$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d130dd80-aad8-4b10-9749-34ba28d3e402.roa File: d130dd80-aad8-4b10-9749-34ba28d3e402.roa (raw, json) Hash identifier: sPgAkK91NHOf28enpfqkGgZO78WFvPRXhnp8tPcw/fw= Subject key identifier: E1:0D:C2:9E:F5:EB:1F:03:A3:14:15:CA:EF:30:24:99:BE:87:ED:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7EBE34199936ED508D34CA9A076BEB93EFC3E7CB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d130dd80-aad8-4b10-9749-34ba28d3e402.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 16.57.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:be:34:19:99:36:ed:50:8d:34:ca:9a:07:6b:eb:93:ef:c3:e7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=0391107ebe5e94a7171d07eeb3c1d2ec89dac4e33d78db6846515fe78767bb11, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:30:3a:ca:82:a2:b2:dd:2c:be:d3:79:76: b2:54:83:1b:c1:a9:30:65:e6:85:01:46:46:a6:f4: 6a:b2:ef:4e:8d:a2:af:14:a0:2d:24:7f:bf:24:82: b9:b1:bb:a8:59:84:a9:f3:43:8e:56:06:0a:f1:47: c3:f8:5a:10:40:ff:fd:ba:b9:b6:0a:6c:bf:78:35: 13:e0:b9:7d:14:25:2a:eb:d1:ed:8a:e1:7a:38:7a: 93:7e:34:2d:f3:59:24:a3:61:2e:d8:e7:1a:94:39: 0a:77:f2:85:da:48:08:cc:48:ae:a5:3b:96:a1:49: 33:7c:f1:15:d4:54:99:ef:32:3c:49:18:16:fa:5f: 6b:82:5b:c1:16:3a:32:ac:fc:aa:f4:b9:09:62:e8: be:d0:41:90:14:9b:50:5b:26:76:44:a6:cf:3f:78: 4a:29:d7:d0:29:a0:71:da:97:ac:7c:c7:be:ca:4f: 7c:0a:52:4e:4f:62:14:cd:47:86:d0:2f:85:2a:1b: 88:1a:29:22:c0:f8:b0:ae:41:88:52:ac:fe:81:21: 80:18:7b:d7:38:83:f3:0e:bc:e1:07:4f:d8:79:c3: 37:6b:1a:8b:62:dc:1d:5f:7b:94:dc:44:ff:7b:d0: e3:cd:cf:1b:2a:b6:30:b1:4b:7c:0f:5a:3a:21:54: bf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0D:C2:9E:F5:EB:1F:03:A3:14:15:CA:EF:30:24:99:BE:87:ED:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d130dd80-aad8-4b10-9749-34ba28d3e402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.57.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5c:5b:42:53:b5:c2:68:7d:79:de:43:37:a1:28:6a:07:9b:a9: 94:61:15:9f:14:01:df:0c:37:c0:d5:26:26:af:27:46:b5:e0: 0a:ab:ba:bb:3a:d9:96:42:fb:d9:19:25:fb:6e:a3:fa:e9:4a: c6:08:c8:94:10:c2:0c:af:80:98:d7:17:e8:b9:59:a5:12:8a: ba:df:57:f4:59:69:c3:12:25:53:dc:75:3d:88:0d:58:11:3f: 74:0a:b5:c2:f4:4a:8b:2b:b9:20:b2:60:0d:ca:4b:33:39:58: b6:8a:21:05:9e:c2:fe:6a:1e:a1:b1:40:b8:72:54:d8:2f:7f: 80:67:41:1c:93:23:c0:d3:15:d9:d5:6e:83:47:8d:5d:15:55: a9:e4:80:46:f0:42:41:d6:9f:27:a7:df:54:d3:19:5a:cf:93: 8e:87:38:c4:df:73:23:2b:b2:6e:0d:85:07:a2:da:ad:e9:6a: 92:91:0f:f2:6f:77:db:97:e8:67:6e:13:6b:df:37:e0:e6:de: 0a:01:9a:92:4b:93:46:39:73:c3:d4:a5:c4:99:c3:dc:5f:37: 71:b2:37:10:ec:5d:ac:f8:ed:14:6d:cc:e2:fa:6a:a3:00:f2: 3f:a5:c7:e8:18:e9:56:4c:4b:dd:06:21:af:44:6f:f8:d6:5e: 2a:d0:cd:b9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfr40GZk27VCNNMqaB2vrk+/D58swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzkxMTA3ZWJlNWU5NGE3MTcxZDA3ZWViM2MxZDJlYzg5 ZGFjNGUzM2Q3OGRiNjg0NjUxNWZlNzg3NjdiYjExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp0TA6yoKist0svtN5drJUgxvBqTBl5oUBRkam9Gqy706N oq8UoC0kf78kgrmxu6hZhKnzQ45WBgrxR8P4WhBA//26ubYKbL94NRPguX0UJSrr 0e2K4Xo4epN+NC3zWSSjYS7Y5xqUOQp38oXaSAjMSK6lO5ahSTN88RXUVJnvMjxJ GBb6X2uCW8EWOjKs/Kr0uQli6L7QQZAUm1BbJnZEps8/eEop19ApoHHal6x8x77K T3wKUk5PYhTNR4bQL4UqG4gaKSLA+LCuQYhSrP6BIYAYe9c4g/MOvOEHT9h5wzdr Goti3B1fe5TcRP970OPNzxsqtjCxS3wPWjohVL+bAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU4Q3CnvXrHwOjFBXK7zAkmb6H7aQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxMzBkZDgwLWFhZDgtNGIxMC05NzQ5LTM0YmEyOGQzZTQwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQOTANBgkqhkiG9w0BAQsFAAOCAQEAXFtCU7XCaH153kM3oShqB5uplGEV nxQB3ww3wNUmJq8nRrXgCqu6uzrZlkL72Rkl+26j+ulKxgjIlBDCDK+AmNcX6LlZ pRKKut9X9FlpwxIlU9x1PYgNWBE/dAq1wvRKiyu5ILJgDcpLMzlYtoohBZ7C/moe obFAuHJU2C9/gGdBHJMjwNMV2dVug0eNXRVVqeSARvBCQdafJ6ffVNMZWs+Tjoc4 xN9zIyuybg2FB6LarelqkpEP8m9325foZ24Ta9834ObeCgGakkuTRjlzw9SlxJnD 3F83cbI3EOxdrPjtFG3M4vpqowDyP6XH6BjpVkxL3QYhr0Rv+NZeKtDNuQ== -----END CERTIFICATE-----Generated at Fri Sep 22 21:28:01 2023 by rpki-client on console-ams.rpki-client.org