$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a712235f-f228-4cce-81b4-d68686df5c8e.roa File: a712235f-f228-4cce-81b4-d68686df5c8e.roa (raw, json) Hash identifier: SMi0vuWvZE5TT0igOkhF4VBNHVE0EiurV7m/pNnCwSQ= Subject key identifier: FF:E9:12:FA:5F:80:35:A1:D0:3F:96:CA:B4:6F:2A:3A:0E:26:4C:01 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 51385010AA8DC66387B8804A4447AE2CED8843C4 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a712235f-f228-4cce-81b4-d68686df5c8e.roa Signing time: Mon 11 Nov 2024 00:00:00 +0000 ROA not before: Mon 11 Nov 2024 00:00:00 +0000 ROA not after: Mon 16 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:38:50:10:aa:8d:c6:63:87:b8:80:4a:44:47:ae:2c:ed:88:43:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Nov 11 00:00:00 2024 GMT Not After : Dec 16 23:59:59 2024 GMT Subject: serialNumber=0c8f0c3d35116d6538cf81a350539b3a005e00924f67fe1adb6be91eba8a78b5, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:8b:fb:0b:2b:71:a3:23:af:88:17:75:d6: f8:85:e8:ad:65:cc:da:2c:77:1c:ee:59:25:aa:72: b2:9b:57:fb:77:f8:52:b2:87:62:65:c6:2a:76:7b: ad:bd:2b:a0:e0:31:04:4d:a6:35:19:e9:42:15:5e: 34:53:51:fd:f8:5f:6e:f1:52:60:57:94:01:99:90: 7f:a9:41:78:bb:e1:66:e5:44:f0:9d:63:ac:2e:76: 8e:22:6e:b7:07:6c:6c:06:b6:59:e3:d1:a0:ec:cd: 99:58:88:ea:25:55:54:57:82:02:68:c2:5f:82:bd: d2:25:b2:65:64:1d:b2:85:b2:34:66:8e:fa:e6:45: 99:bb:f6:18:d3:75:03:30:43:6c:a0:fb:34:43:24: 95:5b:63:57:5e:a4:23:7c:c9:47:05:a3:f8:35:81: 62:dc:5c:1e:9e:35:f9:bd:ec:bb:f4:3a:46:02:fa: ae:1f:38:6e:27:db:88:2e:5a:64:e7:ad:ba:78:f9: 2c:c1:b4:a8:ac:73:10:bf:2e:7d:5e:f1:ea:0c:3b: bb:30:ef:73:16:e6:d5:8e:4d:60:b6:a7:db:94:a8: 8b:64:13:b7:63:85:35:1f:79:36:ba:2b:ee:bb:87: ab:2c:c2:75:81:b0:39:9b:a9:e2:a7:0f:74:c3:4a: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E9:12:FA:5F:80:35:A1:D0:3F:96:CA:B4:6F:2A:3A:0E:26:4C:01 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a712235f-f228-4cce-81b4-d68686df5c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.178.0/23 Signature Algorithm: sha256WithRSAEncryption 38:80:6c:ff:9e:b8:d0:34:0e:d1:f9:ff:db:38:ce:55:d8:ab: bb:1b:71:77:0d:c4:31:b1:11:28:9b:de:ae:a6:ff:8f:9f:6c: d4:25:f4:52:73:fc:24:14:ad:14:81:79:17:8e:17:ed:bf:ef: 52:83:9d:18:c6:91:af:d8:c9:58:fe:59:f9:fc:e9:84:28:35: e0:05:b9:70:59:0c:fd:05:c4:78:67:b1:c0:24:84:4c:78:77: 15:50:0c:5a:bc:a8:7e:1b:51:a1:79:88:f2:2c:81:4b:a7:0f: d4:16:d2:72:30:18:d6:bb:af:7c:04:3a:e7:34:d5:d5:e9:af: 5c:71:ea:d7:76:b4:25:35:68:24:10:44:e0:6c:0b:0c:9f:70: 2f:ca:fe:c4:e2:47:74:85:08:d0:cd:bf:43:19:88:93:8e:1b: 0e:3d:81:ed:03:5a:fa:9d:5b:f4:c9:e4:24:40:18:74:fc:0b: 22:22:2e:f5:5c:29:76:42:c0:b8:09:5f:dd:b0:85:01:c4:fa: 3d:5c:42:23:90:1d:d1:2b:6f:ea:1e:97:a7:83:53:20:36:d4: 59:5b:7d:ed:cf:ad:ec:9c:d0:e7:2c:bd:ae:ef:89:84:51:24: b7:88:cd:55:76:bc:d3:0c:a4:76:95:6a:d4:81:33:a2:33:45: 72:f6:36:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUThQEKqNxmOHuIBKREeuLO2IQ8QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMTExMDAwMDAwWhcNMjQxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzhmMGMzZDM1MTE2ZDY1MzhjZjgxYTM1MDUzOWIzYTAw NWUwMDkyNGY2N2ZlMWFkYjZiZTkxZWJhOGE3OGI1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJYIv7CytxoyOviBd11viF6K1lzNosdxzuWSWqcrKbV/t3 +FKyh2Jlxip2e629K6DgMQRNpjUZ6UIVXjRTUf34X27xUmBXlAGZkH+pQXi74Wbl RPCdY6wudo4ibrcHbGwGtlnj0aDszZlYiOolVVRXggJowl+CvdIlsmVkHbKFsjRm jvrmRZm79hjTdQMwQ2yg+zRDJJVbY1depCN8yUcFo/g1gWLcXB6eNfm97Lv0OkYC +q4fOG4n24guWmTnrbp4+SzBtKiscxC/Ln1e8eoMO7sw73MW5tWOTWC2p9uUqItk E7djhTUfeTa6K+67h6sswnWBsDmbqeKnD3TDSqqPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/+kS+l+ANaHQP5bKtG8qOg4mTAEwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2E3MTIyMzVmLWYyMjgtNGNjZS04MWI0LWQ2ODY4NmRmNWM4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFM37IwDQYJKoZIhvcNAQELBQADggEBADiAbP+euNA0DtH5/9s4zlXYq7sb cXcNxDGxESib3q6m/4+fbNQl9FJz/CQUrRSBeReOF+2/71KDnRjGka/YyVj+Wfn8 6YQoNeAFuXBZDP0FxHhnscAkhEx4dxVQDFq8qH4bUaF5iPIsgUunD9QW0nIwGNa7 r3wEOuc01dXpr1xx6td2tCU1aCQQROBsCwyfcC/K/sTiR3SFCNDNv0MZiJOOGw49 ge0DWvqdW/TJ5CRAGHT8CyIiLvVcKXZCwLgJX92whQHE+j1cQiOQHdErb+oel6eD UyA21Flbfe3Preyc0Ocsva7viYRRJLeIzVV2vNMMpHaVatSBM6IzRXL2Npk= -----END CERTIFICATE-----Generated at Thu Nov 21 17:28:40 2024 by rpki-client on console-fra.rpki-client.org