$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/900f87af-6f3d-4547-8b81-4e40b3bf31b2.roa File: 900f87af-6f3d-4547-8b81-4e40b3bf31b2.roa (raw, json) Hash identifier: AxQnMzlPoVq82on3UMy5oxSav/Ql+ipXNON6+8cGb3c= Subject key identifier: DB:B4:83:EA:29:CE:BE:DE:2F:99:05:ED:E2:4E:4C:86:D9:F3:50:E7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 60783687C70F32D3DF51114F696FF03D0C10684D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/900f87af-6f3d-4547-8b81-4e40b3bf31b2.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:78:36:87:c7:0f:32:d3:df:51:11:4f:69:6f:f0:3d:0c:10:68:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=38b6cb4d0da56f928d8fd3407549857bf5a907985844c00726bf4bef4ed1108a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:57:03:55:30:82:23:6a:aa:05:67:b9:a9:9a: 72:fc:4d:c0:dd:18:2b:78:51:d8:7d:0e:29:9d:a3: 2e:36:ab:be:03:59:06:a6:e4:15:b2:4d:65:01:45: f2:d4:e9:c3:86:44:e2:b6:ed:5d:fb:a3:8a:07:52: 67:ce:dd:04:7a:93:2a:95:ab:1f:bf:38:f5:1a:3e: 10:5e:5d:6a:39:6a:a4:11:42:a4:ed:1f:d9:02:52: 95:ca:21:80:49:9c:69:ac:81:26:1a:ac:ea:ea:18: 95:12:c9:41:d8:e8:b5:6c:8f:c6:1c:1e:9a:33:76: 4c:67:94:5b:c8:85:35:eb:dc:b7:6e:c1:54:31:dd: 87:2a:84:ff:d0:0c:29:bd:31:3d:53:fe:11:fc:bd: f7:b0:b2:2d:7d:dc:46:bd:aa:cc:e5:1a:74:f6:82: 40:2f:6f:0d:94:e3:69:6f:de:f8:8a:cb:59:19:cc: b1:ba:f2:d7:78:86:36:61:54:39:41:9f:e1:f8:6a: c3:e7:97:2c:ab:87:1e:9c:0e:a2:63:9c:d9:27:c7: bc:a5:d5:90:ab:c5:bb:e6:5b:d7:62:7d:06:22:23: ce:76:2f:4f:94:d2:8d:48:47:28:e8:7d:26:98:cf: 33:70:9f:5f:5d:66:20:a5:27:5b:13:6b:bf:53:26: 85:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B4:83:EA:29:CE:BE:DE:2F:99:05:ED:E2:4E:4C:86:D9:F3:50:E7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/900f87af-6f3d-4547-8b81-4e40b3bf31b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:5000::/40 Signature Algorithm: sha256WithRSAEncryption 69:74:77:c7:fb:ad:cd:b4:3d:dc:8a:ab:a2:86:74:a7:ae:cf: 20:4f:9f:85:a3:79:02:2e:2d:27:19:6e:29:0e:2c:bd:3f:2d: 54:79:06:c7:3f:61:69:7b:29:69:d8:55:fe:86:6f:05:76:e5: bd:a9:89:04:be:ed:03:d6:19:2e:2d:fc:0d:4e:56:f5:d0:af: d3:51:47:0a:3d:a0:c4:cd:08:7a:ea:2b:b1:4e:13:c8:50:11: 02:e5:2c:ed:59:2f:96:c9:b8:79:a7:bb:c0:2f:c8:8a:98:83: f0:b7:d0:c9:ea:71:1e:2e:6a:5e:9c:33:7c:60:47:60:a8:af: 28:94:d4:4a:99:89:f7:67:57:c1:0f:dc:8f:5c:01:6b:b9:b2: d9:fa:46:09:82:b7:86:6b:91:5b:8d:98:f6:44:33:0b:fa:a7: 4a:70:b7:a2:15:ff:2c:a8:e4:c1:3a:ab:10:fd:fe:10:b4:10: f8:39:1f:99:04:6b:15:2d:04:ed:e6:88:2a:29:dc:9a:8a:a2: 39:d1:7a:43:89:77:57:0c:5c:2e:86:2c:1d:c4:4b:ad:b1:7c: 88:07:cb:49:73:34:b9:6f:4b:83:f6:90:6c:fe:29:77:12:7a: d5:90:a0:0b:2f:45:83:4b:07:9e:92:8e:9f:42:cd:43:70:c3: 67:45:7b:fa -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYHg2h8cPMtPfURFPaW/wPQwQaE0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOGI2Y2I0ZDBkYTU2ZjkyOGQ4ZmQzNDA3NTQ5ODU3YmY1 YTkwNzk4NTg0NGMwMDcyNmJmNGJlZjRlZDExMDhhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRVwNVMIIjaqoFZ7mpmnL8TcDdGCt4Udh9Dimdoy42q74D WQam5BWyTWUBRfLU6cOGROK27V37o4oHUmfO3QR6kyqVqx+/OPUaPhBeXWo5aqQR QqTtH9kCUpXKIYBJnGmsgSYarOrqGJUSyUHY6LVsj8YcHpozdkxnlFvIhTXr3Ldu wVQx3YcqhP/QDCm9MT1T/hH8vfewsi193Ea9qszlGnT2gkAvbw2U42lv3viKy1kZ zLG68td4hjZhVDlBn+H4asPnlyyrhx6cDqJjnNknx7yl1ZCrxbvmW9difQYiI852 L0+U0o1IRyjofSaYzzNwn19dZiClJ1sTa79TJoUNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU27SD6inOvt4vmQXt4k5MhtnzUOcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkwMGY4N2FmLTZmM2QtNDU0Ny04YjgxLTRlNDBiM2JmMzFiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9pUDANBgkqhkiG9w0BAQsFAAOCAQEAaXR3x/utzbQ93IqrooZ0p67P IE+fhaN5Ai4tJxluKQ4svT8tVHkGxz9haXspadhV/oZvBXblvamJBL7tA9YZLi38 DU5W9dCv01FHCj2gxM0IeuorsU4TyFARAuUs7Vkvlsm4eae7wC/IipiD8LfQyepx Hi5qXpwzfGBHYKivKJTUSpmJ92dXwQ/cj1wBa7my2fpGCYK3hmuRW42Y9kQzC/qn SnC3ohX/LKjkwTqrEP3+ELQQ+DkfmQRrFS0E7eaIKincmoqiOdF6Q4l3VwxcLoYs HcRLrbF8iAfLSXM0uW9Lg/aQbP4pdxJ61ZCgCy9Fg0sHnpKOn0LNQ3DDZ0V7+g== -----END CERTIFICATE-----Generated at Fri Sep 22 15:45:16 2023 by rpki-client on console-ams.rpki-client.org