$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f9d74b70-f129-47cb-84a8-48436c7c5b55.roa File: f9d74b70-f129-47cb-84a8-48436c7c5b55.roa (raw, json) Hash identifier: k77L+55jwjeyRtZGUVFo2RZG175oaYACY888ADvLCWw= Subject key identifier: D7:25:E1:B5:4D:1E:92:CD:78:CE:79:EA:0E:6E:9C:37:F2:1A:1B:AB Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 3661D8B807E90B90FEDCBBA92DC333C15559BE34 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f9d74b70-f129-47cb-84a8-48436c7c5b55.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:61:d8:b8:07:e9:0b:90:fe:dc:bb:a9:2d:c3:33:c1:55:59:be:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=684e9c2ffe09d5b3339c0f08fe5bccddfae87de0b53f1a1d38ae6f539456a4b5, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e4:39:4e:01:ec:61:d8:26:b0:f8:f0:e5:bc: 8d:02:bd:ef:fd:4d:7e:6f:8e:4e:aa:34:ed:07:07: 0c:10:81:ac:40:8d:cc:eb:3d:ff:09:b4:0a:4d:6d: 1c:d4:3f:6d:22:50:89:f5:79:2d:8d:79:73:ee:b0: ff:2f:ed:37:2f:61:a7:ba:50:6a:b8:01:ab:8f:f2: 88:36:53:79:ee:02:96:26:29:b7:e7:94:56:8a:f3: 03:a4:bb:5b:57:cb:22:19:e6:20:bf:5e:82:d4:78: 27:ca:c9:de:a9:e5:d8:fa:ce:0b:e5:32:c1:5a:1f: 9f:40:6d:9d:e6:b3:d4:62:9f:5f:3a:3a:35:16:6b: b9:ba:65:a4:89:81:b5:51:0c:45:48:44:fd:5f:64: 23:bd:54:33:55:ac:2d:98:38:aa:76:7d:8d:78:6b: 8c:39:04:df:84:7e:26:d0:4f:c0:d0:f5:7b:39:a3: d1:45:bf:08:8c:07:88:24:c1:c1:15:f5:60:f5:6d: 1a:ca:8a:6a:ff:38:f5:17:3a:9a:6e:02:3c:e3:fa: cd:50:fa:53:13:54:59:dc:aa:b2:79:d5:50:65:e4: ed:33:67:5a:05:b0:17:53:c4:73:c7:a6:85:c5:75: 42:c1:ec:46:bb:a9:0e:c2:a1:d3:8c:e8:f9:97:0f: a1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:25:E1:B5:4D:1E:92:CD:78:CE:79:EA:0E:6E:9C:37:F2:1A:1B:AB X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f9d74b70-f129-47cb-84a8-48436c7c5b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.224.0/20 Signature Algorithm: sha256WithRSAEncryption 70:a7:a7:b6:f7:51:06:45:7b:7a:de:0d:07:ac:b3:04:e8:19: 57:15:30:9e:0a:66:69:d9:9c:de:78:e4:44:0b:9c:53:34:04: bc:5f:af:28:5b:8c:74:10:b4:3f:fd:85:ee:24:df:db:eb:c0: bd:29:17:3e:8f:e7:32:c0:f4:63:16:d8:a0:15:de:46:4c:ea: ce:d7:ca:d6:af:0d:f4:c4:cf:3b:44:90:42:eb:80:5b:80:4d: 04:3e:f2:f3:9e:9b:99:14:73:0f:8b:db:47:f0:7c:aa:dc:37: ec:77:17:de:ce:5d:ad:37:40:f5:24:e9:fc:5a:06:72:7e:14: 6b:d9:0f:e9:29:e3:2f:69:c8:28:7c:8f:c9:d3:e2:da:44:98: aa:cb:31:ea:b5:29:1a:48:b0:f3:9b:92:ec:f7:ee:81:09:e8: 9c:15:bb:12:e8:5b:10:d6:16:05:66:84:27:00:ee:15:bb:74: 57:e5:c6:3f:49:e5:70:80:91:55:4a:3d:54:00:9e:b3:b2:a3: cc:8e:ad:d7:d2:29:11:50:61:92:80:0b:69:88:c9:3e:40:dd: 88:3a:a1:4c:db:11:05:3a:ec:aa:1d:48:d0:f5:b0:be:78:8c: d5:e0:f7:ae:f4:60:9d:50:79:60:76:f8:38:72:6c:93:28:5c: 68:ac:fd:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNmHYuAfpC5D+3LupLcMzwVVZvjQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODRlOWMyZmZlMDlkNWIzMzM5YzBmMDhmZTViY2NkZGZh ZTg3ZGUwYjUzZjFhMWQzOGFlNmY1Mzk0NTZhNGI1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz5DlOAexh2Caw+PDlvI0Cve/9TX5vjk6qNO0HBwwQgaxA jczrPf8JtApNbRzUP20iUIn1eS2NeXPusP8v7TcvYae6UGq4AauP8og2U3nuApYm KbfnlFaK8wOku1tXyyIZ5iC/XoLUeCfKyd6p5dj6zgvlMsFaH59AbZ3ms9Rin186 OjUWa7m6ZaSJgbVRDEVIRP1fZCO9VDNVrC2YOKp2fY14a4w5BN+EfibQT8DQ9Xs5 o9FFvwiMB4gkwcEV9WD1bRrKimr/OPUXOppuAjzj+s1Q+lMTVFncqrJ51VBl5O0z Z1oFsBdTxHPHpoXFdULB7Ea7qQ7CodOM6PmXD6HTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1yXhtU0eks14znnqDm6cN/IaG6swHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Y5ZDc0YjcwLWYxMjktNDdjYi04NGE4LTQ4NDM2YzdjNWI1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARFqeAwDQYJKoZIhvcNAQELBQADggEBAHCnp7b3UQZFe3reDQesswToGVcV MJ4KZmnZnN545EQLnFM0BLxfryhbjHQQtD/9he4k39vrwL0pFz6P5zLA9GMW2KAV 3kZM6s7XytavDfTEzztEkELrgFuATQQ+8vOem5kUcw+L20fwfKrcN+x3F97OXa03 QPUk6fxaBnJ+FGvZD+kp4y9pyCh8j8nT4tpEmKrLMeq1KRpIsPObkuz37oEJ6JwV uxLoWxDWFgVmhCcA7hW7dFflxj9J5XCAkVVKPVQAnrOyo8yOrdfSKRFQYZKAC2mI yT5A3Yg6oUzbEQU67KodSND1sL54jNXg9670YJ1QeWB2+DhybJMoXGis/TQ= -----END CERTIFICATE-----Generated at Sat Sep 23 00:38:48 2023 by rpki-client on console-ams.rpki-client.org