$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1b83a1b-6455-4042-b75b-c7af6f5499f1.roa File: e1b83a1b-6455-4042-b75b-c7af6f5499f1.roa (raw, json) Hash identifier: R9fBbIw+u0z1p0fCVx+1c4ukdo3F5UHCkyfmC4rOwYA= Subject key identifier: F4:24:EB:40:E0:4B:AE:D7:27:A3:8E:84:8F:52:50:3C:69:82:8D:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 638C9556CF2FE68FD8394485DB345E03100824B6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1b83a1b-6455-4042-b75b-c7af6f5499f1.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 99.78.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:8c:95:56:cf:2f:e6:8f:d8:39:44:85:db:34:5e:03:10:08:24:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=f6d7848c40e16b6e9a2e8c2471b8d68c712cb3170a3c891035e43d7511c4794e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:36:dd:18:32:4b:cb:b8:4f:f7:fb:b4:ac: 7e:b5:1c:44:0a:b2:92:bd:12:b2:8f:33:ff:12:ef: 10:6d:00:e0:dc:14:be:29:3e:0f:e5:9d:b3:a5:54: 85:74:b8:73:e6:18:87:ed:c9:71:39:4e:56:6f:9e: 11:96:b7:e1:dd:0f:c3:44:62:6d:91:70:9f:f4:3a: b0:7f:99:63:c7:0c:9c:c1:68:76:a4:a4:aa:d2:a5: 55:0e:f9:bc:48:48:d6:2a:8d:4d:fd:c4:27:2e:1b: 60:50:2c:51:ba:8d:04:64:a5:e5:16:77:46:f2:46: ca:65:4e:b5:c3:bd:7e:cc:80:a8:b8:46:44:31:98: 50:ee:d3:5a:fb:7c:d4:b7:a1:07:69:9f:81:21:1d: 50:96:69:d8:5c:4d:8a:bc:cd:85:30:7a:d7:8e:8a: 08:d4:bf:02:cf:c7:02:da:9b:5e:2a:19:03:d3:38: a8:c2:04:8d:a1:51:07:16:52:65:93:73:dd:a0:5d: ba:f6:57:3e:2c:71:a8:e6:7d:cb:be:66:8e:06:0b: 2a:56:67:0d:b1:a7:a3:42:95:da:52:7c:0c:3f:06: b5:0e:41:f4:8b:5c:9a:7a:ce:99:d9:db:ab:84:f3: ea:c0:fb:f1:2c:49:9e:69:10:ff:84:75:8c:2a:ab: 55:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:24:EB:40:E0:4B:AE:D7:27:A3:8E:84:8F:52:50:3C:69:82:8D:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1b83a1b-6455-4042-b75b-c7af6f5499f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.78.228.0/22 Signature Algorithm: sha256WithRSAEncryption 46:eb:02:f0:3d:5d:a8:e6:08:a8:73:ad:90:8a:82:c8:67:20: 36:f6:48:d6:fd:1d:9b:4f:b0:c1:03:b5:0b:87:0f:36:9c:92: 11:de:1a:f8:4a:da:1b:c9:93:20:2f:20:08:27:52:ae:31:b0: b1:90:2a:cf:81:80:b5:dc:11:71:0d:3f:75:ba:5c:b9:b3:d3: e4:31:d3:2f:9c:4a:65:4a:ed:37:ef:c1:1d:c7:cf:c4:04:43: 9d:94:5e:84:6e:04:a5:b4:28:6a:24:ca:a5:be:8d:5c:e0:34: 87:45:74:79:c8:c0:8d:02:a0:3a:2a:90:62:c3:23:8e:6c:7e: 2f:50:df:e9:fb:8f:f3:b1:40:86:12:44:5a:b2:e5:68:d0:20: c2:5d:14:53:ce:51:93:2a:cd:3f:67:e8:18:cc:08:e3:22:fa: 14:ce:66:ca:b0:8a:32:0d:5d:a5:3b:d5:99:f1:b2:e2:94:46: 78:da:75:89:7f:dd:f0:b5:72:3d:f9:a8:d3:ab:43:59:eb:99: b7:73:8c:c4:6f:eb:91:84:c7:13:d1:a1:dc:ae:f8:08:34:17: 91:53:97:fe:8d:00:f9:ad:1e:63:f6:8f:db:90:5c:8c:eb:18: 68:9e:f4:f1:d8:9b:c4:83:af:6d:bd:a2:8c:4a:03:ac:b7:31: 98:4a:db:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY4yVVs8v5o/YOUSF2zReAxAIJLYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmQ3ODQ4YzQwZTE2YjZlOWEyZThjMjQ3MWI4ZDY4Yzcx MmNiMzE3MGEzYzg5MTAzNWU0M2Q3NTExYzQ3OTRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZYzbdGDJLy7hP9/u0rH61HEQKspK9ErKPM/8S7xBtAODc FL4pPg/lnbOlVIV0uHPmGIftyXE5TlZvnhGWt+HdD8NEYm2RcJ/0OrB/mWPHDJzB aHakpKrSpVUO+bxISNYqjU39xCcuG2BQLFG6jQRkpeUWd0byRsplTrXDvX7MgKi4 RkQxmFDu01r7fNS3oQdpn4EhHVCWadhcTYq8zYUweteOigjUvwLPxwLam14qGQPT OKjCBI2hUQcWUmWTc92gXbr2Vz4scajmfcu+Zo4GCypWZw2xp6NCldpSfAw/BrUO QfSLXJp6zpnZ26uE8+rA+/EsSZ5pEP+EdYwqq1XBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9CTrQOBLrtcno46Ej1JQPGmCjRQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UxYjgzYTFiLTY0NTUtNDA0Mi1iNzViLWM3YWY2ZjU0OTlmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJjTuQwDQYJKoZIhvcNAQELBQADggEBAEbrAvA9XajmCKhzrZCKgshnIDb2 SNb9HZtPsMEDtQuHDzackhHeGvhK2hvJkyAvIAgnUq4xsLGQKs+BgLXcEXENP3W6 XLmz0+Qx0y+cSmVK7TfvwR3Hz8QEQ52UXoRuBKW0KGokyqW+jVzgNIdFdHnIwI0C oDoqkGLDI45sfi9Q3+n7j/OxQIYSRFqy5WjQIMJdFFPOUZMqzT9n6BjMCOMi+hTO ZsqwijINXaU71ZnxsuKURnjadYl/3fC1cj35qNOrQ1nrmbdzjMRv65GExxPRodyu +Ag0F5FTl/6NAPmtHmP2j9uQXIzrGGie9PHYm8SDr229ooxKA6y3MZhK20w= -----END CERTIFICATE-----Generated at Sat Sep 23 00:38:47 2023 by rpki-client on console-ams.rpki-client.org