$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed9ea5ca-e728-4639-afa6-20b57823ca6e.roa File: ed9ea5ca-e728-4639-afa6-20b57823ca6e.roa (raw, json) Hash identifier: 4n4lv94kKwwbPoM9TZMNhVa08+xmSBY9uTcz6nRPMYg= Subject key identifier: D3:16:3F:D1:A3:8B:55:57:3B:3F:AD:92:28:B3:B5:57:51:F3:7F:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33D40433676395F092F7A9DBE93AA359465CB585 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed9ea5ca-e728-4639-afa6-20b57823ca6e.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d4:04:33:67:63:95:f0:92:f7:a9:db:e9:3a:a3:59:46:5c:b5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=8663591a53af050b319b7ead5624c82440245635759516cd204409bf523abbfc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:70:d0:b3:5a:dd:f0:89:fa:e8:a9:42:22: a3:c3:d9:64:1f:b2:db:1c:0c:1c:af:e7:e1:0b:1f: e8:30:f4:c6:e5:1d:b2:02:51:f3:35:06:e1:58:d5: 3e:08:5d:82:3b:b6:dd:7a:8f:25:be:1b:c9:8f:15: 11:d4:0a:c3:6a:b1:94:4e:fb:35:8d:5f:ec:27:ab: d4:9e:83:8b:dd:3c:fc:3e:69:89:a6:25:39:1e:19: b6:a0:4e:96:71:10:0f:3b:ea:c9:a4:7c:20:aa:ab: 7b:1e:fb:c8:2e:85:01:72:17:56:f2:48:7b:60:5e: ee:48:89:dd:dc:8b:e5:35:11:f0:04:96:73:23:1b: 87:02:a0:76:ef:76:7e:68:24:d9:6f:88:e8:a7:ab: 0c:e4:16:75:05:81:31:53:1e:1b:22:65:ab:b5:2d: fd:74:cb:1c:19:19:37:27:50:99:99:b9:d2:e3:b6: 9d:7b:51:3f:7b:96:4f:92:9f:66:03:cd:07:9e:3b: bb:1a:94:c9:92:1c:4d:79:4c:96:6e:e2:b3:85:16: 30:22:c8:dd:09:ed:93:4b:09:cf:43:29:fb:c4:7a: 61:38:87:fc:35:f5:1e:b8:19:f8:24:88:7b:f4:28: 83:11:86:15:a1:9a:2e:61:f0:88:22:1b:a3:e8:fa: b1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:16:3F:D1:A3:8B:55:57:3B:3F:AD:92:28:B3:B5:57:51:F3:7F:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed9ea5ca-e728-4639-afa6-20b57823ca6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.255.0/24 Signature Algorithm: sha256WithRSAEncryption 99:79:bb:cb:c9:0a:2a:d8:6f:21:f5:57:88:68:10:65:1e:f3: 74:db:7c:85:63:f4:72:c7:80:8f:dc:8f:57:9a:1e:c5:78:53: 86:8e:05:17:f5:31:d8:da:97:3d:f1:ee:b3:15:4d:61:06:eb: 12:15:ab:d1:c7:b7:df:f4:18:80:f6:74:6f:01:e0:e8:98:cf: c6:03:e5:b6:76:3f:58:42:bb:0a:01:01:12:00:15:a0:aa:d9: 82:c7:f8:35:5f:83:19:24:62:7d:65:ad:6b:0d:13:c8:b6:8a: 9f:8a:bb:82:fd:88:c1:74:61:ad:33:ab:1c:39:b0:ee:07:8f: 2d:0d:7c:cf:7c:34:26:04:14:70:ec:fe:53:36:0e:1f:93:06: cf:db:4a:05:8e:35:52:fa:87:c3:4f:a9:e4:55:08:55:a7:ab: 2f:fa:f8:a6:44:a3:e2:4c:94:02:12:ed:32:7e:c1:81:77:00: 83:47:0b:4b:90:06:5d:1e:7d:f2:12:9e:c4:21:ee:b3:3c:4a: e5:16:05:98:8e:b6:75:82:c9:f9:b3:25:5b:0c:bf:76:73:a9: 91:4c:22:22:95:3f:b2:ed:fc:3d:79:15:35:d4:be:9b:5e:64: 68:c1:a6:0e:49:4a:ee:32:d4:c6:1e:6a:f8:92:a6:14:9c:8d: c6:aa:59:fa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM9QEM2djlfCS96nb6TqjWUZctYUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjYzNTkxYTUzYWYwNTBiMzE5YjdlYWQ1NjI0YzgyNDQw MjQ1NjM1NzU5NTE2Y2QyMDQ0MDliZjUyM2FiYmZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdznDQs1rd8In66KlCIqPD2WQfstscDByv5+ELH+gw9Mbl HbICUfM1BuFY1T4IXYI7tt16jyW+G8mPFRHUCsNqsZRO+zWNX+wnq9Seg4vdPPw+ aYmmJTkeGbagTpZxEA876smkfCCqq3se+8guhQFyF1bySHtgXu5Iid3ci+U1EfAE lnMjG4cCoHbvdn5oJNlviOinqwzkFnUFgTFTHhsiZau1Lf10yxwZGTcnUJmZudLj tp17UT97lk+Sn2YDzQeeO7salMmSHE15TJZu4rOFFjAiyN0J7ZNLCc9DKfvEemE4 h/w19R64GfgkiHv0KIMRhhWhmi5h8IgiG6Po+rEPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0xY/0aOLVVc7P62SKLO1V1Hzf/YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkOWVhNWNhLWU3MjgtNDYzOS1hZmE2LTIwYjU3ODIzY2E2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsP8wDQYJKoZIhvcNAQELBQADggEBAJl5u8vJCirYbyH1V4hoEGUe83Tb fIVj9HLHgI/cj1eaHsV4U4aOBRf1Mdjalz3x7rMVTWEG6xIVq9HHt9/0GID2dG8B 4OiYz8YD5bZ2P1hCuwoBARIAFaCq2YLH+DVfgxkkYn1lrWsNE8i2ip+Ku4L9iMF0 Ya0zqxw5sO4Hjy0NfM98NCYEFHDs/lM2Dh+TBs/bSgWONVL6h8NPqeRVCFWnqy/6 +KZEo+JMlAIS7TJ+wYF3AINHC0uQBl0effISnsQh7rM8SuUWBZiOtnWCyfmzJVsM v3ZzqZFMIiKVP7Lt/D15FTXUvpteZGjBpg5JSu4y1MYeaviSphScjcaqWfo= -----END CERTIFICATE-----Generated at Sat Sep 23 00:38:47 2023 by rpki-client on console-ams.rpki-client.org