$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa File: bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa (raw, json) Hash identifier: uSPwhx9Xq158AUw+RwpJVRpDAP4H08HzT/FZAk02L4Y= Subject key identifier: 38:4A:77:49:64:D8:97:63:17:57:ED:50:E0:6C:6D:43:32:66:0C:E5 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 744EBE01EA78B3B2222FED04DAF1CC4F91E326F9 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa Signing time: Mon 11 Nov 2024 00:00:00 +0000 ROA not before: Mon 11 Nov 2024 00:00:00 +0000 ROA not after: Mon 16 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:4e:be:01:ea:78:b3:b2:22:2f:ed:04:da:f1:cc:4f:91:e3:26:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Nov 11 00:00:00 2024 GMT Not After : Dec 16 23:59:59 2024 GMT Subject: serialNumber=372467525e3cd02c5f7baef269bd5173e362d3a6406885ec6f6d3592bc802240, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:93:b3:d6:ea:e1:4f:ad:40:af:da:50:41:c4: 98:f2:68:9a:6e:0f:b3:a0:89:e1:82:5c:bd:70:06: 36:a7:95:0c:20:46:d0:fd:01:db:ec:c2:57:7f:42: 35:b9:5a:56:3d:96:42:0d:27:86:7c:37:4a:e9:fc: 09:e4:7f:52:1d:d1:0d:bb:92:ed:ce:3b:4f:82:2f: db:ac:03:9c:6f:da:7f:3f:d8:58:a1:db:12:c8:2f: 53:c6:ed:79:79:a9:e4:e5:0f:0f:30:d2:74:d7:71: 5d:c4:6d:2b:22:1a:de:78:7c:62:51:2b:46:27:c3: 64:6f:80:a9:90:e1:b7:6f:e6:ad:ab:88:50:6f:19: e5:2a:25:9b:12:05:94:cb:a6:77:3b:0f:25:dc:95: 8d:2e:53:02:17:f5:3d:0a:9e:f0:33:1f:f9:2e:37: c4:37:fb:ed:1a:7c:65:7d:ff:e9:c8:d8:8f:05:42: 3b:68:2c:a9:78:8b:60:d8:5f:57:6d:5f:63:b3:f3: 91:7a:da:7c:77:5a:17:53:83:26:c1:49:21:71:75: a2:00:d9:75:ad:42:87:6b:ac:6e:57:ab:2b:fe:32: a1:e0:71:66:6e:f3:94:1f:d1:82:65:8d:31:9b:5b: ff:8b:c4:8f:63:f7:8f:ef:bc:3f:61:7a:36:f0:8c: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4A:77:49:64:D8:97:63:17:57:ED:50:E0:6C:6D:43:32:66:0C:E5 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.213.0/24 Signature Algorithm: sha256WithRSAEncryption 78:59:d3:11:b1:11:86:da:f8:21:6e:a1:42:dc:2c:92:bd:5a: cb:61:5e:0b:8e:0e:ec:b5:63:ce:2b:db:38:a2:e1:23:20:20: c7:39:83:b5:a1:59:31:9c:af:c0:44:50:e4:64:34:13:89:cb: ae:d3:2c:f6:33:1e:89:4c:a1:06:35:d7:01:b7:ee:24:f2:3f: 39:c6:f7:c6:3d:ac:31:4e:ce:03:9c:3c:2b:f0:d5:3b:fd:ac: 43:bb:ce:97:80:33:5c:06:a1:cb:72:dc:f8:50:e6:25:26:0c: 9e:00:d8:05:16:7e:c0:52:d1:05:af:d1:a4:d7:fc:fd:41:15: 0e:30:93:1a:14:d3:bb:8b:ad:3b:2b:9c:2f:8e:33:e6:53:46: 86:f3:3b:14:7d:4d:ce:96:ca:b3:ec:99:07:7b:ba:97:9b:b5: 03:ef:d7:c8:aa:3e:70:c1:1c:e4:50:fd:4c:f0:af:6d:4c:7e: 86:2d:83:1a:c4:05:52:cf:72:c4:dc:c8:9c:e0:71:c7:44:9d: 2a:fb:7b:49:1b:d2:ea:bd:14:b4:f4:96:e7:0b:fb:f4:b0:48: f4:17:3e:13:91:65:89:da:c4:e5:90:fc:99:e9:94:92:61:df: 68:f1:2f:34:d7:31:56:2a:a4:2e:80:8e:6d:83:4b:f1:95:1f: 06:d1:cd:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdE6+Aep4s7IiL+0E2vHMT5HjJvkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMTExMDAwMDAwWhcNMjQxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNzI0Njc1MjVlM2NkMDJjNWY3YmFlZjI2OWJkNTE3M2Uz NjJkM2E2NDA2ODg1ZWM2ZjZkMzU5MmJjODAyMjQwMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAk7PW6uFPrUCv2lBBxJjyaJpuD7OgieGCXL1wBjanlQwg RtD9Advswld/QjW5WlY9lkINJ4Z8N0rp/Ankf1Id0Q27ku3OO0+CL9usA5xv2n8/ 2Fih2xLIL1PG7Xl5qeTlDw8w0nTXcV3EbSsiGt54fGJRK0Ynw2RvgKmQ4bdv5q2r iFBvGeUqJZsSBZTLpnc7DyXclY0uUwIX9T0KnvAzH/kuN8Q3++0afGV9/+nI2I8F QjtoLKl4i2DYX1dtX2Oz85F62nx3WhdTgybBSSFxdaIA2XWtQodrrG5Xqyv+MqHg cWZu85Qf0YJljTGbW/+LxI9j94/vvD9hejbwjCg9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOEp3SWTYl2MXV+1Q4GxtQzJmDOUwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2JmYTUxMGVkLWQ0MGItNDU1Mi1hNGQ4LTViYjRjMzBlNDgyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dUwDQYJKoZIhvcNAQELBQADggEBAHhZ0xGxEYba+CFuoULcLJK9Wsth XguODuy1Y84r2zii4SMgIMc5g7WhWTGcr8BEUORkNBOJy67TLPYzHolMoQY11wG3 7iTyPznG98Y9rDFOzgOcPCvw1Tv9rEO7zpeAM1wGocty3PhQ5iUmDJ4A2AUWfsBS 0QWv0aTX/P1BFQ4wkxoU07uLrTsrnC+OM+ZTRobzOxR9Tc6WyrPsmQd7upebtQPv 18iqPnDBHORQ/Uzwr21MfoYtgxrEBVLPcsTcyJzgccdEnSr7e0kb0uq9FLT0lucL +/SwSPQXPhORZYnaxOWQ/JnplJJh32jxLzTXMVYqpC6Ajm2DS/GVHwbRzZ4= -----END CERTIFICATE-----Generated at Thu Nov 21 17:28:40 2024 by rpki-client on console-fra.rpki-client.org