$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/558c9df2-c6fb-4925-840a-5de1f74ec31b.roa File: 558c9df2-c6fb-4925-840a-5de1f74ec31b.roa (raw, json) Hash identifier: 6jZR4z4Ei0seDKMukkXbLrsBUhZ1XQPmP7ayJJ9kNzc= Subject key identifier: 7D:0B:F2:A9:A8:87:09:DE:13:BC:BA:1B:6E:84:AA:C6:AA:F6:1D:5B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 51860C7B615701CB18CA04ABD099D8C00195637A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/558c9df2-c6fb-4925-840a-5de1f74ec31b.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:386::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 19 Sep 2023 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:86:0c:7b:61:57:01:cb:18:ca:04:ab:d0:99:d8:c0:01:95:63:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=7c911dc2cde6918a381db0ba960e7411bef878a5a9249cd15ce8be6fff3bd787, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:04:a6:a7:85:00:ee:3e:41:09:23:7b:ca:86: 91:84:b5:57:a6:b0:e8:09:bf:3b:fb:68:5e:f1:cc: e7:e9:1d:78:42:9b:97:93:1e:fe:f0:6c:ed:53:5d: b7:bf:cf:6c:cb:50:47:94:6e:a1:07:7e:d0:0b:8d: 65:25:6f:c3:53:64:d1:0d:52:d4:71:f8:67:70:47: 4d:99:18:8e:6a:03:f8:5f:0e:76:ac:df:1d:ed:af: 7f:ea:04:1c:7e:d8:f5:2c:9a:b0:d1:31:8d:be:d8: 15:6e:60:78:6d:13:90:69:8b:d5:d3:19:5d:57:54: 0b:a4:bc:66:49:25:7d:11:b4:fb:1f:f2:a3:45:c9: 29:83:5e:b1:d8:4b:ee:8b:71:58:b3:c3:65:83:16: fb:8a:c8:2c:de:37:95:16:67:03:5a:c1:d7:30:eb: d8:8e:d7:db:f5:73:89:38:ed:03:91:98:11:b6:f9: 54:b4:b8:17:94:0f:85:1c:23:03:86:7e:43:4d:44: 9e:f1:4e:c4:00:b2:bf:02:e4:67:73:79:97:a9:09: 82:5b:65:64:7c:a8:e3:58:65:2b:d6:97:cd:ab:a4: 59:da:63:1b:46:c6:01:de:3c:b3:0f:a1:ee:66:16: 14:c9:7a:93:8b:7c:d9:51:87:7a:7d:97:ff:72:92: 21:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0B:F2:A9:A8:87:09:DE:13:BC:BA:1B:6E:84:AA:C6:AA:F6:1D:5B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/558c9df2-c6fb-4925-840a-5de1f74ec31b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:386::/48 Signature Algorithm: sha256WithRSAEncryption 53:7e:5a:a2:b5:77:a6:b1:c5:8b:c1:dc:49:7f:6f:4d:d5:a2: 9f:4b:02:58:45:d0:76:48:25:ec:88:e8:c2:5d:a5:8e:81:88: db:ae:6d:b6:ad:f4:c2:36:ff:9d:f7:9a:e0:c3:62:43:d5:93: 97:f9:5a:32:41:ad:cf:41:f6:03:d7:e9:9f:82:9a:f8:00:f0: cd:1c:91:23:53:f7:79:d6:13:17:4f:57:26:36:d9:2a:ec:d6: 1b:ae:fa:7b:b8:c2:c6:0f:2d:b1:39:f4:8e:c9:93:c8:24:7e: a4:d7:f6:bd:91:0d:6c:5c:e5:7b:0f:83:59:23:56:23:c7:8f: 7e:c5:33:93:70:38:2a:10:68:54:7b:99:fb:71:7a:6d:49:1c: 87:4c:45:a0:2c:80:16:6b:f6:7c:29:bc:bc:4a:83:8f:93:1a: bd:4a:cc:4a:5a:3b:8d:39:6d:4e:f0:f6:2a:61:92:96:fb:92: 26:9a:77:fa:d0:de:4e:b2:28:3d:d4:a8:22:1c:6b:68:1c:2c: 31:7f:7f:d9:d5:8a:c3:8f:f4:ad:ca:0e:9b:75:a9:83:35:27: 8d:6b:b6:35:ac:3a:fe:04:b4:57:26:37:e9:a9:54:38:8e:f4: cc:61:8d:99:f4:0e:44:aa:0a:2b:b0:85:a0:2b:9d:b2:85:f0: 03:23:b8:07 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUYYMe2FXAcsYygSr0JnYwAGVY3owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjMwOTE4MDAwMDAwWhcNMjMxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzkxMWRjMmNkZTY5MThhMzgxZGIwYmE5NjBlNzQxMWJl Zjg3OGE1YTkyNDljZDE1Y2U4YmU2ZmZmM2JkNzg3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBBKanhQDuPkEJI3vKhpGEtVemsOgJvzv7aF7xzOfpHXhC m5eTHv7wbO1TXbe/z2zLUEeUbqEHftALjWUlb8NTZNENUtRx+GdwR02ZGI5qA/hf Dnas3x3tr3/qBBx+2PUsmrDRMY2+2BVuYHhtE5Bpi9XTGV1XVAukvGZJJX0RtPsf 8qNFySmDXrHYS+6LcVizw2WDFvuKyCzeN5UWZwNawdcw69iO19v1c4k47QORmBG2 +VS0uBeUD4UcIwOGfkNNRJ7xTsQAsr8C5GdzeZepCYJbZWR8qONYZSvWl82rpFna YxtGxgHePLMPoe5mFhTJepOLfNlRh3p9l/9ykiGvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfQvyqaiHCd4TvLobboSqxqr2HVswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU1OGM5ZGYyLWM2ZmItNDkyNS04NDBhLTVkZTFmNzRlYzMxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA4YwDQYJKoZIhvcNAQELBQADggEBAFN+WqK1d6axxYvB3El/b03V op9LAlhF0HZIJeyI6MJdpY6BiNuubbat9MI2/533muDDYkPVk5f5WjJBrc9B9gPX 6Z+CmvgA8M0ckSNT93nWExdPVyY22Srs1huu+nu4wsYPLbE59I7Jk8gkfqTX9r2R DWxc5XsPg1kjViPHj37FM5NwOCoQaFR7mftxem1JHIdMRaAsgBZr9nwpvLxKg4+T Gr1KzEpaO405bU7w9iphkpb7kiaad/rQ3k6yKD3UqCIca2gcLDF/f9nVisOP9K3K Dpt1qYM1J41rtjWsOv4EtFcmN+mpVDiO9MxhjZn0DkSqCiuwhaArnbKF8AMjuAc= -----END CERTIFICATE-----Generated at Mon Sep 18 15:24:46 2023 by rpki-client on console-fra.rpki-client.org