$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa File: bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa (raw, json) Hash identifier: ZxKb6IW/BxKdhGRB9G9sr1jz019FloSTy2n4u09PsJE= Subject key identifier: 21:B1:B7:CE:B9:CF:BE:4A:90:FA:13:84:86:50:67:E5:E1:17:15:38 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 70AD15085ACEEA60C001D280F8860DF0D2A3B448 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa Signing time: Tue 23 Apr 2024 00:00:00 +0000 ROA not before: Tue 23 Apr 2024 00:00:00 +0000 ROA not after: Tue 28 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ad:15:08:5a:ce:ea:60:c0:01:d2:80:f8:86:0d:f0:d2:a3:b4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 23 00:00:00 2024 GMT Not After : May 28 23:59:59 2024 GMT Subject: serialNumber=668f1e97ecc6968090208ef975fa6a99fe46a652a73390dd1a43541a50a90145, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d0:5e:62:69:e4:17:77:a1:8e:a3:76:a3:b5: 43:d4:2b:21:23:ad:8c:fe:2d:ab:19:72:76:fc:39: 5c:5e:45:dd:aa:63:2e:2a:67:0d:e2:e2:38:63:aa: 1b:5a:6c:2a:24:86:cb:b3:a5:d6:a4:a7:cb:74:fa: 4f:84:bf:66:e4:e3:f2:7d:58:83:15:ee:20:65:30: 54:a4:c7:b7:20:80:23:e2:de:fe:7d:c6:4a:28:45: bc:2b:e9:99:1f:e5:08:c2:88:03:8d:79:3e:b7:4f: 49:4a:e5:89:77:af:94:c4:10:12:02:be:70:b1:3c: d2:60:ad:2b:1a:28:5f:ac:78:8e:a4:f8:d3:f5:aa: 66:9f:29:fc:3b:2e:34:ec:3e:66:81:1b:45:d0:e0: 4a:cf:42:97:7d:9a:9f:b1:bf:48:ac:8d:8c:6e:60: 6e:5c:5c:96:e4:d2:07:d3:68:0d:39:bc:28:8d:f8: 37:df:2f:0f:ff:05:80:37:72:e2:4d:18:53:1a:6c: 27:12:82:ae:5a:50:27:87:52:3e:9b:9c:30:01:5e: da:77:7f:c9:d0:fc:ca:4a:1f:75:cd:e7:8e:ac:a6: 0e:85:33:a6:e3:0a:4e:5a:f7:9e:9f:ef:1f:1f:60: d6:9d:ad:9b:ec:ef:be:23:94:95:8b:35:a8:15:11: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B1:B7:CE:B9:CF:BE:4A:90:FA:13:84:86:50:67:E5:E1:17:15:38 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.213.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:b7:1b:21:9f:55:ea:7e:4e:59:95:42:f2:81:52:b0:6e:01: ec:bc:30:37:b5:65:3a:99:69:74:88:6c:01:ee:da:8c:03:4f: ce:bc:73:bb:d6:2e:ff:3e:5f:53:29:5d:fb:ba:46:58:bf:b5: 93:6e:5d:72:70:a2:8e:a3:a7:88:89:dc:65:1d:09:3c:e7:8e: b3:2e:3f:5e:06:90:be:f4:31:14:8d:1e:21:79:a2:b3:7a:5b: 3b:78:07:97:c6:8a:d7:d4:3b:cd:14:70:51:61:90:6c:a8:97: 5c:93:83:6c:8b:7b:d2:16:cc:5e:55:a8:ca:a1:77:d2:51:d1: f3:c1:2d:78:85:88:4a:51:4c:a3:a1:23:ab:a3:21:51:47:d5: 3b:90:cf:02:d9:09:f7:eb:6c:e2:31:7a:92:f1:f8:a1:c9:dc: 4e:89:11:5b:92:60:9f:fc:2c:a9:60:55:f9:ca:78:84:1f:6b: a0:d2:5b:1e:f2:e5:6a:c9:cd:b1:8e:4d:1c:38:f9:70:41:b1: 24:ff:cb:07:2d:08:fb:bf:f5:f1:c1:1c:b1:31:e0:ef:b8:d3: 78:9b:3f:f4:9e:3f:31:a0:bf:fc:b5:30:86:a1:27:4e:62:61: 36:43:77:64:7c:f1:91:9a:65:0a:0b:56:7f:a6:14:0d:32:8b: 6a:45:08:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcK0VCFrO6mDAAdKA+IYN8NKjtEgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQwNDIzMDAwMDAwWhcNMjQwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NjhmMWU5N2VjYzY5NjgwOTAyMDhlZjk3NWZhNmE5OWZl NDZhNjUyYTczMzkwZGQxYTQzNTQxYTUwYTkwMTQ1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH0F5iaeQXd6GOo3ajtUPUKyEjrYz+LasZcnb8OVxeRd2q Yy4qZw3i4jhjqhtabCokhsuzpdakp8t0+k+Ev2bk4/J9WIMV7iBlMFSkx7cggCPi 3v59xkooRbwr6Zkf5QjCiAONeT63T0lK5Yl3r5TEEBICvnCxPNJgrSsaKF+seI6k +NP1qmafKfw7LjTsPmaBG0XQ4ErPQpd9mp+xv0isjYxuYG5cXJbk0gfTaA05vCiN +DffLw//BYA3cuJNGFMabCcSgq5aUCeHUj6bnDABXtp3f8nQ/MpKH3XN546spg6F M6bjCk5a956f7x8fYNadrZvs774jlJWLNagVEQeNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIbG3zrnPvkqQ+hOEhlBn5eEXFTgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2JmYTUxMGVkLWQ0MGItNDU1Mi1hNGQ4LTViYjRjMzBlNDgyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dUwDQYJKoZIhvcNAQELBQADggEBADq3GyGfVep+TlmVQvKBUrBuAey8 MDe1ZTqZaXSIbAHu2owDT868c7vWLv8+X1MpXfu6Rli/tZNuXXJwoo6jp4iJ3GUd CTznjrMuP14GkL70MRSNHiF5orN6Wzt4B5fGitfUO80UcFFhkGyol1yTg2yLe9IW zF5VqMqhd9JR0fPBLXiFiEpRTKOhI6ujIVFH1TuQzwLZCffrbOIxepLx+KHJ3E6J EVuSYJ/8LKlgVfnKeIQfa6DSWx7y5WrJzbGOTRw4+XBBsST/ywctCPu/9fHBHLEx 4O+403ibP/SePzGgv/y1MIahJ05iYTZDd2R88ZGaZQoLVn+mFA0yi2pFCCA= -----END CERTIFICATE-----Generated at Thu May 9 00:38:22 2024 by rpki-client on console-fra.rpki-client.org