$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c00ee110-9782-449a-a4e0-6b2a6ceffa21.roa File: c00ee110-9782-449a-a4e0-6b2a6ceffa21.roa (raw, json) Hash identifier: LRYao13Wb8kEed2Utdl2QPZ67Q5NLi+U367E0CwzyIc= Subject key identifier: E6:FF:06:CE:EF:1F:9A:45:12:3B:F8:3D:B5:70:EC:15:EA:EC:FC:44 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48E0C1B85AF5C6AF91DCE31731CB5154164EFF36 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c00ee110-9782-449a-a4e0-6b2a6ceffa21.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 182.28.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e0:c1:b8:5a:f5:c6:af:91:dc:e3:17:31:cb:51:54:16:4e:ff:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=976451b518de4394ec1ae8bbba27d8f6ca3fc660d17d2c59450daef83d080d54, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:fb:b5:79:3e:38:f1:36:02:95:e4:ec:4d: 24:e1:4f:60:03:a3:2a:db:03:ed:0f:03:cd:0b:60: 3a:33:af:e1:47:9b:0d:49:26:0e:b3:c6:4f:9a:94: b0:93:85:f9:f6:75:12:31:87:fe:31:67:1c:31:97: 34:3b:7b:b7:92:55:8f:4e:bf:bd:7f:8b:16:d7:b1: 28:36:ea:16:10:6b:3d:8c:22:bd:d7:72:9f:b6:99: 13:6f:40:a3:18:4f:ee:b9:c0:dc:d3:45:04:60:d5: 86:56:c0:8b:4c:2b:6a:8a:fe:3c:a4:5d:85:63:6c: 9d:af:37:b4:24:e8:0b:5d:d2:83:6d:3c:47:9d:37: e3:7f:62:3f:0a:59:ab:0d:ab:79:6c:64:85:17:80: 26:33:d2:f4:86:8d:ac:48:a0:d6:c2:5c:56:47:3e: 54:6c:1f:c1:07:45:de:a2:6e:6c:b1:e3:4b:b9:c5: b8:08:15:f0:e5:0a:99:8d:b2:4e:ff:05:4c:f1:e2: 23:ef:28:41:ec:96:c2:e3:79:b6:b0:7f:cb:51:8a: 37:bc:cf:30:27:c1:78:f0:a1:f1:6f:71:9c:b4:ad: dd:fa:3a:91:f7:4d:d9:af:f3:de:19:3a:ac:82:be: aa:a0:70:c8:8d:21:94:f0:64:07:05:03:fd:89:6d: 67:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FF:06:CE:EF:1F:9A:45:12:3B:F8:3D:B5:70:EC:15:EA:EC:FC:44 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c00ee110-9782-449a-a4e0-6b2a6ceffa21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.28.0.0/16 Signature Algorithm: sha256WithRSAEncryption d1:e8:ea:01:3b:66:70:7c:09:d0:b0:eb:c2:6c:a5:7b:1f:37: 96:f1:94:0d:69:6a:84:2e:2e:c0:12:a4:47:05:af:2d:d9:e5: c0:e0:cd:94:98:12:e1:d4:e1:70:79:15:90:1d:41:d5:8e:e0: a8:85:6c:8e:62:55:b3:c8:80:23:20:4f:73:83:fc:79:fc:c1: 21:32:1c:c3:f2:28:4e:b6:95:50:19:11:2c:1d:58:68:ab:5c: 9e:a1:0c:03:83:20:dc:bb:d7:5f:ae:ca:18:e9:40:3a:b4:ef: 54:4d:d3:41:cb:01:11:11:b4:23:bc:f8:cb:4f:d8:6d:80:4a: 62:0d:be:f7:f6:1f:cd:d1:6c:a7:0a:a8:83:50:13:63:a9:04: 43:a2:ca:9a:a8:22:d5:e7:bd:3a:93:58:3e:ef:cc:2a:9b:93: 7d:85:c5:01:1f:ca:b5:80:52:2f:6d:71:ae:59:57:e6:89:20: 80:19:8d:ad:61:89:2b:a2:bf:91:f0:47:3f:a3:db:30:8f:1b: 64:08:ef:90:9c:14:e5:9d:d1:4a:3e:c7:e5:07:7b:3b:56:62: 03:55:1c:0e:fd:3f:70:49:e9:68:84:c3:b8:9e:7c:32:a5:d3: 09:f9:75:40:8e:14:af:32:7e:e4:aa:6b:47:ff:9a:0c:7e:f4: 9d:02:10:43 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSODBuFr1xq+R3OMXMctRVBZO/zYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzY0NTFiNTE4ZGU0Mzk0ZWMxYWU4YmJiYTI3ZDhmNmNh M2ZjNjYwZDE3ZDJjNTk0NTBkYWVmODNkMDgwZDU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDBfu1eT448TYCleTsTSThT2ADoyrbA+0PA80LYDozr+FH mw1JJg6zxk+alLCThfn2dRIxh/4xZxwxlzQ7e7eSVY9Ov71/ixbXsSg26hYQaz2M Ir3Xcp+2mRNvQKMYT+65wNzTRQRg1YZWwItMK2qK/jykXYVjbJ2vN7Qk6Atd0oNt PEedN+N/Yj8KWasNq3lsZIUXgCYz0vSGjaxIoNbCXFZHPlRsH8EHRd6ibmyx40u5 xbgIFfDlCpmNsk7/BUzx4iPvKEHslsLjebawf8tRije8zzAnwXjwofFvcZy0rd36 OpH3Tdmv894ZOqyCvqqgcMiNIZTwZAcFA/2JbWffAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU5v8Gzu8fmkUSO/g9tXDsFers/EQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwMGVlMTEwLTk3ODItNDQ5YS1hNGUwLTZiMmE2Y2VmZmEyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwC2HDANBgkqhkiG9w0BAQsFAAOCAQEA0ejqATtmcHwJ0LDrwmylex83lvGU DWlqhC4uwBKkRwWvLdnlwODNlJgS4dThcHkVkB1B1Y7gqIVsjmJVs8iAIyBPc4P8 efzBITIcw/IoTraVUBkRLB1YaKtcnqEMA4Mg3LvXX67KGOlAOrTvVE3TQcsBERG0 I7z4y0/YbYBKYg2+9/YfzdFspwqog1ATY6kEQ6LKmqgi1ee9OpNYPu/MKpuTfYXF AR/KtYBSL21xrllX5okggBmNrWGJK6K/kfBHP6PbMI8bZAjvkJwU5Z3RSj7H5Qd7 O1ZiA1UcDv0/cEnpaITDuJ58MqXTCfl1QI4UrzJ+5KprR/+aDH70nQIQQw== -----END CERTIFICATE-----Generated at Fri Sep 22 16:30:54 2023 by rpki-client on console-fra.rpki-client.org