$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e40c41-1ab6-4eb5-8522-0209480072ff.roa File: b0e40c41-1ab6-4eb5-8522-0209480072ff.roa (raw, json) Hash identifier: hE2aHfJ3DJaNLADnfe0In9aQXuNsHxOrOiGcnX7uFAY= Subject key identifier: 57:4E:9D:B3:63:BC:B7:ED:34:D0:60:09:98:DC:99:9C:74:A3:2F:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C0A87CFE992F08DB72DAA44A1AD4E0DCEAE10F9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e40c41-1ab6-4eb5-8522-0209480072ff.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 104.255.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0a:87:cf:e9:92:f0:8d:b7:2d:aa:44:a1:ad:4e:0d:ce:ae:10:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=8d738d9677b4059a41e25f3047a4b777954b8702f6a64f1d8619a345bc042380, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:0f:8f:12:c4:66:17:2c:8c:2d:9f:af:2e: 91:cb:ee:a2:ad:7f:c5:f2:62:66:77:b8:fc:af:13: 74:19:3a:f3:c1:71:98:05:e6:2b:aa:ae:34:d4:b4: 64:15:dc:10:2d:0b:ea:5a:2d:0c:c5:2b:d9:7b:8e: b9:b1:04:41:6d:e1:cb:de:00:ae:58:be:f4:99:e5: 3f:57:71:a6:c1:6d:e7:0e:63:7f:58:e9:b4:21:37: 39:eb:10:47:42:16:e7:2a:a1:1d:52:f8:8b:14:78: 06:ea:6e:f0:cf:35:89:fb:25:8a:0d:54:67:0d:f6: 17:f4:bb:ef:2e:22:65:b7:87:d6:7e:86:23:7d:f6: 0e:57:d8:f3:64:a8:65:59:b9:ed:c7:0b:03:50:50: 92:57:16:ef:fc:8f:32:8b:da:45:26:f3:07:15:9b: ad:ff:32:31:67:e7:bf:78:cb:42:90:41:10:00:c3: e6:e6:5c:64:94:66:da:b1:22:44:db:78:cb:66:87: 21:18:3e:43:de:4c:2f:60:53:27:fb:03:2b:77:da: 70:45:96:ee:1b:9b:8b:0a:b4:a7:08:88:c2:8b:51: 57:1f:af:b5:47:48:72:36:c7:18:b7:ba:18:7a:91: 30:fb:f5:ef:07:98:dc:12:e0:19:96:a6:ba:78:20: b6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4E:9D:B3:63:BC:B7:ED:34:D0:60:09:98:DC:99:9C:74:A3:2F:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e40c41-1ab6-4eb5-8522-0209480072ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.255.56.0/21 Signature Algorithm: sha256WithRSAEncryption 78:cb:3d:c1:00:c8:5c:e5:49:c4:74:e0:71:9b:bc:1b:96:6a: 5c:1a:9c:9d:a0:ff:9a:68:8d:47:23:f2:a4:fa:32:4b:3b:7d: 18:63:9b:4a:47:80:7d:5d:6a:ef:ff:d5:fe:93:dd:a4:70:bb: 46:11:3e:b6:b7:47:8e:e1:22:91:e1:99:a6:be:81:6e:d5:42: 4d:99:a8:59:57:92:52:2e:ff:9c:1d:4d:61:66:ae:a4:91:2b: b6:f1:e5:c0:e8:0c:e5:d0:2d:2f:99:6c:90:cc:a7:2e:cb:35: 35:87:da:34:6e:05:6c:32:54:cb:e6:3e:b7:05:d4:ef:0a:a1: de:11:00:c7:6a:e0:75:40:58:67:ef:a9:6a:58:37:a5:3e:99: 45:8a:73:54:49:13:2d:80:d3:2e:09:4c:2d:8d:10:8f:4d:00: a6:f6:67:22:71:a9:e7:98:12:bf:31:e1:5a:8e:5d:a9:32:07: 6a:e2:76:a1:ae:77:94:58:16:72:20:b7:88:f5:6e:d6:58:1d: db:43:82:51:b8:c1:a3:56:78:8a:4a:ff:40:60:81:c9:2d:18: d6:32:68:04:f0:10:fc:8a:45:32:f3:57:a8:cc:7c:be:e0:f7: 35:81:06:af:09:03:11:fb:6e:ec:ac:66:68:60:f9:8f:5b:b2: d3:df:10:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHAqHz+mS8I23LapEoa1ODc6uEPkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDczOGQ5Njc3YjQwNTlhNDFlMjVmMzA0N2E0Yjc3Nzk1 NGI4NzAyZjZhNjRmMWQ4NjE5YTM0NWJjMDQyMzgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl8Q+PEsRmFyyMLZ+vLpHL7qKtf8XyYmZ3uPyvE3QZOvPB cZgF5iuqrjTUtGQV3BAtC+paLQzFK9l7jrmxBEFt4cveAK5YvvSZ5T9XcabBbecO Y39Y6bQhNznrEEdCFucqoR1S+IsUeAbqbvDPNYn7JYoNVGcN9hf0u+8uImW3h9Z+ hiN99g5X2PNkqGVZue3HCwNQUJJXFu/8jzKL2kUm8wcVm63/MjFn5794y0KQQRAA w+bmXGSUZtqxIkTbeMtmhyEYPkPeTC9gUyf7Ayt32nBFlu4bm4sKtKcIiMKLUVcf r7VHSHI2xxi3uhh6kTD79e8HmNwS4BmWprp4ILYTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUV06ds2O8t+000GAJmNyZnHSjL4gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwZTQwYzQxLTFhYjYtNGViNS04NTIyLTAyMDk0ODAwNzJmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANo/zgwDQYJKoZIhvcNAQELBQADggEBAHjLPcEAyFzlScR04HGbvBuWalwa nJ2g/5pojUcj8qT6Mks7fRhjm0pHgH1dau//1f6T3aRwu0YRPra3R47hIpHhmaa+ gW7VQk2ZqFlXklIu/5wdTWFmrqSRK7bx5cDoDOXQLS+ZbJDMpy7LNTWH2jRuBWwy VMvmPrcF1O8Kod4RAMdq4HVAWGfvqWpYN6U+mUWKc1RJEy2A0y4JTC2NEI9NAKb2 ZyJxqeeYEr8x4VqOXakyB2ridqGud5RYFnIgt4j1btZYHdtDglG4waNWeIpK/0Bg gcktGNYyaATwEPyKRTLzV6jMfL7g9zWBBq8JAxH7buysZmhg+Y9bstPfEKA= -----END CERTIFICATE-----Generated at Fri Sep 22 20:36:16 2023 by rpki-client on console-fra.rpki-client.org