$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa File: 54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa (raw, json) Hash identifier: /phiUq2TCBAJYJjPDgSyGzki8cCtxRvdZVUxyYrusfY= Subject key identifier: 42:28:E2:7B:71:BD:F1:17:57:9A:DC:39:06:30:67:70:D4:53:38:8E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0ADDC0965795B2D32FDE4229657EDF983A78B0B9 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:611::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 19 Sep 2023 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:dd:c0:96:57:95:b2:d3:2f:de:42:29:65:7e:df:98:3a:78:b0:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=916d9ebf12891c0dfe48d05fa530a67d2289948930ed54f2da19b82d9fd69a90, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:01:b8:d2:fd:29:b8:b8:6f:ba:28:69:49:d1: da:42:55:65:93:eb:42:72:0d:25:26:b2:90:91:ea: 59:9f:9b:39:f6:61:83:b8:75:d5:9b:1b:b7:32:91: 76:2b:be:f8:a9:c9:53:f6:cf:9c:45:da:5f:12:57: 50:78:a8:da:2d:51:15:a4:f0:3a:82:d2:68:4d:9e: 41:4b:1b:ae:2b:94:63:3e:17:0f:56:e9:8c:5d:bc: 00:66:63:5d:07:33:9f:f7:f3:26:45:f3:05:d5:0a: 07:b5:a7:ce:04:05:e1:6d:3c:42:a8:d7:1d:94:3b: c3:52:f3:14:7c:d5:82:a8:1c:43:3c:86:89:da:7c: fe:b8:38:69:af:4b:2e:39:07:82:7e:fe:69:69:2a: aa:d4:1b:47:e2:d7:fe:0f:97:e6:de:50:48:45:cc: 44:e9:68:3c:14:a8:18:19:46:a0:a8:53:b1:d7:0e: f3:3c:3c:07:df:12:97:43:bf:6f:ed:96:41:3e:25: 22:74:a9:6d:ec:ad:ce:97:0a:e3:72:61:ab:96:04: b9:eb:e2:35:4c:a2:f7:72:33:97:22:0d:d9:33:38: 9f:a8:46:15:33:5e:2c:69:0f:81:19:a8:01:ad:ce: 7b:e8:8a:ad:31:55:5e:a3:f5:a4:f1:13:49:1d:09: d0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:28:E2:7B:71:BD:F1:17:57:9A:DC:39:06:30:67:70:D4:53:38:8E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:611::/48 Signature Algorithm: sha256WithRSAEncryption 30:e7:fc:ed:e9:9a:10:47:a7:51:45:e6:cc:eb:6a:76:c2:f9: 89:56:51:6c:19:df:90:76:d4:12:20:8a:0e:68:a5:82:61:a5: 13:98:32:4e:34:da:bb:68:7c:f6:82:d5:05:56:c0:f4:88:08: b0:a2:be:b8:48:a1:35:2e:6c:1c:a4:e3:d4:50:22:74:a4:fd: 18:15:58:f1:e2:2b:c1:ba:9f:18:e6:81:f7:3c:42:fc:c9:b0: 8a:56:da:99:b6:a9:f2:22:a2:8b:ce:b0:5d:b5:48:97:a1:04: d9:2f:65:f4:92:15:a9:69:8e:c3:8f:35:f9:98:6d:4a:37:cb: c4:df:cf:d9:55:90:c7:6e:51:3c:4f:57:fc:70:07:88:75:b3: 3c:63:ee:6a:bf:d6:1d:5b:07:a5:49:cb:64:5b:14:d9:11:2a: 98:fd:42:2a:b6:01:34:06:e5:cd:52:1b:49:1c:37:59:c3:0f: f6:36:0c:57:44:08:21:f5:e5:8a:33:07:da:14:78:55:46:57: 93:9e:96:97:05:91:52:b9:8a:0e:27:13:f0:86:bd:0d:ea:35: 66:fc:e0:62:8b:2d:1e:27:b5:27:b5:33:dd:7f:2f:1b:9e:73: ea:bc:d9:dd:55:da:81:6a:d0:05:f4:c1:dd:33:9d:f6:25:b8: 98:e6:ef:c2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCt3AlleVstMv3kIpZX7fmDp4sLkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjMwOTE4MDAwMDAwWhcNMjMxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTZkOWViZjEyODkxYzBkZmU0OGQwNWZhNTMwYTY3ZDIy ODk5NDg5MzBlZDU0ZjJkYTE5YjgyZDlmZDY5YTkwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPAbjS/Sm4uG+6KGlJ0dpCVWWT60JyDSUmspCR6lmfmzn2 YYO4ddWbG7cykXYrvvipyVP2z5xF2l8SV1B4qNotURWk8DqC0mhNnkFLG64rlGM+ Fw9W6YxdvABmY10HM5/38yZF8wXVCge1p84EBeFtPEKo1x2UO8NS8xR81YKoHEM8 honafP64OGmvSy45B4J+/mlpKqrUG0fi1/4Pl+beUEhFzETpaDwUqBgZRqCoU7HX DvM8PAffEpdDv2/tlkE+JSJ0qW3src6XCuNyYauWBLnr4jVMovdyM5ciDdkzOJ+o RhUzXixpD4EZqAGtznvoiq0xVV6j9aTxE0kdCdBdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQijie3G98RdXmtw5BjBncNRTOI4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU0YmNiZDUwLTU5MTYtNDY3Ny1hNmIxLTY0NzdiOGIxNGFhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABhEwDQYJKoZIhvcNAQELBQADggEBADDn/O3pmhBHp1FF5szranbC +YlWUWwZ35B21BIgig5opYJhpROYMk402rtofPaC1QVWwPSICLCivrhIoTUubByk 49RQInSk/RgVWPHiK8G6nxjmgfc8QvzJsIpW2pm2qfIioovOsF21SJehBNkvZfSS FalpjsOPNfmYbUo3y8Tfz9lVkMduUTxPV/xwB4h1szxj7mq/1h1bB6VJy2RbFNkR Kpj9Qiq2ATQG5c1SG0kcN1nDD/Y2DFdECCH15YozB9oUeFVGV5OelpcFkVK5ig4n E/CGvQ3qNWb84GKLLR4ntSe1M91/Lxuec+q82d1V2oFq0AX0wd0znfYluJjm78I= -----END CERTIFICATE-----Generated at Mon Sep 18 15:24:46 2023 by rpki-client on console-fra.rpki-client.org