$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b5700b-bcb0-4810-a0f4-a6a027db1a8c.roa File: c3b5700b-bcb0-4810-a0f4-a6a027db1a8c.roa (raw, json) Hash identifier: 4wIKMBseKFBigmt+l9bTwqV+55qil6072RhzVlsb9JA= Subject key identifier: C9:0F:B3:E0:FA:2F:86:84:71:56:E0:30:1C:8F:0C:B9:04:65:6C:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A5CE7304F7892C03DAF4BB4120BE34D832EBEE5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b5700b-bcb0-4810-a0f4-a6a027db1a8c.roa Signing time: Mon 28 Aug 2023 00:00:00 +0000 ROA not before: Mon 28 Aug 2023 00:00:00 +0000 ROA not after: Mon 02 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:3000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Aug 2023 10:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5c:e7:30:4f:78:92:c0:3d:af:4b:b4:12:0b:e3:4d:83:2e:be:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 28 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2023 GMT Subject: serialNumber=597301f9d68520b38091f2afe4350971ed273c756307b38727ce08ceefaa6060, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:77:3c:bd:51:f6:c0:e7:d0:98:c6:c1:0d:db: 88:31:45:1c:0a:57:cc:2b:ff:c4:c0:48:3b:f6:11: c1:4c:20:9f:38:9f:55:01:ef:27:4c:8b:19:1b:ea: b4:04:2b:c6:36:db:00:25:6f:10:1a:c3:a1:f3:d4: 5d:2a:6c:62:d3:8a:dc:fa:b5:86:f8:17:86:04:93: 74:a9:a4:0a:30:6e:cb:69:92:bd:b8:d3:2b:6f:3c: 29:1b:9a:bc:3e:b5:91:70:9e:f6:43:91:ae:c8:bc: 20:b1:78:c1:fe:f5:57:90:4e:d5:ee:c1:96:e3:21: 1e:8d:70:a9:8e:78:48:1e:6e:ad:b9:21:1a:4b:44: b3:93:64:77:61:3a:1a:4d:ca:43:4b:b2:1d:69:06: 35:42:dc:6b:18:33:63:5d:67:f6:db:e9:f5:e9:ca: 1c:cb:1f:ce:f9:7b:42:5a:1b:bf:90:5d:12:7f:94: 59:75:10:2b:a7:51:39:be:31:47:17:0c:3b:7a:d8: bc:68:15:76:ff:5e:38:04:77:30:3b:8d:ee:60:7e: 20:59:52:b2:87:51:f5:fb:15:be:34:90:c8:4a:88: 4b:e8:07:32:27:b0:9d:e2:b0:00:48:fe:63:3f:87: ea:95:31:d6:85:ad:6a:3d:e4:32:7d:93:38:99:81: 21:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0F:B3:E0:FA:2F:86:84:71:56:E0:30:1C:8F:0C:B9:04:65:6C:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3b5700b-bcb0-4810-a0f4-a6a027db1a8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:3000::/40 Signature Algorithm: sha256WithRSAEncryption 61:b4:c3:42:ff:3d:3b:40:13:8a:7d:eb:72:00:b8:de:42:58: 16:32:00:20:17:55:af:05:f8:55:b8:86:7c:9d:60:ab:e6:5d: 7b:2e:a2:b9:2e:42:31:b8:4d:fa:1b:f2:b0:65:77:b9:1c:98: f3:19:f4:6c:7d:dd:9e:35:bb:28:2f:c3:ea:21:6e:97:d2:6c: 88:e4:3b:82:84:36:2d:bb:6a:61:f6:30:0c:1f:03:99:bf:9c: 4a:70:ce:4e:a7:8a:ed:58:57:69:c6:c0:94:fb:b1:03:59:e2: ee:0d:a0:02:cc:7d:37:31:df:c9:b5:0c:b9:b0:d9:e6:43:4a: f1:79:88:78:5d:df:39:14:89:0a:7c:2a:6a:b5:e6:80:97:69: 14:ca:a5:70:43:5d:e4:58:f3:b0:c3:fc:76:79:76:5d:e6:8b: 49:e4:53:af:9d:58:6b:08:8d:f6:ca:b8:6e:2c:a0:ab:77:00: 8f:e2:37:c0:60:f6:76:89:fe:dd:14:fa:0b:96:dd:11:35:5d: 04:1e:31:05:54:ba:89:a8:4c:c7:c2:56:20:c2:2f:a3:73:7c: 90:83:dc:9e:16:07:ee:63:fe:c9:40:68:d2:b6:19:20:24:86: 0a:eb:f6:37:4d:d4:60:1c:bd:66:ae:3b:76:c1:93:75:40:52: 9b:89:fb:80 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKlznME94ksA9r0u0EgvjTYMuvuUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTczMDFmOWQ2ODUyMGIzODA5MWYyYWZlNDM1MDk3MWVk MjczYzc1NjMwN2IzODcyN2NlMDhjZWVmYWE2MDYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVdzy9UfbA59CYxsEN24gxRRwKV8wr/8TASDv2EcFMIJ84 n1UB7ydMixkb6rQEK8Y22wAlbxAaw6Hz1F0qbGLTitz6tYb4F4YEk3SppAowbstp kr240ytvPCkbmrw+tZFwnvZDka7IvCCxeMH+9VeQTtXuwZbjIR6NcKmOeEgebq25 IRpLRLOTZHdhOhpNykNLsh1pBjVC3GsYM2NdZ/bb6fXpyhzLH875e0JaG7+QXRJ/ lFl1ECunUTm+MUcXDDt62LxoFXb/XjgEdzA7je5gfiBZUrKHUfX7Fb40kMhKiEvo BzInsJ3isABI/mM/h+qVMdaFrWo95DJ9kziZgSE9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUyQ+z4PovhoRxVuAwHI8MuQRlbJ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MzYjU3MDBiLWJjYjAtNDgxMC1hMGY0LWE2YTAyN2RiMWE4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//MDANBgkqhkiG9w0BAQsFAAOCAQEAYbTDQv89O0ATin3rcgC43kJY FjIAIBdVrwX4VbiGfJ1gq+Zdey6iuS5CMbhN+hvysGV3uRyY8xn0bH3dnjW7KC/D 6iFul9JsiOQ7goQ2LbtqYfYwDB8Dmb+cSnDOTqeK7VhXacbAlPuxA1ni7g2gAsx9 NzHfybUMubDZ5kNK8XmIeF3fORSJCnwqarXmgJdpFMqlcENd5FjzsMP8dnl2XeaL SeRTr51YawiN9sq4biygq3cAj+I3wGD2don+3RT6C5bdETVdBB4xBVS6iahMx8JW IMIvo3N8kIPcnhYH7mP+yUBo0rYZICSGCuv2N03UYBy9Zq47dsGTdUBSm4n7gA== -----END CERTIFICATE-----Generated at Mon Aug 28 22:45:23 2023 by rpki-client on console-ams.rpki-client.org