$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa File: e7874585-f99e-4906-afcf-7069fe104b33.roa (raw, json) Hash identifier: hlxIY/hf1gTMUznk3CvT9fPY4N+dFrTmhdRXlN7AGYE= Subject key identifier: 0C:79:E5:CE:CE:0D:D4:16:69:8F:01:74:8B:DE:53:AB:7A:94:CC:53 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 78F028E13D5136AE6721B6D33F63780F4C08158B Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa Signing time: Sat 09 Sep 2023 00:00:00 +0000 ROA not before: Sat 09 Sep 2023 00:00:00 +0000 ROA not after: Sat 14 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:300f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Sep 2023 12:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f0:28:e1:3d:51:36:ae:67:21:b6:d3:3f:63:78:0f:4c:08:15:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Sep 9 00:00:00 2023 GMT Not After : Oct 14 23:59:59 2023 GMT Subject: serialNumber=fe12a249e8e4335602002fbf10eea498d01447e42cd068efbde6626faeeeecdd, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:36:ff:61:bc:06:fe:9e:40:b6:18:7e:64: 34:e1:2e:7e:b6:c6:f9:56:e2:ad:c9:6e:49:b1:a4: 69:3b:86:1e:5b:d0:17:9d:46:25:68:b4:72:d8:3d: 49:70:5c:7e:64:e8:c6:ad:ff:4a:00:30:e5:1b:b1: f6:d2:d8:a0:bf:9d:6f:ad:b7:d9:74:26:72:ed:e2: bf:be:1a:26:f3:e9:53:c1:8f:91:12:1b:0e:7a:04: 8b:cb:41:c4:ed:62:50:b2:08:ed:34:e8:a5:87:8e: 24:96:9c:06:59:7e:7c:f6:a0:2c:95:9e:78:b6:7c: 79:61:ee:6b:a9:df:c7:be:9c:e9:10:8e:63:53:59: 93:39:89:fb:de:9b:c3:e4:49:af:fe:15:ed:e4:cf: 72:6c:3e:62:b6:c4:7e:de:47:0d:44:1f:6d:3c:61: fa:1a:e4:ea:b5:6d:8f:c0:9b:2f:dc:f4:77:14:39: bb:69:9f:3e:6e:42:11:b8:c3:1c:00:be:7c:05:65: 8b:bb:5b:b3:b9:ba:e7:9b:88:64:4f:81:4f:99:53: 8f:13:01:37:e8:cb:29:73:41:fc:cc:f1:ae:5d:51: 5d:d8:b3:65:04:c8:26:da:82:79:ee:9c:41:1c:62: 54:cb:c9:99:e3:7e:e0:25:55:ba:54:d2:b8:8d:f4: 05:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:79:E5:CE:CE:0D:D4:16:69:8F:01:74:8B:DE:53:AB:7A:94:CC:53 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:300f::/48 Signature Algorithm: sha256WithRSAEncryption 86:24:e8:f2:d9:39:68:f6:af:f6:3a:f2:dc:c4:d0:23:57:ab: 6f:d9:ab:3d:ad:78:08:d4:7b:54:c4:14:b2:f1:5a:33:bc:4f: 98:f6:87:66:51:6b:0b:f9:4e:ea:01:c4:8d:dd:74:8c:ef:41: ec:57:25:a5:ac:88:8d:63:44:88:32:55:d4:7f:dd:13:f8:9e: c6:32:14:90:f2:53:3b:1b:62:c7:bc:00:31:d2:6d:99:12:2c: da:f8:f4:78:0d:8f:9a:82:27:4e:d1:80:a1:59:1c:bf:dd:c0: 2e:ec:2c:aa:b7:2f:0c:fa:4d:75:42:61:40:ea:d4:fb:d8:49: 59:13:fb:f1:d3:43:4a:d0:81:52:e4:cc:74:28:35:aa:26:1d: f2:ee:c1:ae:6d:3c:1f:40:fd:31:1c:fc:79:df:51:70:fb:e2: 70:ea:37:c3:08:da:d1:b2:3f:64:80:81:4d:d6:9e:22:e0:37: eb:38:85:3b:ff:0a:7d:b0:06:90:4c:bb:4a:5d:d3:db:af:b4: cf:8e:11:6b:25:c1:fc:46:d1:f5:ef:e4:3b:d5:18:22:9e:e7: 56:0d:2b:2b:7e:d4:72:7d:45:25:49:1a:57:0d:e8:49:89:c0: c2:67:fd:9f:d9:93:80:44:51:dd:00:45:29:52:c1:ac:d7:5f: 34:44:23:d8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUePAo4T1RNq5nIbbTP2N4D0wIFYswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjMwOTA5MDAwMDAwWhcNMjMxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTEyYTI0OWU4ZTQzMzU2MDIwMDJmYmYxMGVlYTQ5OGQw MTQ0N2U0MmNkMDY4ZWZiZGU2NjI2ZmFlZWVlY2RkMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6Zzb/YbwG/p5Athh+ZDThLn62xvlW4q3JbkmxpGk7hh5b 0BedRiVotHLYPUlwXH5k6Mat/0oAMOUbsfbS2KC/nW+tt9l0JnLt4r++Gibz6VPB j5ESGw56BIvLQcTtYlCyCO006KWHjiSWnAZZfnz2oCyVnni2fHlh7mup38e+nOkQ jmNTWZM5ifvem8PkSa/+Fe3kz3JsPmK2xH7eRw1EH208Yfoa5Oq1bY/Amy/c9HcU Obtpnz5uQhG4wxwAvnwFZYu7W7O5uuebiGRPgU+ZU48TATfoyylzQfzM8a5dUV3Y s2UEyCbagnnunEEcYlTLyZnjfuAlVbpU0riN9AUvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDHnlzs4N1BZpjwF0i95Tq3qUzFMwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjL2U3ODc0NTg1LWY5OWUtNDkwNi1hZmNmLTcwNjlmZTEwNGIzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMA8wDQYJKoZIhvcNAQELBQADggEBAIYk6PLZOWj2r/Y68tzE0CNX q2/Zqz2teAjUe1TEFLLxWjO8T5j2h2ZRawv5TuoBxI3ddIzvQexXJaWsiI1jRIgy VdR/3RP4nsYyFJDyUzsbYse8ADHSbZkSLNr49HgNj5qCJ07RgKFZHL/dwC7sLKq3 Lwz6TXVCYUDq1PvYSVkT+/HTQ0rQgVLkzHQoNaomHfLuwa5tPB9A/TEc/HnfUXD7 4nDqN8MI2tGyP2SAgU3WniLgN+s4hTv/Cn2wBpBMu0pd09uvtM+OEWslwfxG0fXv 5DvVGCKe51YNKyt+1HJ9RSVJGlcN6EmJwMJn/Z/Zk4BEUd0ARSlSwazXXzREI9g= -----END CERTIFICATE-----Generated at Sat Sep 9 00:26:29 2023 by rpki-client on console-fra.rpki-client.org