$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa File: d5bcdba4-b39f-49d7-81da-145442d6f180.roa (raw, json) Hash identifier: 2Zz8OkiS7qmmaAdfe//4TrHIeRM/vlfkNwcZT/lIdO8= Subject key identifier: 9D:B6:D7:9B:13:C4:86:C7:27:B2:9F:39:DE:EB:4A:2D:DD:2A:E6:42 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 456E29FF41B6D3A52A67B1A4E0DDFF5127134F87 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa Signing time: Mon 11 Nov 2024 00:00:00 +0000 ROA not before: Mon 11 Nov 2024 00:00:00 +0000 ROA not after: Mon 16 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6e:29:ff:41:b6:d3:a5:2a:67:b1:a4:e0:dd:ff:51:27:13:4f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Nov 11 00:00:00 2024 GMT Not After : Dec 16 23:59:59 2024 GMT Subject: serialNumber=739959281abe0738081c1bd7da1f03197fdb30707935fecded8454ab3d17ec2d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3a:35:05:23:78:3b:17:ab:a8:b2:fa:c5:60: 6b:8e:4c:ce:99:bb:5c:01:93:cf:12:14:da:b5:27: 61:e6:b0:6a:6e:b8:a7:cb:44:71:2a:f7:34:9c:2c: b8:99:22:ba:61:08:0e:0c:17:60:e4:d6:f6:b5:6b: 1e:c5:97:2c:72:57:a2:1e:f7:9b:2c:39:4d:65:4f: c6:44:c6:38:cc:dc:b8:d8:91:49:6d:a5:64:50:d8: 41:3a:26:69:53:05:6c:63:66:eb:84:f1:06:84:cd: 5c:08:23:ab:a3:a2:a7:a2:d3:ce:a8:f2:c2:26:d8: ae:a0:7f:b3:cb:c1:42:35:3f:a1:12:8e:4d:76:d0: 6d:2a:28:4a:47:db:9c:ff:d1:47:1c:d5:b6:ea:75: 48:53:47:6e:82:0f:33:32:9a:03:fc:6d:a8:66:c1: 5f:c7:a5:22:77:be:8f:01:7e:d4:20:10:ee:64:35: c9:83:41:9b:a2:d3:d4:c2:1f:03:8b:fb:af:c7:7c: 70:d1:a9:97:50:a5:15:0f:cf:a0:de:88:c2:1f:18: 1c:33:9f:34:33:10:dd:44:12:26:d0:82:ed:41:e7: c8:9d:6e:01:71:47:dd:71:4a:2c:f3:ce:d6:6f:32: 68:34:3b:4c:cf:53:a4:ca:09:6c:1f:0c:b2:f1:bc: 5e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B6:D7:9B:13:C4:86:C7:27:B2:9F:39:DE:EB:4A:2D:DD:2A:E6:42 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.177.0/24 Signature Algorithm: sha256WithRSAEncryption 04:9e:a9:5a:ef:84:ce:93:5f:71:e6:f1:3b:fe:7e:c4:fc:0e: 0c:0d:39:b8:77:9d:98:7f:5a:5b:0e:0b:c5:38:ff:e9:d4:5a: 93:0e:03:24:b7:2c:0e:3a:f7:89:ed:a2:64:74:24:42:d7:70: ea:f0:44:21:33:63:3b:49:8c:75:56:e0:11:0d:b4:76:4a:a6: 34:f8:2f:58:b2:11:5d:8a:cb:3b:87:2a:67:b8:8b:89:7a:3f: 18:bc:28:31:b8:ca:55:48:bf:37:38:18:ca:8e:60:69:bb:ab: fb:b1:de:e9:66:91:3b:50:2c:ad:66:16:e9:16:ad:77:16:95: 36:e7:d7:20:1f:9c:bb:24:36:c4:be:99:4b:e8:8e:56:bb:3b: 46:f1:04:1a:97:bb:c2:1e:3a:7f:00:ab:04:e1:7b:e4:a6:ae: f4:cd:ee:c5:50:90:58:e4:03:92:8b:96:97:af:2a:87:20:b8: ee:a1:5b:fe:8d:2a:05:3d:b1:18:e7:2e:1e:5f:e5:86:56:79: 36:6c:b8:4b:04:17:ba:84:7f:e7:cc:5e:08:7d:71:8c:ec:37: e0:24:53:02:fa:14:e5:d7:9c:da:a1:28:75:cd:c2:51:bf:c0: fb:50:0c:42:32:1e:e2:38:56:89:4d:c5:4e:2f:2d:69:30:24: 96:eb:44:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURW4p/0G206UqZ7Gk4N3/UScTT4cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMTExMDAwMDAwWhcNMjQxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Mzk5NTkyODFhYmUwNzM4MDgxYzFiZDdkYTFmMDMxOTdm ZGIzMDcwNzkzNWZlY2RlZDg0NTRhYjNkMTdlYzJkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJOjUFI3g7F6uosvrFYGuOTM6Zu1wBk88SFNq1J2HmsGpu uKfLRHEq9zScLLiZIrphCA4MF2Dk1va1ax7FlyxyV6Ie95ssOU1lT8ZExjjM3LjY kUltpWRQ2EE6JmlTBWxjZuuE8QaEzVwII6ujoqei086o8sIm2K6gf7PLwUI1P6ES jk120G0qKEpH25z/0Ucc1bbqdUhTR26CDzMymgP8bahmwV/HpSJ3vo8BftQgEO5k NcmDQZui09TCHwOL+6/HfHDRqZdQpRUPz6DeiMIfGBwznzQzEN1EEibQgu1B58id bgFxR91xSizzztZvMmg0O0zPU6TKCWwfDLLxvF6HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnbbXmxPEhscnsp853utKLd0q5kIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Q1YmNkYmE0LWIzOWYtNDlkNy04MWRhLTE0NTQ0MmQ2ZjE4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37EwDQYJKoZIhvcNAQELBQADggEBAASeqVrvhM6TX3Hm8Tv+fsT8DgwN Obh3nZh/WlsOC8U4/+nUWpMOAyS3LA4694ntomR0JELXcOrwRCEzYztJjHVW4BEN tHZKpjT4L1iyEV2KyzuHKme4i4l6Pxi8KDG4ylVIvzc4GMqOYGm7q/ux3ulmkTtQ LK1mFukWrXcWlTbn1yAfnLskNsS+mUvojla7O0bxBBqXu8IeOn8AqwThe+SmrvTN 7sVQkFjkA5KLlpevKocguO6hW/6NKgU9sRjnLh5f5YZWeTZsuEsEF7qEf+fMXgh9 cYzsN+AkUwL6FOXXnNqhKHXNwlG/wPtQDEIyHuI4VolNxU4vLWkwJJbrRKU= -----END CERTIFICATE-----Generated at Mon Nov 25 02:47:16 2024 by rpki-client on console-ams.rpki-client.org