$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b29a60c3-3172-45b0-9b52-c978a438da0a.roa File: b29a60c3-3172-45b0-9b52-c978a438da0a.roa (raw, json) Hash identifier: XKyAffD11Yl6IXG3J6z7NeG7nCqHRT0zTZKXigeS1jA= Subject key identifier: C9:90:84:CF:DC:05:8F:D4:F7:AF:24:A7:78:97:8B:E5:BC:F6:E1:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 650193DE9049163308134CAE17A7E2F630B76B84 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b29a60c3-3172-45b0-9b52-c978a438da0a.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:01:93:de:90:49:16:33:08:13:4c:ae:17:a7:e2:f6:30:b7:6b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=338eb4f9b978a3d400f786db6e6e2516fe17df725360b8c363ad085c8792d634, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:00:19:90:62:91:d4:d2:0e:85:50:a7:85:cf: 47:e7:de:5d:e7:cd:5b:a1:0e:97:83:80:98:2a:49: cf:e4:a3:68:09:49:7e:dd:39:28:0c:87:a4:15:dd: 33:5f:e3:b6:58:af:17:98:1e:8f:78:dc:24:f6:df: a2:d8:57:04:a0:a5:e7:f6:40:4e:53:f4:25:1a:fb: d5:b6:6e:99:fb:2e:e8:bf:b1:3b:81:2d:6c:fe:6e: 6f:de:22:bb:1c:0e:cc:db:77:12:01:44:59:c3:ea: bc:86:93:6b:ec:5f:63:d0:b7:14:38:04:03:aa:ee: 21:b3:c8:c3:81:b3:cf:40:bc:be:34:0f:f9:ea:11: 93:02:a8:35:11:71:2c:2a:c3:58:9c:7e:9f:ad:80: a4:ac:80:31:1b:ad:ee:f3:ed:e1:de:f6:6d:a0:04: a8:3c:0d:30:15:32:6b:46:b2:ed:a9:8c:0a:19:69: 32:ae:c4:9b:b9:55:e3:c5:83:d6:1c:3f:8f:15:21: 55:dc:60:64:86:4e:5d:32:9b:ce:11:e0:75:76:d1: 3b:21:dd:ec:b5:62:4e:0e:26:c5:ca:94:61:a5:39: 0b:ea:c3:e7:32:b6:f3:0a:6d:df:fa:5a:86:dc:bb: 3c:1f:04:38:d1:dd:63:81:a9:14:0d:bd:44:46:d8: ba:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:90:84:CF:DC:05:8F:D4:F7:AF:24:A7:78:97:8B:E5:BC:F6:E1:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b29a60c3-3172-45b0-9b52-c978a438da0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.160.0/21 Signature Algorithm: sha256WithRSAEncryption 10:77:29:55:12:31:f3:c3:55:89:7e:ae:8c:40:55:46:ab:bf: c4:5b:8e:67:ee:70:4a:47:12:6c:7a:ea:7a:26:c6:95:8d:8e: 8c:85:61:eb:d3:d2:f7:c7:dc:56:36:99:67:51:62:ae:c2:b5: 03:77:7a:43:e9:f4:96:86:fa:f2:a4:61:a0:d0:70:95:05:60: fc:3d:80:1c:6e:bb:c3:88:97:54:a2:7c:71:36:6f:bc:37:2c: 06:bb:8d:25:93:7a:e4:7c:6c:e5:a9:48:a9:29:3a:09:3b:3d: 35:a0:14:43:39:80:d5:2b:ef:e5:39:8e:2d:a5:95:cf:62:b9: a4:8e:db:c1:4f:4f:ff:96:90:57:06:53:81:09:c2:e5:c7:ae: fe:ac:e8:ff:b7:6c:9a:a7:18:03:37:bc:68:fd:1d:91:61:5f: 85:82:f7:81:ed:c0:c0:6b:80:a0:92:b3:4b:52:2b:9d:20:6f: fa:3d:08:5e:e2:0a:ae:1c:ad:db:58:3c:bb:56:54:d1:73:1f: 09:87:ef:c7:31:ac:76:70:fe:5a:dc:6e:da:b7:0a:76:14:92: d1:1a:6d:d0:2c:ee:e1:4a:f6:dd:b6:8f:0d:79:a4:3e:81:bc: 77:be:6a:86:b7:3b:28:3e:6f:a3:ce:8f:5b:10:9f:3b:ca:22: fb:a0:08:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZQGT3pBJFjMIE0yuF6fi9jC3a4QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzhlYjRmOWI5NzhhM2Q0MDBmNzg2ZGI2ZTZlMjUxNmZl MTdkZjcyNTM2MGI4YzM2M2FkMDg1Yzg3OTJkNjM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoABmQYpHU0g6FUKeFz0fn3l3nzVuhDpeDgJgqSc/ko2gJ SX7dOSgMh6QV3TNf47ZYrxeYHo943CT236LYVwSgpef2QE5T9CUa+9W2bpn7Lui/ sTuBLWz+bm/eIrscDszbdxIBRFnD6ryGk2vsX2PQtxQ4BAOq7iGzyMOBs89AvL40 D/nqEZMCqDURcSwqw1icfp+tgKSsgDEbre7z7eHe9m2gBKg8DTAVMmtGsu2pjAoZ aTKuxJu5VePFg9YcP48VIVXcYGSGTl0ym84R4HV20Tsh3ey1Yk4OJsXKlGGlOQvq w+cytvMKbd/6WobcuzwfBDjR3WOBqRQNvURG2LozAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyZCEz9wFj9T3rySneJeL5bz24XkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyOWE2MGMzLTMxNzItNDViMC05YjUyLWM5NzhhNDM4ZGEwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANM36AwDQYJKoZIhvcNAQELBQADggEBABB3KVUSMfPDVYl+roxAVUarv8Rb jmfucEpHEmx66nomxpWNjoyFYevT0vfH3FY2mWdRYq7CtQN3ekPp9JaG+vKkYaDQ cJUFYPw9gBxuu8OIl1SifHE2b7w3LAa7jSWTeuR8bOWpSKkpOgk7PTWgFEM5gNUr 7+U5ji2llc9iuaSO28FPT/+WkFcGU4EJwuXHrv6s6P+3bJqnGAM3vGj9HZFhX4WC 94HtwMBrgKCSs0tSK50gb/o9CF7iCq4crdtYPLtWVNFzHwmH78cxrHZw/lrcbtq3 CnYUktEabdAs7uFK9t22jw15pD6BvHe+aoa3Oyg+b6POj1sQnzvKIvugCMU= -----END CERTIFICATE-----Generated at Fri Sep 22 18:22:44 2023 by rpki-client on console-ams.rpki-client.org