$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9ce29e3-7bd7-460c-9786-73423aecfeb0.roa File: a9ce29e3-7bd7-460c-9786-73423aecfeb0.roa (raw, json) Hash identifier: 0Lsx5/mwmbwFEQFiMjnhCaXVIiXnOvXJgUllUlneYbI= Subject key identifier: E2:83:59:A9:23:8E:DD:34:18:F8:1D:FF:88:A7:DF:35:37:F9:A6:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 23069FD24CDC79778A7148C621D9F10D49AA3902 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9ce29e3-7bd7-460c-9786-73423aecfeb0.roa Signing time: Mon 28 Aug 2023 00:00:00 +0000 ROA not before: Mon 28 Aug 2023 00:00:00 +0000 ROA not after: Mon 02 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 149.181.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Aug 2023 05:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:06:9f:d2:4c:dc:79:77:8a:71:48:c6:21:d9:f1:0d:49:aa:39:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 28 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2023 GMT Subject: serialNumber=5d9f297bf273e6560d62b64092b93652812dad9b70b2eb50e153ca10b94f36d6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:fd:9c:1c:6c:72:07:23:45:82:41:51:91: fc:b5:7d:f1:f4:81:05:6f:df:12:55:04:e1:8d:17: 64:a3:7b:ce:c6:e0:03:c0:f9:c5:2e:f9:f5:64:11: 9a:66:31:ef:f3:91:1b:40:ea:4c:bb:09:c7:ee:4a: 88:74:32:84:b4:58:f0:6c:f6:3b:9d:61:33:b0:f5: 2c:9f:e8:1d:8c:b5:32:84:c6:e6:3b:51:4f:e2:56: f7:30:a8:58:dd:db:4c:3a:a5:54:8b:1c:fb:c2:6e: d5:e0:73:8b:db:ac:65:74:5c:d5:98:31:d1:cc:85: 8d:1c:42:c4:d9:18:76:fd:17:ba:4d:5a:78:d1:87: 6e:a7:fc:b7:41:42:c4:b1:28:3c:6d:d7:d4:97:4c: 07:b7:50:94:59:cb:cd:5d:77:80:28:55:29:be:f3: c1:37:4c:f7:02:27:cc:08:7d:b0:1f:2d:dc:ea:d5: 7c:26:cb:46:8b:ca:e7:a1:c8:4b:f6:ff:66:16:d5: 56:6f:58:99:74:cc:17:e3:77:0c:f4:ad:4d:45:1d: e9:b4:91:c2:ff:cb:08:22:5c:2d:68:bd:75:8f:8f: 6f:ef:a2:9d:9c:eb:5f:79:96:b0:da:c5:95:76:02: aa:a3:f9:71:18:c7:53:0c:70:45:b7:f2:ec:55:a2: ef:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:83:59:A9:23:8E:DD:34:18:F8:1D:FF:88:A7:DF:35:37:F9:A6:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9ce29e3-7bd7-460c-9786-73423aecfeb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.181.0.0/17 Signature Algorithm: sha256WithRSAEncryption 15:dd:96:b8:72:9d:b2:c3:64:21:8f:42:4f:be:38:21:54:67: 2c:fc:eb:da:4b:44:c0:83:7b:fb:76:d8:44:f7:17:05:5c:db: ec:ad:07:50:e3:af:cc:13:90:02:d1:48:66:2c:44:ec:8b:d5: 3e:57:67:53:eb:0a:69:c5:75:b8:27:d3:15:84:35:6b:0f:a1: 2c:d4:33:28:57:8d:fe:70:47:cb:85:32:91:8b:cc:2f:57:ec: 7a:ad:e1:d0:d8:f4:7f:a8:5d:05:6e:cd:99:cc:12:e7:09:5a: 83:71:60:e7:e1:43:6a:86:b6:49:56:78:40:0f:09:2c:b2:ba: 83:96:e8:e3:ae:ea:bf:05:0d:29:ed:bf:91:38:73:d5:d9:25: 45:5f:d7:f0:42:27:68:d2:4b:59:c7:8f:8c:50:24:7c:99:2b: 90:45:9e:1f:ac:85:b8:11:44:cc:25:71:a0:3f:8f:04:46:78: 12:1a:0f:87:e2:55:05:d7:fe:61:e7:58:29:21:52:1f:e7:c3: 4f:a7:9d:81:8e:de:ce:28:7f:96:42:86:0d:47:b2:43:ba:2a: 45:ed:87:83:e1:39:d2:ed:59:9c:d8:d6:e8:8c:32:f5:1e:81: f6:a2:1d:6b:34:2c:90:36:a9:8d:5c:90:11:f4:53:57:7a:c6: af:c3:6d:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIwaf0kzceXeKcUjGIdnxDUmqOQIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDlmMjk3YmYyNzNlNjU2MGQ2MmI2NDA5MmI5MzY1Mjgx MmRhZDliNzBiMmViNTBlMTUzY2ExMGI5NGYzNmQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCotP2cHGxyByNFgkFRkfy1ffH0gQVv3xJVBOGNF2Sje87G 4APA+cUu+fVkEZpmMe/zkRtA6ky7CcfuSoh0MoS0WPBs9judYTOw9Syf6B2MtTKE xuY7UU/iVvcwqFjd20w6pVSLHPvCbtXgc4vbrGV0XNWYMdHMhY0cQsTZGHb9F7pN WnjRh26n/LdBQsSxKDxt19SXTAe3UJRZy81dd4AoVSm+88E3TPcCJ8wIfbAfLdzq 1Xwmy0aLyuehyEv2/2YW1VZvWJl0zBfjdwz0rU1FHem0kcL/ywgiXC1ovXWPj2/v op2c6195lrDaxZV2Aqqj+XEYx1MMcEW38uxVou/dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4oNZqSOO3TQY+B3/iKffNTf5pg4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E5Y2UyOWUzLTdiZDctNDYwYy05Nzg2LTczNDIzYWVjZmViMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeVtQAwDQYJKoZIhvcNAQELBQADggEBABXdlrhynbLDZCGPQk++OCFUZyz8 69pLRMCDe/t22ET3FwVc2+ytB1Djr8wTkALRSGYsROyL1T5XZ1PrCmnFdbgn0xWE NWsPoSzUMyhXjf5wR8uFMpGLzC9X7Hqt4dDY9H+oXQVuzZnMEucJWoNxYOfhQ2qG tklWeEAPCSyyuoOW6OOu6r8FDSntv5E4c9XZJUVf1/BCJ2jSS1nHj4xQJHyZK5BF nh+shbgRRMwlcaA/jwRGeBIaD4fiVQXX/mHnWCkhUh/nw0+nnYGO3s4of5ZChg1H skO6KkXth4PhOdLtWZzY1uiMMvUegfaiHWs0LJA2qY1ckBH0U1d6xq/DbTM= -----END CERTIFICATE-----Generated at Mon Aug 28 17:23:41 2023 by rpki-client on console-fra.rpki-client.org