$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89c87c0b-b8ef-48e2-948e-f9e95582a036.roa File: 89c87c0b-b8ef-48e2-948e-f9e95582a036.roa (raw, json) Hash identifier: zXjC3CiMSgKhTrPegGCtFplBwW2ByMiT9YN6bONWUII= Subject key identifier: 4F:69:15:43:2C:94:CE:45:8D:5F:E7:A4:39:C9:7B:CF:12:92:27:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2BD6FC3F5CD218FBBFA0B4615383BF7FA5F26A5F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89c87c0b-b8ef-48e2-948e-f9e95582a036.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffe:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d6:fc:3f:5c:d2:18:fb:bf:a0:b4:61:53:83:bf:7f:a5:f2:6a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=4f320b049573e928c08f51a810a57bbdd997d8b8b2732ce05db99d95ec0d763d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:0a:97:68:49:ae:d2:75:b0:7c:3d:8f:aa: 9a:8f:39:65:d1:84:81:f7:99:15:8f:00:64:c3:46: 01:c5:54:0b:8d:e8:f3:a8:4e:b2:59:0d:c2:b7:e9: 46:54:b1:e6:9e:dd:b9:0f:08:2e:96:7b:44:2f:f4: c2:30:2c:84:73:fc:f9:ed:9d:2d:77:11:cf:46:b5: 9a:c9:d1:5d:61:74:57:4a:ac:87:bb:cd:0d:08:06: 4e:83:98:93:14:54:81:b3:35:bc:d1:89:00:3f:48: ac:44:a6:5f:06:3d:e3:23:68:08:e2:c4:b1:78:51: 39:e2:20:8f:16:63:bb:a7:ba:85:be:67:47:9c:42: 83:7c:1e:43:38:76:4f:a5:c6:37:bf:b9:f6:af:fb: bb:72:59:93:b1:e1:78:6d:4a:c6:32:76:80:47:41: 92:a1:81:81:3f:a3:32:93:8e:a7:cc:4e:6e:2d:0d: f6:e4:72:64:22:87:62:a5:a5:14:f8:fc:99:ff:7a: 05:84:89:10:d7:aa:d1:e2:53:46:31:52:83:eb:72: 42:0e:e6:d1:13:2f:5d:14:1f:38:74:b7:2e:7e:13: 24:61:c7:41:89:6a:f6:7f:85:cb:18:de:df:bd:63: 79:74:b6:18:1a:41:1d:1e:42:78:ca:f6:28:52:60: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:69:15:43:2C:94:CE:45:8D:5F:E7:A4:39:C9:7B:CF:12:92:27:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89c87c0b-b8ef-48e2-948e-f9e95582a036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffe:e000::/40 Signature Algorithm: sha256WithRSAEncryption ce:e9:3f:b1:a7:32:ff:31:63:92:14:c8:09:21:2c:90:95:a2: fa:f7:8a:77:51:c9:ce:7c:6d:c8:78:3b:b4:8d:bc:ca:b5:c9: 51:83:27:56:12:d9:33:b4:0d:c8:92:3b:68:a1:91:82:6f:cd: 7e:33:42:6e:d4:9b:97:6e:b0:16:80:01:0b:78:b6:45:1c:53: b1:fc:bc:b7:ab:30:61:55:37:a8:78:a2:91:88:17:17:92:d0: 4f:7d:cb:e8:c6:2e:2e:d6:30:2a:0a:11:ba:4e:10:4d:92:00: 2a:a0:1d:0a:6b:65:67:1d:7a:8c:b3:b1:cb:23:2e:cc:2e:dd: a8:9b:25:94:10:2a:49:40:71:e2:cf:24:cf:00:5d:f8:00:80: 1f:3c:5a:8e:80:a4:6b:cf:0a:d2:2d:ea:5a:96:26:5e:95:db: 56:4c:b9:6d:c1:1e:84:c5:3c:fb:83:93:94:65:be:c6:d6:87: 1a:7a:3b:99:8c:da:02:f3:2a:00:59:df:82:5a:26:8e:ea:2d: 2a:b5:50:95:d9:a2:b7:79:02:e7:91:f8:98:da:44:56:3f:67: 29:ed:96:00:bf:b4:08:ba:f3:05:97:5c:31:08:57:9a:28:aa: 9b:83:c1:95:5d:cc:d0:21:62:48:94:2f:11:0d:0e:7a:aa:6e: 44:6d:03:48 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUK9b8P1zSGPu/oLRhU4O/f6Xyal8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjMyMGIwNDk1NzNlOTI4YzA4ZjUxYTgxMGE1N2JiZGQ5 OTdkOGI4YjI3MzJjZTA1ZGI5OWQ5NWVjMGQ3NjNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFcgqXaEmu0nWwfD2PqpqPOWXRhIH3mRWPAGTDRgHFVAuN 6POoTrJZDcK36UZUseae3bkPCC6We0Qv9MIwLIRz/PntnS13Ec9GtZrJ0V1hdFdK rIe7zQ0IBk6DmJMUVIGzNbzRiQA/SKxEpl8GPeMjaAjixLF4UTniII8WY7unuoW+ Z0ecQoN8HkM4dk+lxje/ufav+7tyWZOx4XhtSsYydoBHQZKhgYE/ozKTjqfMTm4t DfbkcmQih2KlpRT4/Jn/egWEiRDXqtHiU0YxUoPrckIO5tETL10UHzh0ty5+EyRh x0GJavZ/hcsY3t+9Y3l0thgaQR0eQnjK9ihSYAcPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUT2kVQyyUzkWNX+ekOcl7zxKSJ4swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5Yzg3YzBiLWI4ZWYtNDhlMi05NDhlLWY5ZTk1NTgyYTAzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/+4DANBgkqhkiG9w0BAQsFAAOCAQEAzuk/sacy/zFjkhTICSEskJWi +veKd1HJznxtyHg7tI28yrXJUYMnVhLZM7QNyJI7aKGRgm/NfjNCbtSbl26wFoAB C3i2RRxTsfy8t6swYVU3qHiikYgXF5LQT33L6MYuLtYwKgoRuk4QTZIAKqAdCmtl Zx16jLOxyyMuzC7dqJsllBAqSUBx4s8kzwBd+ACAHzxajoCka88K0i3qWpYmXpXb Vky5bcEehMU8+4OTlGW+xtaHGno7mYzaAvMqAFnfglomjuotKrVQldmit3kC55H4 mNpEVj9nKe2WAL+0CLrzBZdcMQhXmiiqm4PBlV3M0CFiSJQvEQ0OeqpuRG0DSA== -----END CERTIFICATE-----Generated at Fri Sep 22 17:25:46 2023 by rpki-client on console-fra.rpki-client.org