$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91b0afa8-aa8a-4d4a-b885-788cac306736.roa File: 91b0afa8-aa8a-4d4a-b885-788cac306736.roa (raw, json) Hash identifier: GL/2nij4EIfzR+Q9K5Da5CqXIqQdAtWUd1I8eIFedqE= Subject key identifier: CD:38:67:FA:7F:4C:76:58:41:35:CE:90:19:38:0A:CB:FE:4E:17:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 575383E38BD8AA7E95BF853E9978B6650F2BC02E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91b0afa8-aa8a-4d4a-b885-788cac306736.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 99.82.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:53:83:e3:8b:d8:aa:7e:95:bf:85:3e:99:78:b6:65:0f:2b:c0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=e48f1366276e69617c5cc8baa54d02df91d0c025b108692ff8c9d0507a4f4a91, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:a2:cb:ce:f0:8a:e5:c8:78:c6:a4:27:4c: 9b:29:d7:b1:88:f0:ee:35:21:89:a0:93:37:21:6f: b2:26:f9:14:0c:76:b6:7a:54:cd:60:53:6c:ef:0a: c5:bf:58:93:8d:8b:49:f9:e9:09:de:6d:b1:3d:22: 96:7d:61:31:0a:63:9e:0c:78:84:be:e6:79:3f:bb: 23:30:ce:db:cc:ea:e3:9b:5b:2f:ec:82:47:67:ab: 87:df:92:a7:9e:8b:91:10:6c:ab:fe:15:d8:fd:9b: c5:b2:77:55:95:15:67:43:0c:fa:af:37:96:30:d3: 7c:bf:96:36:60:b0:ed:4d:e5:3d:91:e6:66:c1:3a: f8:df:1f:bf:48:79:69:52:03:09:5b:c6:a0:6a:0b: 53:e5:a6:03:68:97:6a:1d:24:9b:9b:fa:a7:e3:76: 57:fc:69:13:78:99:c2:d8:55:57:07:eb:ec:3a:dc: aa:5d:ef:af:82:32:71:a5:7d:9c:b7:a9:24:e1:f1: 64:2b:d0:af:bf:44:db:d2:09:e3:42:5c:68:83:f9: 63:1b:5d:57:30:b8:95:6e:c9:2f:a0:c7:d9:04:4d: 2a:25:7f:65:a5:4e:e5:b0:9e:06:e3:cd:ad:5e:42: d1:4d:c3:1c:d8:9c:ce:df:c6:c5:19:59:25:d1:53: a2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:38:67:FA:7F:4C:76:58:41:35:CE:90:19:38:0A:CB:FE:4E:17:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91b0afa8-aa8a-4d4a-b885-788cac306736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.82.176.0/21 Signature Algorithm: sha256WithRSAEncryption 5c:20:d8:aa:dc:b2:06:8a:26:fd:c4:b5:08:70:6a:bb:3c:c8: 7f:a0:1f:91:6e:86:dd:d9:68:3d:d1:bb:8d:73:86:02:1c:f2: ec:bf:ec:2f:b4:21:a5:a4:55:7f:5c:1a:39:63:2c:61:db:75: 90:52:f5:80:e4:04:6b:2d:c4:bb:ab:e7:a9:30:74:f1:8c:7e: aa:9c:b1:d3:1e:75:c4:1c:81:37:6c:28:87:35:6e:b2:08:eb: 41:f2:b9:8b:09:b1:7e:4a:e5:57:1f:9c:02:74:02:82:17:96: 2c:d2:45:73:e7:2c:0e:86:ea:79:9a:02:10:c0:a3:fc:31:0e: 96:48:1d:fa:b3:66:72:33:8f:79:36:83:59:fc:dc:68:ef:9a: 97:7f:b6:86:60:0d:f7:fa:9d:40:25:74:6c:15:01:ed:5d:80: ad:64:ad:5b:88:9a:b9:3b:17:b3:a1:f7:17:bf:ac:3e:a0:e1: f4:43:70:b6:fd:a8:fe:13:2a:ae:ba:81:29:fd:e5:e6:82:a0: 33:34:7b:1e:db:e0:35:b3:b2:5e:5e:15:e0:71:e5:f3:ad:69: 53:0a:93:7c:12:ea:25:45:46:67:1a:1e:92:25:19:b0:4b:ad: 2b:0b:70:b0:9e:83:f6:7c:1e:71:d9:4c:b6:8a:3b:c3:02:70: 26:75:f5:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV1OD44vYqn6Vv4U+mXi2ZQ8rwC4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDhmMTM2NjI3NmU2OTYxN2M1Y2M4YmFhNTRkMDJkZjkx ZDBjMDI1YjEwODY5MmZmOGM5ZDA1MDdhNGY0YTkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsxaLLzvCK5ch4xqQnTJsp17GI8O41IYmgkzchb7Im+RQM drZ6VM1gU2zvCsW/WJONi0n56QnebbE9IpZ9YTEKY54MeIS+5nk/uyMwztvM6uOb Wy/sgkdnq4ffkqeei5EQbKv+Fdj9m8Wyd1WVFWdDDPqvN5Yw03y/ljZgsO1N5T2R 5mbBOvjfH79IeWlSAwlbxqBqC1PlpgNol2odJJub+qfjdlf8aRN4mcLYVVcH6+w6 3Kpd76+CMnGlfZy3qSTh8WQr0K+/RNvSCeNCXGiD+WMbXVcwuJVuyS+gx9kETSol f2WlTuWwngbjza1eQtFNwxzYnM7fxsUZWSXRU6LpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzThn+n9MdlhBNc6QGTgKy/5OF4EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxYjBhZmE4LWFhOGEtNGQ0YS1iODg1LTc4OGNhYzMwNjczNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjUrAwDQYJKoZIhvcNAQELBQADggEBAFwg2KrcsgaKJv3EtQhwars8yH+g H5Fuht3ZaD3Ru41zhgIc8uy/7C+0IaWkVX9cGjljLGHbdZBS9YDkBGstxLur56kw dPGMfqqcsdMedcQcgTdsKIc1brII60HyuYsJsX5K5VcfnAJ0AoIXlizSRXPnLA6G 6nmaAhDAo/wxDpZIHfqzZnIzj3k2g1n83Gjvmpd/toZgDff6nUAldGwVAe1dgK1k rVuImrk7F7Oh9xe/rD6g4fRDcLb9qP4TKq66gSn95eaCoDM0ex7b4DWzsl5eFeBx 5fOtaVMKk3wS6iVFRmcaHpIlGbBLrSsLcLCeg/Z8HnHZTLaKO8MCcCZ19Sw= -----END CERTIFICATE-----Generated at Fri Sep 22 15:45:16 2023 by rpki-client on console-ams.rpki-client.org