$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907d1ff6-b72d-4eb8-81e9-4b99b5824d76.roa File: 907d1ff6-b72d-4eb8-81e9-4b99b5824d76.roa (raw, json) Hash identifier: 8BpULrpk6Wnmn36ZAKGSXXqFzD+gZkGp8tZYmn+Oz+U= Subject key identifier: BD:5B:97:E2:BD:26:E2:08:E2:11:BC:C3:1C:B7:2A:BF:AB:5F:75:1A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 02A9AD500F2B0494B9CBB4744CA0D58026663DF8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907d1ff6-b72d-4eb8-81e9-4b99b5824d76.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 56.187.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a9:ad:50:0f:2b:04:94:b9:cb:b4:74:4c:a0:d5:80:26:66:3d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=f98caf22ab654c689739c18219f80e4c61bc7dd4ec905ab9e28a1aa471a54a76, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:83:46:ae:7e:06:e7:ce:b4:ed:cf:6e:8a: e4:c5:de:17:6d:11:84:03:5f:6b:e6:4a:05:cc:7d: 94:b0:52:8f:73:8d:16:98:35:45:15:9e:74:9c:8a: fc:98:d3:59:b3:97:74:5d:b2:08:2a:19:69:af:7a: cb:6e:05:65:54:a2:c2:af:9a:1c:6f:4f:13:15:5d: 35:e4:16:22:6d:e0:0f:11:08:5b:eb:91:ce:0c:60: 4e:96:f5:1a:a6:5e:bc:b8:86:a8:87:7a:ac:1d:8d: a5:91:b7:9e:07:e3:bf:1b:da:df:23:7c:c2:0a:2a: d8:8f:86:c5:2b:12:0c:9f:7a:92:40:36:8d:48:66: 8d:ff:3b:85:7e:ce:ac:de:df:81:04:98:0e:49:c5: a2:ce:3f:c9:7e:e0:45:94:8b:b3:49:b4:5d:2e:13: 59:28:40:88:d0:79:9e:29:92:46:e9:7a:63:51:95: 21:55:3e:70:a2:0f:9c:d1:5f:f7:76:ad:2e:57:50: 16:b4:56:13:0c:e8:46:59:b0:45:b3:83:4c:38:e4: fc:3a:9c:70:41:45:0a:ca:c5:d7:62:07:78:dd:be: 4a:cb:10:09:30:b4:27:81:d0:1e:87:a1:63:39:b3: 0d:e3:69:82:fd:78:13:43:69:19:73:ea:f5:f7:8b: 70:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5B:97:E2:BD:26:E2:08:E2:11:BC:C3:1C:B7:2A:BF:AB:5F:75:1A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907d1ff6-b72d-4eb8-81e9-4b99b5824d76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.187.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1b:29:ee:90:ec:18:8d:7b:94:90:a5:b4:41:2a:ea:d0:1c:c6: 7f:dd:90:02:ac:34:96:cf:8c:d7:9e:f8:a0:f5:37:d4:e0:ba: a3:9e:28:e4:18:20:e7:4d:b5:74:83:db:bb:6c:4f:e7:65:32: 91:b3:26:cb:ee:96:c9:24:52:78:fc:08:c4:c8:f4:24:c1:a9: 61:9d:cf:0e:21:54:9c:5a:3d:2e:f0:be:77:c9:5c:31:88:93: 58:9c:dd:46:c6:17:66:43:0d:77:23:9f:ce:e7:da:94:fc:6b: 86:d7:92:8e:e3:f3:23:d6:5c:58:47:a1:a0:fe:fc:e5:c9:74: 08:f7:64:a1:3a:89:35:6d:af:c7:14:ff:af:3c:bb:4d:cc:61: 71:0e:81:19:c3:58:5d:95:9f:f1:a6:d9:50:aa:0c:fc:43:3b: 4f:4f:bb:6c:b8:8f:47:b0:0d:20:7d:a0:3f:9a:ce:5c:b9:35: 24:9f:d8:40:7b:fd:e0:16:e0:15:34:e0:1c:f9:79:b6:a5:a4: d5:6c:d2:68:71:24:e9:dd:f8:cd:31:aa:3a:02:3c:d4:21:3e: 5c:e0:99:36:c6:c3:c1:99:22:30:ca:67:18:7c:8e:ca:24:4d: fe:66:5c:e9:4b:a8:2a:6d:45:7d:16:80:4c:53:54:f2:fd:d4: 31:2a:2f:48 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAqmtUA8rBJS5y7R0TKDVgCZmPfgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOThjYWYyMmFiNjU0YzY4OTczOWMxODIxOWY4MGU0YzYx YmM3ZGQ0ZWM5MDVhYjllMjhhMWFhNDcxYTU0YTc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7LINGrn4G58607c9uiuTF3hdtEYQDX2vmSgXMfZSwUo9z jRaYNUUVnnScivyY01mzl3RdsggqGWmvestuBWVUosKvmhxvTxMVXTXkFiJt4A8R CFvrkc4MYE6W9RqmXry4hqiHeqwdjaWRt54H478b2t8jfMIKKtiPhsUrEgyfepJA No1IZo3/O4V+zqze34EEmA5JxaLOP8l+4EWUi7NJtF0uE1koQIjQeZ4pkkbpemNR lSFVPnCiD5zRX/d2rS5XUBa0VhMM6EZZsEWzg0w45Pw6nHBBRQrKxddiB3jdvkrL EAkwtCeB0B6HoWM5sw3jaYL9eBNDaRlz6vX3i3CTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUvVuX4r0m4gjiEbzDHLcqv6tfdRowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkwN2QxZmY2LWI3MmQtNGViOC04MWU5LTRiOTliNTgyNGQ3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4uzANBgkqhkiG9w0BAQsFAAOCAQEAGynukOwYjXuUkKW0QSrq0BzGf92Q Aqw0ls+M1574oPU31OC6o54o5Bgg5021dIPbu2xP52UykbMmy+6WySRSePwIxMj0 JMGpYZ3PDiFUnFo9LvC+d8lcMYiTWJzdRsYXZkMNdyOfzufalPxrhteSjuPzI9Zc WEehoP785cl0CPdkoTqJNW2vxxT/rzy7TcxhcQ6BGcNYXZWf8abZUKoM/EM7T0+7 bLiPR7ANIH2gP5rOXLk1JJ/YQHv94BbgFTTgHPl5tqWk1WzSaHEk6d34zTGqOgI8 1CE+XOCZNsbDwZkiMMpnGHyOyiRN/mZc6UuoKm1FfRaATFNU8v3UMSovSA== -----END CERTIFICATE-----Generated at Fri Sep 22 17:25:46 2023 by rpki-client on console-fra.rpki-client.org