$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/973b2c2a-040b-4c98-9c29-36c767f5e19b.roa File: 973b2c2a-040b-4c98-9c29-36c767f5e19b.roa (raw, json) Hash identifier: mwlRfOSm+9sdyiNObu/H9qAk9oiIarkG8ZyXvOZgV+I= Subject key identifier: CD:E9:BC:89:0E:BD:FD:D8:AD:CB:8C:9C:40:8B:66:DF:4B:D0:00:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 765421F581E616ED6B2D38D1C92D977804F6A246 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/973b2c2a-040b-4c98-9c29-36c767f5e19b.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 138.70.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 12:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:54:21:f5:81:e6:16:ed:6b:2d:38:d1:c9:2d:97:78:04:f6:a2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=49ad6798f6af841e9ea693998453f5cf0d14991b7b7c37afe4a02d0196e8a964, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:05:6d:9c:6a:fb:59:cb:9e:82:af:30:61:ff: b6:c7:e5:ff:bf:1f:35:82:ae:a2:01:e9:b6:94:7d: 35:f8:f0:85:79:fa:2c:29:d7:8e:b4:f8:29:40:49: 33:f2:52:c5:c0:41:bc:8e:94:02:45:5b:b9:40:28: e1:74:be:cc:2e:27:ac:d0:00:8c:17:1e:95:40:be: 92:c7:37:7e:75:95:2e:ec:8e:00:f8:c8:0c:05:7a: ef:3b:50:ab:e1:e9:76:c3:ea:b1:4b:55:19:a4:40: c7:7f:ea:80:99:dd:d5:ed:58:8f:39:2e:2d:b7:2d: 36:3e:99:5d:eb:8d:47:3b:de:b0:3c:3c:5e:e4:91: db:7f:6e:63:97:f5:4f:8b:02:b6:63:73:27:73:16: b4:cd:80:6d:b6:fc:c8:87:a9:e5:7d:33:e6:72:81: ce:f1:bf:11:2f:41:67:d7:a9:15:4b:d5:44:8f:a7: 4b:ea:6a:d0:61:7b:75:e6:38:22:34:72:f2:6a:8c: 8d:92:e5:57:68:6b:27:8b:09:d6:1d:b6:3b:d5:9e: b9:b7:be:d2:ee:1e:c5:98:7d:37:34:ba:37:f7:e1: c5:bf:cb:e2:95:27:8a:29:ef:89:a0:ab:eb:6c:8f: 81:83:08:99:c4:21:5c:c0:92:d0:4e:85:74:0e:41: b4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E9:BC:89:0E:BD:FD:D8:AD:CB:8C:9C:40:8B:66:DF:4B:D0:00:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/973b2c2a-040b-4c98-9c29-36c767f5e19b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.70.0.0/16 Signature Algorithm: sha256WithRSAEncryption 40:00:45:fa:f2:28:8e:6a:9f:11:45:df:3b:7b:09:cc:67:44: 67:8f:bf:8f:d7:7e:80:b6:c7:6f:c2:ce:f5:9b:fa:23:72:87: ef:0a:ff:a3:74:e5:2f:d6:db:44:e9:5e:46:2b:db:b2:94:32: 71:36:88:00:13:45:fe:3e:34:5e:16:c1:9e:37:73:16:47:58: 7a:4d:15:b2:1f:07:9c:2e:be:f0:1d:c0:7f:20:16:60:e4:89: 11:ec:ab:b8:76:44:2e:1f:d2:43:09:6c:50:7f:a6:0e:b0:2a: fa:5b:f5:2e:89:26:5e:f9:44:8c:c9:54:d5:02:f3:17:7d:1e: c4:b0:85:05:57:8a:76:08:64:c9:90:3b:c0:fe:b0:20:d7:d0: a4:8c:95:6f:b6:f3:6c:73:82:c2:ad:ff:d4:6a:44:cb:7e:be: bb:0f:bc:65:18:0c:63:f9:a2:26:73:be:60:1d:4e:d0:60:0c: 82:e9:0e:43:57:aa:17:be:9a:9d:c6:7e:e5:eb:f0:e2:6b:e2: 92:57:fa:f1:6b:88:e4:1e:d8:17:4e:1e:2b:ff:c8:12:41:90: 79:df:5c:09:ac:7c:0a:6a:cd:cf:9a:47:90:8d:15:e1:69:4f: f1:d7:bb:ff:d3:cf:35:e9:59:34:92:fe:13:ed:86:79:56:f2: 6e:ad:78:f0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdlQh9YHmFu1rLTjRyS2XeAT2okYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OWFkNjc5OGY2YWY4NDFlOWVhNjkzOTk4NDUzZjVjZjBk MTQ5OTFiN2I3YzM3YWZlNGEwMmQwMTk2ZThhOTY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaBW2cavtZy56CrzBh/7bH5f+/HzWCrqIB6baUfTX48IV5 +iwp1460+ClASTPyUsXAQbyOlAJFW7lAKOF0vswuJ6zQAIwXHpVAvpLHN351lS7s jgD4yAwFeu87UKvh6XbD6rFLVRmkQMd/6oCZ3dXtWI85Li23LTY+mV3rjUc73rA8 PF7kkdt/bmOX9U+LArZjcydzFrTNgG22/MiHqeV9M+Zygc7xvxEvQWfXqRVL1USP p0vqatBhe3XmOCI0cvJqjI2S5VdoayeLCdYdtjvVnrm3vtLuHsWYfTc0ujf34cW/ y+KVJ4op74mgq+tsj4GDCJnEIVzAktBOhXQOQbThAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUzem8iQ69/dity4ycQItm30vQAAcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk3M2IyYzJhLTA0MGItNGM5OC05YzI5LTM2Yzc2N2Y1ZTE5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCKRjANBgkqhkiG9w0BAQsFAAOCAQEAQABF+vIojmqfEUXfO3sJzGdEZ4+/ j9d+gLbHb8LO9Zv6I3KH7wr/o3TlL9bbROleRivbspQycTaIABNF/j40XhbBnjdz FkdYek0Vsh8HnC6+8B3AfyAWYOSJEeyruHZELh/SQwlsUH+mDrAq+lv1LokmXvlE jMlU1QLzF30exLCFBVeKdghkyZA7wP6wINfQpIyVb7bzbHOCwq3/1GpEy36+uw+8 ZRgMY/miJnO+YB1O0GAMgukOQ1eqF76ancZ+5evw4mviklf68WuI5B7YF04eK//I EkGQed9cCax8CmrNz5pHkI0V4WlP8de7/9PPNelZNJL+E+2GeVbybq148A== -----END CERTIFICATE-----Generated at Fri Sep 22 00:30:06 2023 by rpki-client on console-fra.rpki-client.org