$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c616d8c2-5c13-4c1d-a5a2-0282985a712e.roa File: c616d8c2-5c13-4c1d-a5a2-0282985a712e.roa (raw, json) Hash identifier: yHXjhvOt0h2tq5DrbfhaFYxaqz0Yu/D1tO4XghG8zwI= Subject key identifier: 92:B5:AB:4B:BD:8B:BE:63:FF:F3:28:39:45:D7:B4:A3:C5:0B:35:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C399105A7D0766864BAEDA9B15D5CDE1886A1DF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c616d8c2-5c13-4c1d-a5a2-0282985a712e.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:39:91:05:a7:d0:76:68:64:ba:ed:a9:b1:5d:5c:de:18:86:a1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=83a80283fe4ec71e963dc4842a4eab4d2b85cbc68e4596f5f0f28a88c27d0524, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:94:0c:e7:1f:ee:c8:51:ae:ad:3a:61:3b: 6d:04:fc:7d:7a:46:9b:cd:79:56:5e:f3:37:66:ad: 34:85:26:27:c0:fd:31:84:4b:85:ae:9b:91:6d:e5: 88:33:ae:d9:33:0a:60:d4:24:e2:6a:cd:a3:71:38: 41:a6:74:bc:fd:47:4c:63:8e:c8:56:5a:bd:7b:3e: ca:c2:1f:26:fe:a1:47:c0:70:a9:e5:02:7d:a4:18: b0:07:79:de:e3:77:35:41:24:77:6a:f8:b2:c4:3b: 21:17:a4:48:82:a6:39:f7:fe:29:ab:fa:49:eb:c5: 64:df:d7:b6:d8:a9:13:69:86:7e:8e:c5:2c:c7:d8: 92:4a:53:92:6b:e6:3a:d6:5c:83:46:e0:19:ed:f1: 4f:ba:b8:7a:9f:67:21:98:d7:2e:99:88:15:f5:18: 26:00:c6:36:4a:cc:01:e0:99:b7:c6:3c:a0:02:6e: 02:c8:4e:67:83:cf:dd:96:b1:33:68:20:e3:4d:c5: 12:dd:68:4a:a4:49:68:7c:9a:3c:74:be:37:34:47: dc:b9:52:ba:4e:f5:f7:91:d1:cb:3f:60:07:21:10: 3a:11:3a:bb:6e:79:e1:94:e3:77:25:f8:62:33:85: 53:26:84:c9:5c:5f:b7:54:2e:bf:36:a5:02:d9:81: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B5:AB:4B:BD:8B:BE:63:FF:F3:28:39:45:D7:B4:A3:C5:0B:35:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c616d8c2-5c13-4c1d-a5a2-0282985a712e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.128.0/18 Signature Algorithm: sha256WithRSAEncryption 67:7f:40:21:2e:b6:c0:16:a6:8d:d2:3a:d7:c3:0b:cd:3d:0b: c0:b3:cc:4f:ab:9f:01:db:5a:71:59:bf:ab:f7:3c:88:5c:a5: 4e:5a:41:29:9d:98:ec:1f:cb:7a:7b:73:7c:3c:04:ef:f9:2c: 9b:d0:eb:80:a8:92:68:ca:8d:2f:0e:8b:40:ef:31:46:3a:c2: 9c:6e:bc:dc:7b:9f:b4:ca:c6:74:2b:f2:b6:e1:a4:6c:08:88: 24:68:2e:05:c6:c3:b9:3b:04:a2:ef:16:13:d1:fd:b7:c2:72: cb:a5:fa:7c:93:c3:37:50:ce:af:ea:b2:9e:95:e8:94:c0:df: b6:77:1d:d1:14:37:d3:99:15:52:00:4d:ea:0a:09:3e:58:f3: a8:af:c9:ba:a8:18:49:17:13:97:d2:2d:b5:e7:97:92:e5:2e: 48:f5:ce:49:ce:b3:6e:cf:df:48:48:35:28:2d:23:80:a1:49: f8:49:9c:7a:1c:b3:d9:f4:dc:b3:d0:05:d6:ff:68:54:f8:15: 3d:4b:64:62:8b:24:68:35:b2:64:03:47:30:da:af:ce:5a:e2: 87:e8:85:53:d5:42:b7:c6:a3:94:34:65:a4:43:1e:28:59:9c: 00:5f:5e:71:4d:81:ad:33:92:b2:cd:30:a6:be:e5:db:15:e5: 28:04:a0:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPDmRBafQdmhkuu2psV1c3hiGod8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2E4MDI4M2ZlNGVjNzFlOTYzZGM0ODQyYTRlYWI0ZDJi ODVjYmM2OGU0NTk2ZjVmMGYyOGE4OGMyN2QwNTI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWKJQM5x/uyFGurTphO20E/H16RpvNeVZe8zdmrTSFJifA /TGES4Wum5Ft5YgzrtkzCmDUJOJqzaNxOEGmdLz9R0xjjshWWr17PsrCHyb+oUfA cKnlAn2kGLAHed7jdzVBJHdq+LLEOyEXpEiCpjn3/imr+knrxWTf17bYqRNphn6O xSzH2JJKU5Jr5jrWXING4Bnt8U+6uHqfZyGY1y6ZiBX1GCYAxjZKzAHgmbfGPKAC bgLITmeDz92WsTNoIONNxRLdaEqkSWh8mjx0vjc0R9y5UrpO9feR0cs/YAchEDoR OrtueeGU43cl+GIzhVMmhMlcX7dULr82pQLZgYWNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkrWrS72LvmP/8yg5Rde0o8ULNdUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M2MTZkOGMyLTVjMTMtNGMxZC1hNWEyLTAyODI5ODVhNzEyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbM7IAwDQYJKoZIhvcNAQELBQADggEBAGd/QCEutsAWpo3SOtfDC809C8Cz zE+rnwHbWnFZv6v3PIhcpU5aQSmdmOwfy3p7c3w8BO/5LJvQ64CokmjKjS8Oi0Dv MUY6wpxuvNx7n7TKxnQr8rbhpGwIiCRoLgXGw7k7BKLvFhPR/bfCcsul+nyTwzdQ zq/qsp6V6JTA37Z3HdEUN9OZFVIATeoKCT5Y86ivybqoGEkXE5fSLbXnl5LlLkj1 zknOs27P30hINSgtI4ChSfhJnHocs9n03LPQBdb/aFT4FT1LZGKLJGg1smQDRzDa r85a4ofohVPVQrfGo5Q0ZaRDHihZnABfXnFNga0zkrLNMKa+5dsV5SgEoFo= -----END CERTIFICATE-----Generated at Sat Sep 23 00:18:55 2023 by rpki-client on console-fra.rpki-client.org