$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa File: 5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa (raw, json) Hash identifier: dqIGEGbBmaf/JIF8SACEmNg7Kwtor4aQvdCf1i0uGRc= Subject key identifier: B3:F0:4C:5D:C2:3A:CA:56:BA:6B:B3:8D:F7:70:78:42:88:82:D1:BF Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 110C1273D334817ABB16855BA0E95052E5C66177 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa Signing time: Fri 12 Apr 2024 00:00:00 +0000 ROA not before: Fri 12 Apr 2024 00:00:00 +0000 ROA not after: Fri 17 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 199.255.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0c:12:73:d3:34:81:7a:bb:16:85:5b:a0:e9:50:52:e5:c6:61:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 12 00:00:00 2024 GMT Not After : May 17 23:59:59 2024 GMT Subject: serialNumber=963bc396087cac821839ce9db7397c479b2fb22485d4e7329c56e8f39e263e5d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:06:e3:2a:a2:3b:be:4e:a1:68:47:eb:43: 02:ab:bb:8a:f9:65:51:40:17:9b:9f:7c:7b:b9:94: 78:5b:6a:c7:10:8d:16:6f:4a:9a:6c:e6:a6:ee:52: 92:b2:89:68:1d:6e:72:94:97:9a:90:4e:f7:5f:57: e8:1f:96:8c:87:cf:c0:53:26:fe:53:37:2c:7f:5b: 13:d5:cf:de:f8:54:45:ce:eb:44:88:29:77:f2:25: 0b:08:d3:b9:a3:12:f5:17:fb:37:3a:86:43:a4:bb: cf:ed:1e:5f:13:66:bc:98:2c:11:8f:dc:71:b0:ad: 86:93:4b:a7:b0:eb:e1:0e:75:f9:51:58:25:74:6b: e7:c9:a7:5b:ad:dd:08:69:c7:5a:5d:1b:bf:a3:9c: 9d:d8:2d:52:d0:52:7b:9d:d5:ca:40:28:77:06:c4: d6:ad:d6:67:5c:ed:ce:10:fb:dd:da:7d:13:4a:f7: 97:0d:72:bd:e0:d9:7f:2e:f2:b2:76:cc:b4:af:e6: ba:49:ed:08:61:04:fe:9c:5e:99:b9:84:1a:25:6d: ae:a6:65:ad:2d:ae:27:9a:46:39:3b:1b:66:7c:3e: f5:b0:7f:1a:38:44:95:51:3a:ef:e7:24:9d:4e:b6: 1c:42:48:70:e7:29:ce:e4:44:8d:df:5e:2d:89:31: 0e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F0:4C:5D:C2:3A:CA:56:BA:6B:B3:8D:F7:70:78:42:88:82:D1:BF X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.255.192.0/22 Signature Algorithm: sha256WithRSAEncryption 64:e9:78:db:31:71:2c:e0:dc:0b:e2:f4:44:8a:bd:a9:a2:8d: 18:85:f1:13:ab:30:c1:1b:33:85:34:20:17:04:f4:f7:93:e8: 6f:d8:9a:59:d2:a6:62:e7:31:8b:bf:16:41:a4:15:42:e3:b6: d2:7c:f4:e3:c7:49:9c:06:a6:33:e7:35:12:dd:42:e6:32:9b: c3:4c:75:fa:8c:8c:be:14:1a:8f:69:ad:20:4e:54:82:f4:e2: b6:be:58:e9:cd:32:1e:4f:3f:a4:d3:a4:fe:41:be:e9:99:99: 25:fb:44:a9:f1:78:40:d3:80:c7:76:ca:b1:b5:5d:aa:3e:dc: e4:71:17:7d:52:03:dc:c3:a6:d3:3b:2e:a4:f7:e9:46:be:4c: d7:a2:d6:88:37:d1:6e:27:84:a1:3f:0c:3f:81:b9:f2:87:0c: a5:ad:10:f6:71:c0:83:fe:50:38:48:0a:b0:e8:f2:06:30:c6: 25:db:27:15:11:7d:8e:6d:65:c5:87:cd:94:b0:ae:e9:04:36: 0d:04:11:13:f9:91:a8:b5:f0:e7:37:b3:cc:43:82:15:a0:e6: 97:19:8c:37:3e:e0:ae:9c:9c:b3:52:c8:e3:26:f1:2c:94:5a: 50:3d:cc:8e:74:24:e0:0b:8f:de:06:96:4a:9a:10:67:da:89: cd:11:3d:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEQwSc9M0gXq7FoVboOlQUuXGYXcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjNiYzM5NjA4N2NhYzgyMTgzOWNlOWRiNzM5N2M0Nzli MmZiMjI0ODVkNGU3MzI5YzU2ZThmMzllMjYzZTVkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuAQbjKqI7vk6haEfrQwKru4r5ZVFAF5uffHu5lHhbascQ jRZvSpps5qbuUpKyiWgdbnKUl5qQTvdfV+gfloyHz8BTJv5TNyx/WxPVz974VEXO 60SIKXfyJQsI07mjEvUX+zc6hkOku8/tHl8TZryYLBGP3HGwrYaTS6ew6+EOdflR WCV0a+fJp1ut3Qhpx1pdG7+jnJ3YLVLQUnud1cpAKHcGxNat1mdc7c4Q+93afRNK 95cNcr3g2X8u8rJ2zLSv5rpJ7QhhBP6cXpm5hBolba6mZa0trieaRjk7G2Z8PvWw fxo4RJVROu/nJJ1OthxCSHDnKc7kRI3fXi2JMQ7JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUs/BMXcI6yla6a7ON93B4QoiC0b8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzViNzE5YzQ4LTVhZDgtNDQwZS04N2U1LWFiZjdiYTYwNGI5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALH/8AwDQYJKoZIhvcNAQELBQADggEBAGTpeNsxcSzg3Avi9ESKvamijRiF 8ROrMMEbM4U0IBcE9PeT6G/YmlnSpmLnMYu/FkGkFULjttJ89OPHSZwGpjPnNRLd QuYym8NMdfqMjL4UGo9prSBOVIL04ra+WOnNMh5PP6TTpP5BvumZmSX7RKnxeEDT gMd2yrG1Xao+3ORxF31SA9zDptM7LqT36Ua+TNei1og30W4nhKE/DD+BufKHDKWt EPZxwIP+UDhICrDo8gYwxiXbJxURfY5tZcWHzZSwrukENg0EERP5kai18Oc3s8xD ghWg5pcZjDc+4K6cnLNSyOMm8SyUWlA9zI50JOALj94GlkqaEGfaic0RPeM= -----END CERTIFICATE-----Generated at Thu May 2 01:06:34 2024 by rpki-client on console-fra.rpki-client.org