$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cadcfa35-5b63-40b0-9a47-912e707a5001.roa File: cadcfa35-5b63-40b0-9a47-912e707a5001.roa (raw, json) Hash identifier: A5ST53CCM+sb9fypr3N33OYIZPEedhEzChjSA7cyQbI= Subject key identifier: 69:0D:FF:E0:B1:78:56:BC:74:43:9C:8C:F5:8D:4E:AD:58:84:99:2F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 150F24BE58716ADFF52B6A3E28262E29E3E217D6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cadcfa35-5b63-40b0-9a47-912e707a5001.roa Signing time: Sat 09 Sep 2023 00:00:00 +0000 ROA not before: Sat 09 Sep 2023 00:00:00 +0000 ROA not after: Sat 14 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:a600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Sep 2023 12:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:0f:24:be:58:71:6a:df:f5:2b:6a:3e:28:26:2e:29:e3:e2:17:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 9 00:00:00 2023 GMT Not After : Oct 14 23:59:59 2023 GMT Subject: serialNumber=d8fd8bb83f4562ecd397af8d9dd3dd8bbd5dfa790237b838a17cc4dee7c7e4ea, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2b:59:5b:07:51:0d:07:8e:e2:be:2e:6a:dd: e4:a2:ec:91:91:53:2a:0f:91:a8:d7:f9:df:37:94: e6:5f:95:36:72:e9:fb:55:30:1b:cd:21:54:3c:71: 57:31:61:35:78:07:6a:3f:d6:cb:df:87:dd:a8:7a: aa:65:b7:84:8c:32:b1:4b:5a:b0:7d:64:2b:27:1a: 3e:46:55:c6:80:ad:b9:1d:16:2f:94:fb:0d:36:65: d3:da:9b:0c:2d:38:92:bd:e0:63:5c:32:a2:b5:a6: 0d:5f:c5:13:8a:85:fa:4f:d4:03:b6:67:38:b7:55: ac:f6:eb:4f:00:09:46:55:a8:cc:12:64:35:7d:1a: ad:6b:2b:2d:70:f5:5b:87:0f:c1:f4:80:7a:37:45: 41:75:a4:8b:d9:b1:d4:2a:5d:0d:81:bd:d1:fe:08: a9:49:6b:3d:4b:71:ae:93:c4:e2:36:c5:8a:04:97: dc:96:45:fa:aa:f8:3c:89:9b:0b:03:0d:4c:38:05: f7:c1:7a:2d:24:2e:00:2d:6f:53:8a:f1:1c:95:a9: 8d:85:84:07:02:d2:8f:16:43:a0:6e:a1:b1:fe:c6: 55:77:b2:6f:23:1b:18:fd:f0:9c:19:8a:c7:a4:e0: 49:a7:7b:6e:9e:0a:04:8e:8c:3d:58:36:a2:d1:a9: 3b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0D:FF:E0:B1:78:56:BC:74:43:9C:8C:F5:8D:4E:AD:58:84:99:2F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cadcfa35-5b63-40b0-9a47-912e707a5001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:a600::/40 Signature Algorithm: sha256WithRSAEncryption 3f:be:14:57:ef:c6:23:4e:07:6f:52:e9:f4:33:f5:cc:45:ab: cf:e5:85:aa:99:ca:bd:90:17:f3:ef:69:89:b9:9a:b8:41:a5: 86:59:e4:59:ad:0a:de:90:65:b5:58:af:17:c1:ca:f4:3c:47: d2:30:d2:2d:63:dc:f5:3b:67:f0:e9:6c:24:9a:c7:a9:fc:43: 8a:26:e0:9c:32:c6:63:ed:66:ca:37:bd:72:6f:48:7c:44:56: 40:8e:54:e8:6d:1a:f8:dd:59:31:af:b8:94:86:96:a0:61:04: 7d:e7:cc:47:87:31:41:6b:ac:e6:30:e3:19:12:3e:2f:33:2b: 67:c9:89:f4:8d:d3:ba:64:12:22:21:26:54:a9:d9:e3:84:9f: 28:3e:cb:ba:19:85:be:e9:9c:d1:e1:a2:48:78:96:22:a6:18: 95:0e:01:27:0f:14:e7:02:52:40:15:95:0b:6f:0d:1f:86:b0: e5:04:85:08:bf:23:df:90:11:a1:e6:8f:a7:c4:9a:b1:3a:f2: c0:3c:ad:a4:32:2a:c9:e5:0c:98:a5:05:d3:8c:d0:0d:23:f1: 18:82:2f:cf:26:7f:bf:01:d1:3b:7e:96:c1:03:1a:e5:04:79: de:f6:ff:06:3e:13:cc:0d:aa:ce:3b:a1:b9:c7:07:40:85:7c: eb:e7:de:68 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFQ8kvlhxat/1K2o+KCYuKePiF9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjMwOTA5MDAwMDAwWhcNMjMxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOGZkOGJiODNmNDU2MmVjZDM5N2FmOGQ5ZGQzZGQ4YmJk NWRmYTc5MDIzN2I4MzhhMTdjYzRkZWU3YzdlNGVhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWK1lbB1ENB47ivi5q3eSi7JGRUyoPkajX+d83lOZflTZy 6ftVMBvNIVQ8cVcxYTV4B2o/1svfh92oeqplt4SMMrFLWrB9ZCsnGj5GVcaArbkd Fi+U+w02ZdPamwwtOJK94GNcMqK1pg1fxROKhfpP1AO2Zzi3Vaz2608ACUZVqMwS ZDV9Gq1rKy1w9VuHD8H0gHo3RUF1pIvZsdQqXQ2BvdH+CKlJaz1Lca6TxOI2xYoE l9yWRfqq+DyJmwsDDUw4BffBei0kLgAtb1OK8RyVqY2FhAcC0o8WQ6BuobH+xlV3 sm8jGxj98JwZisek4Emne26eCgSOjD1YNqLRqTulAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUaQ3/4LF4Vrx0Q5yM9Y1OrViEmS8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NhZGNmYTM1LTViNjMtNDBiMC05YTQ3LTkxMmU3MDdhNTAwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAJAApjANBgkqhkiG9w0BAQsFAAOCAQEAP74UV+/GI04Hb1Lp9DP1zEWr z+WFqpnKvZAX8+9pibmauEGlhlnkWa0K3pBltVivF8HK9DxH0jDSLWPc9Ttn8Ols JJrHqfxDiibgnDLGY+1myje9cm9IfERWQI5U6G0a+N1ZMa+4lIaWoGEEfefMR4cx QWus5jDjGRI+LzMrZ8mJ9I3TumQSIiEmVKnZ44SfKD7LuhmFvumc0eGiSHiWIqYY lQ4BJw8U5wJSQBWVC28NH4aw5QSFCL8j35ARoeaPp8SasTrywDytpDIqyeUMmKUF 04zQDSPxGIIvzyZ/vwHRO36WwQMa5QR53vb/Bj4TzA2qzjuhuccHQIV86+feaA== -----END CERTIFICATE-----Generated at Sat Sep 9 00:26:30 2023 by rpki-client on console-fra.rpki-client.org