$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c686f937-000a-490a-846c-e2773b637b26.roa File: c686f937-000a-490a-846c-e2773b637b26.roa (raw, json) Hash identifier: KV+/lTwVr393B/IdVBIORAEugP6fqQpBsmjCvIum7c0= Subject key identifier: B6:97:09:3A:4A:C7:0A:B2:C6:93:BF:77:EC:A1:2C:F7:00:C8:91:9B Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 27544AEFB121EFFB2271182E0EB8F70F1454A669 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c686f937-000a-490a-846c-e2773b637b26.roa Signing time: Tue 12 Sep 2023 00:00:00 +0000 ROA not before: Tue 12 Sep 2023 00:00:00 +0000 ROA not after: Tue 17 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2606:f40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 Sep 2023 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:54:4a:ef:b1:21:ef:fb:22:71:18:2e:0e:b8:f7:0f:14:54:a6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Sep 12 00:00:00 2023 GMT Not After : Oct 17 23:59:59 2023 GMT Subject: serialNumber=8d280b7ff63ac75cbe3c9ffff5b27e35ce314df5f417533da82a7d73a650cf61, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:d2:3b:f4:ba:35:57:ad:a4:14:e2:e4:db: cd:17:79:7b:8d:84:54:a6:07:87:0f:15:96:80:49: 21:b3:d6:ed:14:a3:80:d4:dc:fa:bb:ec:31:79:06: c0:cf:a9:53:2f:89:21:2b:78:32:9b:76:e8:9b:d1: 64:45:80:18:ce:12:57:85:3e:c6:f8:7f:ea:b5:4c: 1c:07:25:8f:f8:57:b8:5c:c4:33:f8:c9:76:7c:09: 3f:9c:ab:a8:8a:df:08:eb:af:80:7e:0c:d0:32:f5: 02:45:cd:0c:b6:cd:7e:32:d8:a8:44:20:4d:ef:bf: 72:a6:01:d3:7b:23:c0:e5:6d:e0:86:fb:41:90:42: 6b:00:f5:46:6a:42:c2:9e:8a:76:e2:da:f7:2d:c8: 2d:3a:7e:75:d6:7f:f2:6c:1b:b2:b4:98:0f:61:58: dd:3c:6e:fe:1e:de:48:a2:14:65:09:6d:40:e8:26: 6c:b0:45:76:f2:2b:62:71:64:87:f1:23:d2:d2:75: 1f:f7:a7:4f:b0:a6:10:0b:89:f2:3c:a0:24:b7:f9: 13:eb:f2:14:00:9c:f7:6c:c1:f1:48:74:1f:28:64: 19:a3:b3:83:3e:ed:54:c5:5d:54:69:68:b0:71:fc: 95:a3:73:01:98:78:8c:b5:1a:86:24:e3:f7:59:01: a5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:97:09:3A:4A:C7:0A:B2:C6:93:BF:77:EC:A1:2C:F7:00:C8:91:9B X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c686f937-000a-490a-846c-e2773b637b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:f40::/32 Signature Algorithm: sha256WithRSAEncryption 9a:67:75:83:f5:86:f9:ce:94:25:3d:df:98:06:a3:57:63:21: 10:a5:22:3a:31:a7:93:36:71:e0:b0:c3:79:7c:a5:07:3f:e5: cf:94:2f:df:a3:fc:a0:15:f9:67:d1:45:7c:1a:1f:62:d5:bf: 7a:11:7e:54:cc:95:f2:15:e1:de:37:43:ea:66:00:53:5e:e9: 39:94:4a:14:01:cf:fc:07:f9:a4:91:a6:e8:c7:ed:37:0b:af: da:21:a6:bc:b2:95:68:af:bf:7d:31:f8:f5:72:87:ac:f5:48: 17:e1:42:8a:95:5b:f7:3d:8a:6f:5d:a5:a5:41:c9:95:1c:e9: a8:8b:3e:a8:49:95:04:f2:0e:22:0a:4e:06:a9:bc:a1:54:1b: c5:e1:8a:44:e9:6b:ba:d1:c0:18:ab:94:53:ce:47:84:1b:c7: ec:04:1b:56:b3:b0:e0:54:cc:19:de:ec:e8:77:88:4e:9b:de: 0e:86:fa:94:f8:60:06:60:ab:75:c3:12:26:0a:ea:70:a8:ca: 9f:53:ab:07:63:dc:7d:13:c2:7e:87:9e:35:74:2e:34:81:67: 0f:ba:92:35:f2:06:b2:4c:34:de:b2:0d:d0:da:f0:fa:8d:ff: 4c:02:86:db:57:3b:4d:49:2b:17:82:22:db:2b:49:26:5d:0b: 6e:9d:6f:71 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUJ1RK77Eh7/sicRguDrj3DxRUpmkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjMwOTEyMDAwMDAwWhcNMjMxMDE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDI4MGI3ZmY2M2FjNzVjYmUzYzlmZmZmNWIyN2UzNWNl MzE0ZGY1ZjQxNzUzM2RhODJhN2Q3M2E2NTBjZjYxMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/E9I79Lo1V62kFOLk280XeXuNhFSmB4cPFZaASSGz1u0U o4DU3Pq77DF5BsDPqVMviSEreDKbduib0WRFgBjOEleFPsb4f+q1TBwHJY/4V7hc xDP4yXZ8CT+cq6iK3wjrr4B+DNAy9QJFzQy2zX4y2KhEIE3vv3KmAdN7I8DlbeCG +0GQQmsA9UZqQsKeinbi2vctyC06fnXWf/JsG7K0mA9hWN08bv4e3kiiFGUJbUDo JmywRXbyK2JxZIfxI9LSdR/3p0+wphALifI8oCS3+RPr8hQAnPdswfFIdB8oZBmj s4M+7VTFXVRpaLBx/JWjcwGYeIy1GoYk4/dZAaXXAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUtpcJOkrHCrLGk7937KEs9wDIkZswHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2M2ODZmOTM3LTAwMGEtNDkwYS04NDZjLWUyNzczYjYzN2IyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBg9AMA0GCSqGSIb3DQEBCwUAA4IBAQCaZ3WD9Yb5zpQlPd+YBqNXYyEQ pSI6MaeTNnHgsMN5fKUHP+XPlC/fo/ygFfln0UV8Gh9i1b96EX5UzJXyFeHeN0Pq ZgBTXuk5lEoUAc/8B/mkkabox+03C6/aIaa8spVor799Mfj1coes9UgX4UKKlVv3 PYpvXaWlQcmVHOmoiz6oSZUE8g4iCk4GqbyhVBvF4YpE6Wu60cAYq5RTzkeEG8fs BBtWs7DgVMwZ3uzod4hOm94OhvqU+GAGYKt1wxImCupwqMqfU6sHY9x9E8J+h541 dC40gWcPupI18gayTDTesg3Q2vD6jf9MAobbVztNSSsXgiLbK0kmXQtunW9x -----END CERTIFICATE-----Generated at Tue Sep 12 00:34:23 2023 by rpki-client on console-ams.rpki-client.org