$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa File: b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa (raw, json) Hash identifier: d9UC0yzRLNCT3Y/wNfLiemu+lduPn10bi9TIyrC4aE8= Subject key identifier: 05:2E:9E:6C:1B:83:C2:DE:09:33:68:D1:92:60:B7:C3:03:1A:C4:23 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 06BD2D7F5375B6E3443D11056B10A6E183665B55 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 16.150.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:bd:2d:7f:53:75:b6:e3:44:3d:11:05:6b:10:a6:e1:83:66:5b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=123d70303fa5c2db5f060b32ae21880268c235fb7a0a34a0f6573ec0a8685cd5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:84:76:9b:72:09:44:4b:f5:b4:28:58:be:de: 8c:cb:d0:db:05:91:6b:12:de:86:87:9c:f0:8b:39: 16:7d:12:7d:84:e5:47:04:7f:1b:94:18:0c:23:eb: 6e:3a:0a:4d:fa:75:83:5d:31:66:c3:0b:d3:79:14: 3b:d5:3f:d1:80:f4:15:2e:85:db:9f:4f:5d:54:63: 99:10:45:27:15:40:9f:9d:ba:e6:ce:0a:07:ba:61: 73:27:a0:cf:65:02:d6:54:36:8e:56:74:73:52:67: e1:be:f3:fc:ac:3c:bb:e1:fa:e6:8f:02:60:cd:20: a8:a3:d9:cf:e9:1b:a0:de:9b:b4:f4:e2:5c:ae:6f: 6a:bd:e9:44:29:55:7f:cf:a5:c3:8b:7e:70:aa:ac: c4:d2:73:2e:fa:32:b4:59:77:10:44:98:87:ec:7d: b7:cb:8d:3a:8e:76:05:33:b3:86:03:a7:b3:1a:e4: ad:88:e5:16:4d:89:5c:1f:91:23:81:47:58:30:8b: de:80:a2:fd:b1:de:40:bb:33:18:8a:f9:06:55:3c: e6:a4:5f:65:d9:68:29:5e:d4:7c:24:96:b6:07:19: 69:9d:15:a8:93:54:8b:9f:d8:97:0a:2d:44:f3:91: 8c:a3:06:65:46:b7:53:75:78:74:ff:08:03:5f:bc: f4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2E:9E:6C:1B:83:C2:DE:09:33:68:D1:92:60:B7:C3:03:1A:C4:23 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.150.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:22:a6:8f:bc:91:d8:62:eb:7d:fe:bb:f6:be:d0:f8:d6:7d: d7:18:11:f1:48:13:f6:dc:04:20:91:a4:22:13:1c:07:11:84: e0:e4:e6:3f:fd:31:8b:7e:9c:ff:f4:59:5f:00:fb:09:40:dd: fb:f3:48:2b:69:d1:dc:f6:8f:66:62:4b:27:cb:72:56:36:be: aa:63:16:61:80:0c:3c:bf:48:ce:9f:fe:0e:e6:24:79:50:24: fe:ee:5b:01:0b:2f:29:51:bb:e9:12:28:ce:22:c3:48:8c:08: 83:6c:be:d4:91:af:4f:85:fc:ce:e2:3d:02:84:8e:7c:6a:be: e3:69:17:52:d5:b5:09:ae:21:3b:b7:d9:0c:65:0f:b9:d6:ad: f4:88:19:50:06:74:d2:95:77:f8:cc:d1:9b:56:1d:da:ca:48: d9:f3:64:7c:48:02:aa:b7:07:02:7a:7d:ae:04:82:37:78:e2: aa:fd:0c:cd:55:11:48:01:ee:2c:44:88:b8:47:67:f0:8b:36: 2e:40:2a:0c:2a:01:b7:0b:b5:3d:c2:d4:af:06:78:3b:d7:c8: c6:c2:16:5c:a5:a5:93:ca:36:48:a9:61:4c:5d:20:fd:04:25: 27:5f:5e:25:f0:29:aa:5a:fd:4d:e8:43:85:59:ca:83:f8:ff: 88:dc:7e:25 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBr0tf1N1tuNEPREFaxCm4YNmW1UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjNkNzAzMDNmYTVjMmRiNWYwNjBiMzJhZTIxODgwMjY4 YzIzNWZiN2EwYTM0YTBmNjU3M2VjMGE4Njg1Y2Q1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMhHabcglES/W0KFi+3ozL0NsFkWsS3oaHnPCLORZ9En2E 5UcEfxuUGAwj6246Ck36dYNdMWbDC9N5FDvVP9GA9BUuhdufT11UY5kQRScVQJ+d uubOCge6YXMnoM9lAtZUNo5WdHNSZ+G+8/ysPLvh+uaPAmDNIKij2c/pG6Dem7T0 4lyub2q96UQpVX/PpcOLfnCqrMTScy76MrRZdxBEmIfsfbfLjTqOdgUzs4YDp7Ma 5K2I5RZNiVwfkSOBR1gwi96Aov2x3kC7MxiK+QZVPOakX2XZaCle1HwklrYHGWmd FaiTVIuf2JcKLUTzkYyjBmVGt1N1eHT/CANfvPTnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUBS6ebBuDwt4JM2jRkmC3wwMaxCMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5ZTI2MDZhLTcwYjAtNDVjYy1hMDNkLWI1YTU0ZmI5Yjc1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQljANBgkqhkiG9w0BAQsFAAOCAQEAESKmj7yR2GLrff679r7Q+NZ91xgR 8UgT9twEIJGkIhMcBxGE4OTmP/0xi36c//RZXwD7CUDd+/NIK2nR3PaPZmJLJ8ty Vja+qmMWYYAMPL9Izp/+DuYkeVAk/u5bAQsvKVG76RIoziLDSIwIg2y+1JGvT4X8 zuI9AoSOfGq+42kXUtW1Ca4hO7fZDGUPudat9IgZUAZ00pV3+MzRm1Yd2spI2fNk fEgCqrcHAnp9rgSCN3jiqv0MzVURSAHuLESIuEdn8Is2LkAqDCoBtwu1PcLUrwZ4 O9fIxsIWXKWlk8o2SKlhTF0g/QQlJ19eJfApqlr9TehDhVnKg/j/iNx+JQ== -----END CERTIFICATE-----Generated at Fri Sep 22 18:22:44 2023 by rpki-client on console-ams.rpki-client.org