$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/727d15a8-c669-42ac-9883-480de7c1be24.roa File: 727d15a8-c669-42ac-9883-480de7c1be24.roa (raw, json) Hash identifier: GJsew3X5001FvJVY0p+IUF5zegS/useP3uiOmhAlKV4= Subject key identifier: 4E:95:95:53:9E:DF:DD:93:54:B6:AA:2F:32:C6:AE:BC:79:62:29:63 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 251D19B411144915B796E6B098DDAF170B0AEE9B Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/727d15a8-c669-42ac-9883-480de7c1be24.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 206.55.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:1d:19:b4:11:14:49:15:b7:96:e6:b0:98:dd:af:17:0b:0a:ee:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=dd161a3750a1ad97a10ed25e7fe9dcebb27dcb36e7295404eb6b1706fcbc76db, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:b8:07:69:4f:0f:c2:84:3a:e8:d8:20:56: 94:90:b9:04:2d:3f:f3:44:d3:35:a6:2f:b1:36:5c: 46:40:1c:2b:96:53:99:75:6a:fc:fb:be:5e:0c:45: 69:f8:6b:09:91:ab:48:29:78:a2:ed:9f:66:6e:fd: e3:68:df:87:e6:8c:d8:bb:1c:42:25:e1:65:ab:02: 2a:f8:a3:53:f0:c3:01:a7:98:f8:19:e7:bb:7c:7d: 64:76:47:6d:ac:7a:1b:6f:cf:53:ef:6f:21:f2:b4: e0:0c:13:50:df:4f:9d:37:46:5e:68:80:f3:15:8b: db:12:5a:61:90:20:62:aa:e9:a5:ba:12:12:30:8d: f7:cc:25:66:88:35:5a:9e:18:2b:c9:0d:e9:7c:e9: 96:5d:64:f7:b1:c1:3c:3e:e1:5d:55:17:7e:e8:2f: 62:73:3a:eb:df:b8:9c:39:b6:fb:a7:9b:2c:80:c4: 46:dc:dd:7b:35:1f:b2:9e:06:e6:ed:5b:0d:49:90: b3:43:37:b3:e8:50:5e:58:49:75:17:4b:f7:7a:95: 2d:5e:c8:11:0d:45:81:e7:30:80:bd:b2:96:ec:d9: 9a:89:87:7d:35:70:10:3f:18:76:f7:16:d5:40:e2: 6a:c9:7a:ea:dc:8c:bc:ca:b1:4c:cc:12:8f:68:b5: b0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:95:95:53:9E:DF:DD:93:54:B6:AA:2F:32:C6:AE:BC:79:62:29:63 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/727d15a8-c669-42ac-9883-480de7c1be24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.55.128.0/19 Signature Algorithm: sha256WithRSAEncryption 49:8a:18:9a:1b:d0:7f:50:d8:c8:87:47:ae:fe:3f:83:71:cc: 1f:40:e6:aa:f4:bb:f0:49:81:43:82:fb:53:09:ab:57:04:63: f5:67:3e:4b:d8:a9:08:e1:5e:12:82:a3:d9:09:75:fb:14:d7: dd:28:c5:7a:c3:71:ba:ac:1e:a5:b5:6d:89:6b:d9:7c:ee:f3: 21:01:59:1d:f0:b7:fd:74:9e:94:1e:fa:65:9b:7c:3b:eb:e3: 81:9e:12:68:61:84:42:c0:fe:cc:c8:15:97:e3:cc:71:06:b6: a6:a0:f1:2f:41:3d:83:d4:c8:1d:b9:11:e7:c3:7c:69:59:77: 59:9d:bf:71:bd:15:13:a7:a1:5e:90:57:29:1c:6f:1f:6e:da: 1c:bd:3a:62:ea:9d:eb:34:3e:7b:60:11:58:53:60:65:12:17: a4:6d:a7:26:68:01:6e:d9:ad:4d:6b:ef:e8:c0:17:c0:e3:73: 2f:bd:45:f8:45:23:d2:41:97:66:4b:76:f4:bf:77:d4:8c:b2: d5:0e:9f:ab:ad:83:c2:be:a2:d8:ed:52:3e:33:ca:71:c4:d1: 18:f9:c2:98:d9:18:ac:f6:2d:92:61:b6:e3:9a:3b:84:8c:46: fe:b0:a5:60:95:19:bb:03:dd:33:e5:0f:be:1d:49:13:a8:28: 41:da:e5:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJR0ZtBEUSRW3luawmN2vFwsK7pswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDE2MWEzNzUwYTFhZDk3YTEwZWQyNWU3ZmU5ZGNlYmIy N2RjYjM2ZTcyOTU0MDRlYjZiMTcwNmZjYmM3NmRiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuWrgHaU8PwoQ66NggVpSQuQQtP/NE0zWmL7E2XEZAHCuW U5l1avz7vl4MRWn4awmRq0gpeKLtn2Zu/eNo34fmjNi7HEIl4WWrAir4o1PwwwGn mPgZ57t8fWR2R22sehtvz1PvbyHytOAME1DfT503Rl5ogPMVi9sSWmGQIGKq6aW6 EhIwjffMJWaINVqeGCvJDel86ZZdZPexwTw+4V1VF37oL2JzOuvfuJw5tvunmyyA xEbc3Xs1H7KeBubtWw1JkLNDN7PoUF5YSXUXS/d6lS1eyBENRYHnMIC9spbs2ZqJ h301cBA/GHb3FtVA4mrJeurcjLzKsUzMEo9otbAFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTpWVU57f3ZNUtqovMsauvHliKWMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzcyN2QxNWE4LWM2NjktNDJhYy05ODgzLTQ4MGRlN2MxYmUyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXON4AwDQYJKoZIhvcNAQELBQADggEBAEmKGJob0H9Q2MiHR67+P4NxzB9A 5qr0u/BJgUOC+1MJq1cEY/VnPkvYqQjhXhKCo9kJdfsU190oxXrDcbqsHqW1bYlr 2Xzu8yEBWR3wt/10npQe+mWbfDvr44GeEmhhhELA/szIFZfjzHEGtqag8S9BPYPU yB25EefDfGlZd1mdv3G9FROnoV6QVykcbx9u2hy9OmLqnes0PntgEVhTYGUSF6Rt pyZoAW7ZrU1r7+jAF8Djcy+9RfhFI9JBl2ZLdvS/d9SMstUOn6utg8K+otjtUj4z ynHE0Rj5wpjZGKz2LZJhtuOaO4SMRv6wpWCVGbsD3TPlD74dSROoKEHa5co= -----END CERTIFICATE-----Generated at Thu May 9 00:30:03 2024 by rpki-client on console-ams.rpki-client.org