$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bda319d8-b0f8-4e6c-86d0-c160214062d2.roa File: bda319d8-b0f8-4e6c-86d0-c160214062d2.roa (raw, json) Hash identifier: fbrYBBG3bICQ6avLH+hJpx/Zhfz7ocr6vPb8KNtRJzE= Subject key identifier: 4C:0C:EB:2C:C9:4E:B3:70:A8:40:36:E1:22:C7:CF:34:7A:7E:75:25 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61D5447099B3A1D73FA47E347EBF1C4AAFFEAE98 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bda319d8-b0f8-4e6c-86d0-c160214062d2.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff1:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d5:44:70:99:b3:a1:d7:3f:a4:7e:34:7e:bf:1c:4a:af:fe:ae:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=c14de4925274cf015dd1bc2ca60ce9c107465efdd7d09aaf4c4aa3ce625278eb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:3f:d8:80:93:02:12:ea:f7:4f:92:08:25: 1e:c4:75:d9:dd:6f:7d:67:a5:bd:4f:6c:5d:b0:fd: ca:1d:d1:0b:c6:a0:72:a7:c0:40:51:38:b5:34:00: a8:f3:8d:89:54:e5:08:d8:f6:4a:d9:de:e4:db:34: 0b:30:b8:ed:dc:0c:5f:b5:98:c0:46:b4:d0:8d:a2: 66:b8:4b:38:b0:c9:46:32:24:c3:93:78:05:dd:bf: ed:8a:90:48:98:38:0c:74:80:69:92:a0:46:c7:a0: bd:fb:c4:26:c8:63:29:b9:22:73:c0:38:88:5d:7e: 39:b0:e4:f0:c6:74:fd:4b:a0:3a:44:49:00:1b:fc: 5a:de:22:d6:20:61:44:18:42:f3:9e:0e:e0:eb:4b: 12:ae:38:53:9d:e5:1b:16:1e:f8:c8:60:90:45:74: 61:0b:6c:cf:6c:ac:e1:da:07:de:06:ca:7d:a4:f2: 44:9c:20:53:2c:cc:da:2a:72:be:e4:38:64:29:3e: 05:10:9b:65:18:02:e4:cd:90:74:8d:5a:fa:ce:e2: 49:75:6b:63:6c:6e:eb:39:90:4f:a4:7c:5f:1a:5c: 84:d3:8d:38:b6:25:1e:00:b9:5f:3d:ca:20:37:e2: c1:70:d7:13:d7:b0:d8:7e:05:7b:41:5f:e0:08:66: 45:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0C:EB:2C:C9:4E:B3:70:A8:40:36:E1:22:C7:CF:34:7A:7E:75:25 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bda319d8-b0f8-4e6c-86d0-c160214062d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:4000::/40 Signature Algorithm: sha256WithRSAEncryption 99:c2:43:a1:60:f5:d2:9f:a2:21:f7:35:cf:8b:d9:d0:41:5f: 6f:c8:31:0c:c3:b7:3c:f2:0a:16:29:71:e2:a5:b2:bb:f8:97: 4d:f9:50:d9:e3:69:f5:a5:00:30:65:91:60:11:80:48:56:dc: c1:d5:5c:c0:61:55:8c:83:bc:33:56:fb:3d:d6:6f:44:c1:1d: 1a:a2:d6:d9:55:0b:0f:67:86:24:a3:fd:af:ac:50:93:30:76: d0:9a:fa:67:c8:11:c7:67:70:04:38:57:13:a9:81:2c:d2:33: 72:4d:90:b5:37:16:35:62:93:6d:2f:36:be:5e:80:b9:55:7c: 64:52:70:02:d7:92:10:eb:74:66:bd:4f:3d:ac:bd:59:eb:f3: 1c:72:28:df:b0:cd:a4:48:27:79:a2:7d:45:33:e1:f0:64:97: e2:ef:18:a0:9c:14:b6:28:94:f4:9d:8e:d2:b5:4a:6e:2b:fe: 42:cb:fc:15:66:6c:a1:8e:fa:2f:51:95:6e:f9:bb:d0:12:03: 23:db:14:23:44:15:75:a6:df:84:08:4f:6d:55:52:9f:14:25: 9a:57:24:26:20:3d:59:8d:18:dc:3f:d1:ff:43:d2:32:b1:9d: 44:c5:65:91:36:92:a7:e1:57:36:04:54:87:d4:cc:4f:9e:0e: 56:d1:55:30 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYdVEcJmzodc/pH40fr8cSq/+rpgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTRkZTQ5MjUyNzRjZjAxNWRkMWJjMmNhNjBjZTljMTA3 NDY1ZWZkZDdkMDlhYWY0YzRhYTNjZTYyNTI3OGViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxNT/YgJMCEur3T5IIJR7Eddndb31npb1PbF2w/cod0QvG oHKnwEBROLU0AKjzjYlU5QjY9krZ3uTbNAswuO3cDF+1mMBGtNCNoma4SziwyUYy JMOTeAXdv+2KkEiYOAx0gGmSoEbHoL37xCbIYym5InPAOIhdfjmw5PDGdP1LoDpE SQAb/FreItYgYUQYQvOeDuDrSxKuOFOd5RsWHvjIYJBFdGELbM9srOHaB94Gyn2k 8kScIFMszNoqcr7kOGQpPgUQm2UYAuTNkHSNWvrO4kl1a2Nsbus5kE+kfF8aXITT jTi2JR4AuV89yiA34sFw1xPXsNh+BXtBX+AIZkV7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUTAzrLMlOs3CoQDbhIsfPNHp+dSUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkYTMxOWQ4LWIwZjgtNGU2Yy04NmQwLWMxNjAyMTQwNjJkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/xQDANBgkqhkiG9w0BAQsFAAOCAQEAmcJDoWD10p+iIfc1z4vZ0EFf b8gxDMO3PPIKFilx4qWyu/iXTflQ2eNp9aUAMGWRYBGASFbcwdVcwGFVjIO8M1b7 PdZvRMEdGqLW2VULD2eGJKP9r6xQkzB20Jr6Z8gRx2dwBDhXE6mBLNIzck2QtTcW NWKTbS82vl6AuVV8ZFJwAteSEOt0Zr1PPay9WevzHHIo37DNpEgneaJ9RTPh8GSX 4u8YoJwUtiiU9J2O0rVKbiv+Qsv8FWZsoY76L1GVbvm70BIDI9sUI0QVdabfhAhP bVVSnxQlmlckJiA9WY0Y3D/R/0PSMrGdRMVlkTaSp+FXNgRUh9TMT54OVtFVMA== -----END CERTIFICATE-----Generated at Fri Sep 22 16:30:54 2023 by rpki-client on console-fra.rpki-client.org