$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fac04063-f7c8-41ee-b745-4de5efa59aaf.roa File: fac04063-f7c8-41ee-b745-4de5efa59aaf.roa (raw, json) Hash identifier: tu7PUY+7hPDpsPPWVlTYUbtk0NL3IGSBaoBlbQXbWA0= Subject key identifier: 54:6E:92:CC:3E:48:B7:EE:38:0C:08:2A:82:74:7D:2B:3A:FC:AA:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E8E8E4157B907D240F200794EAC5C096336F7BD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fac04063-f7c8-41ee-b745-4de5efa59aaf.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 16.152.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8e:8e:41:57:b9:07:d2:40:f2:00:79:4e:ac:5c:09:63:36:f7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=d365f9b78c206f7892f73e911cd0e57aa1e25104908c3e2cafffb854f81dece8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d7:f5:9a:96:91:51:ff:94:b1:a2:24:46:da: 16:1c:6e:16:65:85:17:6e:b6:bc:03:02:68:7e:12: 96:20:ba:bf:36:82:c5:10:82:2d:06:44:12:38:5a: b3:c7:66:da:d9:9e:95:7f:e2:c1:7c:e7:e9:72:47: 17:e8:90:85:06:72:8e:a6:18:46:61:1f:85:bf:0b: 9b:9e:d8:c1:d1:a6:bb:9d:9b:d0:fc:ce:50:c6:28: fb:f2:e3:92:c3:13:e2:73:b6:63:24:8c:fd:69:e8: cf:76:1c:ed:41:f7:4d:5b:c0:a9:e9:e1:64:d6:e0: b7:d0:8a:8b:aa:e8:b8:75:f9:d9:e6:fb:0d:97:dc: 46:d0:c6:34:d2:63:ca:db:80:55:43:34:5e:1f:42: 86:ce:c5:60:30:df:83:cf:b1:95:52:e5:54:2b:d1: 67:16:14:a2:26:ed:cf:1f:73:c2:bd:c1:89:9a:b1: fe:71:3f:8c:6a:53:a6:78:30:8f:c7:fc:88:a7:02: 48:f0:ec:ec:64:1d:a1:44:10:cf:63:ef:55:7f:68: 64:2e:da:36:a2:a0:05:7b:d1:ea:9d:48:59:88:f6: 8a:93:5d:b7:db:66:70:d2:7d:4f:50:3f:ae:85:7b: 97:71:5c:8f:b9:07:f7:43:9e:c0:8d:f2:37:36:df: 1b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6E:92:CC:3E:48:B7:EE:38:0C:08:2A:82:74:7D:2B:3A:FC:AA:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fac04063-f7c8-41ee-b745-4de5efa59aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.152.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9d:ea:f0:ca:0c:10:62:18:0d:a1:bb:92:88:55:35:30:74:2e: ed:e8:a9:95:9d:a9:e1:6e:09:31:95:77:ae:1d:53:cd:e0:b5: 18:89:af:ee:6b:b0:01:3c:fd:3b:89:a9:c4:2b:a9:0c:80:ee: 51:90:c5:74:18:0f:1f:af:85:c6:61:ea:58:70:38:91:e2:c3: 41:0d:83:35:47:a2:42:f9:da:93:2d:9c:a2:74:6e:1a:67:8f: 52:38:e0:b2:c6:2a:76:fc:d6:ed:e6:00:1a:83:f6:ad:a4:1d: 5f:b8:cf:41:85:51:40:ae:4c:3a:da:1a:62:21:31:0f:df:3f: d3:c9:64:43:5d:12:35:20:b4:51:80:43:23:41:e6:58:97:47: 24:45:a5:cf:ba:75:25:8c:e0:dc:4d:2d:82:20:ca:a0:f8:15: 7d:c3:98:fe:2d:f3:a8:71:3a:5c:24:76:e6:1b:45:ea:bd:33: a3:88:95:65:d3:d4:75:a7:2b:b4:da:41:e5:04:97:1f:0b:c5: 56:1b:1f:62:d1:ab:87:87:97:10:44:b1:d8:ca:63:83:3f:26: 92:20:0d:dc:6f:4d:2d:b9:94:d3:e4:b7:7d:e6:ed:4d:5b:fa: d3:be:55:d4:e4:91:11:a5:8b:de:03:89:02:80:cb:18:99:73: 8b:3b:0b:eb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTo6OQVe5B9JA8gB5TqxcCWM2970wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzY1ZjliNzhjMjA2Zjc4OTJmNzNlOTExY2QwZTU3YWEx ZTI1MTA0OTA4YzNlMmNhZmZmYjg1NGY4MWRlY2U4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDc1/WalpFR/5SxoiRG2hYcbhZlhRdutrwDAmh+EpYgur82 gsUQgi0GRBI4WrPHZtrZnpV/4sF85+lyRxfokIUGco6mGEZhH4W/C5ue2MHRprud m9D8zlDGKPvy45LDE+JztmMkjP1p6M92HO1B901bwKnp4WTW4LfQiouq6Lh1+dnm +w2X3EbQxjTSY8rbgFVDNF4fQobOxWAw34PPsZVS5VQr0WcWFKIm7c8fc8K9wYma sf5xP4xqU6Z4MI/H/IinAkjw7OxkHaFEEM9j71V/aGQu2jaioAV70eqdSFmI9oqT XbfbZnDSfU9QP66Fe5dxXI+5B/dDnsCN8jc23xttAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVG6SzD5It+44DAgqgnR9Kzr8qlMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhYzA0MDYzLWY3YzgtNDFlZS1iNzQ1LTRkZTVlZmE1OWFhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQmDANBgkqhkiG9w0BAQsFAAOCAQEAnerwygwQYhgNobuSiFU1MHQu7eip lZ2p4W4JMZV3rh1TzeC1GImv7muwATz9O4mpxCupDIDuUZDFdBgPH6+FxmHqWHA4 keLDQQ2DNUeiQvnaky2conRuGmePUjjgssYqdvzW7eYAGoP2raQdX7jPQYVRQK5M OtoaYiExD98/08lkQ10SNSC0UYBDI0HmWJdHJEWlz7p1JYzg3E0tgiDKoPgVfcOY /i3zqHE6XCR25htF6r0zo4iVZdPUdacrtNpB5QSXHwvFVhsfYtGrh4eXEESx2Mpj gz8mkiAN3G9NLbmU0+S3febtTVv6075V1OSREaWL3gOJAoDLGJlzizsL6w== -----END CERTIFICATE-----Generated at Fri Sep 22 18:47:36 2023 by rpki-client on console-fra.rpki-client.org