$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa File: a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa (raw, json) Hash identifier: 8YdqqcmVa1obJrWZxam7E1DyOLgHfujSxIk6AcdsMD4= Subject key identifier: DB:F9:E0:9F:14:5A:7D:18:44:B0:FD:13:66:79:05:10:90:33:C2:8D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FA3D3A8E32D2C6740AA38202E4F4EC74B4887C9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:4008::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a3:d3:a8:e3:2d:2c:67:40:aa:38:20:2e:4f:4e:c7:4b:48:87:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=1ff9df02144db59fec9d75a3adf1956b88450f87acef195e2ef47c646ed7d3e0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:26:5c:65:82:da:c7:ce:cf:85:a0:41:75: 67:06:17:26:38:4d:9c:e2:ae:95:c5:05:09:df:7e: 60:ec:64:96:de:20:d5:93:59:af:bf:29:35:38:b5: 59:42:28:51:3b:60:1c:78:61:16:09:19:8f:3d:f5: a1:08:55:f3:2d:ab:bd:7f:30:09:9b:e5:30:85:29: 63:47:ee:34:9e:92:1e:67:9d:b1:8f:5d:12:74:92: d3:ad:7c:3b:65:72:bb:95:bc:e6:b1:f6:09:70:e6: dc:b7:60:58:44:f4:7c:ac:e1:95:fb:28:31:5c:5d: 47:aa:13:fa:06:34:ed:35:13:ad:ea:bc:53:48:a7: 4c:a8:22:14:da:2b:7d:90:68:ed:3b:9f:8b:79:f0: 82:23:e8:0f:cf:d7:0f:16:c1:79:6a:a8:e4:06:8d: e7:93:44:84:2c:74:96:25:d5:3c:57:66:f6:1b:27: b8:1c:65:74:f0:3b:e0:bb:5a:e7:98:f7:2d:1d:10: 28:c3:c8:38:64:eb:48:5c:bf:35:86:02:8f:36:ab: 7d:4d:ec:04:82:b9:48:7d:6b:3f:9e:6b:71:40:ee: a8:61:c9:06:97:27:23:60:6d:e3:d7:9f:7d:6b:37: e1:d5:39:82:39:bf:29:62:db:d8:30:50:de:b3:e6: 06:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F9:E0:9F:14:5A:7D:18:44:B0:FD:13:66:79:05:10:90:33:C2:8D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:4008::/45 Signature Algorithm: sha256WithRSAEncryption 7b:dc:ae:f3:55:c2:a5:14:58:d0:4e:16:56:38:9b:9f:99:2c: 05:81:8e:b4:1c:1d:84:83:af:cc:cb:8a:c3:76:bf:f1:a4:c0: 09:f6:32:54:45:43:1d:0a:90:a7:67:82:a8:82:1b:1f:d9:c0: d1:cc:fb:93:c8:68:79:fc:b4:f9:8b:91:17:43:4d:2f:3a:60: 03:7e:a7:9d:18:31:81:3f:4f:3d:e7:31:1b:c3:e4:47:d5:78: f3:77:a7:c5:a5:8c:86:32:bf:7a:08:34:41:ad:e5:be:d3:8c: b7:4c:2f:ca:d6:57:24:24:79:3e:ef:9a:57:36:c6:9a:5e:0a: 00:32:6d:2f:38:86:e9:ca:3f:67:60:dc:85:0b:de:f3:55:06: 0b:c2:ab:e5:5d:48:51:52:a1:37:16:8e:fd:b1:75:61:3e:b7: 07:f8:12:84:17:b5:68:f2:ae:71:ba:d8:61:6f:09:7b:aa:fc: 11:0a:8b:06:79:a1:16:77:81:d7:c1:44:fb:c2:57:71:f8:68: d2:d6:76:3b:79:68:4b:10:0d:2d:ce:af:1c:fb:73:54:bd:f8: f2:a2:6d:e2:b0:61:00:8d:93:c8:1e:3d:9b:6d:35:3e:bd:81: 81:8d:d1:1b:2c:78:50:fa:bf:8f:f8:bf:d9:0e:2d:d7:57:4f: d9:21:10:c0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUb6PTqOMtLGdAqjggLk9Ox0tIh8kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZmY5ZGYwMjE0NGRiNTlmZWM5ZDc1YTNhZGYxOTU2Yjg4 NDUwZjg3YWNlZjE5NWUyZWY0N2M2NDZlZDdkM2UwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwQCZcZYLax87PhaBBdWcGFyY4TZzirpXFBQnffmDsZJbe INWTWa+/KTU4tVlCKFE7YBx4YRYJGY899aEIVfMtq71/MAmb5TCFKWNH7jSekh5n nbGPXRJ0ktOtfDtlcruVvOax9glw5ty3YFhE9Hys4ZX7KDFcXUeqE/oGNO01E63q vFNIp0yoIhTaK32QaO07n4t58IIj6A/P1w8WwXlqqOQGjeeTRIQsdJYl1TxXZvYb J7gcZXTwO+C7WueY9y0dECjDyDhk60hcvzWGAo82q31N7ASCuUh9az+ea3FA7qhh yQaXJyNgbePXn31rN+HVOYI5vyli29gwUN6z5ga/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2/ngnxRafRhEsP0TZnkFEJAzwo0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0OTJlODUxLWU3NGMtNDRlZC1iNGJkLTRiOTVmM2M4N2EwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmIAEHQAgwDQYJKoZIhvcNAQELBQADggEBAHvcrvNVwqUUWNBOFlY4m5+Z LAWBjrQcHYSDr8zLisN2v/GkwAn2MlRFQx0KkKdngqiCGx/ZwNHM+5PIaHn8tPmL kRdDTS86YAN+p50YMYE/Tz3nMRvD5EfVePN3p8WljIYyv3oINEGt5b7TjLdML8rW VyQkeT7vmlc2xppeCgAybS84hunKP2dg3IUL3vNVBgvCq+VdSFFSoTcWjv2xdWE+ twf4EoQXtWjyrnG62GFvCXuq/BEKiwZ5oRZ3gdfBRPvCV3H4aNLWdjt5aEsQDS3O rxz7c1S9+PKibeKwYQCNk8gePZttNT69gYGN0RsseFD6v4/4v9kOLddXT9khEMA= -----END CERTIFICATE-----Generated at Fri Sep 22 22:31:07 2023 by rpki-client on console-ams.rpki-client.org