$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a30ea9e7-8d73-49be-ad74-44d2caccb086.roa File: a30ea9e7-8d73-49be-ad74-44d2caccb086.roa (raw, json) Hash identifier: raWciYX+8uMv7jbaIbNIDFn4swDkR0IQNq3cyGJJH0Q= Subject key identifier: 2A:3A:CF:DF:C8:53:2B:BD:A0:CD:A3:D0:0D:98:3A:86:98:14:A8:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30EF3E384CCF124F7D2844C3B436CB968E706E6A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a30ea9e7-8d73-49be-ad74-44d2caccb086.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 158.138.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 12:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ef:3e:38:4c:cf:12:4f:7d:28:44:c3:b4:36:cb:96:8e:70:6e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=ab4df4973e9aeedbd7ac302f7e5d7496ff44521944285ea40ce24a22637930cb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b5:e0:91:1c:27:6e:c6:a1:b0:d2:a2:1f:85: 33:a1:06:dd:87:09:d8:6a:47:51:1f:d8:cf:9b:56: 0c:f6:f5:55:ae:2d:98:17:74:e5:d6:c0:9a:57:ff: 4c:f8:42:5f:1b:b3:9c:81:a8:ac:f7:4d:24:e1:4a: 25:63:8f:ab:19:07:c2:ae:2d:23:74:04:e7:be:c0: e6:e0:ce:8b:63:c2:38:78:08:ed:cc:74:26:8b:aa: e7:55:91:23:5b:de:f1:5c:32:3f:c7:9e:5f:83:a4: 6a:23:2e:76:28:50:2d:83:94:c4:da:63:17:e3:07: ea:61:ad:34:a6:52:e1:ce:7d:de:c3:a4:f7:c6:ad: ff:98:52:e4:64:54:3d:41:d7:35:00:3b:d5:24:9d: a2:4a:9c:05:0d:d2:6e:0d:d1:7d:f9:9e:bf:8e:c0: fc:5b:e8:3a:bb:53:a9:90:ef:17:05:72:ce:ec:d9: ae:27:ba:5f:69:a5:59:2e:3d:e1:aa:95:73:d3:04: ff:0a:00:b5:e1:87:ff:c1:45:d7:52:9c:6f:e3:e5: 45:8a:19:58:07:3e:8c:78:94:60:ab:c4:4f:9e:50: 37:6f:d6:fb:62:82:df:aa:cb:2d:af:67:e5:3a:39: 8b:da:88:68:f7:bd:78:af:42:99:a3:b6:f8:20:ed: 95:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3A:CF:DF:C8:53:2B:BD:A0:CD:A3:D0:0D:98:3A:86:98:14:A8:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a30ea9e7-8d73-49be-ad74-44d2caccb086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.138.0.0/16 Signature Algorithm: sha256WithRSAEncryption bb:f9:52:d2:bb:af:7b:67:30:66:a9:2a:c4:8b:10:e2:3f:0e: 80:60:59:e2:ea:d8:86:d1:b2:fc:8a:c1:bc:9f:2f:8a:ec:16: 82:3d:91:00:7f:52:7c:6f:55:28:cb:1a:d5:e3:0d:c9:87:86: 08:e0:32:04:9b:21:42:3a:ac:60:63:e1:3a:94:6a:fe:59:c7: e0:f9:1f:f2:8f:6a:fb:e4:08:84:a4:a8:18:cf:fd:1f:87:25: e9:e3:f6:43:a1:6f:16:3e:66:29:27:d7:c0:99:50:9c:e6:6c: 49:57:cb:38:d5:18:34:ef:9a:f3:9c:88:45:cb:2e:30:18:2d: f8:d0:47:4f:b8:1e:63:77:04:63:b1:99:2d:7d:bb:43:06:33: 79:bf:91:b6:63:da:95:38:63:c4:b0:c8:31:da:77:c1:72:eb: 25:a3:e5:b2:eb:07:8a:90:45:70:06:df:68:ad:8d:17:4e:7f: a7:3f:ea:12:36:e9:3a:72:ef:58:37:08:7e:91:e7:da:00:6c: 4f:21:9a:bd:f7:1c:5a:3c:1a:77:e6:2b:1e:8d:72:66:a8:09: 08:20:62:50:76:0d:83:28:32:f8:80:de:dd:38:57:a8:8b:0e: 38:83:ab:25:43:2d:97:d1:8f:80:56:29:07:7e:3f:de:77:63: b3:39:6a:25 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMO8+OEzPEk99KETDtDbLlo5wbmowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjRkZjQ5NzNlOWFlZWRiZDdhYzMwMmY3ZTVkNzQ5NmZm NDQ1MjE5NDQyODVlYTQwY2UyNGEyMjYzNzkzMGNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDateCRHCduxqGw0qIfhTOhBt2HCdhqR1Ef2M+bVgz29VWu LZgXdOXWwJpX/0z4Ql8bs5yBqKz3TSThSiVjj6sZB8KuLSN0BOe+wObgzotjwjh4 CO3MdCaLqudVkSNb3vFcMj/Hnl+DpGojLnYoUC2DlMTaYxfjB+phrTSmUuHOfd7D pPfGrf+YUuRkVD1B1zUAO9UknaJKnAUN0m4N0X35nr+OwPxb6Dq7U6mQ7xcFcs7s 2a4nul9ppVkuPeGqlXPTBP8KALXhh//BRddSnG/j5UWKGVgHPox4lGCrxE+eUDdv 1vtigt+qyy2vZ+U6OYvaiGj3vXivQpmjtvgg7ZVnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUKjrP38hTK72gzaPQDZg6hpgUqFMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzMGVhOWU3LThkNzMtNDliZS1hZDc0LTQ0ZDJjYWNjYjA4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCeijANBgkqhkiG9w0BAQsFAAOCAQEAu/lS0ruve2cwZqkqxIsQ4j8OgGBZ 4urYhtGy/IrBvJ8viuwWgj2RAH9SfG9VKMsa1eMNyYeGCOAyBJshQjqsYGPhOpRq /lnH4Pkf8o9q++QIhKSoGM/9H4cl6eP2Q6FvFj5mKSfXwJlQnOZsSVfLONUYNO+a 85yIRcsuMBgt+NBHT7geY3cEY7GZLX27QwYzeb+RtmPalThjxLDIMdp3wXLrJaPl susHipBFcAbfaK2NF05/pz/qEjbpOnLvWDcIfpHn2gBsTyGavfccWjwad+YrHo1y ZqgJCCBiUHYNgygy+IDe3ThXqIsOOIOrJUMtl9GPgFYpB34/3ndjszlqJQ== -----END CERTIFICATE-----Generated at Fri Sep 22 00:30:06 2023 by rpki-client on console-fra.rpki-client.org