$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9643c772-dc6a-4e41-bc63-2ece362082ab.roa File: 9643c772-dc6a-4e41-bc63-2ece362082ab.roa (raw, json) Hash identifier: Ba+7K9ACULjArytJ42LQAKKHpjyfu+px4iqp5hlgBfQ= Subject key identifier: 8D:BF:BD:DE:9E:AC:17:EC:A9:70:12:C9:70:A1:6B:92:0A:F3:E3:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E7D09655AAB5B3B02CA6AE6A9B28558D5FCB929 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9643c772-dc6a-4e41-bc63-2ece362082ab.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 192.251.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:7d:09:65:5a:ab:5b:3b:02:ca:6a:e6:a9:b2:85:58:d5:fc:b9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=b48bd35b3d7dfa1d2b75150f8deaafdbf4c4f845f4f1d966b37cc174cfed5a3e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:75:4c:34:d7:45:44:ac:ae:e8:9d:1d:93: 4f:5b:1c:18:78:1e:b4:76:07:31:b2:f0:17:24:ea: 4c:25:a7:0e:f6:79:0e:5d:f4:cf:c9:7e:94:a4:4b: 14:fa:72:e5:d5:ea:e6:0f:57:7f:da:29:fc:80:45: a4:ec:11:8f:28:cc:ed:3e:11:95:ed:af:da:8f:60: ec:78:75:89:88:cb:65:a5:67:ac:28:2b:05:45:3a: 62:e8:76:b2:e0:b4:76:38:68:2f:e3:89:33:08:f3: 54:17:1f:57:09:47:e0:e0:d8:a5:ce:88:ae:37:21: 39:7f:ff:43:4b:3e:ad:21:41:6a:3a:69:f9:f4:6d: 6a:6a:43:91:da:2f:89:0d:b9:2b:72:3e:fc:6f:49: ea:31:dd:00:6a:af:86:e9:86:66:2d:e6:95:ac:1a: d9:6b:3e:48:a7:80:e0:f5:c7:94:c3:8e:ca:51:fb: eb:4c:86:0f:3a:1b:da:a4:3d:3d:5b:7a:1d:00:92: aa:78:44:61:15:7d:25:83:ba:ad:03:c1:31:b4:6b: 85:49:fe:f8:ac:1c:b9:9c:91:de:3a:41:d9:f4:23: 79:25:3b:38:3a:76:31:9b:c1:46:73:32:e7:7b:a8: ef:05:c5:ae:bd:d4:68:ab:f4:03:8d:42:03:05:26: 8b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BF:BD:DE:9E:AC:17:EC:A9:70:12:C9:70:A1:6B:92:0A:F3:E3:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9643c772-dc6a-4e41-bc63-2ece362082ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.251.141.0/24 Signature Algorithm: sha256WithRSAEncryption a6:ad:09:d2:57:65:e0:31:7a:77:10:08:11:d8:e9:17:09:dc: b3:83:8f:b2:0c:31:7f:01:bf:12:cb:bd:74:27:b1:f2:c2:fb: 37:2f:3e:e5:28:f3:da:89:00:4a:18:0f:ae:81:69:a2:a2:e8: eb:b3:48:a8:90:ca:ce:72:27:ec:1e:cd:e5:b5:a8:57:ab:21: 73:11:28:0e:a1:5f:d7:f4:d8:0d:9c:5e:0d:a5:85:5c:23:77: a5:88:0e:69:3f:71:5b:c3:eb:30:83:3a:6a:c3:d3:1b:61:a3: 40:4d:86:2c:2b:d3:6a:ca:6d:c3:26:ba:6f:5b:f1:6a:4d:f7: df:d3:eb:6e:85:b3:4d:ff:ef:6e:51:56:b5:fa:f5:7f:b9:c4: 61:17:64:ce:76:84:5c:d5:17:c5:db:0b:a5:21:19:5c:ab:a2: f5:d6:c9:05:d9:a9:32:cc:68:18:f4:06:14:c1:bc:cd:bd:06: 00:93:a8:59:e3:7c:c1:e5:3d:bb:83:b6:37:9e:8f:a2:02:dc: 6e:ab:a7:fb:f6:04:05:ec:0a:c4:5f:92:fd:51:92:ad:07:1f: 16:46:ab:87:7c:2a:61:82:19:bd:a5:4f:e4:48:6e:a7:40:a3: fb:5b:48:fb:79:4f:4a:6e:5e:7d:a6:c5:97:78:bb:a6:fd:3b: b4:d0:e4:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHn0JZVqrWzsCymrmqbKFWNX8uSkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDhiZDM1YjNkN2RmYTFkMmI3NTE1MGY4ZGVhYWZkYmY0 YzRmODQ1ZjRmMWQ5NjZiMzdjYzE3NGNmZWQ1YTNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0W3VMNNdFRKyu6J0dk09bHBh4HrR2BzGy8Bck6kwlpw72 eQ5d9M/JfpSkSxT6cuXV6uYPV3/aKfyARaTsEY8ozO0+EZXtr9qPYOx4dYmIy2Wl Z6woKwVFOmLodrLgtHY4aC/jiTMI81QXH1cJR+Dg2KXOiK43ITl//0NLPq0hQWo6 afn0bWpqQ5HaL4kNuStyPvxvSeox3QBqr4bphmYt5pWsGtlrPkingOD1x5TDjspR ++tMhg86G9qkPT1beh0Akqp4RGEVfSWDuq0DwTG0a4VJ/visHLmckd46Qdn0I3kl Ozg6djGbwUZzMud7qO8Fxa691Gir9AONQgMFJotpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjb+93p6sF+ypcBLJcKFrkgrz40wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2NDNjNzcyLWRjNmEtNGU0MS1iYzYzLTJlY2UzNjIwODJhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADA+40wDQYJKoZIhvcNAQELBQADggEBAKatCdJXZeAxencQCBHY6RcJ3LOD j7IMMX8BvxLLvXQnsfLC+zcvPuUo89qJAEoYD66BaaKi6OuzSKiQys5yJ+wezeW1 qFerIXMRKA6hX9f02A2cXg2lhVwjd6WIDmk/cVvD6zCDOmrD0xtho0BNhiwr02rK bcMmum9b8WpN99/T626Fs03/725RVrX69X+5xGEXZM52hFzVF8XbC6UhGVyrovXW yQXZqTLMaBj0BhTBvM29BgCTqFnjfMHlPbuDtjeej6IC3G6rp/v2BAXsCsRfkv1R kq0HHxZGq4d8KmGCGb2lT+RIbqdAo/tbSPt5T0puXn2mxZd4u6b9O7TQ5I0= -----END CERTIFICATE-----Generated at Fri Sep 22 21:31:19 2023 by rpki-client on console-fra.rpki-client.org