$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eabadbd2-1902-4555-83e8-824a573c82a4.roa File: eabadbd2-1902-4555-83e8-824a573c82a4.roa (raw, json) Hash identifier: yCQe6N9oG8pslgbe14cKM8OjLCYXzZ1CtSG5R+wFlPE= Subject key identifier: 39:EE:EE:7E:00:E1:E6:AC:E7:64:A7:29:55:28:C1:6C:39:6F:74:84 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74B80D87B1686ABFC162B11827689E88CB903503 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eabadbd2-1902-4555-83e8-824a573c82a4.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 151.148.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b8:0d:87:b1:68:6a:bf:c1:62:b1:18:27:68:9e:88:cb:90:35:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=cb29a289c649861b6c2209c4d90bd10516eca8a20daf4510352bb1f5227555b9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:b9:53:5e:e6:5b:8a:91:bf:56:ce:5b:5b: d2:11:c7:c5:09:a6:0f:2a:0a:9c:66:f4:5f:ec:f9: 94:2a:f6:8d:46:96:22:d8:f9:9b:3b:8b:29:ff:04: 8a:9a:04:5e:bf:f8:13:3e:b5:13:e7:e7:09:dd:ab: 1c:88:75:e0:41:4a:e0:a2:48:8e:fb:75:1f:f8:34: 19:9d:03:85:c5:eb:db:a0:0d:6b:87:ff:25:22:76: 26:9c:53:dd:bb:7f:d9:9f:1f:cc:c3:93:97:13:5f: 0d:2e:ab:4d:4a:1c:c2:e4:8e:35:5c:bb:20:6f:91: ec:a6:ae:b3:f0:2d:83:61:c0:c4:2e:cc:87:38:56: 31:e2:64:23:47:0d:13:ec:ea:54:91:93:2f:7b:7f: 15:63:6a:ee:d3:a9:02:1c:3b:ee:86:5d:b9:5c:5d: 50:9f:ed:0b:c4:02:c9:8f:69:c9:89:b5:ca:ab:57: 0a:30:56:80:d5:af:10:58:c4:65:63:3a:50:99:33: 14:c0:3b:3e:5a:28:13:47:6b:9a:9e:10:d6:81:ad: 00:27:35:05:12:32:9b:2f:a6:28:1e:53:69:02:bc: ec:25:1f:df:59:8b:29:de:b8:16:b3:0a:ea:b1:db: 3b:68:75:2a:16:5b:92:ff:93:51:4b:22:1b:50:3f: a1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EE:EE:7E:00:E1:E6:AC:E7:64:A7:29:55:28:C1:6C:39:6F:74:84 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eabadbd2-1902-4555-83e8-824a573c82a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.148.38.0/24 Signature Algorithm: sha256WithRSAEncryption cf:14:7c:08:05:ec:82:6a:e6:44:e3:a2:59:6a:9d:5c:89:38: b5:f6:3c:38:a9:e1:9b:36:ce:5a:12:9b:05:e8:84:e4:4a:bd: d8:32:f6:1f:84:b3:38:b9:c6:a0:13:57:a9:2e:4a:19:da:a2: 45:cd:75:d6:1e:8a:51:e4:b1:8a:a7:71:bb:61:92:3b:8a:06: c3:2e:f7:5d:44:89:96:43:d1:f9:ef:ec:26:3d:84:35:89:1b: ea:8d:1b:3a:dc:aa:a7:d6:63:df:28:d5:e7:df:07:00:fc:85: be:7e:b2:b0:7c:81:b8:fc:ed:54:a3:ea:2b:e7:ba:c2:00:0e: af:44:0d:a5:3a:2a:90:b5:6a:37:5e:cf:78:d5:43:ce:e5:56: 5b:23:ac:c2:e3:ae:5c:ee:9c:9d:64:a7:55:1a:8f:2d:94:77: 8c:43:f8:f9:cc:f3:d1:09:47:7b:36:be:d3:0f:4d:8e:e4:c1: 93:4f:65:15:b1:89:71:e3:7f:f1:ca:86:55:2e:5b:10:43:b1: e5:dc:28:17:f4:30:2d:47:ab:19:56:d9:d8:99:57:de:7f:33: 68:9d:a5:4b:3a:d2:40:14:e7:c0:29:51:15:d5:dc:fe:f9:e7: 54:73:97:8f:83:b6:a9:bf:15:f2:95:ea:e9:a4:dc:db:14:29: c3:aa:05:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdLgNh7Foar/BYrEYJ2ieiMuQNQMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjI5YTI4OWM2NDk4NjFiNmMyMjA5YzRkOTBiZDEwNTE2 ZWNhOGEyMGRhZjQ1MTAzNTJiYjFmNTIyNzU1NWI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9w7lTXuZbipG/Vs5bW9IRx8UJpg8qCpxm9F/s+ZQq9o1G liLY+Zs7iyn/BIqaBF6/+BM+tRPn5wndqxyIdeBBSuCiSI77dR/4NBmdA4XF69ug DWuH/yUidiacU927f9mfH8zDk5cTXw0uq01KHMLkjjVcuyBvkeymrrPwLYNhwMQu zIc4VjHiZCNHDRPs6lSRky97fxVjau7TqQIcO+6GXblcXVCf7QvEAsmPacmJtcqr VwowVoDVrxBYxGVjOlCZMxTAOz5aKBNHa5qeENaBrQAnNQUSMpsvpigeU2kCvOwl H99ZiyneuBazCuqx2ztodSoWW5L/k1FLIhtQP6HTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOe7ufgDh5qznZKcpVSjBbDlvdIQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VhYmFkYmQyLTE5MDItNDU1NS04M2U4LTgyNGE1NzNjODJhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACXlCYwDQYJKoZIhvcNAQELBQADggEBAM8UfAgF7IJq5kTjollqnVyJOLX2 PDip4Zs2zloSmwXohORKvdgy9h+Eszi5xqATV6kuShnaokXNddYeilHksYqncbth kjuKBsMu911EiZZD0fnv7CY9hDWJG+qNGzrcqqfWY98o1effBwD8hb5+srB8gbj8 7VSj6ivnusIADq9EDaU6KpC1ajdez3jVQ87lVlsjrMLjrlzunJ1kp1Uajy2Ud4xD +PnM89EJR3s2vtMPTY7kwZNPZRWxiXHjf/HKhlUuWxBDseXcKBf0MC1HqxlW2diZ V95/M2idpUs60kAU58ApURXV3P7551Rzl4+Dtqm/FfKV6umk3NsUKcOqBZU= -----END CERTIFICATE-----Generated at Fri Sep 22 22:31:09 2023 by rpki-client on console-ams.rpki-client.org