$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a712235f-f228-4cce-81b4-d68686df5c8e.roa File: a712235f-f228-4cce-81b4-d68686df5c8e.roa (raw, json) Hash identifier: GrLAxMYdHdMYhu64COWWiq+J+6eWx42vLEfFnADe0Vs= Subject key identifier: E5:A9:AF:B1:32:33:52:68:F5:9B:14:AC:B7:3E:7F:26:B7:47:7D:49 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1AA5C3C3813983E0F12C9088E1D43F89BE89EC72 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a712235f-f228-4cce-81b4-d68686df5c8e.roa Signing time: Sat 09 Sep 2023 00:00:00 +0000 ROA not before: Sat 09 Sep 2023 00:00:00 +0000 ROA not after: Sat 14 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a5:c3:c3:81:39:83:e0:f1:2c:90:88:e1:d4:3f:89:be:89:ec:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Sep 9 00:00:00 2023 GMT Not After : Oct 14 23:59:59 2023 GMT Subject: serialNumber=38c852d85fdf02be08bd9d1182bec0d4cbb0620d6ddc55c16daeeed5f4b28667, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c5:6b:47:03:9a:b9:e8:1e:60:9f:d0:1f:71: 18:f6:71:f4:d1:e7:23:d1:ab:6a:60:b9:73:d4:c3: ec:9f:71:fb:f7:99:1a:b5:27:9a:ce:8a:52:b2:f4: 50:f6:5a:50:3c:5f:80:d8:fb:26:8c:15:24:9e:25: 5f:04:d7:6d:2b:84:a4:4e:3a:d2:2b:90:d2:c2:61: 56:82:4e:aa:b1:8e:7d:70:35:f4:62:77:3c:df:0f: 31:74:1c:28:e7:7f:a6:57:c0:aa:27:95:e8:00:b8: 17:f8:40:18:32:77:36:f5:b9:cd:cb:92:ff:12:8d: f0:47:03:01:b4:e7:26:9f:fc:68:49:04:f0:61:f4: ca:44:cb:0f:bb:2a:3d:f5:59:6d:22:94:cd:15:7e: aa:40:dc:b6:22:ff:f5:a9:33:b2:1c:fc:b0:4b:56: 8c:cf:2b:45:b7:f5:47:11:1e:14:1e:ff:35:42:48: 11:70:92:49:b7:2e:b0:7c:42:39:64:09:5a:a3:09: bd:e2:3a:6b:89:71:77:a0:f0:f9:9b:9a:53:a4:e3: 62:c5:79:df:35:73:bf:9d:47:37:71:55:9a:86:71: da:bb:5a:cd:d8:d0:a9:d7:b4:5c:48:00:1b:b3:fc: c1:33:43:85:ce:46:eb:84:c4:a2:5d:e3:78:06:15: f4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A9:AF:B1:32:33:52:68:F5:9B:14:AC:B7:3E:7F:26:B7:47:7D:49 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a712235f-f228-4cce-81b4-d68686df5c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.178.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:d1:36:ac:be:34:ab:f7:1d:8e:73:50:97:60:f3:70:ef:63: 5e:6e:87:3b:33:3a:b3:e6:59:97:d2:62:0f:38:8f:4a:0b:42: 7d:41:9b:5a:3e:f7:47:c9:78:88:78:00:49:79:24:7d:3d:a6: a9:e3:9a:2b:a4:ef:75:cd:05:1f:d2:c0:a9:4a:ac:bf:5c:6e: 03:88:ac:02:43:85:8b:84:44:34:4f:bd:e4:2e:fb:e5:c2:c2: fd:1c:ae:4c:f9:c5:e1:3c:6c:0f:9f:0c:b8:7e:88:4f:09:66: 9b:1d:1d:36:51:fc:d0:d8:80:a3:65:c8:68:f9:15:fc:93:d9: ec:77:a2:e3:c8:2d:e3:54:2d:26:01:ee:71:94:37:4b:79:73: 17:5a:b3:2f:fa:26:ed:7c:76:27:71:06:6b:f3:12:26:3d:92: fd:0a:98:ff:02:65:a6:7c:09:86:de:fc:67:0c:51:31:d5:d9: 8a:8b:15:15:02:2a:9f:f0:c7:70:0e:15:92:7e:72:5f:6a:21: c4:3e:0e:a3:38:71:2c:7d:fd:2d:0f:b0:26:5d:95:79:00:88: 1c:07:39:ee:99:c2:9c:48:36:14:d8:f8:41:4a:17:46:2a:80: 70:b8:45:63:c0:77:93:5e:2a:3e:45:a8:cb:24:9c:a6:95:6c: 6e:fe:e2:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGqXDw4E5g+DxLJCI4dQ/ib6J7HIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjMwOTA5MDAwMDAwWhcNMjMxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOGM4NTJkODVmZGYwMmJlMDhiZDlkMTE4MmJlYzBkNGNi YjA2MjBkNmRkYzU1YzE2ZGFlZWVkNWY0YjI4NjY3MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdxWtHA5q56B5gn9AfcRj2cfTR5yPRq2pguXPUw+yfcfv3 mRq1J5rOilKy9FD2WlA8X4DY+yaMFSSeJV8E120rhKROOtIrkNLCYVaCTqqxjn1w NfRidzzfDzF0HCjnf6ZXwKonlegAuBf4QBgydzb1uc3Lkv8SjfBHAwG05yaf/GhJ BPBh9MpEyw+7Kj31WW0ilM0VfqpA3LYi//WpM7Ic/LBLVozPK0W39UcRHhQe/zVC SBFwkkm3LrB8QjlkCVqjCb3iOmuJcXeg8PmbmlOk42LFed81c7+dRzdxVZqGcdq7 Ws3Y0KnXtFxIABuz/MEzQ4XORuuExKJd43gGFfQZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5amvsTIzUmj1mxSstz5/JrdHfUkwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2E3MTIyMzVmLWYyMjgtNGNjZS04MWI0LWQ2ODY4NmRmNWM4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFM37IwDQYJKoZIhvcNAQELBQADggEBACzRNqy+NKv3HY5zUJdg83DvY15u hzszOrPmWZfSYg84j0oLQn1Bm1o+90fJeIh4AEl5JH09pqnjmiuk73XNBR/SwKlK rL9cbgOIrAJDhYuERDRPveQu++XCwv0crkz5xeE8bA+fDLh+iE8JZpsdHTZR/NDY gKNlyGj5FfyT2ex3ouPILeNULSYB7nGUN0t5cxdasy/6Ju18didxBmvzEiY9kv0K mP8CZaZ8CYbe/GcMUTHV2YqLFRUCKp/wx3AOFZJ+cl9qIcQ+DqM4cSx9/S0PsCZd lXkAiBwHOe6ZwpxINhTY+EFKF0YqgHC4RWPAd5NeKj5FqMsknKaVbG7+4sk= -----END CERTIFICATE-----Generated at Sat Sep 9 00:20:01 2023 by rpki-client on console-ams.rpki-client.org