$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f85e01b8-c490-4a13-a34f-3fca5f7dd45f.roa File: f85e01b8-c490-4a13-a34f-3fca5f7dd45f.roa (raw, json) Hash identifier: mj3CC9/sWqwJ7IQlxShNHNJQ962+Y9cdD9BH0KTZReY= Subject key identifier: 58:E1:66:F4:8E:09:2F:0B:8A:95:5D:56:50:7C:B9:BF:17:F3:BB:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E1D049B24399E621E8893145C22CF2C9A7AA336 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f85e01b8-c490-4a13-a34f-3fca5f7dd45f.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:1d:04:9b:24:39:9e:62:1e:88:93:14:5c:22:cf:2c:9a:7a:a3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=6c1949bae4691792d9d3b763583ad61a98a866ce2b3057166cb0904cd7960cd7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:da:3a:c4:ad:e0:85:00:93:1d:97:a5:d5:82: 85:ff:76:9f:4f:82:be:8e:61:99:1e:54:d3:99:5f: b1:38:b5:e7:41:ff:d9:11:9d:0e:9f:41:78:b0:7e: 31:e3:b4:56:b1:a8:73:35:44:68:82:e0:ec:3d:c5: b3:07:83:ac:1a:16:28:91:5a:14:57:07:d8:f0:47: 12:4f:42:74:50:f9:d1:15:bb:57:52:f3:82:ce:57: 78:29:bc:fd:cb:ce:89:25:f9:c3:84:dd:6d:b2:90: b5:3b:c1:8e:c7:c0:93:93:d6:b4:a6:a7:33:2d:b4: 4b:21:fd:15:7f:1d:1e:32:e8:13:59:ee:b5:72:f4: 58:d5:a6:04:85:41:af:82:8b:9a:39:1f:07:1b:c0: 3e:2f:29:48:56:b2:cb:93:c2:a2:fc:99:cb:e7:aa: f5:6a:9e:57:b6:c8:52:04:da:b8:41:b9:e9:96:77: 96:07:e4:ce:62:2e:df:b8:16:a8:1c:f4:2c:58:59: cd:81:ac:b2:ac:0f:33:cd:93:6e:c0:13:77:14:9c: 59:ce:76:e7:6f:86:ba:1d:e0:fc:f3:db:e4:ce:3e: 80:d4:21:95:f8:43:d3:7b:37:02:fd:d8:7e:14:51: d8:f2:5a:4f:64:69:00:19:65:c0:37:9f:15:e3:2b: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E1:66:F4:8E:09:2F:0B:8A:95:5D:56:50:7C:B9:BF:17:F3:BB:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f85e01b8-c490-4a13-a34f-3fca5f7dd45f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.149.0/24 Signature Algorithm: sha256WithRSAEncryption 16:6a:09:59:18:66:f2:97:67:6d:fc:fd:25:fc:a9:e3:e2:2f: 0e:3a:da:19:df:58:f4:d7:22:f5:92:44:0b:6d:b5:64:9a:d3: 9c:96:bb:27:d0:72:34:88:6f:c3:c5:de:72:a3:84:c4:21:97: 5c:d9:35:5a:47:df:0f:3f:5f:7b:c8:b4:c9:c0:d7:fd:7f:41: 9c:50:b1:58:b1:6a:a2:1f:47:44:81:37:64:09:5e:82:fd:93: 19:78:ee:f0:29:50:30:f5:c1:95:22:e9:c8:45:b4:37:4f:7c: ca:0b:6c:cc:fb:9f:1d:d2:3e:92:56:73:9e:91:cc:cb:c7:43: bb:71:aa:9f:86:23:fd:34:32:0c:00:6d:0c:4b:27:c2:14:a4: 30:c2:cd:6e:9a:1d:72:f8:88:22:07:2a:79:c9:65:33:f9:45: ab:4a:da:c5:77:68:e8:70:e9:03:e4:53:10:a9:59:ea:c4:6a: 20:e6:79:00:87:8a:08:8d:2c:17:f4:cd:7a:be:e8:44:83:c1: b7:9a:24:0e:ea:88:0a:af:e4:a7:bb:a6:8b:c0:03:ea:ae:2c: 30:da:66:af:2b:2f:d1:99:df:57:d2:85:82:34:94:0b:9e:9d: 34:76:62:4e:24:f3:f7:15:f6:d7:76:c0:c1:fe:0c:4d:dd:39: 60:fa:d5:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfh0EmyQ5nmIeiJMUXCLPLJp6ozYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzE5NDliYWU0NjkxNzkyZDlkM2I3NjM1ODNhZDYxYTk4 YTg2NmNlMmIzMDU3MTY2Y2IwOTA0Y2Q3OTYwY2Q3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC02jrEreCFAJMdl6XVgoX/dp9Pgr6OYZkeVNOZX7E4tedB /9kRnQ6fQXiwfjHjtFaxqHM1RGiC4Ow9xbMHg6waFiiRWhRXB9jwRxJPQnRQ+dEV u1dS84LOV3gpvP3Lzokl+cOE3W2ykLU7wY7HwJOT1rSmpzMttEsh/RV/HR4y6BNZ 7rVy9FjVpgSFQa+Ci5o5HwcbwD4vKUhWssuTwqL8mcvnqvVqnle2yFIE2rhBuemW d5YH5M5iLt+4Fqgc9CxYWc2BrLKsDzPNk27AE3cUnFnOdudvhrod4Pzz2+TOPoDU IZX4Q9N7NwL92H4UUdjyWk9kaQAZZcA3nxXjKyFDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWOFm9I4JLwuKlV1WUHy5vxfzu9IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y4NWUwMWI4LWM0OTAtNGExMy1hMzRmLTNmY2E1ZjdkZDQ1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTZUwDQYJKoZIhvcNAQELBQADggEBABZqCVkYZvKXZ238/SX8qePiLw46 2hnfWPTXIvWSRAtttWSa05yWuyfQcjSIb8PF3nKjhMQhl1zZNVpH3w8/X3vItMnA 1/1/QZxQsVixaqIfR0SBN2QJXoL9kxl47vApUDD1wZUi6chFtDdPfMoLbMz7nx3S PpJWc56RzMvHQ7txqp+GI/00MgwAbQxLJ8IUpDDCzW6aHXL4iCIHKnnJZTP5RatK 2sV3aOhw6QPkUxCpWerEaiDmeQCHigiNLBf0zXq+6ESDwbeaJA7qiAqv5Ke7povA A+quLDDaZq8rL9GZ31fShYI0lAuenTR2Yk4k8/cV9td2wMH+DE3dOWD61W0= -----END CERTIFICATE-----Generated at Fri Sep 22 22:27:04 2023 by rpki-client on console-fra.rpki-client.org