$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2c0b17f7-5d4b-4019-bd91-7b902a370e2f.roa File: 2c0b17f7-5d4b-4019-bd91-7b902a370e2f.roa (raw, json) Hash identifier: F7H1FR0IhnH4/vAvVQinFgpwb+s9bPKi6Qoi+5HwOQE= Subject key identifier: 0E:E2:B3:1B:63:59:02:94:01:8D:8A:18:79:B4:CE:1D:B9:F4:C5:E8 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 2A4176D7FBFCD869C1430FCC7ED395E931817237 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2c0b17f7-5d4b-4019-bd91-7b902a370e2f.roa Signing time: Wed 06 Nov 2024 00:00:00 +0000 ROA not before: Wed 06 Nov 2024 00:00:00 +0000 ROA not after: Wed 11 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 206.55.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:41:76:d7:fb:fc:d8:69:c1:43:0f:cc:7e:d3:95:e9:31:81:72:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Nov 6 00:00:00 2024 GMT Not After : Dec 11 23:59:59 2024 GMT Subject: serialNumber=c71cf22cd34ad32a97e0a7bd893bdc9a1e59a5a77ae920732cec9c5d5e629c3d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:b2:de:16:93:20:42:8d:62:64:32:a1:c0: 3e:22:e1:94:69:ca:89:cd:ad:59:25:ca:de:bf:e4: 9c:6f:74:e4:7e:90:bc:b6:34:d8:45:85:53:f6:a5: 3d:6f:01:17:79:a3:37:0a:df:12:1a:6c:7d:f7:63: df:58:06:22:0b:22:cf:16:7e:2e:a5:ad:99:ef:08: ee:ca:45:26:a9:2b:f0:f8:61:e8:04:6c:e5:10:0a: ed:c6:c3:df:b8:94:3f:dc:7d:a4:34:3d:23:23:b3: 6b:d2:34:8a:81:e3:96:4f:7e:04:ff:14:2a:60:7a: 4e:c8:ab:53:fd:4b:3c:72:0a:fd:85:5c:e9:db:bb: a7:89:24:65:87:c6:2a:b7:f9:de:25:b4:61:3b:3f: b1:99:23:59:36:a2:e6:4d:d8:65:86:7b:c7:d2:fd: 8a:e4:f7:0e:6e:8c:0a:98:7a:03:36:9c:4d:fc:46: fd:fa:df:d6:73:68:2c:fb:8a:68:d9:b0:62:52:a5: 5f:39:df:6c:e9:6a:05:2c:df:7e:e4:43:de:d9:e6: 9f:50:ed:54:d8:0f:cf:27:76:38:3b:d4:74:f6:01: 48:86:bc:3d:9b:9d:a8:5d:47:e1:c2:d8:35:fd:b2: 01:61:91:88:34:93:4e:d0:d8:1d:aa:ad:46:bc:94: c2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E2:B3:1B:63:59:02:94:01:8D:8A:18:79:B4:CE:1D:B9:F4:C5:E8 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2c0b17f7-5d4b-4019-bd91-7b902a370e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.55.144.0/23 Signature Algorithm: sha256WithRSAEncryption 51:9b:c4:93:6c:92:3b:1b:50:b4:4e:6b:bf:24:f1:fa:c1:98: c0:7e:f8:c9:a4:8c:47:6d:e0:1a:17:d9:b9:c5:3d:ab:35:5c: 40:a8:21:70:d1:69:b6:22:f6:d6:30:e5:e1:e5:75:1c:bc:93: e8:63:ba:a9:26:6b:e6:ad:e0:f1:f3:25:9b:1f:cd:44:52:16: a1:f5:c0:30:6e:02:09:f4:d0:39:4f:ba:04:8a:20:b9:df:47: ce:5f:5b:47:be:64:51:52:f3:4f:7d:a1:90:0c:3a:b2:70:d1: a5:cf:2d:1a:19:4e:6e:17:72:af:ff:e7:b5:7d:2b:bd:29:bd: 14:53:8e:eb:cb:02:cd:76:d3:d8:35:8d:e6:9f:81:d5:ac:f1: 53:e1:ac:2c:7f:f0:a1:9a:13:2a:61:00:3e:e5:e7:2c:26:24: a6:a3:39:bb:12:b8:e9:07:0e:92:19:b2:0b:e8:00:85:5d:af: c4:ef:77:e2:c5:a3:0d:bf:3a:eb:35:0f:7b:89:97:1b:4c:ae: ec:4a:2c:83:a1:66:a1:1f:19:19:ac:d1:c7:d6:27:0b:6b:7f: c9:a8:c4:0c:81:b9:f9:d7:08:2b:9c:38:c4:b3:6b:b2:bf:75: f3:92:3a:7c:40:2d:11:fb:d3:8b:bd:a0:63:c9:aa:2d:e8:fa: 36:c6:3c:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKkF21/v82GnBQw/MftOV6TGBcjcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMTA2MDAwMDAwWhcNMjQxMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzFjZjIyY2QzNGFkMzJhOTdlMGE3YmQ4OTNiZGM5YTFl NTlhNWE3N2FlOTIwNzMyY2VjOWM1ZDVlNjI5YzNkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDqrLeFpMgQo1iZDKhwD4i4ZRpyonNrVklyt6/5JxvdOR+ kLy2NNhFhVP2pT1vARd5ozcK3xIabH33Y99YBiILIs8Wfi6lrZnvCO7KRSapK/D4 YegEbOUQCu3Gw9+4lD/cfaQ0PSMjs2vSNIqB45ZPfgT/FCpgek7Iq1P9SzxyCv2F XOnbu6eJJGWHxiq3+d4ltGE7P7GZI1k2ouZN2GWGe8fS/Yrk9w5ujAqYegM2nE38 Rv3639ZzaCz7imjZsGJSpV8532zpagUs337kQ97Z5p9Q7VTYD88ndjg71HT2AUiG vD2bnahdR+HC2DX9sgFhkYg0k07Q2B2qrUa8lMIfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDuKzG2NZApQBjYoYebTOHbn0xegwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzJjMGIxN2Y3LTVkNGItNDAxOS1iZDkxLTdiOTAyYTM3MGUyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHON5AwDQYJKoZIhvcNAQELBQADggEBAFGbxJNskjsbULROa78k8frBmMB+ +MmkjEdt4BoX2bnFPas1XECoIXDRabYi9tYw5eHldRy8k+hjuqkma+at4PHzJZsf zURSFqH1wDBuAgn00DlPugSKILnfR85fW0e+ZFFS8099oZAMOrJw0aXPLRoZTm4X cq//57V9K70pvRRTjuvLAs1209g1jeafgdWs8VPhrCx/8KGaEyphAD7l5ywmJKaj ObsSuOkHDpIZsgvoAIVdr8Tvd+LFow2/Ous1D3uJlxtMruxKLIOhZqEfGRms0cfW Jwtrf8moxAyBufnXCCucOMSza7K/dfOSOnxALRH704u9oGPJqi3o+jbGPNI= -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:21 2024 by rpki-client on console-fra.rpki-client.org