$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2348292e-c1b9-4dca-bded-bc35976bd82e.roa File: 2348292e-c1b9-4dca-bded-bc35976bd82e.roa (raw, json) Hash identifier: X+tk9WN3FPzY0RIayb5+6AwkN6N9ls6RYvqf0ZlmWu0= Subject key identifier: 84:A7:61:00:AE:71:CC:A6:F2:19:12:B1:12:41:C8:BB:D8:81:85:E0 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5CF6CDC0700E8C9584E8B5F72FE48E53A159BCF0 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2348292e-c1b9-4dca-bded-bc35976bd82e.roa Signing time: Sat 09 Sep 2023 00:00:00 +0000 ROA not before: Sat 09 Sep 2023 00:00:00 +0000 ROA not after: Sat 14 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 205.251.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Sep 2023 12:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f6:cd:c0:70:0e:8c:95:84:e8:b5:f7:2f:e4:8e:53:a1:59:bc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 9 00:00:00 2023 GMT Not After : Oct 14 23:59:59 2023 GMT Subject: serialNumber=30a17ee88bf818452ade97c6e396d32d96ca90d0405781d53f0de00ccaf21166, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ed:78:68:8f:ff:40:79:3a:fb:65:8f:12:c8: fd:9b:d4:86:0d:d8:50:3d:4a:1e:32:86:5d:c7:8c: 16:71:03:17:96:38:aa:cb:ae:8b:ee:a0:9b:1d:07: e1:98:c6:7a:31:7f:90:1a:19:89:c1:84:5c:84:f1: 1d:79:99:cd:a7:66:2d:3f:81:c5:75:d6:7f:1e:e1: 4d:91:73:9f:5e:3c:6b:f0:5e:8a:07:ab:74:67:23: a9:e4:9a:52:c3:a0:a3:f8:af:6d:91:74:a2:6d:fb: 3a:e5:99:cd:c4:f0:f2:62:09:ec:c8:61:ba:b2:c5: 2d:0c:ba:e2:78:5f:fc:3b:37:c0:b3:8c:37:88:0a: 37:c3:db:7e:9c:20:f3:1c:a6:d1:f9:5c:f2:96:2b: 61:a3:b0:d3:0e:8d:9a:48:55:d8:72:3b:7d:64:06: 13:c9:58:0f:b7:b8:74:77:54:41:d1:d8:8b:b2:6f: 5a:c7:b6:70:88:df:41:66:b4:ba:71:4f:7b:22:94: 71:22:9f:85:59:51:1d:8e:69:fa:b7:23:2f:12:37: 64:c6:2f:49:2a:27:ab:8c:d4:6a:a1:14:4d:9f:02: 60:11:2f:52:fd:b6:f7:b7:7f:7e:d8:c1:fc:38:71: 9b:05:72:bd:35:bf:57:e1:1f:89:53:30:ce:ed:33: c2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A7:61:00:AE:71:CC:A6:F2:19:12:B1:12:41:C8:BB:D8:81:85:E0 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2348292e-c1b9-4dca-bded-bc35976bd82e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.251.192.0/21 Signature Algorithm: sha256WithRSAEncryption 30:8e:1c:1f:94:95:7d:68:a3:e1:6b:9b:3c:63:d7:d6:f6:4c: 62:06:df:c4:e5:7c:cf:ff:cf:f6:95:0f:ad:00:ef:88:e7:20: 0b:fc:66:b2:6e:72:a6:e7:22:b8:64:de:59:ad:16:d4:81:e5: 5d:99:4b:89:76:46:72:66:e6:cf:dd:c2:27:ab:ef:ba:bf:55: 37:c3:8d:8b:2a:d0:c1:20:fc:f4:9c:b7:f7:eb:60:84:69:11: 03:a9:f1:22:59:40:ed:b5:4e:b9:82:71:30:d4:7a:cf:20:02: b7:bc:8e:ab:f0:15:bf:ee:83:78:66:82:33:27:73:7a:97:08: 7b:2a:80:7f:12:de:b8:70:f5:35:91:19:94:91:43:a2:d3:be: 36:76:82:cc:ff:a5:62:5c:6b:8a:81:d6:63:01:8b:44:74:a2: af:26:58:5b:2f:6c:02:4c:23:dc:85:c5:36:a2:15:b7:de:73: 7d:b1:94:60:3e:7c:77:69:88:08:24:4a:61:39:a8:3f:8b:0a: 14:2e:12:6f:8a:59:fb:d2:37:7e:18:b8:39:24:02:1e:72:1a: 03:d8:df:68:28:5f:3a:f8:5e:e0:96:46:f9:b4:10:5b:f3:b9: 35:28:6a:19:c3:fc:e4:5a:26:0f:7c:94:94:2d:f2:f6:87:30: b7:26:ec:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXPbNwHAOjJWE6LX3L+SOU6FZvPAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjMwOTA5MDAwMDAwWhcNMjMxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGExN2VlODhiZjgxODQ1MmFkZTk3YzZlMzk2ZDMyZDk2 Y2E5MGQwNDA1NzgxZDUzZjBkZTAwY2NhZjIxMTY2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC37Xhoj/9AeTr7ZY8SyP2b1IYN2FA9Sh4yhl3HjBZxAxeW OKrLrovuoJsdB+GYxnoxf5AaGYnBhFyE8R15mc2nZi0/gcV11n8e4U2Rc59ePGvw XooHq3RnI6nkmlLDoKP4r22RdKJt+zrlmc3E8PJiCezIYbqyxS0MuuJ4X/w7N8Cz jDeICjfD236cIPMcptH5XPKWK2GjsNMOjZpIVdhyO31kBhPJWA+3uHR3VEHR2Iuy b1rHtnCI30FmtLpxT3silHEin4VZUR2Oafq3Iy8SN2TGL0kqJ6uM1GqhFE2fAmAR L1L9tve3f37Ywfw4cZsFcr01v1fhH4lTMM7tM8JLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhKdhAK5xzKbyGRKxEkHIu9iBheAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIzNDgyOTJlLWMxYjktNGRjYS1iZGVkLWJjMzU5NzZiZDgyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPN+8AwDQYJKoZIhvcNAQELBQADggEBADCOHB+UlX1oo+Frmzxj19b2TGIG 38TlfM//z/aVD60A74jnIAv8ZrJucqbnIrhk3lmtFtSB5V2ZS4l2RnJm5s/dwier 77q/VTfDjYsq0MEg/PSct/frYIRpEQOp8SJZQO21TrmCcTDUes8gAre8jqvwFb/u g3hmgjMnc3qXCHsqgH8S3rhw9TWRGZSRQ6LTvjZ2gsz/pWJca4qB1mMBi0R0oq8m WFsvbAJMI9yFxTaiFbfec32xlGA+fHdpiAgkSmE5qD+LChQuEm+KWfvSN34YuDkk Ah5yGgPY32goXzr4XuCWRvm0EFvzuTUoahnD/ORaJg98lJQt8vaHMLcm7OQ= -----END CERTIFICATE-----Generated at Sat Sep 9 00:20:01 2023 by rpki-client on console-ams.rpki-client.org