$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cf60302-61c4-468d-a498-f3ea84f3cdf3.roa File: 9cf60302-61c4-468d-a498-f3ea84f3cdf3.roa (raw, json) Hash identifier: rziXt0J9w6hD63yRssL4Ur7zgWzffozXmOrFu6KZMNg= Subject key identifier: B1:42:A3:05:84:31:D6:BF:A6:21:64:99:54:26:BD:9B:2D:AE:35:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19DECECE843D6D432C86719B9C07D35EC8D935F9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cf60302-61c4-468d-a498-f3ea84f3cdf3.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:de:ce:ce:84:3d:6d:43:2c:86:71:9b:9c:07:d3:5e:c8:d9:35:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=aaab5f76a580a09776a666ed40a43f3bc6a2c7feb46b967557caed4232bdd9f9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1a:87:ae:7e:1a:54:8b:c1:6d:7f:40:4a:08: fd:1c:0d:4d:5a:31:bb:d9:41:25:f8:ad:9c:ef:fc: fc:a0:79:e4:4a:8f:bf:d7:90:f2:34:b5:00:7c:e7: d0:c8:27:d8:0f:bd:34:62:27:79:07:92:ca:5c:aa: be:bc:35:b1:ce:b8:4c:dd:33:20:ad:7f:a7:cd:24: b3:cf:0e:b9:37:53:c7:a4:1d:1f:bd:6d:d8:25:ef: 98:3e:88:54:5c:08:93:dd:c2:0b:33:55:82:24:07: 12:96:73:8e:52:e3:d6:fd:e1:48:ff:e6:ce:1f:0c: a8:d7:08:d8:be:86:63:6e:05:ee:74:15:80:d0:97: 3e:42:6d:84:9c:56:92:15:3a:44:25:26:14:72:19: 4f:73:c9:ef:da:13:2e:ad:85:e2:1a:e8:85:3b:ec: 50:f9:a2:8c:ed:b3:8c:39:34:02:9e:cc:99:51:20: 83:67:7a:b9:9a:c9:f4:cb:97:e4:77:2a:df:a4:9c: 8b:06:f3:da:0b:a9:4a:3c:79:d3:35:1b:6a:08:57: 94:48:c9:a4:e6:f6:6c:11:f6:0e:4e:61:4f:d0:90: 10:89:f7:0b:4f:4e:30:fb:59:de:4b:1b:f2:c0:f6: a0:95:1b:50:0d:2e:53:47:7b:e4:d2:c3:97:95:f3: cf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:42:A3:05:84:31:D6:BF:A6:21:64:99:54:26:BD:9B:2D:AE:35:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cf60302-61c4-468d-a498-f3ea84f3cdf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:e000::/40 Signature Algorithm: sha256WithRSAEncryption 62:b2:26:1e:c7:de:2e:09:c8:07:1f:4e:dd:46:e0:4a:f0:c1: 9a:32:5f:79:a6:39:84:6c:20:52:c1:80:db:f0:d0:d3:ed:66: 98:9b:62:08:7a:d2:55:ea:05:81:26:c8:69:27:9c:4e:8d:cf: 57:c1:c6:19:ee:f3:fa:b5:15:cf:9e:80:86:a7:18:0c:26:60: 51:65:0d:fc:a6:9d:fe:e4:c8:29:d9:54:78:ac:9b:30:3f:ed: 87:ed:f3:8b:a8:db:79:19:b1:03:07:4d:97:ac:e0:98:56:9f: 78:e3:c0:75:e8:f7:51:12:f4:23:2b:aa:df:d5:71:b6:78:a3: 98:8d:fe:1c:b1:1f:d9:d2:0c:7a:34:73:fd:0c:0d:9c:1b:5b: 1e:19:61:cc:b5:47:d1:65:a4:73:20:64:e4:c9:9e:02:87:37: 2b:74:24:52:23:f5:42:60:00:52:fe:f5:ae:c2:12:fa:43:07: a7:73:ef:3a:ad:fe:56:03:35:6e:87:55:87:d9:c6:b8:97:d4: 63:fc:7b:d5:5c:2c:f7:db:00:f6:20:da:98:11:d1:89:62:5b: fa:ef:fd:af:bf:2b:ed:10:a5:87:82:89:33:5c:ce:64:d1:d7: 62:f7:4c:68:6d:ef:97:6f:ad:2b:ef:1e:09:bb:12:d6:a0:c4: 49:18:c7:81 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUGd7OzoQ9bUMshnGbnAfTXsjZNfkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYWFiNWY3NmE1ODBhMDk3NzZhNjY2ZWQ0MGE0M2YzYmM2 YTJjN2ZlYjQ2Yjk2NzU1N2NhZWQ0MjMyYmRkOWY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpGoeufhpUi8Ftf0BKCP0cDU1aMbvZQSX4rZzv/PygeeRK j7/XkPI0tQB859DIJ9gPvTRiJ3kHkspcqr68NbHOuEzdMyCtf6fNJLPPDrk3U8ek HR+9bdgl75g+iFRcCJPdwgszVYIkBxKWc45S49b94Uj/5s4fDKjXCNi+hmNuBe50 FYDQlz5CbYScVpIVOkQlJhRyGU9zye/aEy6theIa6IU77FD5oozts4w5NAKezJlR IINnermayfTLl+R3Kt+knIsG89oLqUo8edM1G2oIV5RIyaTm9mwR9g5OYU/QkBCJ 9wtPTjD7Wd5LG/LA9qCVG1ANLlNHe+TSw5eV888RAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUsUKjBYQx1r+mIWSZVCa9my2uNfswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzljZjYwMzAyLTYxYzQtNDY4ZC1hNDk4LWYzZWE4NGYzY2RmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/34DANBgkqhkiG9w0BAQsFAAOCAQEAYrImHsfeLgnIBx9O3UbgSvDB mjJfeaY5hGwgUsGA2/DQ0+1mmJtiCHrSVeoFgSbIaSecTo3PV8HGGe7z+rUVz56A hqcYDCZgUWUN/Kad/uTIKdlUeKybMD/th+3zi6jbeRmxAwdNl6zgmFafeOPAdej3 URL0Iyuq39VxtnijmI3+HLEf2dIMejRz/QwNnBtbHhlhzLVH0WWkcyBk5MmeAoc3 K3QkUiP1QmAAUv71rsIS+kMHp3PvOq3+VgM1bodVh9nGuJfUY/x71Vws99sA9iDa mBHRiWJb+u/9r78r7RClh4KJM1zOZNHXYvdMaG3vl2+tK+8eCbsS1qDESRjHgQ== -----END CERTIFICATE-----Generated at Sat Sep 23 00:18:54 2023 by rpki-client on console-fra.rpki-client.org