$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b594dd5-42e1-416c-b337-0ca42c1ca508.roa File: 8b594dd5-42e1-416c-b337-0ca42c1ca508.roa (raw, json) Hash identifier: v48BdoS2mMc0iDwfd+Ys5zaWswOyYNZAm9vDbBJCFsM= Subject key identifier: D0:48:9F:23:9F:25:24:1A:A8:08:13:C0:0E:78:21:D4:88:D5:B0:26 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 392CA409A150DD042B8158B8A71AB845287BE7 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b594dd5-42e1-416c-b337-0ca42c1ca508.roa Signing time: Sat 09 Sep 2023 00:00:00 +0000 ROA not before: Sat 09 Sep 2023 00:00:00 +0000 ROA not after: Sat 14 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Sep 2023 12:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2c:a4:09:a1:50:dd:04:2b:81:58:b8:a7:1a:b8:45:28:7b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 9 00:00:00 2023 GMT Not After : Oct 14 23:59:59 2023 GMT Subject: serialNumber=25cbba0a1e6e6a988833bf95402dbff83cfd31b187e072a7200941403373d2fb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:94:8f:14:46:8a:10:63:b0:ce:e9:d5:cf:e9: 0f:60:e6:5b:e1:f5:91:e7:b6:70:b4:ec:16:a9:65: 4e:8c:c1:30:a7:9e:a1:8b:3d:bd:ed:3c:a2:b9:9f: 44:81:f1:3a:58:89:7b:ac:da:cf:30:2c:1f:f1:cb: 1d:c3:4f:53:15:d7:54:14:36:45:8f:1f:49:59:4c: ee:ee:bf:48:93:31:12:78:d3:41:6d:fa:7c:3a:2e: 7e:55:a9:18:d1:43:c2:f6:d4:08:39:26:8f:07:e1: b3:a5:4e:ce:4a:ef:cb:4f:47:e7:59:c6:58:80:be: 71:82:29:fc:93:22:5b:e4:28:b1:0d:06:b6:7d:96: 5b:88:98:84:0a:0f:0c:07:ad:8c:ca:03:a1:77:e0: c4:c1:e2:c7:ea:37:52:2e:a0:c8:a6:18:ed:d2:8b: ab:2e:8b:fd:86:8e:2a:a7:44:a8:5d:60:aa:61:95: 38:1a:33:e0:9e:37:20:a0:09:f5:d2:81:b8:b5:0d: ce:f9:e7:1c:32:4e:34:2b:9f:d5:ad:91:59:14:6d: c4:8d:20:63:99:03:25:50:ad:7e:8e:6f:25:45:ec: 1e:67:81:f1:65:9b:ef:0f:44:ef:1b:bc:cf:39:42: 39:52:a3:6c:c6:08:69:83:59:ec:1c:7a:89:18:5e: df:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:48:9F:23:9F:25:24:1A:A8:08:13:C0:0E:78:21:D4:88:D5:B0:26 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b594dd5-42e1-416c-b337-0ca42c1ca508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:f000::/36 Signature Algorithm: sha256WithRSAEncryption b6:88:fe:3a:26:8d:7d:ca:1d:53:30:97:61:ff:4b:e9:1b:79: 01:52:0f:ff:5f:f6:d0:3c:20:15:74:ab:a2:54:30:c5:ad:50: f9:d3:23:dd:e3:bd:2a:37:ae:2c:f5:50:11:63:ca:49:13:dc: 33:7e:5f:5d:e7:98:4b:50:8a:de:84:f0:55:63:a1:8b:52:fe: 43:01:6d:7b:06:c8:61:94:05:36:a4:92:b2:5b:01:b3:37:30: 13:38:bd:e7:32:2a:b3:b5:f6:fc:00:09:08:48:95:1e:9b:a6: c6:47:1a:97:1a:aa:2c:30:a5:f4:dd:79:08:7a:18:78:0c:7e: 2a:90:d8:f2:5f:09:b9:a2:ce:c7:d2:9d:bb:fa:12:dc:30:97: a1:02:51:24:af:77:e6:ea:3b:51:01:3f:b7:9a:37:98:d8:af: 38:d8:57:a0:4a:14:50:ff:ec:5f:80:78:a1:d2:b3:a7:2a:a7: e0:0d:87:d2:bf:44:15:ca:98:f9:1f:21:5f:84:fe:59:75:b1: 0f:85:8c:cb:65:6d:b0:cb:01:08:7a:d8:d7:c9:c1:2e:33:6b: 5c:a0:c6:b1:6a:c4:c8:9e:23:69:b3:44:7f:0b:f3:c6:d6:a7: 5f:79:2d:91:f8:99:af:c2:29:6b:07:7c:dd:87:10:3d:18:ad: 34:93:b8:87 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITOSykCaFQ3QQrgVi4pxq4RSh75zANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yMzA5MDkwMDAwMDBaFw0yMzEwMTQyMzU5NTla MHoxSTBHBgNVBAUTQDI1Y2JiYTBhMWU2ZTZhOTg4ODMzYmY5NTQwMmRiZmY4M2Nm ZDMxYjE4N2UwNzJhNzIwMDk0MTQwMzM3M2QyZmIxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANeUjxRGihBjsM7p1c/pD2DmW+H1kee2cLTsFqllTozBMKee oYs9ve08ormfRIHxOliJe6zazzAsH/HLHcNPUxXXVBQ2RY8fSVlM7u6/SJMxEnjT QW36fDouflWpGNFDwvbUCDkmjwfhs6VOzkrvy09H51nGWIC+cYIp/JMiW+QosQ0G tn2WW4iYhAoPDAetjMoDoXfgxMHix+o3Ui6gyKYY7dKLqy6L/YaOKqdEqF1gqmGV OBoz4J43IKAJ9dKBuLUNzvnnHDJONCuf1a2RWRRtxI0gY5kDJVCtfo5vJUXsHmeB 8WWb7w9E7xu8zzlCOVKjbMYIaYNZ7Bx6iRhe3/MCAwEAAaOCArMwggKvMB0GA1Ud DgQWBBTQSJ8jnyUkGqgIE8AOeCHUiNWwJjAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvOGI1OTRkZDUtNDJlMS00MTZjLWIzMzctMGNhNDJjMWNhNTA4LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGBCYAkADwMA0GCSqGSIb3DQEBCwUAA4IBAQC2iP46Jo19yh1TMJdh/0vpG3kB Ug//X/bQPCAVdKuiVDDFrVD50yPd470qN64s9VARY8pJE9wzfl9d55hLUIrehPBV Y6GLUv5DAW17BshhlAU2pJKyWwGzNzATOL3nMiqztfb8AAkISJUem6bGRxqXGqos MKX03XkIehh4DH4qkNjyXwm5os7H0p27+hLcMJehAlEkr3fm6jtRAT+3mjeY2K84 2FegShRQ/+xfgHih0rOnKqfgDYfSv0QVypj5HyFfhP5ZdbEPhYzLZW2wywEIetjX ycEuM2tcoMaxasTIniNps0R/C/PG1qdfeS2R+JmvwilrB3zdhxA9GK00k7iH -----END CERTIFICATE-----Generated at Sat Sep 9 00:20:01 2023 by rpki-client on console-ams.rpki-client.org