$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa File: 3f672c72-4d5f-408a-8326-7e62adbed891.roa (raw, json) Hash identifier: jOoq/6LfoYisqGtvr4TICAnxiURwbmtJ7uSDN8p9nmo= Subject key identifier: 79:22:75:FF:BC:54:53:7E:AB:AC:FF:FE:7D:6B:FD:15:B7:BA:4A:3B Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 775DCA7B182A83828DF47A1AAC5DE9D81E910C4D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa Signing time: Tue 23 Apr 2024 00:00:00 +0000 ROA not before: Tue 23 Apr 2024 00:00:00 +0000 ROA not after: Tue 28 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 23.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:5d:ca:7b:18:2a:83:82:8d:f4:7a:1a:ac:5d:e9:d8:1e:91:0c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 23 00:00:00 2024 GMT Not After : May 28 23:59:59 2024 GMT Subject: serialNumber=9bff9020f3edc2d36196c54dccfa455a2a3014c98106b6e8e9e24644e412132a, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:81:67:91:93:12:94:d7:1c:1c:10:fb:db: 8e:a1:6f:5f:c5:ec:5a:33:1a:72:b2:18:3f:18:18: f4:db:4b:ca:2d:d4:10:ce:ab:53:e5:b0:19:64:dd: 05:5f:24:8f:8f:de:70:0b:18:c0:21:65:1a:89:ef: 0f:fe:c8:2e:f1:56:2a:14:84:31:9a:f8:ac:4f:a0: 90:9e:1b:92:26:23:3d:cb:25:9f:70:1f:d6:51:d3: c2:79:4c:7d:0b:1e:9a:6b:2e:a3:49:9b:b0:1b:d3: 28:cb:a2:51:7f:25:8c:ad:0c:29:9d:8c:26:95:79: 1e:bf:88:15:06:ed:e2:d0:43:e7:54:6b:c2:9d:5b: 70:37:95:46:f5:95:91:ab:c6:4f:dc:ef:94:cc:8b: 14:43:98:65:7a:8a:73:07:1a:42:50:70:c5:fb:e7: 81:a1:1a:c6:91:70:b7:5a:71:53:ec:aa:1a:df:6c: 8e:70:3c:67:2c:0b:f4:0d:97:a0:61:6b:a9:df:e7: 77:e1:ad:b6:5e:7a:84:36:75:60:4a:26:51:10:32: 99:34:35:19:7d:66:49:d4:71:06:db:90:6f:33:35: af:58:dd:8d:b6:cc:ee:d9:67:d4:b8:77:6c:41:13: 72:d0:c5:5f:36:15:e0:bc:16:08:c0:48:c4:b1:ab: 08:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:22:75:FF:BC:54:53:7E:AB:AC:FF:FE:7D:6B:FD:15:B7:BA:4A:3B X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:12:47:e7:82:31:4b:05:e1:c7:8f:d2:c7:03:d6:bf:d9:48: 43:89:a0:dd:4b:85:ea:1c:58:ff:7b:42:c0:ba:cf:54:58:9c: 2b:7e:56:41:10:c8:be:d8:41:b1:49:d5:5b:4c:6d:e9:11:91: 65:97:8f:4a:9e:ff:9b:34:9e:74:4e:66:78:bc:c4:21:36:65: 3d:23:f1:4f:04:d3:13:82:c8:d2:cd:b6:48:47:c6:eb:e0:5f: 42:e1:9d:c7:67:68:3b:8b:ab:58:d2:d2:0a:ca:0d:81:33:de: 3f:f4:93:a7:6c:c3:76:03:a9:6e:c6:27:dd:6a:0a:bb:9d:04: f6:5d:b9:77:ed:6d:dc:d4:51:08:83:33:2d:f1:b3:a0:5b:15: d4:95:4f:fc:ee:b1:35:56:c6:04:61:de:6c:26:44:97:25:2a: 39:f4:dd:02:16:53:ad:4d:c2:95:26:23:76:fc:1e:47:59:4e: 84:3d:d6:3b:92:29:82:c4:0e:e1:94:1c:56:9c:16:f7:44:6b: cc:cc:66:50:78:16:f8:4d:52:f6:3d:d5:0b:fb:e1:b5:25:e8: 45:14:08:34:e9:22:e1:2e:41:9b:9c:25:c2:1b:1d:56:d4:59: f4:73:60:8f:16:01:e9:de:cb:9e:0c:c2:a4:ae:d3:b0:76:d3: 7c:49:c3:45 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUd13Kexgqg4KN9HoarF3p2B6RDE0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQwNDIzMDAwMDAwWhcNMjQwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YmZmOTAyMGYzZWRjMmQzNjE5NmM1NGRjY2ZhNDU1YTJh MzAxNGM5ODEwNmI2ZThlOWUyNDY0NGU0MTIxMzJhMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSnoFnkZMSlNccHBD7246hb1/F7FozGnKyGD8YGPTbS8ot 1BDOq1PlsBlk3QVfJI+P3nALGMAhZRqJ7w/+yC7xVioUhDGa+KxPoJCeG5ImIz3L JZ9wH9ZR08J5TH0LHpprLqNJm7Ab0yjLolF/JYytDCmdjCaVeR6/iBUG7eLQQ+dU a8KdW3A3lUb1lZGrxk/c75TMixRDmGV6inMHGkJQcMX754GhGsaRcLdacVPsqhrf bI5wPGcsC/QNl6Bha6nf53fhrbZeeoQ2dWBKJlEQMpk0NRl9ZknUcQbbkG8zNa9Y 3Y22zO7ZZ9S4d2xBE3LQxV82FeC8FgjASMSxqwgPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeSJ1/7xUU36rrP/+fWv9Fbe6SjswHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNmNjcyYzcyLTRkNWYtNDA4YS04MzI2LTdlNjJhZGJlZDg5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d0wDQYJKoZIhvcNAQELBQADggEBADoSR+eCMUsF4ceP0scD1r/ZSEOJ oN1LheocWP97QsC6z1RYnCt+VkEQyL7YQbFJ1VtMbekRkWWXj0qe/5s0nnROZni8 xCE2ZT0j8U8E0xOCyNLNtkhHxuvgX0LhncdnaDuLq1jS0grKDYEz3j/0k6dsw3YD qW7GJ91qCrudBPZduXftbdzUUQiDMy3xs6BbFdSVT/zusTVWxgRh3mwmRJclKjn0 3QIWU61NwpUmI3b8HkdZToQ91juSKYLEDuGUHFacFvdEa8zMZlB4FvhNUvY91Qv7 4bUl6EUUCDTpIuEuQZucJcIbHVbUWfRzYI8WAeney54MwqSu07B203xJw0U= -----END CERTIFICATE-----Generated at Thu May 2 01:06:34 2024 by rpki-client on console-fra.rpki-client.org