$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb6119d1-0a33-47fe-8be0-34dfa2a6d433.roa File: eb6119d1-0a33-47fe-8be0-34dfa2a6d433.roa (raw, json) Hash identifier: wu59E/4irPNY7OOaQWuImTEQLLL86873KyLJLHKDu6U= Subject key identifier: F3:FF:BE:B2:BD:2E:28:6A:F9:3E:E6:7F:91:43:79:7F:71:9D:35:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 528D7C407FE6203D220334D157D418901A410384 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb6119d1-0a33-47fe-8be0-34dfa2a6d433.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff0:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:8d:7c:40:7f:e6:20:3d:22:03:34:d1:57:d4:18:90:1a:41:03:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=7381cc97c479fce18b30c1efcec6d364c4f67c274ba3861297397efc8b19a45c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:dd:11:41:fc:55:fd:f3:38:d2:14:6f:9d: 03:d0:72:5f:a0:ff:43:5f:83:8b:f3:c8:36:08:b6: 60:fa:63:c2:23:a3:8d:2b:df:17:fd:8b:24:41:70: 2e:3d:48:30:54:99:a7:04:7a:ab:d2:91:dc:4e:cf: ee:ce:31:50:cd:09:55:c9:8a:ac:f6:51:9e:e0:97: 7c:17:67:3b:fd:31:f7:4e:8d:8e:f0:63:4b:9a:ea: a9:0d:dd:2f:df:38:63:ca:92:ce:f8:98:7f:dc:35: 49:67:37:64:f5:8a:29:f1:d1:4b:21:04:7d:f7:ac: c3:a7:45:7e:9b:bf:0a:af:7e:d4:5a:22:f2:58:fa: ef:56:75:37:b5:7f:e8:10:f1:f8:67:75:8b:3c:47: 50:2d:e0:4d:e0:7d:da:fd:6c:86:97:1f:45:8c:fc: d3:b5:64:18:8c:08:ee:97:24:11:81:e0:0f:28:fa: 79:d0:b6:68:fd:fe:35:9c:d1:a1:40:a8:ef:fe:b8: c4:6a:1a:c0:7b:b1:ed:62:a6:05:e6:67:72:90:b3: 56:84:c6:b8:49:50:f4:72:66:93:9c:86:af:12:fb: 7e:c8:57:8a:97:a9:f4:42:37:f2:42:7b:d8:f5:cd: 03:2b:58:97:7e:ed:3d:d7:86:86:7f:48:8b:89:de: 56:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FF:BE:B2:BD:2E:28:6A:F9:3E:E6:7F:91:43:79:7F:71:9D:35:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb6119d1-0a33-47fe-8be0-34dfa2a6d433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff0:5000::/40 Signature Algorithm: sha256WithRSAEncryption bb:4a:a5:29:77:71:61:fd:b9:58:72:2c:98:e4:2a:a3:42:f5: b9:83:e0:ae:24:f1:87:dc:9b:94:49:8d:d7:74:fe:aa:ea:23: 02:62:b9:d0:1d:63:bb:c4:e1:3f:c3:c3:65:58:3c:7c:d0:06: c8:4c:d3:2a:c5:22:de:5b:7a:17:41:67:bf:76:22:6a:66:0e: cd:e3:64:c3:d4:2f:f8:83:fb:e1:ac:8f:9b:66:91:9c:88:d3: e4:02:0c:94:00:e9:cc:89:65:e6:f0:45:18:5b:dc:82:cc:5e: 4e:75:47:7c:ae:0d:d5:37:ae:ba:3f:b4:89:94:3e:d0:c9:26: 4c:f3:cb:4f:f2:3f:75:81:4e:35:9f:6c:82:67:61:46:da:2d: d0:54:85:1d:34:db:30:09:80:71:bb:88:b1:df:26:77:db:71: b7:8a:3e:f4:4e:62:90:b1:80:0f:da:3d:fd:4c:08:86:59:30: 07:dd:2d:39:af:d6:21:23:d4:92:20:f7:ac:47:62:b5:28:4a: af:fe:13:c0:ef:d8:98:f3:d3:91:1b:ba:ca:87:25:49:3b:cf: dc:84:d9:3c:c9:b6:ac:b9:63:1b:96:a4:62:26:9f:dc:84:fc: 18:d9:38:fc:f9:bd:90:4e:7f:19:6d:e3:7a:c4:01:88:d3:bb: ab:79:84:bf -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUo18QH/mID0iAzTRV9QYkBpBA4QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzgxY2M5N2M0NzlmY2UxOGIzMGMxZWZjZWM2ZDM2NGM0 ZjY3YzI3NGJhMzg2MTI5NzM5N2VmYzhiMTlhNDVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1o90RQfxV/fM40hRvnQPQcl+g/0Nfg4vzyDYItmD6Y8Ij o40r3xf9iyRBcC49SDBUmacEeqvSkdxOz+7OMVDNCVXJiqz2UZ7gl3wXZzv9MfdO jY7wY0ua6qkN3S/fOGPKks74mH/cNUlnN2T1iinx0UshBH33rMOnRX6bvwqvftRa IvJY+u9WdTe1f+gQ8fhndYs8R1At4E3gfdr9bIaXH0WM/NO1ZBiMCO6XJBGB4A8o +nnQtmj9/jWc0aFAqO/+uMRqGsB7se1ipgXmZ3KQs1aExrhJUPRyZpOchq8S+37I V4qXqfRCN/JCe9j1zQMrWJd+7T3XhoZ/SIuJ3laPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU8/++sr0uKGr5PuZ/kUN5f3GdNbIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ViNjExOWQxLTBhMzMtNDdmZS04YmUwLTM0ZGZhMmE2ZDQzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/wUDANBgkqhkiG9w0BAQsFAAOCAQEAu0qlKXdxYf25WHIsmOQqo0L1 uYPgriTxh9yblEmN13T+quojAmK50B1ju8ThP8PDZVg8fNAGyEzTKsUi3lt6F0Fn v3YiamYOzeNkw9Qv+IP74ayPm2aRnIjT5AIMlADpzIll5vBFGFvcgsxeTnVHfK4N 1Teuuj+0iZQ+0MkmTPPLT/I/dYFONZ9sgmdhRtot0FSFHTTbMAmAcbuIsd8md9tx t4o+9E5ikLGAD9o9/UwIhlkwB90tOa/WISPUkiD3rEditShKr/4TwO/YmPPTkRu6 yoclSTvP3ITZPMm2rLljG5akYiaf3IT8GNk4/Pm9kE5/GW3jesQBiNO7q3mEvw== -----END CERTIFICATE-----Generated at Fri Sep 22 20:24:25 2023 by rpki-client on console-ams.rpki-client.org