZCDVb6S8I6n0KFJ2NdSTl+l P8B9RVJFVZrvYNIffnpFX+FVYngvdupXtKAuUiZZ1BIgt2LHCwg16WSc2heZ5rPF I0vZ5mF4z/7GGTjESowC119ej8qqP23lvC1kE/qVE9pcVH5An2JRKuYsSmyfd7+H ohix8+jO2fjDQBaqaa/qy4Hf0vLdBE2E9FjKygoSZZFmqoLik7q9cuKIJQ== -----END CERTIFICATE-----Generated at Fri Sep 22 16:30:53 2023 by rpki-client on console-fra.rpki-client.org