$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8621c38c-da14-4436-8fad-6252da797f1a.roa File: 8621c38c-da14-4436-8fad-6252da797f1a.roa (raw, json) Hash identifier: TPIHEz7JK52WqXSm7DE1rvtcMEHvnsP7Nlo9P0YWHOY= Subject key identifier: 68:68:B3:62:EC:E3:93:E7:0C:A7:62:9F:37:0A:32:A4:7D:46:A0:D1 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 21093A288E712B3BFCF12E61CE8D20A34B2A7C86 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8621c38c-da14-4436-8fad-6252da797f1a.roa Signing time: Sat 18 May 2024 00:00:00 +0000 ROA not before: Sat 18 May 2024 00:00:00 +0000 ROA not after: Sat 22 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:09:3a:28:8e:71:2b:3b:fc:f1:2e:61:ce:8d:20:a3:4b:2a:7c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 18 00:00:00 2024 GMT Not After : Jun 22 23:59:59 2024 GMT Subject: serialNumber=bcac84a71bf0147fd044eca91c5fefda7b105d09cafb5b13b8a1551e3ced7b34, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c0:5b:0e:ce:cf:95:79:68:f6:d2:2e:87:63: f4:66:23:78:22:80:07:e8:f7:2b:ef:cc:58:5d:e2: b0:0e:91:04:d8:8c:6f:2a:e7:be:f9:1b:1b:6f:ca: 69:27:0e:1c:83:10:56:4e:26:60:38:e6:8c:b5:ee: c3:c9:71:58:6d:e5:89:3f:1f:8c:3b:ef:27:8a:6a: c5:98:56:ec:26:8c:fd:5d:d2:c6:3b:59:92:84:4c: c7:9c:b9:ab:52:02:dc:49:16:32:3b:5b:e7:fe:ce: d1:69:08:00:b9:40:f4:b8:d9:58:4b:99:18:5c:1c: 1b:54:a9:ee:b1:60:14:02:98:bd:83:27:f9:14:34: 15:9c:8b:b2:a6:0a:99:0d:ad:ea:06:35:2f:98:e5: 79:4f:fc:2d:a1:91:3e:00:b3:aa:4c:63:73:97:6e: e8:31:24:41:e5:a0:02:c8:b3:a7:b1:6a:5d:63:bb: bc:64:31:cc:07:40:03:d3:51:3a:84:6c:53:f8:65: de:50:ee:59:a1:5d:8b:09:fd:6a:ae:9f:9c:5c:ed: 9f:8e:cc:c2:83:98:b7:62:f5:b1:bb:92:37:ae:5b: 13:a6:fb:3d:5c:eb:c4:10:27:f1:29:32:fc:f7:c3: 9c:4b:7f:0d:7d:9c:50:c3:15:b8:cc:a6:4c:77:1c: 93:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:68:B3:62:EC:E3:93:E7:0C:A7:62:9F:37:0A:32:A4:7D:46:A0:D1 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8621c38c-da14-4436-8fad-6252da797f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.222.0/24 Signature Algorithm: sha256WithRSAEncryption 67:ea:52:a7:c6:db:3a:61:ba:53:75:e5:b9:90:ac:5c:8e:a4: b2:77:a3:f0:45:92:52:20:c2:bc:dc:85:b6:54:05:f5:31:a4: 2c:ab:f9:4e:ab:1c:29:21:8c:f9:2f:92:16:43:05:4c:d2:e4: 59:b2:dd:df:32:b8:74:d2:75:60:8c:fe:5f:3e:6d:92:f4:28: bb:bd:be:4e:d0:b0:7e:c9:eb:8b:56:71:b7:92:e4:c4:08:2a: d6:d3:f7:95:6b:24:eb:7f:f8:5d:11:54:cc:d9:12:98:69:1b: 73:b5:70:3c:b9:6d:6f:9e:24:78:89:0d:db:45:60:d0:57:e6: f1:0d:4d:f9:b7:b3:e9:a0:d5:bb:fc:aa:c8:c3:8c:8d:eb:82: f6:f1:de:11:cb:c4:aa:c7:91:77:10:8f:cd:95:0d:66:35:cc: 07:bf:1b:70:f9:14:df:da:c7:a0:28:06:e2:cc:ee:71:2c:2b: c5:df:03:70:dd:9f:0a:c4:0a:c3:ab:f3:12:e1:a6:be:bd:c9: 6d:5f:1c:7a:64:ca:2b:bb:c9:0b:0f:45:ed:21:99:1b:1f:26: f5:c6:67:47:2e:57:2b:87:c6:5c:96:dc:3e:80:94:bf:e1:58: c8:76:2e:eb:2b:80:c6:1e:29:98:62:91:95:91:96:ed:73:1b: 35:f2:86:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIQk6KI5xKzv88S5hzo0go0sqfIYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQwNTE4MDAwMDAwWhcNMjQwNjIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiY2FjODRhNzFiZjAxNDdmZDA0NGVjYTkxYzVmZWZkYTdi MTA1ZDA5Y2FmYjViMTNiOGExNTUxZTNjZWQ3YjM0MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKwFsOzs+VeWj20i6HY/RmI3gigAfo9yvvzFhd4rAOkQTY jG8q5775GxtvymknDhyDEFZOJmA45oy17sPJcVht5Yk/H4w77yeKasWYVuwmjP1d 0sY7WZKETMecuatSAtxJFjI7W+f+ztFpCAC5QPS42VhLmRhcHBtUqe6xYBQCmL2D J/kUNBWci7KmCpkNreoGNS+Y5XlP/C2hkT4As6pMY3OXbugxJEHloALIs6exal1j u7xkMcwHQAPTUTqEbFP4Zd5Q7lmhXYsJ/Wqun5xc7Z+OzMKDmLdi9bG7kjeuWxOm +z1c68QQJ/EpMvz3w5xLfw19nFDDFbjMpkx3HJMhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaGizYuzjk+cMp2KfNwoypH1GoNEwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzg2MjFjMzhjLWRhMTQtNDQzNi04ZmFkLTYyNTJkYTc5N2YxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d4wDQYJKoZIhvcNAQELBQADggEBAGfqUqfG2zphulN15bmQrFyOpLJ3 o/BFklIgwrzchbZUBfUxpCyr+U6rHCkhjPkvkhZDBUzS5Fmy3d8yuHTSdWCM/l8+ bZL0KLu9vk7QsH7J64tWcbeS5MQIKtbT95VrJOt/+F0RVMzZEphpG3O1cDy5bW+e JHiJDdtFYNBX5vENTfm3s+mg1bv8qsjDjI3rgvbx3hHLxKrHkXcQj82VDWY1zAe/ G3D5FN/ax6AoBuLM7nEsK8XfA3DdnwrECsOr8xLhpr69yW1fHHpkyiu7yQsPRe0h mRsfJvXGZ0cuVyuHxlyW3D6AlL/hWMh2LusrgMYeKZhikZWRlu1zGzXyhgc= -----END CERTIFICATE-----Generated at Sun Jun 2 00:29:40 2024 by rpki-client on console-ams.rpki-client.org