$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bf4c0c03-c1a0-483c-8c9a-0e7cb2964e12.roa File: bf4c0c03-c1a0-483c-8c9a-0e7cb2964e12.roa (raw, json) Hash identifier: qGVY7fDtUC5mODfo66I2iFxEy13hJpHAKIP5C5ytpNM= Subject key identifier: F8:FC:04:27:95:14:48:FB:4F:90:B3:CC:B5:45:78:10:FE:A3:E0:16 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 07704AFB933AFD895264ED3AD008AB318AA4867E Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bf4c0c03-c1a0-483c-8c9a-0e7cb2964e12.roa Signing time: Wed 30 Oct 2024 00:00:00 +0000 ROA not before: Wed 30 Oct 2024 00:00:00 +0000 ROA not after: Wed 04 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 199.255.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:70:4a:fb:93:3a:fd:89:52:64:ed:3a:d0:08:ab:31:8a:a4:86:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 30 00:00:00 2024 GMT Not After : Dec 4 23:59:59 2024 GMT Subject: serialNumber=a79e39a65e8b419ac5a03dca53db2409b1b75af257f7be2b6e41e89202ccde95, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:1a:81:48:1f:ef:f5:a3:d2:59:7e:fb:63: 32:2d:db:dd:dd:2a:c2:0f:b3:34:73:19:45:af:a2: c8:c9:eb:78:60:28:92:dc:e3:f9:35:48:2c:33:fc: ac:63:32:8c:b7:69:d1:d7:da:88:f0:b9:a7:f9:4d: ac:c5:63:5c:95:8c:0d:2d:92:49:ed:af:d2:80:22: 46:4d:2a:b1:38:54:13:60:f3:a1:1c:b1:27:89:81: 9d:63:b9:ff:d8:a0:30:2f:f4:65:b2:44:86:2e:07: cc:fd:92:98:0f:26:40:a4:8a:25:10:32:3f:46:78: cf:ae:6e:54:78:59:b2:e3:1c:7e:18:d6:ee:d3:ed: 7a:98:f2:55:e8:eb:5d:72:04:2a:6c:96:e9:81:64: 8c:ad:39:bd:d3:15:64:fc:66:31:49:76:6c:0c:84: 3c:37:9f:2e:1e:e0:cd:be:72:b8:12:d2:4b:1d:6c: 74:d0:e9:b2:20:73:11:d8:42:76:94:48:42:71:a7: e8:93:6c:c3:18:2c:b3:87:a1:c0:f7:d7:90:f0:33: a2:ae:5d:62:4f:bc:c6:b7:0e:f0:fc:c7:ff:da:0e: e1:cf:06:0e:ce:bb:0c:3a:27:4e:06:61:86:1e:d8: 22:3f:22:f2:00:c0:67:da:9d:f4:ec:bd:e6:ed:a1: 4a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FC:04:27:95:14:48:FB:4F:90:B3:CC:B5:45:78:10:FE:A3:E0:16 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bf4c0c03-c1a0-483c-8c9a-0e7cb2964e12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.255.192.0/22 Signature Algorithm: sha256WithRSAEncryption 32:59:31:15:4e:3d:ca:7d:b0:f7:b6:8c:b0:15:8e:27:89:26: 10:bc:18:c8:e2:a0:6a:dc:b4:e6:83:eb:d7:4d:5d:56:fa:9c: fd:a2:3f:a0:c6:79:87:25:22:01:df:05:34:e4:aa:92:b0:1d: 31:6e:9c:d1:e9:f6:b3:24:86:13:94:c6:81:37:e5:98:5b:af: 02:04:9d:81:33:e8:fb:1a:21:2a:8d:89:0d:71:fa:43:2f:44: d0:94:40:85:10:14:45:a7:60:99:2d:08:b9:bb:8e:6d:90:7a: 2e:06:f8:b8:78:82:4b:de:78:52:98:cb:8c:62:a4:51:be:be: f0:c1:8c:ed:e1:d9:7d:ab:df:91:19:d7:52:78:1d:0a:8d:ef: ff:3a:1f:45:8d:22:b9:a5:16:5e:da:b7:84:32:0f:ba:27:86: 51:68:ce:9f:48:9d:61:5f:a4:9c:54:bb:86:28:df:57:da:7f: e1:a1:40:e3:68:7d:2f:5c:87:92:f3:d8:6f:7f:67:a1:6c:b7: b8:4c:57:90:59:4b:51:b6:db:ea:50:73:ec:b7:b3:fd:13:f1: 09:80:78:3d:d4:b8:5c:50:50:cd:ef:67:7a:85:8d:b1:43:70: e5:a6:29:91:34:d7:a1:d2:53:d6:96:5b:54:78:65:67:59:a6: f7:9f:c8:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB3BK+5M6/YlSZO060AirMYqkhn4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMDMwMDAwMDAwWhcNMjQxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzllMzlhNjVlOGI0MTlhYzVhMDNkY2E1M2RiMjQwOWIx Yjc1YWYyNTdmN2JlMmI2ZTQxZTg5MjAyY2NkZTk1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFohqBSB/v9aPSWX77YzIt293dKsIPszRzGUWvosjJ63hg KJLc4/k1SCwz/KxjMoy3adHX2ojwuaf5TazFY1yVjA0tkkntr9KAIkZNKrE4VBNg 86EcsSeJgZ1juf/YoDAv9GWyRIYuB8z9kpgPJkCkiiUQMj9GeM+ublR4WbLjHH4Y 1u7T7XqY8lXo611yBCpslumBZIytOb3TFWT8ZjFJdmwMhDw3ny4e4M2+crgS0ksd bHTQ6bIgcxHYQnaUSEJxp+iTbMMYLLOHocD315DwM6KuXWJPvMa3DvD8x//aDuHP Bg7Ouww6J04GYYYe2CI/IvIAwGfanfTsvebtoUpzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+PwEJ5UUSPtPkLPMtUV4EP6j4BYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2JmNGMwYzAzLWMxYTAtNDgzYy04YzlhLTBlN2NiMjk2NGUxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALH/8AwDQYJKoZIhvcNAQELBQADggEBADJZMRVOPcp9sPe2jLAVjieJJhC8 GMjioGrctOaD69dNXVb6nP2iP6DGeYclIgHfBTTkqpKwHTFunNHp9rMkhhOUxoE3 5ZhbrwIEnYEz6PsaISqNiQ1x+kMvRNCUQIUQFEWnYJktCLm7jm2Qei4G+Lh4gkve eFKYy4xipFG+vvDBjO3h2X2r35EZ11J4HQqN7/86H0WNIrmlFl7at4QyD7onhlFo zp9InWFfpJxUu4Yo31faf+GhQONofS9ch5Lz2G9/Z6Fst7hMV5BZS1G22+pQc+y3 s/0T8QmAeD3UuFxQUM3vZ3qFjbFDcOWmKZE016HSU9aWW1R4ZWdZpvefyC4= -----END CERTIFICATE-----Generated at Thu Nov 21 17:28:40 2024 by rpki-client on console-fra.rpki-client.org