$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2db7281-9920-4333-885d-2cba12e241f3.roa File: d2db7281-9920-4333-885d-2cba12e241f3.roa (raw, json) Hash identifier: 0JTjYu8emIKgqGCMN3pr4RDL+6N7Rygyn8v7u10RmYs= Subject key identifier: CD:4F:28:32:8B:69:8A:F8:C4:5D:2B:FB:DD:B4:1E:CC:D5:0D:D5:7B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25378F981E8A56FF7E606F561C6CDF7788D0AA94 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2db7281-9920-4333-885d-2cba12e241f3.roa Signing time: Tue 29 Aug 2023 00:00:00 +0000 ROA not before: Tue 29 Aug 2023 00:00:00 +0000 ROA not after: Tue 03 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f01:4814::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Aug 2023 12:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:37:8f:98:1e:8a:56:ff:7e:60:6f:56:1c:6c:df:77:88:d0:aa:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 00:00:00 2023 GMT Not After : Oct 3 23:59:59 2023 GMT Subject: serialNumber=83a75e50a854f2c79fc36913f194fb58909534a0470c02b7ca5a5a2dabe1aa0e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:b0:ed:74:29:57:62:22:6c:86:15:cd:66: 5d:27:e8:57:c6:00:bb:c2:eb:ef:ef:48:6a:53:ec: 5c:5a:cf:06:45:8b:f5:5f:97:2d:ab:a4:27:69:45: b4:70:9f:70:05:2c:77:d0:4c:0c:e0:cf:92:f6:44: 76:a5:65:7e:b5:56:64:2d:e2:eb:62:46:fc:62:1d: 5e:0a:8a:9e:14:f7:ce:50:2c:9f:98:04:41:b6:d7: 4a:20:a2:4e:24:e2:df:f9:0a:e2:0b:f7:e6:95:f7: 73:c0:67:66:2f:7c:58:9f:7e:1b:20:0f:d3:73:30: 74:b4:4e:6e:90:a1:14:aa:84:ad:bb:23:d1:2c:28: 96:38:97:bd:7f:88:a1:5c:d8:dc:ef:35:3a:5d:59: 8f:fe:c4:6c:e1:f6:14:01:8a:68:16:52:b6:cc:f2: 89:9d:72:49:24:7d:1c:53:46:8d:e9:c0:6b:29:d0: 88:75:42:1d:50:1c:bf:49:4f:5a:26:58:79:67:bf: 4d:05:b0:db:11:d7:50:db:eb:69:ae:45:1b:86:6a: 94:63:86:49:5c:5a:5c:39:72:87:b4:6d:e2:54:13: a8:e8:e9:f9:52:07:10:1f:9a:0b:4d:58:f6:f2:08: 65:b0:4d:94:27:6b:77:b8:8a:55:b6:24:72:68:95: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4F:28:32:8B:69:8A:F8:C4:5D:2B:FB:DD:B4:1E:CC:D5:0D:D5:7B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2db7281-9920-4333-885d-2cba12e241f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:4814::/47 Signature Algorithm: sha256WithRSAEncryption 0e:ae:ab:25:f1:43:b1:83:c2:aa:ec:15:4d:9b:57:f9:9c:b7: c0:3f:78:77:c1:04:bc:cc:32:75:09:fc:44:b4:77:72:fd:da: 95:35:64:b0:9f:ea:6d:70:91:9e:49:69:8e:c3:fb:e4:a5:6f: 51:6f:8f:b9:e4:b8:de:85:b9:40:4f:09:a8:c8:9b:db:9f:6d: 65:17:f9:09:33:e1:cf:f9:c6:c8:ee:ab:0e:d1:b6:eb:2f:b3: 78:19:6f:12:79:dc:cb:c8:5a:3a:5f:62:20:a3:e6:c1:a4:d6: 54:c1:ad:29:e8:1f:60:c5:05:37:4b:f3:e0:28:10:4d:aa:4f: e8:5f:ca:24:26:6d:95:82:99:53:27:b3:a3:c0:06:37:ce:7f: 47:e8:7f:ed:6c:fe:41:74:9c:cf:e0:e0:32:f1:f1:25:c0:24: 32:9b:d2:68:60:fd:77:9e:ab:4e:65:10:78:8b:d0:b0:f6:07: 24:99:57:50:bd:6f:57:ed:9e:c1:e3:a5:a6:bb:8e:97:fa:ca: 47:30:1a:d0:01:f8:e8:bc:5e:0f:79:a0:0d:08:81:76:4f:5e: d3:3c:ea:22:a3:6a:41:2a:f1:56:3c:79:05:3e:80:da:45:e4: bc:dc:0c:35:e1:83:ef:ff:f3:d9:c7:4c:68:2f:20:0f:68:8b: 16:62:4f:71 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJTePmB6KVv9+YG9WHGzfd4jQqpQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI5MDAwMDAwWhcNMjMxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2E3NWU1MGE4NTRmMmM3OWZjMzY5MTNmMTk0ZmI1ODkw OTUzNGEwNDcwYzAyYjdjYTVhNWEyZGFiZTFhYTBlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyDLDtdClXYiJshhXNZl0n6FfGALvC6+/vSGpT7FxazwZF i/Vfly2rpCdpRbRwn3AFLHfQTAzgz5L2RHalZX61VmQt4utiRvxiHV4Kip4U985Q LJ+YBEG210ogok4k4t/5CuIL9+aV93PAZ2YvfFiffhsgD9NzMHS0Tm6QoRSqhK27 I9EsKJY4l71/iKFc2NzvNTpdWY/+xGzh9hQBimgWUrbM8omdckkkfRxTRo3pwGsp 0Ih1Qh1QHL9JT1omWHlnv00FsNsR11Db62muRRuGapRjhklcWlw5coe0beJUE6jo 6flSBxAfmgtNWPbyCGWwTZQna3e4ilW2JHJolZQDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzU8oMotpivjEXSv73bQezNUN1XswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QyZGI3MjgxLTk5MjAtNDMzMy04ODVkLTJjYmExMmUyNDFmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSBQwDQYJKoZIhvcNAQELBQADggEBAA6uqyXxQ7GDwqrsFU2bV/mc t8A/eHfBBLzMMnUJ/ES0d3L92pU1ZLCf6m1wkZ5JaY7D++Slb1Fvj7nkuN6FuUBP CajIm9ufbWUX+Qkz4c/5xsjuqw7Rtusvs3gZbxJ53MvIWjpfYiCj5sGk1lTBrSno H2DFBTdL8+AoEE2qT+hfyiQmbZWCmVMns6PABjfOf0fof+1s/kF0nM/g4DLx8SXA JDKb0mhg/Xeeq05lEHiL0LD2BySZV1C9b1ftnsHjpaa7jpf6ykcwGtAB+Oi8Xg95 oA0IgXZPXtM86iKjakEq8VY8eQU+gNpF5LzcDDXhg+//89nHTGgvIA9oixZiT3E= -----END CERTIFICATE-----Generated at Tue Aug 29 00:48:26 2023 by rpki-client on console-ams.rpki-client.org