$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa File: f0f08d8e-64f4-4e2b-8f33-26427783e662.roa (raw, json) Hash identifier: 2NEUWvhBNrgP550152GIzRBNE6QB7389ifWu2iLz8uY= Subject key identifier: D4:79:70:ED:FD:D2:46:A9:42:42:78:02:92:E2:61:FA:84:A0:B5:44 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 723612768050C2745BCA2B777AA287967A50AFF6 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa Signing time: Wed 20 Sep 2023 00:00:00 +0000 ROA not before: Wed 20 Sep 2023 00:00:00 +0000 ROA not after: Wed 25 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:54a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Sep 2023 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:36:12:76:80:50:c2:74:5b:ca:2b:77:7a:a2:87:96:7a:50:af:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 20 00:00:00 2023 GMT Not After : Oct 25 23:59:59 2023 GMT Subject: serialNumber=e926d9ce2708d7fe5ebbe9fcf7cc512cec1977f28e287a0fadb423c90a539458, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:c1:fb:f2:1b:94:39:4b:da:f7:ca:20:32: 1d:9e:e7:29:03:09:f3:ba:e6:4e:cb:fe:29:3a:c2: e0:b1:83:38:9c:1e:83:26:4f:75:d8:e0:2a:60:ad: 16:a9:40:8b:4f:d2:76:83:7d:93:b4:75:c8:0f:f0: 64:0f:78:b3:96:a3:f7:e2:ca:cc:72:51:8a:ba:eb: 7f:5d:39:00:0c:75:63:0f:25:64:d3:8a:ab:c3:67: 12:dc:43:28:f9:d4:fd:20:2a:48:4e:9a:bc:a9:02: bb:b9:09:b4:2e:6c:be:bd:ac:e9:b0:17:cf:bb:e8: cc:0c:df:b4:89:8f:0f:6e:6c:51:3a:eb:0b:05:63: 91:2e:36:83:5c:f3:05:ce:e1:2d:b6:d9:1c:6e:75: 26:c5:d4:01:14:ff:16:1c:b3:36:b4:36:fa:f2:88: d7:2e:7a:a7:de:92:60:1f:d9:91:7c:8c:71:a9:8b: 5e:70:80:40:d8:62:7c:18:87:d6:50:fe:bd:99:07: 9e:a3:71:9d:b1:ea:5d:f3:ac:b0:9d:64:e3:03:3b: de:bc:0c:77:96:a4:cc:40:36:7e:95:13:7d:cb:17: 01:ad:81:0e:bd:a7:db:ce:df:2f:bf:f5:8f:31:34: bb:0f:1b:32:64:2e:5d:92:38:b8:5d:02:6d:bb:0f: 17:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:79:70:ED:FD:D2:46:A9:42:42:78:02:92:E2:61:FA:84:A0:B5:44 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:54a::/48 Signature Algorithm: sha256WithRSAEncryption 5d:e0:2d:50:1d:5c:55:3e:c7:93:a4:20:1e:8b:29:da:1b:94: 8f:93:ae:5d:16:01:40:ef:e6:c1:9e:b8:4a:22:17:c1:60:a4: 65:62:20:5b:aa:b5:aa:95:ff:21:99:45:e4:32:3f:10:78:e1: 2e:bb:f2:ab:d5:6b:1a:69:14:2f:31:dd:3c:b3:b7:87:c2:d3: bf:fe:ce:03:7b:13:78:22:86:b5:25:4b:6d:75:5a:48:30:5a: 14:d5:f4:b6:d5:4d:e6:24:6a:8b:8a:a5:25:cd:f6:56:b0:46: 5c:dc:05:73:c4:f8:4e:b5:d5:84:6d:46:f7:80:04:79:b1:9d: 98:09:1a:f2:6f:d6:3f:24:53:3a:b1:8a:58:db:fb:6c:e4:95: d5:15:5c:4a:11:d5:6e:7b:f6:0c:0d:0e:1a:ab:e0:e7:b9:00: 7d:ef:50:19:85:a0:cf:5b:a5:39:56:e7:96:72:cc:0d:3b:ff: 41:db:33:1b:20:88:57:f7:fc:dc:64:22:43:12:2b:22:a9:36: 68:70:b5:e0:40:56:56:39:25:14:05:54:6e:7a:5a:36:69:3b: ac:70:66:df:ce:a4:af:cf:22:63:c3:ba:91:a5:0c:c6:2a:08: 39:0b:9e:8f:4f:1a:20:72:f7:af:9b:ea:9d:d5:77:bb:59:3f: 8b:25:42:47 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcjYSdoBQwnRbyit3eqKHlnpQr/YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjMwOTIwMDAwMDAwWhcNMjMxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTI2ZDljZTI3MDhkN2ZlNWViYmU5ZmNmN2NjNTEyY2Vj MTk3N2YyOGUyODdhMGZhZGI0MjNjOTBhNTM5NDU4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGCcH78huUOUva98ogMh2e5ykDCfO65k7L/ik6wuCxgzic HoMmT3XY4CpgrRapQItP0naDfZO0dcgP8GQPeLOWo/fiysxyUYq6639dOQAMdWMP JWTTiqvDZxLcQyj51P0gKkhOmrypAru5CbQubL69rOmwF8+76MwM37SJjw9ubFE6 6wsFY5EuNoNc8wXO4S222RxudSbF1AEU/xYcsza0NvryiNcueqfekmAf2ZF8jHGp i15wgEDYYnwYh9ZQ/r2ZB56jcZ2x6l3zrLCdZOMDO968DHeWpMxANn6VE33LFwGt gQ69p9vO3y+/9Y8xNLsPGzJkLl2SOLhdAm27DxdFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1Hlw7f3SRqlCQngCkuJh+oSgtUQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2YwZjA4ZDhlLTY0ZjQtNGUyYi04ZjMzLTI2NDI3NzgzZTY2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUowDQYJKoZIhvcNAQELBQADggEBAF3gLVAdXFU+x5OkIB6LKdob lI+Trl0WAUDv5sGeuEoiF8FgpGViIFuqtaqV/yGZReQyPxB44S678qvVaxppFC8x 3Tyzt4fC07/+zgN7E3gihrUlS211WkgwWhTV9LbVTeYkaouKpSXN9lawRlzcBXPE +E611YRtRveABHmxnZgJGvJv1j8kUzqxiljb+2zkldUVXEoR1W579gwNDhqr4Oe5 AH3vUBmFoM9bpTlW55ZyzA07/0HbMxsgiFf3/NxkIkMSKyKpNmhwteBAVlY5JRQF VG56WjZpO6xwZt/OpK/PImPDupGlDMYqCDkLno9PGiBy96+b6p3Vd7tZP4slQkc= -----END CERTIFICATE-----Generated at Wed Sep 20 00:32:56 2023 by rpki-client on console-ams.rpki-client.org