$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06cd28c9-e4f7-4f1a-978b-34ca98aaa79a.roa File: 06cd28c9-e4f7-4f1a-978b-34ca98aaa79a.roa (raw, json) Hash identifier: WSwNG9mrKZBQq339Bz2ww4ax5g3x3YPAWmJCSSb5Glc= Subject key identifier: 54:60:CB:7E:13:C7:D5:36:EC:DB:75:BB:DD:6C:7A:0A:CD:DB:2A:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 128C986E869A8F7384D2A112D4CC193E3E7DE689 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06cd28c9-e4f7-4f1a-978b-34ca98aaa79a.roa Signing time: Mon 11 Sep 2023 00:00:00 +0000 ROA not before: Mon 11 Sep 2023 00:00:00 +0000 ROA not after: Mon 16 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 3.20.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Sep 2023 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8c:98:6e:86:9a:8f:73:84:d2:a1:12:d4:cc:19:3e:3e:7d:e6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 11 00:00:00 2023 GMT Not After : Oct 16 23:59:59 2023 GMT Subject: serialNumber=5679cd58feee93588808b8a494cdf2bd7a8fe95d43d24bcc3ec35217e9f943af, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:10:1c:ba:16:11:28:15:38:4a:e2:a1:2b: 98:91:52:9d:13:ff:c2:6d:db:97:5c:9c:cd:57:32: 4b:7f:8a:d0:1b:f1:51:c7:6e:2d:7f:57:5d:f6:85: 9d:cf:a1:2f:87:dc:c2:53:2d:30:3d:d0:ba:1c:c9: 2a:7f:11:cc:7e:45:17:01:c6:2b:a2:b7:83:e8:1e: cc:1c:b5:d5:aa:85:4b:d1:76:55:3b:83:b0:45:b3: 9b:65:16:34:d2:78:f4:d8:00:15:7a:65:57:8f:19: 08:9d:e4:44:e5:78:85:c4:d7:41:f0:50:2e:8a:10: b4:ae:8b:06:4b:06:10:fe:1b:8a:ed:96:d9:e8:ae: 64:78:2c:63:1e:ba:f2:a2:76:5a:b2:6f:f5:89:a9: 9d:fd:c6:c6:e6:6f:ed:b0:6c:9c:ef:ac:45:9f:fd: 1f:b5:4d:53:d3:87:e7:16:b1:33:31:74:fd:46:d8: 18:22:3f:74:e9:8d:33:87:ec:02:25:26:15:4a:c0: 17:1d:b1:72:70:8d:36:ee:6b:02:e9:7c:31:2c:a9: 63:29:74:6a:6b:ed:a7:83:87:0e:cc:78:d3:6e:58: 45:ba:d9:62:c8:f0:26:d6:08:12:8f:89:7d:f7:cf: fe:80:42:af:2d:2b:de:58:50:d3:6e:e9:0d:c9:17: 92:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:60:CB:7E:13:C7:D5:36:EC:DB:75:BB:DD:6C:7A:0A:CD:DB:2A:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06cd28c9-e4f7-4f1a-978b-34ca98aaa79a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.20.0.0/14 Signature Algorithm: sha256WithRSAEncryption 3d:9b:e0:fe:bc:26:84:d1:15:ca:d8:6e:59:62:6c:48:0a:27: 6b:b9:ab:da:37:19:2b:7c:17:d4:f7:4c:9d:d7:60:f0:07:85: 11:6c:16:7b:c9:04:ff:b0:3e:7a:89:88:47:e0:4a:a0:bd:68: 57:95:b2:d6:ac:1d:be:8c:ef:3e:3c:c6:13:58:9f:34:36:9f: 85:53:08:4a:e6:6b:de:eb:02:b8:ff:10:20:4b:5d:07:94:e7: 72:f9:59:eb:b1:83:da:b6:eb:72:71:45:f8:b5:b5:35:96:8d: 71:b9:63:54:95:ee:c5:e1:bb:54:f3:a7:b1:53:14:ca:75:13: fa:29:d1:72:09:7d:df:0d:9a:fd:10:59:63:87:b3:9e:3e:16: bc:d4:f1:ff:25:75:4a:a8:f5:08:fc:2d:78:a7:59:25:e2:15: 1a:1e:5b:18:ec:f1:4e:75:ee:88:9e:18:9a:17:22:df:59:97: cd:c4:64:2f:77:30:6b:27:96:c3:88:0b:95:40:c0:75:2c:8b: b4:38:b9:e2:2d:ee:f9:55:06:eb:ae:d9:ed:ed:0f:ec:b0:f3: 88:78:f3:02:73:15:da:e9:86:c9:ff:bb:99:70:67:6d:01:7f: 9c:e7:1c:e2:bc:be:b0:9e:b1:53:30:d5:1b:2f:0c:4c:ec:63: 00:c3:c9:dc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEoyYboaaj3OE0qES1MwZPj595okwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjMwOTExMDAwMDAwWhcNMjMxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Njc5Y2Q1OGZlZWU5MzU4ODgwOGI4YTQ5NGNkZjJiZDdh OGZlOTVkNDNkMjRiY2MzZWMzNTIxN2U5Zjk0M2FmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDROBAcuhYRKBU4SuKhK5iRUp0T/8Jt25dcnM1XMkt/itAb 8VHHbi1/V132hZ3PoS+H3MJTLTA90LocySp/Ecx+RRcBxiuit4PoHswctdWqhUvR dlU7g7BFs5tlFjTSePTYABV6ZVePGQid5ETleIXE10HwUC6KELSuiwZLBhD+G4rt ltnormR4LGMeuvKidlqyb/WJqZ39xsbmb+2wbJzvrEWf/R+1TVPTh+cWsTMxdP1G 2BgiP3TpjTOH7AIlJhVKwBcdsXJwjTbuawLpfDEsqWMpdGpr7aeDhw7MeNNuWEW6 2WLI8CbWCBKPiX33z/6AQq8tK95YUNNu6Q3JF5IvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVGDLfhPH1Tbs23W73Wx6Cs3bKh8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA2Y2QyOGM5LWU0ZjctNGYxYS05NzhiLTM0Y2E5OGFhYTc5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIDFDANBgkqhkiG9w0BAQsFAAOCAQEAPZvg/rwmhNEVythuWWJsSAona7mr 2jcZK3wX1PdMnddg8AeFEWwWe8kE/7A+eomIR+BKoL1oV5Wy1qwdvozvPjzGE1if NDafhVMISuZr3usCuP8QIEtdB5TncvlZ67GD2rbrcnFF+LW1NZaNcbljVJXuxeG7 VPOnsVMUynUT+inRcgl93w2a/RBZY4eznj4WvNTx/yV1Sqj1CPwteKdZJeIVGh5b GOzxTnXuiJ4Ymhci31mXzcRkL3cwayeWw4gLlUDAdSyLtDi54i3u+VUG667Z7e0P 7LDziHjzAnMV2umGyf+7mXBnbQF/nOcc4ry+sJ6xUzDVGy8MTOxjAMPJ3A== -----END CERTIFICATE-----Generated at Mon Sep 11 16:32:02 2023 by rpki-client on console-fra.rpki-client.org