$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/7a1043c1-c73c-4a4a-9847-51bac031181c.roa File: 7a1043c1-c73c-4a4a-9847-51bac031181c.roa (raw, json) Hash identifier: j0QJj7qhIAdp6ijV7xaLwtUpAC8YPnrT6Ru/Xv6tL0c= Subject key identifier: C9:D6:0A:07:80:AC:BD:58:D8:66:29:75:7F:4E:A7:1A:1D:58:51:B8 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 5306216495AA724DBC72659A56D955B9BB6E232A Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/7a1043c1-c73c-4a4a-9847-51bac031181c.roa Signing time: Mon 11 Sep 2023 00:00:00 +0000 ROA not before: Mon 11 Sep 2023 00:00:00 +0000 ROA not after: Mon 16 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 Sep 2023 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:06:21:64:95:aa:72:4d:bc:72:65:9a:56:d9:55:b9:bb:6e:23:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Sep 11 00:00:00 2023 GMT Not After : Oct 16 23:59:59 2023 GMT Subject: serialNumber=84197a0ea52c4b52d1cc5f19cec897ee47489cee2f339b57d5ffc781f3234b90, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1c:5e:aa:b8:11:dc:71:9b:40:0d:c4:f5:a2: 8d:08:1d:f9:74:02:53:4c:9d:bd:f9:44:f5:3e:fc: 57:93:b6:6c:42:ce:5f:ae:65:7e:cc:9a:5e:37:7c: 89:96:17:f7:ff:a0:c7:7f:f6:ad:6d:16:4e:ca:a3: e6:c0:44:d8:49:9b:9c:ca:af:56:ae:68:7b:7a:32: 74:eb:ef:9a:ef:3b:9b:c3:e4:66:6c:04:99:b0:6c: d5:12:e6:4f:71:db:dd:66:c8:2b:d1:3f:cc:09:d7: ec:0c:e5:b7:68:81:41:31:3b:c0:13:ff:5f:25:b1: 0d:0b:f8:d7:fc:a1:18:3c:64:e5:49:d7:ad:0c:58: c3:04:52:72:6c:b8:5a:fb:ec:64:e4:ac:2c:38:a1: bc:79:7b:c6:86:d4:c9:08:45:d3:e4:85:aa:10:71: b5:1a:e0:17:92:9d:2c:67:d8:76:6a:46:42:42:16: 92:68:06:07:a5:f7:30:e4:bd:6f:a1:8a:30:4f:54: 6f:62:cd:60:ff:78:ea:2a:eb:56:5c:39:bb:50:6e: 01:af:da:44:97:f9:01:41:b6:fe:eb:b6:9a:aa:69: 3e:92:cc:f3:63:1f:ab:60:b0:a2:fa:b3:1a:e9:a1: 0a:d5:16:fc:a7:f4:ad:42:b9:ac:05:e6:77:59:34: 9c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D6:0A:07:80:AC:BD:58:D8:66:29:75:7F:4E:A7:1A:1D:58:51:B8 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/7a1043c1-c73c-4a4a-9847-51bac031181c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3000::/44 Signature Algorithm: sha256WithRSAEncryption 5d:cf:99:15:3c:4d:a2:bf:4e:16:02:58:a9:c3:db:b6:9b:47: 28:92:85:8d:9e:1f:c2:33:42:f3:49:b7:d7:cf:2f:0d:cd:d5: 14:29:e1:05:fd:57:e5:a1:b7:4b:b4:6e:77:52:97:d7:00:5b: 5b:b8:37:af:33:f3:78:88:5c:28:94:8c:30:cc:a3:83:c2:fc: 98:9f:1c:30:45:32:cc:c8:7e:7d:d5:bc:af:54:8f:9c:1f:59: 13:d2:e4:8e:96:9f:82:eb:ff:40:5b:ba:5e:4c:30:8c:9d:1d: 99:7d:1d:6e:8e:d5:35:a4:03:55:db:de:7f:79:2b:7f:30:9f: f6:f6:e3:ce:fb:25:cb:75:0f:7c:0f:3d:c7:ed:4c:43:4d:af: 3f:91:1b:ff:0d:2f:93:a3:42:65:26:4c:14:0c:2c:84:96:ec: 62:72:37:14:5e:80:74:de:fe:d2:f9:e7:e4:30:3d:25:ab:63: a3:39:19:fb:29:00:7f:40:c2:d6:ce:4f:32:5c:a2:de:0d:20: e7:c5:97:b2:e3:26:29:e2:4a:b3:a3:80:6e:11:19:9c:e7:94: 1c:04:97:66:c4:0c:20:a9:6b:a4:89:6a:50:71:53:46:c9:5d: cc:b3:26:5d:2e:b6:bd:e8:55:e1:82:89:1c:4a:f9:46:68:8f: 9c:36:8e:b8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUwYhZJWqck28cmWaVtlVubtuIyowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjMwOTExMDAwMDAwWhcNMjMxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDE5N2EwZWE1MmM0YjUyZDFjYzVmMTljZWM4OTdlZTQ3 NDg5Y2VlMmYzMzliNTdkNWZmYzc4MWYzMjM0YjkwMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBHF6quBHccZtADcT1oo0IHfl0AlNMnb35RPU+/FeTtmxC zl+uZX7Mml43fImWF/f/oMd/9q1tFk7Ko+bARNhJm5zKr1auaHt6MnTr75rvO5vD 5GZsBJmwbNUS5k9x291myCvRP8wJ1+wM5bdogUExO8AT/18lsQ0L+Nf8oRg8ZOVJ 160MWMMEUnJsuFr77GTkrCw4obx5e8aG1MkIRdPkhaoQcbUa4BeSnSxn2HZqRkJC FpJoBgel9zDkvW+hijBPVG9izWD/eOoq61ZcObtQbgGv2kSX+QFBtv7rtpqqaT6S zPNjH6tgsKL6sxrpoQrVFvyn9K1CuawF5ndZNJxnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUydYKB4CsvVjYZil1f06nGh1YUbgwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzdhMTA0M2MxLWM3M2MtNGE0YS05ODQ3LTUxYmFjMDMxMTgxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmIAEHMAAwDQYJKoZIhvcNAQELBQADggEBAF3PmRU8TaK/ThYCWKnD27ab RyiShY2eH8IzQvNJt9fPLw3N1RQp4QX9V+Wht0u0bndSl9cAW1u4N68z83iIXCiU jDDMo4PC/JifHDBFMszIfn3VvK9Uj5wfWRPS5I6Wn4Lr/0Bbul5MMIydHZl9HW6O 1TWkA1Xb3n95K38wn/b24877Jct1D3wPPcftTENNrz+RG/8NL5OjQmUmTBQMLISW 7GJyNxRegHTe/tL55+QwPSWrY6M5GfspAH9AwtbOTzJcot4NIOfFl7LjJiniSrOj gG4RGZznlBwEl2bEDCCpa6SJalBxU0bJXcyzJl0utr3oVeGCiRxK+UZoj5w2jrg= -----END CERTIFICATE-----Generated at Mon Sep 11 15:39:32 2023 by rpki-client on console-ams.rpki-client.org