$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8e48041-465a-496c-b46b-e6a2a480c945.roa File: d8e48041-465a-496c-b46b-e6a2a480c945.roa (raw, json) Hash identifier: AJ4R7s6XEPPX00Pz5SmVeEtVyYvBvCXX6AW16GcKHe4= Subject key identifier: 1F:DE:06:F7:4E:B7:E2:D9:6C:B0:70:40:43:F2:15:95:6D:37:F5:44 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45359A52468D9C905542FDC8AFB09826E68F6BDE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8e48041-465a-496c-b46b-e6a2a480c945.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 16.28.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Sep 2023 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:35:9a:52:46:8d:9c:90:55:42:fd:c8:af:b0:98:26:e6:8f:6b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=48a880b92bb61c256b94bcbdd78ca657f62673906f5d330df0530c16bb81e345, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:03:37:58:c9:37:85:b6:8c:58:05:64:b7:6b: e9:fd:65:80:8e:ad:e1:eb:84:43:87:9a:65:5e:24: 77:17:01:53:7f:9a:72:be:47:1d:14:44:bd:df:34: a0:60:bf:c3:6f:b4:f9:30:70:e8:8b:65:62:89:1a: 5e:0f:10:e2:e8:85:2f:d2:f6:f9:50:64:8a:b5:d0: 20:66:0f:13:f8:b2:5e:88:0a:5a:72:f8:94:93:1c: 57:5f:38:2f:4f:d3:43:b3:c9:55:36:76:05:4c:29: 31:46:4a:f7:7e:21:0c:e9:73:f1:b2:a1:27:b7:75: 73:72:b9:9f:57:05:67:86:5d:5d:e7:da:c0:45:c2: b3:df:31:d0:e8:32:5a:93:f7:d5:47:e6:03:67:e3: 48:03:d8:d6:1b:20:88:5a:71:9a:f4:8a:cd:de:f7: 2f:3a:79:16:22:f2:64:f8:79:61:18:c3:45:c7:31: 6d:5e:fe:7f:82:90:d1:0f:aa:e4:c2:51:e8:4d:b4: 57:a2:50:6c:58:38:d8:68:68:08:b9:84:d5:24:e6: b3:39:14:8d:0b:65:0c:25:ac:3c:49:30:b0:fa:a1: 07:cb:fa:0e:10:ca:ec:a8:dd:fc:7e:55:85:97:b3: 4e:f4:03:08:8d:a2:e9:c5:bd:85:03:a2:77:e4:87: c8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DE:06:F7:4E:B7:E2:D9:6C:B0:70:40:43:F2:15:95:6D:37:F5:44 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8e48041-465a-496c-b46b-e6a2a480c945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.28.0.0/16 Signature Algorithm: sha256WithRSAEncryption cc:9e:11:60:be:ca:ee:4b:54:8f:0c:4b:69:79:b0:94:43:91: e8:bc:db:d9:3b:41:b0:d9:7a:e1:7f:f3:3f:49:d4:d4:63:32: 77:c8:b7:17:7a:33:cf:8c:f1:12:aa:dc:bb:3f:48:93:2c:65: b1:2a:f3:ea:bf:fa:c3:de:3a:6b:48:2a:43:73:a2:23:db:21: a5:d1:c3:7b:f6:b0:ab:dd:68:eb:85:08:b3:2a:5e:96:aa:a9: 18:5f:08:1b:67:7a:f9:dd:7d:af:4c:8a:7d:43:51:62:a6:08: 2e:4c:f8:ae:ca:4b:56:73:d7:fc:c1:e5:be:09:75:f4:ee:7b: 28:d7:14:a2:de:fb:bd:19:b3:df:f8:7c:a0:2a:cf:64:7b:bd: a6:68:d3:68:fc:e6:d6:be:3b:bf:d2:07:ef:f5:29:27:f9:0f: c6:d8:63:1c:30:5d:3d:7a:22:06:dd:b0:88:46:12:11:26:b7: 19:58:85:24:e9:1a:6d:ca:2d:1c:76:10:8e:4d:8e:81:74:03: 07:26:5d:85:be:d5:d5:80:49:5b:19:aa:f0:84:fd:0d:0b:31: 53:56:af:32:c4:d9:cd:ec:9a:d9:24:dc:71:56:46:22:ad:c9: c6:4d:a3:7f:91:9d:3e:7c:25:52:40:b6:a4:16:58:75:61:30: b2:31:d9:cd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURTWaUkaNnJBVQv3Ir7CYJuaPa94wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OGE4ODBiOTJiYjYxYzI1NmI5NGJjYmRkNzhjYTY1N2Y2 MjY3MzkwNmY1ZDMzMGRmMDUzMGMxNmJiODFlMzQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvAzdYyTeFtoxYBWS3a+n9ZYCOreHrhEOHmmVeJHcXAVN/ mnK+Rx0URL3fNKBgv8NvtPkwcOiLZWKJGl4PEOLohS/S9vlQZIq10CBmDxP4sl6I Clpy+JSTHFdfOC9P00OzyVU2dgVMKTFGSvd+IQzpc/GyoSe3dXNyuZ9XBWeGXV3n 2sBFwrPfMdDoMlqT99VH5gNn40gD2NYbIIhacZr0is3e9y86eRYi8mT4eWEYw0XH MW1e/n+CkNEPquTCUehNtFeiUGxYONhoaAi5hNUk5rM5FI0LZQwlrDxJMLD6oQfL +g4Qyuyo3fx+VYWXs070AwiNounFvYUDonfkh8j1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUH94G90634tlssHBAQ/IVlW039UQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4ZTQ4MDQxLTQ2NWEtNDk2Yy1iNDZiLWU2YTJhNDgwYzk0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQHDANBgkqhkiG9w0BAQsFAAOCAQEAzJ4RYL7K7ktUjwxLaXmwlEOR6Lzb 2TtBsNl64X/zP0nU1GMyd8i3F3ozz4zxEqrcuz9IkyxlsSrz6r/6w946a0gqQ3Oi I9shpdHDe/awq91o64UIsypelqqpGF8IG2d6+d19r0yKfUNRYqYILkz4rspLVnPX /MHlvgl19O57KNcUot77vRmz3/h8oCrPZHu9pmjTaPzm1r47v9IH7/UpJ/kPxthj HDBdPXoiBt2wiEYSESa3GViFJOkabcotHHYQjk2OgXQDByZdhb7V1YBJWxmq8IT9 DQsxU1avMsTZzeya2STccVZGIq3Jxk2jf5GdPnwlUkC2pBZYdWEwsjHZzQ== -----END CERTIFICATE-----Generated at Fri Sep 22 15:45:16 2023 by rpki-client on console-ams.rpki-client.org