$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/da512197-d443-4603-b80f-2a87309b0b87.roa File: da512197-d443-4603-b80f-2a87309b0b87.roa (raw, json) Hash identifier: 5w7BdNkgQg7AEcZnal2VNCY5rxyprrBXMCZYvL6fCnU= Subject key identifier: 5F:EB:33:09:30:1B:E0:8E:B4:09:AC:1E:34:2E:9C:BC:AE:2D:4C:43 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1BE44401608D88374C3D2FE914DDD13BB50926BA Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/da512197-d443-4603-b80f-2a87309b0b87.roa Signing time: Mon 11 Sep 2023 00:00:00 +0000 ROA not before: Mon 11 Sep 2023 00:00:00 +0000 ROA not after: Mon 16 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 Sep 2023 04:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e4:44:01:60:8d:88:37:4c:3d:2f:e9:14:dd:d1:3b:b5:09:26:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 11 00:00:00 2023 GMT Not After : Oct 16 23:59:59 2023 GMT Subject: serialNumber=6e5856cb7f7e2dfd3d1ea685d1af4791f762634aeab738587d2a2330baf97ec1, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:38:52:ac:80:25:9e:55:a8:bd:51:d5:96: ce:a1:b1:0e:7a:d5:6b:86:9d:4e:2c:14:96:78:69: d5:52:3f:b8:c0:64:69:0e:41:79:8b:ad:94:05:cd: 0b:b4:8c:53:d4:5b:d4:34:fb:21:b1:87:05:80:65: fb:e9:c4:59:1f:e1:39:43:bc:04:24:1f:78:1a:dc: 62:eb:95:91:4b:c1:28:5a:70:b5:25:1f:44:a8:e1: 4b:e5:cc:21:b8:49:d7:1f:b3:9b:e9:e1:ef:a6:59: 55:16:6e:d7:cb:51:e9:2c:41:bc:ea:c1:0d:3a:fc: 71:e9:4d:18:e5:8a:3c:3a:c8:69:83:fc:d0:fb:e2: 3e:62:e2:9e:50:36:6b:18:5e:c2:47:a3:6e:70:f2: 29:e9:6f:9c:a8:85:ba:b5:4f:c7:38:9b:5e:90:29: 4c:57:d0:27:ec:7a:d6:2d:33:19:5b:85:19:08:f7: 6c:a5:87:18:75:06:cc:0b:f1:1e:82:fb:d8:aa:36: a6:75:9f:8d:a0:88:53:51:1b:7f:90:d8:5d:9e:08: e7:97:f9:5f:cb:71:bc:07:4e:51:1b:b7:b8:ba:09: 26:77:1a:62:a3:be:f7:5b:9b:bd:df:3b:0a:db:58: af:42:72:a9:f0:b3:3c:67:57:c2:21:d5:cf:ee:15: fe:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EB:33:09:30:1B:E0:8E:B4:09:AC:1E:34:2E:9C:BC:AE:2D:4C:43 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/da512197-d443-4603-b80f-2a87309b0b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:b00::/40 Signature Algorithm: sha256WithRSAEncryption 2d:3b:c3:33:23:68:4d:20:8a:bd:f7:6c:0a:4e:f8:9c:6e:8f: 82:50:0e:a9:7c:5f:a9:91:f2:fe:38:5e:a0:95:26:d4:db:57: 30:43:be:bf:a4:d2:e7:e2:62:be:ab:b8:74:c4:6c:29:85:ed: c1:a0:5e:80:dc:99:29:8c:f3:34:d3:3b:13:e9:fa:f9:0f:65: 87:53:52:f5:7b:c1:35:17:01:6b:3a:b6:36:ca:10:4a:30:59: c1:dc:eb:dd:19:d1:96:d6:ff:5b:0e:d5:17:8c:2d:8c:eb:6a: 18:dc:a0:90:df:01:5a:67:fb:5e:d8:4f:d0:1d:f2:d1:b2:0f: 93:85:e6:be:4a:dc:c3:82:2a:cf:0e:f9:d5:45:b0:32:8b:6f: d0:79:bd:e1:08:2e:bb:10:90:de:49:f2:f1:2a:aa:21:95:df: 20:da:4b:5f:b8:0a:57:9f:ca:af:bb:89:f6:fa:5c:ee:cd:f8: 17:60:ac:69:60:b1:88:6a:da:21:df:07:ba:a0:16:21:67:5e: e6:1a:dc:ea:09:a3:c4:87:b6:28:23:28:84:b7:05:75:d5:73: 33:28:f2:7e:7f:cb:8a:63:d2:41:e2:fa:45:95:0f:82:32:f2: 49:f6:b1:2a:c0:12:97:75:fb:86:90:bc:04:20:ce:01:4d:59: eb:b8:1b:ca -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUG+REAWCNiDdMPS/pFN3RO7UJJrowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjMwOTExMDAwMDAwWhcNMjMxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZTU4NTZjYjdmN2UyZGZkM2QxZWE2ODVkMWFmNDc5MWY3 NjI2MzRhZWFiNzM4NTg3ZDJhMjMzMGJhZjk3ZWMxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+hjhSrIAlnlWovVHVls6hsQ561WuGnU4sFJZ4adVSP7jA ZGkOQXmLrZQFzQu0jFPUW9Q0+yGxhwWAZfvpxFkf4TlDvAQkH3ga3GLrlZFLwSha cLUlH0So4UvlzCG4Sdcfs5vp4e+mWVUWbtfLUeksQbzqwQ06/HHpTRjlijw6yGmD /ND74j5i4p5QNmsYXsJHo25w8inpb5yohbq1T8c4m16QKUxX0CfsetYtMxlbhRkI 92ylhxh1BswL8R6C+9iqNqZ1n42giFNRG3+Q2F2eCOeX+V/LcbwHTlEbt7i6CSZ3 GmKjvvdbm73fOwrbWK9CcqnwszxnV8Ih1c/uFf4NAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUX+szCTAb4I60CaweNC6cvK4tTEMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2RhNTEyMTk3LWQ0NDMtNDYwMy1iODBmLTJhODczMDliMGI4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBZzACzANBgkqhkiG9w0BAQsFAAOCAQEALTvDMyNoTSCKvfdsCk74nG6P glAOqXxfqZHy/jheoJUm1NtXMEO+v6TS5+Jivqu4dMRsKYXtwaBegNyZKYzzNNM7 E+n6+Q9lh1NS9XvBNRcBazq2NsoQSjBZwdzr3RnRltb/Ww7VF4wtjOtqGNygkN8B Wmf7XthP0B3y0bIPk4Xmvkrcw4Iqzw751UWwMotv0Hm94QguuxCQ3kny8SqqIZXf INpLX7gKV5/Kr7uJ9vpc7s34F2CsaWCxiGraId8HuqAWIWde5hrc6gmjxIe2KCMo hLcFddVzMyjyfn/LimPSQeL6RZUPgjLySfaxKsASl3X7hpC8BCDOAU1Z67gbyg== -----END CERTIFICATE-----Generated at Mon Sep 11 16:40:26 2023 by rpki-client on console-ams.rpki-client.org