$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5565d6b-a17e-4eea-a35e-585bb0ca23db.roa File: c5565d6b-a17e-4eea-a35e-585bb0ca23db.roa (raw, json) Hash identifier: reXf4EbVtyyTA+8Lw7oeVokA+toJE3Us+Pa4FexA8rA= Subject key identifier: 07:E5:F7:FC:21:34:9B:7F:10:D7:95:DE:6E:1D:18:EA:44:31:14:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B617E200891A5D9D876A301CFB2BFDBD31DC06A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5565d6b-a17e-4eea-a35e-585bb0ca23db.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 99.83.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:61:7e:20:08:91:a5:d9:d8:76:a3:01:cf:b2:bf:db:d3:1d:c0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=b9c5eb1883cb7d68f06938974b9e098b5a2fd141b16010773f041416eb82944c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:e5:ef:50:b8:63:29:bd:65:7a:68:aa:62: 9d:91:6d:6c:fc:c4:5d:4b:b5:ac:ad:54:8f:e2:e8: 76:4f:e3:d1:41:ca:f2:b4:5b:1d:88:65:55:43:e6: 72:80:bc:2a:07:28:2f:6d:c1:7a:2e:82:a4:60:03: 9f:a6:28:5a:dd:5f:91:a5:9c:92:5f:3c:66:9a:b6: 5d:ad:b1:8c:b8:f4:45:cc:53:24:36:0e:57:9e:0c: 91:79:9a:86:52:cb:ac:a9:0d:81:00:f0:37:f7:1e: ce:ba:77:f5:a3:25:15:4d:70:12:0a:86:27:27:2e: 0b:a1:8c:15:a3:67:72:d4:0c:28:d0:b1:4b:a8:40: 4a:1e:72:bc:37:d2:2c:d2:2e:85:b9:dd:5e:7c:c0: 04:5b:48:73:91:72:ee:ea:fa:b7:ee:71:b2:be:bb: c6:05:27:cb:a5:16:b1:ff:e9:dd:d5:8e:87:f7:45: 57:cd:af:99:39:1c:a8:a9:9f:fa:53:8a:4a:30:9a: 78:26:e3:0b:df:a0:ca:bc:52:51:06:7f:3a:7f:65: 8f:f6:ea:3f:a5:f8:00:fd:08:b5:aa:45:a5:bf:15: a6:27:01:95:7e:5e:6a:fe:4c:ae:7e:14:05:80:cd: 95:bc:68:c6:2a:9b:de:1c:d1:13:d1:c9:55:c9:69: c3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E5:F7:FC:21:34:9B:7F:10:D7:95:DE:6E:1D:18:EA:44:31:14:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5565d6b-a17e-4eea-a35e-585bb0ca23db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.83.88.0/21 Signature Algorithm: sha256WithRSAEncryption a4:65:5c:c4:f6:2c:4f:a4:4c:15:4b:11:9c:b1:f2:55:5e:23: 8f:ed:6e:b6:b7:59:f6:4b:af:bb:03:06:91:bc:86:b7:e2:47: a2:a9:ef:97:21:2f:4a:bf:97:a8:12:44:ab:d9:4d:d4:94:01: e5:80:0f:7a:21:fd:b4:42:37:93:61:fe:d7:90:91:52:d0:3c: 5f:bc:41:2e:b5:b7:7e:61:ee:95:43:d1:25:27:35:02:13:63: 90:33:94:34:9d:bc:4c:11:68:38:9c:b5:d2:ba:e3:f8:02:a4: 5b:91:b5:f2:2a:f4:cd:f7:7e:53:2b:a3:1c:8b:11:20:8e:f2: b0:b7:64:25:8c:e6:95:9d:0c:00:6a:c3:1a:3d:f1:d5:67:1d: 8b:ad:18:bc:88:56:67:62:d6:0d:30:a0:d3:90:e2:ba:4b:16: a4:f6:2f:2b:44:24:34:57:92:52:a8:4a:94:42:93:dd:08:31: 7b:48:39:f6:f3:95:ca:60:57:86:4d:43:ef:0a:06:48:ff:6c: 94:23:3b:9d:ed:3e:e7:3f:94:77:c4:04:3c:fd:2f:4c:58:15: 6b:5a:15:7b:4e:90:55:cf:0a:08:22:fc:7b:6a:fa:6b:18:86: bd:83:83:0c:bd:91:0d:45:8d:ec:a4:0b:fc:3d:d7:4b:3d:95: bb:71:d3:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC2F+IAiRpdnYdqMBz7K/29MdwGowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOWM1ZWIxODgzY2I3ZDY4ZjA2OTM4OTc0YjllMDk4YjVh MmZkMTQxYjE2MDEwNzczZjA0MTQxNmViODI5NDRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy9OXvULhjKb1lemiqYp2RbWz8xF1LtaytVI/i6HZP49FB yvK0Wx2IZVVD5nKAvCoHKC9twXougqRgA5+mKFrdX5GlnJJfPGaatl2tsYy49EXM UyQ2DleeDJF5moZSy6ypDYEA8Df3Hs66d/WjJRVNcBIKhicnLguhjBWjZ3LUDCjQ sUuoQEoecrw30izSLoW53V58wARbSHORcu7q+rfucbK+u8YFJ8ulFrH/6d3Vjof3 RVfNr5k5HKipn/pTikowmngm4wvfoMq8UlEGfzp/ZY/26j+l+AD9CLWqRaW/FaYn AZV+Xmr+TK5+FAWAzZW8aMYqm94c0RPRyVXJacMlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB+X3/CE0m38Q15Xebh0Y6kQxFF4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1NTY1ZDZiLWExN2UtNGVlYS1hMzVlLTU4NWJiMGNhMjNkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjU1gwDQYJKoZIhvcNAQELBQADggEBAKRlXMT2LE+kTBVLEZyx8lVeI4/t bra3WfZLr7sDBpG8hrfiR6Kp75chL0q/l6gSRKvZTdSUAeWAD3oh/bRCN5Nh/teQ kVLQPF+8QS61t35h7pVD0SUnNQITY5AzlDSdvEwRaDictdK64/gCpFuRtfIq9M33 flMroxyLESCO8rC3ZCWM5pWdDABqwxo98dVnHYutGLyIVmdi1g0woNOQ4rpLFqT2 LytEJDRXklKoSpRCk90IMXtIOfbzlcpgV4ZNQ+8KBkj/bJQjO53tPuc/lHfEBDz9 L0xYFWtaFXtOkFXPCggi/Htq+msYhr2Dgwy9kQ1FjeykC/w910s9lbtx06c= -----END CERTIFICATE-----Generated at Fri Sep 22 17:51:34 2023 by rpki-client on console-ams.rpki-client.org