$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/595ebfb9-e548-4d3e-9fa8-016973527359.roa File: 595ebfb9-e548-4d3e-9fa8-016973527359.roa (raw, json) Hash identifier: HzsFLhKeLTdcyxFEWuUsDAJyWuM+/GDIODOLtMJERCE= Subject key identifier: 5D:4B:84:0B:69:8F:07:4D:9A:31:83:75:8D:14:3A:F4:0A:80:C6:59 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0828105B3DEA5BAA9C19AE564E36EAFBE49EEBE4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/595ebfb9-e548-4d3e-9fa8-016973527359.roa Signing time: Sat 09 Sep 2023 00:00:00 +0000 ROA not before: Sat 09 Sep 2023 00:00:00 +0000 ROA not after: Sat 14 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Sep 2023 12:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:28:10:5b:3d:ea:5b:aa:9c:19:ae:56:4e:36:ea:fb:e4:9e:eb:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 9 00:00:00 2023 GMT Not After : Oct 14 23:59:59 2023 GMT Subject: serialNumber=68ba26dc0864cc83f78d1d259b0f5a1d423486e2eb6b5950c4b533c2c01d3592, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bc:f9:c6:99:d0:85:84:76:37:7a:e3:d5:c5: f5:15:08:77:6b:af:c0:31:2d:bd:0d:f9:32:8c:d0: b5:10:33:55:09:90:1d:d2:33:10:e1:ca:9d:d2:74: b9:73:da:72:a0:99:e9:0d:9a:7f:34:9a:79:69:f0: 70:2a:8d:7f:33:ff:99:1b:d0:1d:72:9e:a7:27:0c: 8d:d0:81:53:0e:ad:3c:e3:27:68:35:d7:28:28:aa: 88:26:f0:36:1a:e8:0e:af:44:9c:e9:34:2e:d8:46: 23:6e:ea:5e:6e:46:62:c3:50:22:c3:60:d5:73:45: ab:18:00:9f:0b:9d:db:8f:8d:36:01:4e:71:ab:07: 83:41:2f:16:01:32:6d:c0:69:48:82:5d:2f:a8:bc: 28:47:f7:c6:3b:72:d1:6c:0a:14:9d:e1:34:c3:2f: ce:d8:7a:20:a8:67:b3:21:5f:5e:67:7a:22:4b:c2: fd:a8:fe:2e:0d:77:7d:59:63:10:77:7a:84:ab:db: 49:1a:a2:ee:1e:35:55:c6:92:5a:ea:6b:db:d9:bb: b2:6d:06:e7:0d:01:76:ea:b8:4a:61:39:90:6a:27: 28:e8:10:11:80:06:76:c3:94:df:23:99:d8:0b:5c: 9e:47:02:a6:e6:12:a9:4c:88:71:e1:44:b2:37:3a: 77:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4B:84:0B:69:8F:07:4D:9A:31:83:75:8D:14:3A:F4:0A:80:C6:59 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/595ebfb9-e548-4d3e-9fa8-016973527359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:8000::/48 Signature Algorithm: sha256WithRSAEncryption 6e:1a:e7:51:9e:0f:ca:bc:4a:a4:ea:2b:99:2e:b4:7e:9a:ca: 4c:fa:7e:33:3b:9c:02:a9:40:97:3a:a5:98:52:ce:cd:cc:92: b3:7a:bd:7b:b8:2d:f7:95:99:52:6e:57:76:45:80:54:94:b8: 1d:6c:72:ff:11:cf:ce:be:80:53:e7:e2:5a:bc:70:8b:15:da: 21:47:df:5c:a8:53:22:6e:ec:57:57:73:cf:68:87:51:a9:47: 1b:ae:da:d0:26:15:e5:26:f9:8d:9a:cf:1f:25:ea:19:bc:cd: 47:fe:41:ae:46:27:5b:a0:07:e3:cc:0f:c9:01:6d:40:c1:a1: 13:65:11:74:57:5f:b0:12:e3:9a:74:f5:6b:b4:8d:3c:89:cd: 8e:db:b3:2d:ad:ce:a7:4f:7d:a2:eb:1e:11:2d:10:36:a5:e4: 34:24:84:11:c0:df:27:1c:da:0a:6e:cc:b9:4d:fd:d0:5e:fd: 67:dc:11:b0:d3:70:64:f6:03:9f:a7:f6:5a:70:59:cc:ff:24: 10:f7:1d:3a:ba:88:a6:9d:cf:f2:8f:17:6f:e8:8d:64:fb:b3: 0a:96:6f:20:a7:41:6b:3f:fd:1b:92:0c:3a:52:ac:e1:ff:b6: 12:ff:ba:18:40:af:a9:71:b8:c7:d3:90:86:aa:f9:99:95:b0: 95:ac:72:ef -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCCgQWz3qW6qcGa5WTjbq++Se6+QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjMwOTA5MDAwMDAwWhcNMjMxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OGJhMjZkYzA4NjRjYzgzZjc4ZDFkMjU5YjBmNWExZDQy MzQ4NmUyZWI2YjU5NTBjNGI1MzNjMmMwMWQzNTkyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVvPnGmdCFhHY3euPVxfUVCHdrr8AxLb0N+TKM0LUQM1UJ kB3SMxDhyp3SdLlz2nKgmekNmn80mnlp8HAqjX8z/5kb0B1ynqcnDI3QgVMOrTzj J2g11ygoqogm8DYa6A6vRJzpNC7YRiNu6l5uRmLDUCLDYNVzRasYAJ8LnduPjTYB TnGrB4NBLxYBMm3AaUiCXS+ovChH98Y7ctFsChSd4TTDL87YeiCoZ7MhX15neiJL wv2o/i4Nd31ZYxB3eoSr20kaou4eNVXGklrqa9vZu7JtBucNAXbquEphOZBqJyjo EBGABnbDlN8jmdgLXJ5HAqbmEqlMiHHhRLI3OneRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXUuEC2mPB02aMYN1jRQ69AqAxlkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU5NWViZmI5LWU1NDgtNGQzZS05ZmE4LTAxNjk3MzUyNzM1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwgAAwDQYJKoZIhvcNAQELBQADggEBAG4a51GeD8q8SqTqK5kutH6a ykz6fjM7nAKpQJc6pZhSzs3MkrN6vXu4LfeVmVJuV3ZFgFSUuB1scv8Rz86+gFPn 4lq8cIsV2iFH31yoUyJu7FdXc89oh1GpRxuu2tAmFeUm+Y2azx8l6hm8zUf+Qa5G J1ugB+PMD8kBbUDBoRNlEXRXX7AS45p09Wu0jTyJzY7bsy2tzqdPfaLrHhEtEDal 5DQkhBHA3ycc2gpuzLlN/dBe/WfcEbDTcGT2A5+n9lpwWcz/JBD3HTq6iKadz/KP F2/ojWT7swqWbyCnQWs//RuSDDpSrOH/thL/uhhAr6lxuMfTkIaq+ZmVsJWscu8= -----END CERTIFICATE-----Generated at Sat Sep 9 00:26:29 2023 by rpki-client on console-fra.rpki-client.org