$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3859fa6-1879-4f61-80fe-b8317ebcffd2.roa File: b3859fa6-1879-4f61-80fe-b8317ebcffd2.roa (raw, json) Hash identifier: DFq451gjIKHP1/JjzWjcwT1zSuqMcx0S63E/kPr9SS8= Subject key identifier: A6:80:5C:85:BB:BC:36:92:30:33:22:DA:2C:25:D1:35:AD:A2:39:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FBA54D7FA1DD177D5E7E215B0DC2736B9351709 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3859fa6-1879-4f61-80fe-b8317ebcffd2.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ba:54:d7:fa:1d:d1:77:d5:e7:e2:15:b0:dc:27:36:b9:35:17:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=ec0178335f3b592811b6889bc669b4537d9ecedb056384ecbccb0143036e8a9f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:fc:06:e5:35:8e:ad:e4:81:7e:92:8b:d7: 1e:28:d2:e9:12:d5:42:e7:e8:42:3e:97:7c:9f:8a: 46:ef:74:2a:5c:11:71:43:eb:40:c6:1e:2a:f4:1b: de:b3:31:dc:66:a1:27:1e:4f:a0:8f:a7:77:37:77: fd:60:9d:5b:a1:f6:24:bd:a7:d8:4c:ae:13:7b:c5: 04:4a:b2:2c:e4:c8:0c:d0:de:81:a7:4c:1e:e2:f2: ec:3b:c1:95:05:7a:9c:3d:3f:dc:76:dd:e5:9d:d7: aa:b1:d4:03:12:e0:90:52:93:f2:0b:99:8f:9e:fd: 2b:52:00:60:46:58:03:f0:9f:4f:3b:2d:2e:50:38: 25:e8:a4:10:67:79:fc:98:7c:90:0a:33:c2:83:eb: 93:53:22:da:10:40:27:2e:a0:89:58:0b:1b:82:b5: 36:e7:38:3a:d0:ec:54:09:d3:85:fb:96:2e:62:74: b6:6b:ce:52:88:ae:38:d0:f9:ff:cf:09:6a:7a:60: 28:11:a6:fa:34:b3:64:1e:50:95:67:c2:e0:94:1d: c0:7f:6f:d1:32:b3:58:f0:55:bf:2f:1a:34:e2:b6: bf:f5:b9:a6:95:74:42:c6:7a:97:53:b7:9e:04:f6: ab:a3:20:2c:c6:f4:78:ca:0e:e3:0b:b3:bd:ef:28: 11:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:80:5C:85:BB:BC:36:92:30:33:22:DA:2C:25:D1:35:AD:A2:39:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3859fa6-1879-4f61-80fe-b8317ebcffd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.65.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:e4:0e:a4:3b:64:ed:87:55:8b:c1:c8:c4:04:e2:29:3c:4d: f0:f7:bd:e2:e6:5e:b1:d5:0a:38:16:52:6e:5a:e7:80:80:24: 08:68:d9:ef:dd:61:35:38:68:00:4c:69:24:49:79:ab:a9:94: 44:1a:15:22:d2:cb:85:e3:49:eb:b1:5c:ce:fc:eb:f6:52:6a: 16:69:ef:28:10:9b:32:56:c4:97:90:3b:19:46:bc:77:11:03: 1e:c6:05:fb:8c:34:3a:35:46:44:ca:dd:a6:5c:9c:46:99:4b: c3:07:77:d1:98:b5:83:55:93:24:c8:79:bf:83:a1:b2:97:5c: 67:bd:07:b8:aa:fa:84:6d:49:02:88:da:5e:96:fb:3f:fd:a1: 85:61:c6:34:6b:c4:23:3a:0a:88:33:e2:b8:5f:8e:25:d2:fb: 41:55:34:42:28:5c:52:3e:ab:4d:7d:1d:53:19:d9:95:ba:3e: 08:dd:7c:bb:8f:e4:ae:52:42:5f:87:84:e7:df:61:1a:cb:21: 0e:fe:12:f3:5e:19:1f:66:e7:82:da:9d:05:f1:88:8e:06:f7: 38:13:81:04:10:30:fc:f3:4f:63:8d:d9:ae:92:81:f5:bd:1c: 20:6a:18:ed:75:eb:f6:21:d1:fc:b3:6c:b4:e6:d5:b2:87:78: 1c:01:e3:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf7pU1/od0XfV5+IVsNwnNrk1FwkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzAxNzgzMzVmM2I1OTI4MTFiNjg4OWJjNjY5YjQ1Mzdk OWVjZWRiMDU2Mzg0ZWNiY2NiMDE0MzAzNmU4YTlmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD1/wG5TWOreSBfpKL1x4o0ukS1ULn6EI+l3yfikbvdCpc EXFD60DGHir0G96zMdxmoSceT6CPp3c3d/1gnVuh9iS9p9hMrhN7xQRKsizkyAzQ 3oGnTB7i8uw7wZUFepw9P9x23eWd16qx1AMS4JBSk/ILmY+e/StSAGBGWAPwn087 LS5QOCXopBBnefyYfJAKM8KD65NTItoQQCcuoIlYCxuCtTbnODrQ7FQJ04X7li5i dLZrzlKIrjjQ+f/PCWp6YCgRpvo0s2QeUJVnwuCUHcB/b9Eys1jwVb8vGjTitr/1 uaaVdELGepdTt54E9qujICzG9HjKDuMLs73vKBERAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpoBchbu8NpIwMyLaLCXRNa2iOV4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzODU5ZmE2LTE4NzktNGY2MS04MGZlLWI4MzE3ZWJjZmZkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EEwDQYJKoZIhvcNAQELBQADggEBACvkDqQ7ZO2HVYvByMQE4ik8TfD3 veLmXrHVCjgWUm5a54CAJAho2e/dYTU4aABMaSRJeauplEQaFSLSy4XjSeuxXM78 6/ZSahZp7ygQmzJWxJeQOxlGvHcRAx7GBfuMNDo1RkTK3aZcnEaZS8MHd9GYtYNV kyTIeb+DobKXXGe9B7iq+oRtSQKI2l6W+z/9oYVhxjRrxCM6Cogz4rhfjiXS+0FV NEIoXFI+q019HVMZ2ZW6PgjdfLuP5K5SQl+HhOffYRrLIQ7+EvNeGR9m54LanQXx iI4G9zgTgQQQMPzzT2ON2a6SgfW9HCBqGO116/Yh0fyzbLTm1bKHeBwB4/A= -----END CERTIFICATE-----Generated at Fri Sep 22 21:28:01 2023 by rpki-client on console-ams.rpki-client.org