$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc79889b-d361-432d-a85b-eab3ce52c1d9.roa File: dc79889b-d361-432d-a85b-eab3ce52c1d9.roa (raw, json) Hash identifier: uAR58yEYi+yy60VQo99BmErMLrOyHg94cuZFouJzVu4= Subject key identifier: C6:6D:4B:F1:19:D2:8C:58:50:55:E6:4B:14:F9:4F:6D:80:E2:35:E5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 608B166D9D8C8CA30EEBEA48A269A1B5F6DB907C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc79889b-d361-432d-a85b-eab3ce52c1d9.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 198.200.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:8b:16:6d:9d:8c:8c:a3:0e:eb:ea:48:a2:69:a1:b5:f6:db:90:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=536e20fe50ff0f720a6798211687e3653e2f3cca7a731cafa0684d0d67e205f5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:aa:78:12:da:30:39:0c:5a:32:45:63:83:b5: 1f:1f:dc:b6:0e:3e:12:f0:ea:17:aa:e1:24:fd:47: 35:7f:91:03:c3:09:00:42:51:fb:91:7d:3b:dd:c0: b2:55:07:18:a9:4d:b8:8a:d1:64:f2:5b:32:4b:d0: b4:19:a3:79:04:00:2e:e1:c0:76:13:63:5d:9c:7b: 13:5d:ba:ee:d9:14:8e:20:10:76:b9:ff:83:9f:8c: 8a:8b:79:9a:20:9f:b2:ec:c4:2a:3a:23:4a:cf:d5: d1:c0:09:61:56:89:b7:f9:c6:df:1b:1f:7c:c5:97: 3f:07:f8:7e:65:e5:b5:78:7c:75:c0:2e:19:f0:56: c0:25:d7:33:26:52:fd:b7:07:10:50:fa:9f:c9:bd: 7c:34:5c:ef:c4:ad:6f:22:1d:95:1c:07:d3:82:e6: 68:22:7a:ed:04:5c:ed:a6:9e:4a:d1:0a:24:11:d5: 7b:0f:08:97:5c:5d:d8:61:33:ce:93:89:18:3b:c3: 57:88:2b:52:24:ac:ea:8c:bd:5c:63:88:30:c8:65: 26:b5:1d:0d:17:50:d3:09:6d:7a:de:ee:f1:a7:dc: a9:56:61:c8:8b:ea:ee:0a:bd:64:0b:7b:cd:2a:6d: 41:d9:c2:89:89:e6:81:eb:2f:90:be:19:da:b3:0a: 38:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6D:4B:F1:19:D2:8C:58:50:55:E6:4B:14:F9:4F:6D:80:E2:35:E5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc79889b-d361-432d-a85b-eab3ce52c1d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.200.149.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:71:d3:7b:17:d6:6a:d9:5a:b0:a5:25:67:41:19:e2:9a:f6: 8d:3e:0b:59:36:f8:0b:e9:2d:30:a5:ae:8d:29:93:05:9c:9f: 75:d5:7c:03:84:42:12:ce:9e:ed:f1:8e:3d:92:9f:02:27:0f: 8a:66:b6:d6:77:55:04:f4:0e:2d:96:a9:41:c4:b9:91:54:c2: 85:30:13:ea:2f:10:91:89:f7:9a:6c:7f:53:f1:d1:32:09:cb: dc:99:c5:7f:ed:33:d0:5b:de:48:fc:6a:8c:d9:6f:27:45:66: 48:f0:8c:c8:c8:45:41:c9:df:f0:83:a9:83:60:1a:9f:08:db: 13:78:cd:c0:0d:4a:a2:c1:6f:6a:4d:67:52:3d:f7:7d:d1:d3: aa:da:8f:9c:44:99:02:69:cb:25:0c:de:5b:d4:55:b0:40:68: fb:75:7b:bc:8b:24:dc:a0:b8:f1:ec:eb:8b:a1:18:4e:d6:04: f8:e2:19:be:86:6e:eb:d6:10:0a:a3:f1:01:f7:00:0c:89:35: 48:24:bb:06:52:15:3e:ff:ac:85:48:7a:23:bc:56:64:31:4c: 68:97:ff:0d:91:01:8d:53:62:76:b2:fa:38:aa:14:9e:07:e5: 58:f1:05:8e:68:02:3f:fb:81:1b:2a:bb:90:5c:f3:4f:b2:a8: 21:88:e7:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYIsWbZ2MjKMO6+pIommhtfbbkHwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzZlMjBmZTUwZmYwZjcyMGE2Nzk4MjExNjg3ZTM2NTNl MmYzY2NhN2E3MzFjYWZhMDY4NGQwZDY3ZTIwNWY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCqngS2jA5DFoyRWODtR8f3LYOPhLw6heq4ST9RzV/kQPD CQBCUfuRfTvdwLJVBxipTbiK0WTyWzJL0LQZo3kEAC7hwHYTY12cexNduu7ZFI4g EHa5/4OfjIqLeZogn7LsxCo6I0rP1dHACWFWibf5xt8bH3zFlz8H+H5l5bV4fHXA LhnwVsAl1zMmUv23BxBQ+p/JvXw0XO/ErW8iHZUcB9OC5mgieu0EXO2mnkrRCiQR 1XsPCJdcXdhhM86TiRg7w1eIK1IkrOqMvVxjiDDIZSa1HQ0XUNMJbXre7vGn3KlW YciL6u4KvWQLe80qbUHZwomJ5oHrL5C+GdqzCjjjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxm1L8RnSjFhQVeZLFPlPbYDiNeUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjNzk4ODliLWQzNjEtNDMyZC1hODViLWVhYjNjZTUyYzFkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGyJUwDQYJKoZIhvcNAQELBQADggEBAE5x03sX1mrZWrClJWdBGeKa9o0+ C1k2+AvpLTClro0pkwWcn3XVfAOEQhLOnu3xjj2SnwInD4pmttZ3VQT0Di2WqUHE uZFUwoUwE+ovEJGJ95psf1Px0TIJy9yZxX/tM9Bb3kj8aozZbydFZkjwjMjIRUHJ 3/CDqYNgGp8I2xN4zcANSqLBb2pNZ1I9933R06raj5xEmQJpyyUM3lvUVbBAaPt1 e7yLJNyguPHs64uhGE7WBPjiGb6GbuvWEAqj8QH3AAyJNUgkuwZSFT7/rIVIeiO8 VmQxTGiX/w2RAY1TYnay+jiqFJ4H5VjxBY5oAj/7gRsqu5Bc80+yqCGI578= -----END CERTIFICATE-----Generated at Fri Sep 22 21:31:21 2023 by rpki-client on console-fra.rpki-client.org