$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1bc806e-2572-403e-b1e0-48367c6289fe.roa File: e1bc806e-2572-403e-b1e0-48367c6289fe.roa (raw, json) Hash identifier: Itza5Y4ovJ2nsG/cbtOOIGbyGj3ImLmvzh26/Ot9eX8= Subject key identifier: 27:0B:6E:FF:7B:C7:88:07:85:71:AA:D0:A6:43:9D:72:31:0B:7F:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 511CD655D0AEFF881658D6D3FB8899D12FE23E6B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1bc806e-2572-403e-b1e0-48367c6289fe.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 134.43.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1c:d6:55:d0:ae:ff:88:16:58:d6:d3:fb:88:99:d1:2f:e2:3e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=a00d7a97be3a9ffb235d81234a9c1e171897167847772069b712f6055139f9bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:98:39:fa:c8:5b:f9:4c:a5:0e:3b:bd:2b: 13:8f:f7:62:64:ad:97:cd:f7:25:a7:da:48:aa:20: ec:3f:91:2f:bc:bd:5d:b6:ff:10:8c:5b:54:6f:8f: 59:55:c4:07:52:0c:41:a1:a9:b5:21:38:79:7d:63: 8c:8a:b5:31:b5:6b:22:62:95:2c:bc:13:54:fe:1f: 05:99:66:3c:6f:08:83:bd:b7:e1:91:62:17:01:ab: d2:33:f8:de:86:31:7b:02:9b:cc:19:b7:0b:6b:aa: 54:71:39:42:b8:ff:b0:23:a2:e8:fd:6d:8c:38:97: dc:d1:f3:c9:d7:80:37:ea:94:5e:9f:04:8d:88:26: d4:a7:0d:40:15:fe:d2:35:d6:96:f6:25:55:38:f4: fa:dc:91:ca:55:aa:fd:4b:dd:44:51:31:1b:77:ff: 40:52:0a:18:f7:e5:ff:d4:c0:29:1b:f3:eb:bb:c5: 06:d8:95:71:22:87:67:a3:c9:a8:47:7c:a6:0d:36: c1:6e:95:0f:89:a7:26:57:c9:e4:be:6a:97:97:b4: 32:b9:a4:95:e2:27:e2:e9:54:fd:6c:9e:f8:e9:3d: 6f:7c:14:be:c8:f5:fa:c5:4f:11:3a:84:af:11:69: cb:b5:2b:e0:5d:44:8a:a7:8b:72:a5:5c:bb:4b:01: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0B:6E:FF:7B:C7:88:07:85:71:AA:D0:A6:43:9D:72:31:0B:7F:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1bc806e-2572-403e-b1e0-48367c6289fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.43.0.0/16 Signature Algorithm: sha256WithRSAEncryption c8:13:95:5b:c0:ab:33:8b:3a:d3:81:fc:e8:0b:4f:d4:f2:c3: 66:1b:91:b3:09:d4:ec:19:d6:f7:58:f5:06:92:22:5c:9f:06: 24:b7:0b:90:26:65:6c:fd:ea:f5:1f:6a:d8:9c:60:4c:a9:f6: e9:d7:81:69:2b:9d:b0:53:3f:96:d7:a7:fa:6f:d9:e3:f1:f4: 3e:f0:3f:21:aa:c2:1e:c6:35:3d:6e:7f:09:39:e1:ed:cd:7f: b7:15:7d:67:67:2f:99:20:93:ac:31:5c:dc:ba:3f:27:01:d9: 0a:da:55:6d:ab:8d:42:6c:39:3f:8a:35:e3:80:73:b0:2d:9c: 28:97:4d:86:6c:39:c7:c7:71:26:95:4f:4c:f9:38:f5:3f:dc: 79:1d:9e:44:16:1f:09:87:71:58:f2:f2:37:19:23:96:0f:a4: f0:19:8d:31:53:77:1b:9d:29:cd:60:e2:62:59:46:9a:a0:dc: 07:7d:a2:76:ef:54:6c:ba:58:f4:44:f5:d4:c0:73:12:a8:aa: ab:90:2d:6c:47:6f:3c:5f:4f:9e:16:32:32:30:07:a3:1f:81: 2d:e5:84:66:a0:23:ad:9b:c5:ee:a3:8c:98:db:88:58:04:4c: 42:55:01:ba:23:31:8c:5d:e5:84:19:55:ed:87:7d:52:98:66: 40:00:05:f3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUURzWVdCu/4gWWNbT+4iZ0S/iPmswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDBkN2E5N2JlM2E5ZmZiMjM1ZDgxMjM0YTljMWUxNzE4 OTcxNjc4NDc3NzIwNjliNzEyZjYwNTUxMzlmOWJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiAJg5+shb+UylDju9KxOP92JkrZfN9yWn2kiqIOw/kS+8 vV22/xCMW1Rvj1lVxAdSDEGhqbUhOHl9Y4yKtTG1ayJilSy8E1T+HwWZZjxvCIO9 t+GRYhcBq9Iz+N6GMXsCm8wZtwtrqlRxOUK4/7Ajouj9bYw4l9zR88nXgDfqlF6f BI2IJtSnDUAV/tI11pb2JVU49PrckcpVqv1L3URRMRt3/0BSChj35f/UwCkb8+u7 xQbYlXEih2ejyahHfKYNNsFulQ+JpyZXyeS+apeXtDK5pJXiJ+LpVP1snvjpPW98 FL7I9frFTxE6hK8Racu1K+BdRIqni3KlXLtLAdnTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJwtu/3vHiAeFcarQpkOdcjELf0EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UxYmM4MDZlLTI1NzItNDAzZS1iMWUwLTQ4MzY3YzYyODlmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCGKzANBgkqhkiG9w0BAQsFAAOCAQEAyBOVW8CrM4s604H86AtP1PLDZhuR swnU7BnW91j1BpIiXJ8GJLcLkCZlbP3q9R9q2JxgTKn26deBaSudsFM/lten+m/Z 4/H0PvA/IarCHsY1PW5/CTnh7c1/txV9Z2cvmSCTrDFc3Lo/JwHZCtpVbauNQmw5 P4o144BzsC2cKJdNhmw5x8dxJpVPTPk49T/ceR2eRBYfCYdxWPLyNxkjlg+k8BmN MVN3G50pzWDiYllGmqDcB32idu9UbLpY9ET11MBzEqiqq5AtbEdvPF9PnhYyMjAH ox+BLeWEZqAjrZvF7qOMmNuIWARMQlUBuiMxjF3lhBlV7Yd9UphmQAAF8w== -----END CERTIFICATE-----Generated at Fri Sep 22 17:25:47 2023 by rpki-client on console-fra.rpki-client.org