$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1478bf7-fa63-45f0-9446-063288b8821d.roa File: d1478bf7-fa63-45f0-9446-063288b8821d.roa (raw, json) Hash identifier: DQIJ6p/64KnjtbzRsCPmw/OnMEzm1DO4dc3+shLnAjA= Subject key identifier: 32:BE:13:E2:92:0F:B0:76:CA:9E:AB:B9:EE:54:91:50:DC:32:86:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2DCF8446374C47A3B246268E3EFCCA44BD50AB9E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1478bf7-fa63-45f0-9446-063288b8821d.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:cf:84:46:37:4c:47:a3:b2:46:26:8e:3e:fc:ca:44:bd:50:ab:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=0be460e36024fb25d6c1a9835e4316dc3d0328c4dd069ee1c4e709881094ecc3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:98:e8:5d:e5:47:1d:b2:9b:72:5a:dd:44: e7:25:8e:80:09:11:8a:dd:ef:2a:88:dd:5c:df:60: d7:04:62:59:61:81:4f:77:ce:37:28:9a:9c:c5:b4: 1a:99:13:3e:12:b0:50:4a:1d:6c:1c:13:4f:04:d7: 82:86:77:62:40:03:c5:8d:3d:af:b6:01:7b:41:da: 4f:c6:3b:0e:4b:46:42:7a:d1:43:e2:67:ce:e5:9a: 53:41:91:6f:a1:2c:32:2f:77:42:e5:b1:3c:03:3c: cb:b5:bc:66:15:3c:cd:96:9f:36:f6:64:1e:29:62: 9e:18:2e:7e:18:f3:f2:a5:ab:b3:db:ef:88:fd:4a: dd:a9:19:da:d7:d4:e4:a6:01:95:bd:a0:25:bf:82: e9:a6:6b:a0:87:0a:b3:de:3d:cd:c3:6a:85:a4:4c: 09:51:65:1d:40:31:1e:b3:e7:fc:5b:dc:dc:dd:e2: b4:48:f6:22:ba:31:d5:a4:10:af:7f:42:f5:4c:67: d3:49:cf:20:24:21:c5:33:c6:1e:80:38:74:66:c8: b9:e1:3d:de:3d:e7:57:4e:fb:5e:de:97:ec:99:b7: e7:55:2a:29:8d:29:f8:26:59:15:a0:ce:14:63:15: 88:c8:25:65:84:12:13:f1:dc:0d:0a:90:50:52:09: 33:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BE:13:E2:92:0F:B0:76:CA:9E:AB:B9:EE:54:91:50:DC:32:86:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1478bf7-fa63-45f0-9446-063288b8821d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.82.0/24 Signature Algorithm: sha256WithRSAEncryption ab:7c:28:6a:b5:7e:36:13:b9:c0:5c:38:ee:f4:65:49:b9:25: 41:7c:c6:84:4d:1f:32:2c:97:c9:d2:91:b3:c8:f2:61:fc:8f: fa:7e:23:cf:1f:bd:5c:94:52:76:2f:eb:e4:72:fe:d3:34:9a: 9e:be:e5:9a:25:99:ed:28:8a:12:46:b2:5c:dd:bc:ff:cb:8b: c0:21:47:a6:c7:e2:b4:f7:d0:09:2a:fd:77:23:25:8d:97:56: 4e:29:8e:51:f0:3f:15:1f:68:e3:e7:56:0e:19:c7:11:34:a4: 5f:29:cb:1c:f0:df:65:e6:2b:55:92:9f:2f:cb:2a:6a:65:68: 2f:87:79:85:35:2d:76:ac:d5:e4:f1:c3:8b:5c:a8:0c:d7:93: 4a:b3:2d:13:6d:b9:6a:32:2f:65:44:bf:0d:e0:3b:b1:31:ba: e8:ba:53:09:7b:35:35:9c:a2:e7:80:5a:23:87:fe:c1:e4:9b: 6e:97:26:07:da:df:4d:b3:2f:5c:51:35:a2:e6:8c:cb:13:3d: dc:b2:1b:e0:40:cc:31:2e:a0:48:c1:13:e3:21:45:b1:ac:ad: 48:79:a7:4d:18:6f:85:a3:da:9f:c3:ff:d5:6c:dd:89:16:12: 6c:5e:03:49:3a:7b:57:07:cf:d4:bd:98:a2:a1:27:9b:28:a8: 3f:73:7d:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULc+ERjdMR6OyRiaOPvzKRL1Qq54wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYmU0NjBlMzYwMjRmYjI1ZDZjMWE5ODM1ZTQzMTZkYzNk MDMyOGM0ZGQwNjllZTFjNGU3MDk4ODEwOTRlY2MzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYGpjoXeVHHbKbclrdROcljoAJEYrd7yqI3VzfYNcEYllh gU93zjcompzFtBqZEz4SsFBKHWwcE08E14KGd2JAA8WNPa+2AXtB2k/GOw5LRkJ6 0UPiZ87lmlNBkW+hLDIvd0LlsTwDPMu1vGYVPM2Wnzb2ZB4pYp4YLn4Y8/Klq7Pb 74j9St2pGdrX1OSmAZW9oCW/gumma6CHCrPePc3DaoWkTAlRZR1AMR6z5/xb3Nzd 4rRI9iK6MdWkEK9/QvVMZ9NJzyAkIcUzxh6AOHRmyLnhPd4951dO+17el+yZt+dV KimNKfgmWRWgzhRjFYjIJWWEEhPx3A0KkFBSCTNZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMr4T4pIPsHbKnqu57lSRUNwyhrIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxNDc4YmY3LWZhNjMtNDVmMC05NDQ2LTA2MzI4OGI4ODIxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/FIwDQYJKoZIhvcNAQELBQADggEBAKt8KGq1fjYTucBcOO70ZUm5JUF8 xoRNHzIsl8nSkbPI8mH8j/p+I88fvVyUUnYv6+Ry/tM0mp6+5Zolme0oihJGslzd vP/Li8AhR6bH4rT30Akq/XcjJY2XVk4pjlHwPxUfaOPnVg4ZxxE0pF8pyxzw32Xm K1WSny/LKmplaC+HeYU1LXas1eTxw4tcqAzXk0qzLRNtuWoyL2VEvw3gO7Exuui6 Uwl7NTWcoueAWiOH/sHkm26XJgfa302zL1xRNaLmjMsTPdyyG+BAzDEuoEjBE+Mh RbGsrUh5p00Yb4Wj2p/D/9Vs3YkWEmxeA0k6e1cHz9S9mKKhJ5soqD9zfTE= -----END CERTIFICATE-----Generated at Fri Sep 22 22:31:09 2023 by rpki-client on console-ams.rpki-client.org