$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c22f83f9-6806-4731-9ee7-da3a022533e2.roa File: c22f83f9-6806-4731-9ee7-da3a022533e2.roa (raw, json) Hash identifier: qJCP0ISgHLAdJqgBmvFmsNe/3nHjjWmZMDf8PEwbG68= Subject key identifier: 19:0D:3E:B1:AB:83:EA:BF:C3:60:9A:EF:C9:54:05:38:52:B5:76:9F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2BAAE6037A90B2C1A65B5E4B7CB8D219927C47C7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c22f83f9-6806-4731-9ee7-da3a022533e2.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 170.15.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:aa:e6:03:7a:90:b2:c1:a6:5b:5e:4b:7c:b8:d2:19:92:7c:47:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=9e5bf5302b929d5cf7fb067a3a7540a7fd00827b3a05cc0e4ebdb1a228fa205d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1a:04:34:58:9c:5f:ca:46:09:e6:8c:30:71: 1c:fa:a1:23:3c:ab:37:56:24:b1:ff:00:93:01:7b: a8:c7:b3:0c:0e:de:19:71:7c:50:55:99:37:47:b2: ed:8d:e9:5d:2e:0a:dd:78:b6:77:17:54:18:84:35: 13:d7:27:76:15:7a:1b:f8:f5:22:05:fe:ee:c5:9f: dc:0d:98:85:98:5d:1d:f3:8c:e5:46:c2:06:f5:1b: 94:0e:11:81:e9:b1:9e:4f:bb:f0:55:24:4f:db:8d: da:7c:35:bc:37:f1:1c:4e:8d:46:d4:76:2c:96:27: 2e:e6:b2:2c:51:f8:8b:6d:ee:b3:6d:6e:72:a2:09: 63:bf:98:44:c1:98:6e:cc:6f:07:7c:34:d9:be:d7: 4f:ba:7a:a0:01:52:a3:fc:dc:d1:43:92:6b:10:ed: 35:8c:2b:85:1c:f1:d3:89:31:96:74:f3:a5:59:e1: 9b:1e:cc:59:0f:4a:09:f9:ea:34:b3:ea:e8:d3:6d: 32:44:19:85:e8:ec:cb:3b:d3:d1:20:7b:f7:30:50: 4c:f1:ca:41:b5:73:3f:00:1d:36:30:03:f2:6d:0a: b0:06:b6:b5:25:36:8c:64:9f:4a:97:72:9f:c6:1d: 9c:c0:9a:2b:82:0d:b5:5f:b3:fd:44:1f:40:17:2a: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0D:3E:B1:AB:83:EA:BF:C3:60:9A:EF:C9:54:05:38:52:B5:76:9F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c22f83f9-6806-4731-9ee7-da3a022533e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.15.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3d:e4:55:5c:63:42:12:a3:85:ff:79:62:08:7f:4e:1a:57:93: 17:f7:77:03:07:f2:3c:f4:94:5f:22:26:c5:e0:a1:35:2c:98: 13:b1:f9:79:82:0c:8d:e7:1f:64:af:bc:3e:69:6d:e5:05:f3: 98:9b:dc:d6:54:fd:75:99:d4:f6:d1:8a:e8:58:b6:c0:7d:0a: e8:4f:33:be:72:d7:78:22:86:a0:5b:84:f7:71:25:1d:6a:34: a0:a8:2a:ac:01:2b:61:0f:43:0d:41:b4:d8:d9:67:27:c2:66: 99:b9:e5:6f:1b:68:ae:9b:4d:de:61:56:b4:13:41:6e:cc:03: 0a:59:a0:ab:3f:aa:55:f8:0c:61:b3:f9:19:2e:06:3d:e1:48: 55:51:e3:7d:45:41:33:7d:9b:99:a0:67:0a:ef:a9:8b:4a:b3: ac:6b:ba:d0:0a:ea:98:c4:73:49:22:e0:41:46:1d:bc:5c:b9: 2f:2b:96:ca:0f:ee:e5:48:0f:bf:0d:20:1e:17:0a:fd:c7:b4: 5e:d8:fa:35:5d:f4:a0:05:72:e1:b9:fc:84:29:e1:67:96:e8: 73:3c:3a:43:7e:9b:7c:f3:2c:99:fc:e1:b1:3d:82:aa:b0:7f: eb:d2:7e:60:92:7d:8a:25:71:8d:3e:a1:8b:dd:58:8e:2e:69: 62:c0:ef:14 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUK6rmA3qQssGmW15LfLjSGZJ8R8cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTViZjUzMDJiOTI5ZDVjZjdmYjA2N2EzYTc1NDBhN2Zk MDA4MjdiM2EwNWNjMGU0ZWJkYjFhMjI4ZmEyMDVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZGgQ0WJxfykYJ5owwcRz6oSM8qzdWJLH/AJMBe6jHswwO 3hlxfFBVmTdHsu2N6V0uCt14tncXVBiENRPXJ3YVehv49SIF/u7Fn9wNmIWYXR3z jOVGwgb1G5QOEYHpsZ5Pu/BVJE/bjdp8Nbw38RxOjUbUdiyWJy7msixR+Itt7rNt bnKiCWO/mETBmG7Mbwd8NNm+10+6eqABUqP83NFDkmsQ7TWMK4Uc8dOJMZZ086VZ 4ZsezFkPSgn56jSz6ujTbTJEGYXo7Ms709Ege/cwUEzxykG1cz8AHTYwA/JtCrAG trUlNoxkn0qXcp/GHZzAmiuCDbVfs/1EH0AXKtr1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUGQ0+sauD6r/DYJrvyVQFOFK1dp8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyMmY4M2Y5LTY4MDYtNDczMS05ZWU3LWRhM2EwMjI1MzNlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCqDzANBgkqhkiG9w0BAQsFAAOCAQEAPeRVXGNCEqOF/3liCH9OGleTF/d3 AwfyPPSUXyImxeChNSyYE7H5eYIMjecfZK+8Pmlt5QXzmJvc1lT9dZnU9tGK6Fi2 wH0K6E8zvnLXeCKGoFuE93ElHWo0oKgqrAErYQ9DDUG02NlnJ8JmmbnlbxtorptN 3mFWtBNBbswDClmgqz+qVfgMYbP5GS4GPeFIVVHjfUVBM32bmaBnCu+pi0qzrGu6 0ArqmMRzSSLgQUYdvFy5LyuWyg/u5UgPvw0gHhcK/ce0Xtj6NV30oAVy4bn8hCnh Z5boczw6Q36bfPMsmfzhsT2CqrB/69J+YJJ9iiVxjT6hi91Yji5pYsDvFA== -----END CERTIFICATE-----Generated at Fri Sep 22 17:25:46 2023 by rpki-client on console-fra.rpki-client.org