$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa File: 32fde2e1-3674-4a8c-9968-42521c781b0a.roa (raw, json) Hash identifier: xT9veoQrVBH1OMWNfcnD215DKFfha/HFgZlgxPvi+1U= Subject key identifier: 40:B4:47:BD:EC:C9:D3:B1:6E:EE:64:DD:6E:5E:9F:DF:9E:83:28:7C Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 021EDAAB896418FA0696FEFF92C4098156B25F4F Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa Signing time: Sat 18 May 2024 00:00:00 +0000 ROA not before: Sat 18 May 2024 00:00:00 +0000 ROA not after: Sat 22 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:1e:da:ab:89:64:18:fa:06:96:fe:ff:92:c4:09:81:56:b2:5f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 18 00:00:00 2024 GMT Not After : Jun 22 23:59:59 2024 GMT Subject: serialNumber=93df2c64cb26696b8d2d053713862a3db7b5f579a6ecc92226d8fe65ede62c49, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0d:4e:95:2c:de:c5:68:d6:ff:3f:dd:8b:ad: 02:57:5e:60:a6:57:df:f2:ae:c4:e5:59:28:b5:e1: d6:d9:ac:ee:90:55:7e:9c:ab:5b:d8:a7:d0:00:96: 90:f2:04:14:9d:81:23:b5:01:34:ec:b8:05:71:e0: f3:c0:bf:15:37:e3:cb:ac:12:e0:7f:1c:12:86:99: 6b:65:ec:62:c2:c0:c5:52:2b:87:2f:7c:d5:22:f1: 29:ba:6e:c2:b4:54:c8:30:ad:57:9a:e4:72:4d:85: db:01:18:79:c5:17:4e:8a:ab:2b:74:0c:48:77:df: f3:f1:e9:2d:73:18:5e:12:6e:92:8c:29:76:85:13: 8f:6c:01:2a:aa:62:9a:12:67:20:b7:c2:cf:3f:df: 58:c5:43:99:63:0a:6b:d2:7d:3d:cf:7a:ed:bc:cc: f7:ef:38:df:22:d9:e7:60:b3:86:a0:8c:55:53:77: 7b:00:ff:74:2f:30:f6:0b:bb:c8:02:e7:6e:68:f1: 0f:33:21:5e:e8:0e:06:7e:d6:85:51:e8:d5:17:98: 3c:af:c6:48:38:fd:69:7b:d5:ef:99:0d:0e:42:13: 01:41:14:93:3d:f5:ac:5d:44:92:03:26:0f:90:1b: 9b:6c:8d:75:ef:9a:e6:22:4a:26:73:aa:b9:f4:01: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B4:47:BD:EC:C9:D3:B1:6E:EE:64:DD:6E:5E:9F:DF:9E:83:28:7C X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.238.0/23 Signature Algorithm: sha256WithRSAEncryption 65:a8:bf:fd:bc:46:a4:c3:6d:8b:56:1a:ee:96:e1:e8:53:20: 2d:9f:78:98:c8:08:57:b0:da:8a:c5:83:23:df:87:95:25:0b: 1d:69:a8:7d:a6:6a:93:53:9e:c1:c7:91:2c:37:e2:59:ae:f7: 5f:3d:79:53:84:db:c2:89:97:2e:af:80:6d:ad:f1:7f:d7:44: 57:c3:54:a6:ad:2e:7a:8d:a7:10:d2:21:3f:44:6b:54:b7:f8: 2e:a7:92:7f:d6:0c:57:55:0e:7b:ac:d6:e3:5e:4d:fc:17:bf: e8:72:4e:8f:03:69:50:bb:ba:d1:1d:54:b2:52:f3:51:34:94: 55:3f:d8:ab:ce:5d:f9:91:c9:16:62:39:f0:0c:fd:9c:c3:e1: a4:23:35:2e:35:6a:33:da:a4:6e:8c:6e:96:9f:78:39:30:4a: 89:9f:52:04:91:14:6f:56:14:fc:4c:10:7a:8f:04:6e:e6:5c: 59:1f:7d:00:64:90:8a:af:5c:c1:ab:f8:57:19:96:f8:e1:5d: 76:b3:f5:3e:d1:17:fe:e4:51:f1:57:4b:f5:44:49:8b:c5:9c: b5:0b:ac:8f:e8:ad:31:47:00:8c:c9:af:10:cb:78:82:dc:e3: bc:36:63:71:24:f0:48:f0:32:38:58:73:35:c3:a8:89:92:13: 33:9d:35:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAh7aq4lkGPoGlv7/ksQJgVayX08wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQwNTE4MDAwMDAwWhcNMjQwNjIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5M2RmMmM2NGNiMjY2OTZiOGQyZDA1MzcxMzg2MmEzZGI3 YjVmNTc5YTZlY2M5MjIyNmQ4ZmU2NWVkZTYyYzQ5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVDU6VLN7FaNb/P92LrQJXXmCmV9/yrsTlWSi14dbZrO6Q VX6cq1vYp9AAlpDyBBSdgSO1ATTsuAVx4PPAvxU348usEuB/HBKGmWtl7GLCwMVS K4cvfNUi8Sm6bsK0VMgwrVea5HJNhdsBGHnFF06Kqyt0DEh33/Px6S1zGF4SbpKM KXaFE49sASqqYpoSZyC3ws8/31jFQ5ljCmvSfT3Peu28zPfvON8i2edgs4agjFVT d3sA/3QvMPYLu8gC525o8Q8zIV7oDgZ+1oVR6NUXmDyvxkg4/Wl71e+ZDQ5CEwFB FJM99axdRJIDJg+QG5tsjXXvmuYiSiZzqrn0ASX7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQLRHvezJ07Fu7mTdbl6f356DKHwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzMyZmRlMmUxLTM2NzQtNGE4Yy05OTY4LTQyNTIxYzc4MWIwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX++4wDQYJKoZIhvcNAQELBQADggEBAGWov/28RqTDbYtWGu6W4ehTIC2f eJjICFew2orFgyPfh5UlCx1pqH2mapNTnsHHkSw34lmu9189eVOE28KJly6vgG2t 8X/XRFfDVKatLnqNpxDSIT9Ea1S3+C6nkn/WDFdVDnus1uNeTfwXv+hyTo8DaVC7 utEdVLJS81E0lFU/2KvOXfmRyRZiOfAM/ZzD4aQjNS41ajPapG6MbpafeDkwSomf UgSRFG9WFPxMEHqPBG7mXFkffQBkkIqvXMGr+FcZlvjhXXaz9T7RF/7kUfFXS/VE SYvFnLULrI/orTFHAIzJrxDLeILc47w2Y3Ek8EjwMjhYczXDqImSEzOdNTY= -----END CERTIFICATE-----Generated at Sun Jun 2 00:22:07 2024 by rpki-client on console-fra.rpki-client.org