$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b07acc46-54c4-479e-b01b-57d338ac8653.roa File: b07acc46-54c4-479e-b01b-57d338ac8653.roa (raw, json) Hash identifier: JgxPtNwxE1m/Jivf4sPRRpc6KVb++GEyy2NBt8UMXkA= Subject key identifier: C4:09:3E:29:A0:0A:61:44:61:52:39:6A:BA:F4:20:C3:63:28:8D:FF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A799EE7BE6A82B9BA3F5EB07E458B44A25B2766 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b07acc46-54c4-479e-b01b-57d338ac8653.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 108.175.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:79:9e:e7:be:6a:82:b9:ba:3f:5e:b0:7e:45:8b:44:a2:5b:27:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=af12e9c233dff4c41741a4a1b2e09ff8c1e68c2265eb386c00a9b806c01c991f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:25:66:e9:50:02:95:13:dc:68:16:27:c4:9b: 3e:52:58:3d:47:81:a9:ea:88:d2:62:9d:cc:d4:06: aa:5b:9d:05:a5:45:4c:82:34:ce:bf:11:f9:c1:ff: 8f:58:94:9f:ce:31:05:3f:68:23:25:46:a0:e9:ef: b1:0b:1f:28:2b:29:b2:76:b7:1f:73:89:25:fa:c0: 0a:19:0e:2d:39:28:d2:d3:4a:26:75:fe:ff:04:bd: 86:3e:88:f7:dc:a1:de:95:c3:2c:bc:b7:4c:d9:33: 8f:af:88:b2:4b:f0:6c:a0:cf:e5:ff:7e:70:88:26: f5:0e:80:e8:85:6e:10:14:de:8f:c8:05:8c:d9:2c: 30:a0:c0:b5:af:8e:a5:ae:c2:28:5a:dd:9c:12:7c: 37:46:c7:71:8e:59:dd:eb:1b:dc:93:91:aa:cb:92: 77:d4:8d:04:22:40:4d:e9:48:af:83:b2:71:da:4d: 91:4e:66:fd:9a:30:be:62:9e:08:fe:ea:50:fe:f6: 58:60:d5:1a:d2:8b:d9:86:96:e0:5d:bd:ca:02:04: 7a:67:4c:37:0f:89:a5:30:4f:b9:fe:f0:bb:de:2f: 94:d8:7b:c9:73:3d:73:8a:cf:c4:8e:eb:f0:fd:93: b9:0d:ec:0b:cc:1b:b5:c2:ea:b1:bc:a0:dc:d0:d4: aa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:09:3E:29:A0:0A:61:44:61:52:39:6A:BA:F4:20:C3:63:28:8D:FF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b07acc46-54c4-479e-b01b-57d338ac8653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.175.52.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:92:5b:7b:6e:36:35:ff:e0:23:c9:db:56:ed:38:54:8b:9e: 2f:4b:9e:25:d3:3e:85:1e:eb:55:9d:52:f3:fe:06:c1:fb:93: 45:17:de:06:48:21:11:12:ad:b1:8e:c9:f6:70:3f:61:06:53: b5:62:3b:6b:17:5b:5f:cf:b3:c0:00:95:ba:6b:cf:da:fe:a3: 4b:eb:9f:e3:c5:fa:d5:e8:8f:24:2d:f8:e2:03:74:2a:f7:72: 19:e4:af:5c:1d:b4:05:9d:4b:e6:4a:af:33:52:7e:6c:76:a0: 9f:e0:ea:87:6b:63:a4:59:4e:c3:29:e5:78:3a:04:b1:65:fc: ea:1a:d7:55:68:9c:ad:0f:02:63:a8:e9:36:15:2d:ed:80:0a: 8a:1a:de:33:34:76:02:3d:ad:99:65:eb:36:70:35:5e:c9:76: d6:e0:4e:7f:57:c6:a2:44:13:2f:31:16:ff:b9:75:66:50:7a: ef:b4:b3:59:da:74:b3:94:9a:c8:49:c2:61:61:57:24:45:a0: 4c:e4:0d:59:e6:84:71:05:15:d7:24:19:4b:df:af:27:22:be: 81:0c:55:3d:bf:e0:d7:6c:46:a6:97:c9:b2:72:ae:63:10:b7: f7:03:7b:e8:07:3d:69:c5:61:a5:ab:3b:14:72:00:68:04:67: 4c:f0:82:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWnme575qgrm6P16wfkWLRKJbJ2YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjEyZTljMjMzZGZmNGM0MTc0MWE0YTFiMmUwOWZmOGMx ZTY4YzIyNjVlYjM4NmMwMGE5YjgwNmMwMWM5OTFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgJWbpUAKVE9xoFifEmz5SWD1HganqiNJinczUBqpbnQWl RUyCNM6/EfnB/49YlJ/OMQU/aCMlRqDp77ELHygrKbJ2tx9ziSX6wAoZDi05KNLT SiZ1/v8EvYY+iPfcod6Vwyy8t0zZM4+viLJL8Gygz+X/fnCIJvUOgOiFbhAU3o/I BYzZLDCgwLWvjqWuwiha3ZwSfDdGx3GOWd3rG9yTkarLknfUjQQiQE3pSK+DsnHa TZFOZv2aML5ingj+6lD+9lhg1RrSi9mGluBdvcoCBHpnTDcPiaUwT7n+8LveL5TY e8lzPXOKz8SO6/D9k7kN7AvMG7XC6rG8oNzQ1KpNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxAk+KaAKYURhUjlquvQgw2Mojf8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwN2FjYzQ2LTU0YzQtNDc5ZS1iMDFiLTU3ZDMzOGFjODY1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJsrzQwDQYJKoZIhvcNAQELBQADggEBABySW3tuNjX/4CPJ21btOFSLni9L niXTPoUe61WdUvP+BsH7k0UX3gZIIRESrbGOyfZwP2EGU7ViO2sXW1/Ps8AAlbpr z9r+o0vrn+PF+tXojyQt+OIDdCr3chnkr1wdtAWdS+ZKrzNSfmx2oJ/g6odrY6RZ TsMp5Xg6BLFl/Ooa11VonK0PAmOo6TYVLe2ACooa3jM0dgI9rZll6zZwNV7Jdtbg Tn9XxqJEEy8xFv+5dWZQeu+0s1nadLOUmshJwmFhVyRFoEzkDVnmhHEFFdckGUvf rycivoEMVT2/4NdsRqaXybJyrmMQt/cDe+gHPWnFYaWrOxRyAGgEZ0zwgpY= -----END CERTIFICATE-----Generated at Fri Sep 22 21:28:01 2023 by rpki-client on console-ams.rpki-client.org