$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa File: 8f960b0d-c291-490f-aff5-abe964221bd2.roa (raw, json) Hash identifier: 9tIWY9MgmrlbUr15bXdEo1OdnsHaK0ZKNkmbv4E3y90= Subject key identifier: 0E:48:47:14:85:97:AE:D5:D4:D9:49:75:9B:F1:83:63:93:73:5D:E5 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 7E28231F9F7180B20EA3AB9D4103B68222B64E2D Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa Signing time: Mon 11 Sep 2023 00:00:00 +0000 ROA not before: Mon 11 Sep 2023 00:00:00 +0000 ROA not after: Mon 16 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2620:108:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 Sep 2023 03:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:28:23:1f:9f:71:80:b2:0e:a3:ab:9d:41:03:b6:82:22:b6:4e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Sep 11 00:00:00 2023 GMT Not After : Oct 16 23:59:59 2023 GMT Subject: serialNumber=ccede1f50f764ea6569af65efc74dc72a65903decd29f3f0b730f192f87e2117, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:65:bf:c2:5f:43:bf:21:3d:27:8f:1f:8a: 0e:44:d5:51:16:1c:52:34:b2:83:b9:b9:f6:ce:eb: 11:d9:6f:b4:a5:cd:f0:8b:dd:5f:07:d2:31:be:3a: 27:2b:45:e7:7c:4e:2b:8a:74:77:2c:a6:28:c9:ef: aa:3e:48:ed:b4:b8:05:24:b2:0a:4d:ab:ba:61:43: 88:17:39:8d:af:6f:2f:42:ee:2c:53:3a:b5:56:bc: dd:26:0a:51:a8:f0:0d:3a:a6:e0:c0:62:b3:cd:5c: 50:4e:6a:c0:be:04:96:0b:16:6a:21:90:c6:2b:7e: b5:c8:b0:2a:9d:d3:a7:0b:4d:40:81:d3:d6:33:d4: 33:b2:50:56:60:8a:03:43:c2:13:3f:eb:20:51:5e: 71:46:e7:34:fb:dc:af:b0:b9:56:77:35:ac:93:eb: 9d:2a:0b:ba:ed:d5:4d:8f:5e:bd:9f:f0:80:00:0d: f4:05:04:d1:b6:19:88:22:19:a1:17:2a:76:c5:00: 43:38:a9:af:cb:89:e1:90:7c:7f:1c:20:f8:d6:b4: 53:59:e6:07:46:f4:1c:15:d5:40:7f:a8:68:d0:7b: f3:67:33:aa:9c:26:7c:2b:84:50:1a:ee:d0:27:c2: 1f:0e:61:73:9a:32:5d:3d:30:2d:a0:9e:62:93:83: b2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:48:47:14:85:97:AE:D5:D4:D9:49:75:9B:F1:83:63:93:73:5D:E5 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:108:7000::/44 Signature Algorithm: sha256WithRSAEncryption 6b:a2:21:57:6a:2c:14:60:84:b8:ec:18:e5:41:16:64:46:ea: b2:e7:cd:8d:d8:fe:32:c8:57:d1:2f:80:46:1a:9d:f6:70:1b: d7:bc:17:3d:1e:45:c1:6e:98:52:3f:da:6c:32:9b:f7:20:2d: 57:b6:43:14:e4:fa:1e:d1:03:ec:e2:0e:88:d1:e2:03:7c:e6: 13:6f:6d:43:d3:a8:1e:7b:e4:e8:09:e6:67:39:c3:6c:99:73: 5a:20:70:3c:18:d2:63:76:b3:04:63:b9:88:fc:c8:e9:31:59: 0f:7d:38:9c:9f:84:2a:f0:79:6a:f6:38:b6:a3:68:ae:4f:dd: 52:66:fd:51:ad:d3:3f:2e:5f:c4:6d:bd:9d:13:f8:b1:0c:70: d2:36:b5:15:06:8d:0c:22:03:b3:41:7e:2c:31:a2:a5:ce:ac: fd:60:02:10:26:3d:c3:2b:04:20:49:33:a3:3a:f6:62:a6:53: 55:bf:f1:ad:fb:35:2c:b2:aa:0e:28:52:1d:f7:26:22:d7:75: 18:1f:a9:c3:1d:23:db:28:da:d6:f6:98:58:49:ba:2a:e3:94: 03:96:48:ac:5d:4c:a6:78:9c:bb:e5:f4:6a:fe:c4:7e:5c:4f: ca:f3:52:1d:d2:e1:a5:33:a3:c8:f8:b8:0b:f9:91:3a:fc:6d: 89:a0:7c:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfigjH59xgLIOo6udQQO2giK2Ti0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjMwOTExMDAwMDAwWhcNMjMxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjY2VkZTFmNTBmNzY0ZWE2NTY5YWY2NWVmYzc0ZGM3MmE2 NTkwM2RlY2QyOWYzZjBiNzMwZjE5MmY4N2UyMTE3MS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB22W/wl9DvyE9J48fig5E1VEWHFI0soO5ufbO6xHZb7Sl zfCL3V8H0jG+OicrRed8TiuKdHcspijJ76o+SO20uAUksgpNq7phQ4gXOY2vby9C 7ixTOrVWvN0mClGo8A06puDAYrPNXFBOasC+BJYLFmohkMYrfrXIsCqd06cLTUCB 09Yz1DOyUFZgigNDwhM/6yBRXnFG5zT73K+wuVZ3NayT650qC7rt1U2PXr2f8IAA DfQFBNG2GYgiGaEXKnbFAEM4qa/LieGQfH8cIPjWtFNZ5gdG9BwV1UB/qGjQe/Nn M6qcJnwrhFAa7tAnwh8OYXOaMl09MC2gnmKTg7LhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDkhHFIWXrtXU2Ul1m/GDY5NzXeUwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzhmOTYwYjBkLWMyOTEtNDkwZi1hZmY1LWFiZTk2NDIyMWJkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmIAEIcAAwDQYJKoZIhvcNAQELBQADggEBAGuiIVdqLBRghLjsGOVBFmRG 6rLnzY3Y/jLIV9EvgEYanfZwG9e8Fz0eRcFumFI/2mwym/cgLVe2QxTk+h7RA+zi DojR4gN85hNvbUPTqB575OgJ5mc5w2yZc1ogcDwY0mN2swRjuYj8yOkxWQ99OJyf hCrweWr2OLajaK5P3VJm/VGt0z8uX8RtvZ0T+LEMcNI2tRUGjQwiA7NBfiwxoqXO rP1gAhAmPcMrBCBJM6M69mKmU1W/8a37NSyyqg4oUh33JiLXdRgfqcMdI9so2tb2 mFhJuirjlAOWSKxdTKZ4nLvl9Gr+xH5cT8rzUh3S4aUzo8j4uAv5kTr8bYmgfPQ= -----END CERTIFICATE-----Generated at Mon Sep 11 15:39:32 2023 by rpki-client on console-ams.rpki-client.org