$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e41ada77-fa4f-4da3-a532-14382438f575.roa File: e41ada77-fa4f-4da3-a532-14382438f575.roa (raw, json) Hash identifier: UNSt8c51h8OaB+rjSheSr1riBjV8fiZxb57PyqEQCEg= Subject key identifier: C1:7F:F6:87:C3:E0:81:6C:22:76:01:9A:F6:3F:F9:4F:CA:C2:88:38 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1404B9BFE9D89070C74DF2D688D44A35D4D7B9DA Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e41ada77-fa4f-4da3-a532-14382438f575.roa Signing time: Tue 23 Apr 2024 00:00:00 +0000 ROA not before: Tue 23 Apr 2024 00:00:00 +0000 ROA not after: Tue 28 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 76.223.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:04:b9:bf:e9:d8:90:70:c7:4d:f2:d6:88:d4:4a:35:d4:d7:b9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 23 00:00:00 2024 GMT Not After : May 28 23:59:59 2024 GMT Subject: serialNumber=b5b850c76566a7b17cc30a90743f326565bf78337b0c0653661db088f60e901b, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:90:88:64:c7:50:66:84:a4:f4:c6:95:36:e3: 00:e4:e6:40:7c:9c:a6:29:fc:ee:ce:24:20:c3:c8: 96:34:56:f3:22:82:50:f4:2b:c8:b7:1f:3b:0b:8a: 5d:d3:31:49:d2:92:09:29:74:1c:c9:38:37:89:71: d6:5e:e6:f6:60:2c:87:88:12:4f:34:50:fc:9e:42: 9f:fe:05:68:d8:f0:d7:03:1b:ff:f6:be:8f:03:ad: 99:cf:b5:df:fa:33:7c:e3:c0:24:89:ae:3b:ff:66: f7:c9:b1:09:2b:e3:c0:22:0c:0e:99:56:4d:8b:0f: f2:a4:1b:9f:d9:6b:73:84:11:09:e7:27:e0:ad:f3: e7:e9:dc:d9:7d:67:c9:05:58:dc:ed:62:86:77:c3: 0d:b1:aa:27:77:7c:49:58:8e:a4:21:b2:73:db:b5: dd:14:dc:25:3e:fb:77:7f:f8:77:88:3c:78:84:1e: 79:8d:de:7c:8e:1c:57:ff:bf:b1:32:d9:7c:1f:1c: 8c:2f:dd:84:a4:af:27:08:0b:b6:b0:3e:1b:8f:ad: 62:10:35:3c:4d:85:35:8c:5a:a7:76:36:71:0b:9c: 67:2a:bb:7a:2a:a7:c8:d2:bb:1d:4e:97:e9:89:f4: fc:d7:54:7d:2a:4f:15:41:c7:ab:79:66:fb:b8:09: da:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7F:F6:87:C3:E0:81:6C:22:76:01:9A:F6:3F:F9:4F:CA:C2:88:38 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e41ada77-fa4f-4da3-a532-14382438f575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.191.0/24 Signature Algorithm: sha256WithRSAEncryption 16:87:81:bf:ae:80:a3:61:f7:98:22:28:f5:ac:22:34:65:a1: 13:2a:7d:c4:42:43:6d:17:79:3f:98:e5:e4:0a:3f:b0:0b:ad: 8a:1f:a9:c8:49:b7:0f:40:a6:05:4b:4a:ba:75:aa:c0:73:75: ae:07:eb:43:5e:8e:d7:2d:7a:50:de:d0:ce:b6:f1:a5:af:55: 26:84:51:07:ac:2d:0c:92:93:96:a6:72:af:f6:ca:19:9c:32: 97:b2:39:1c:2b:52:89:0d:09:f3:92:a6:d5:91:36:62:bf:01: af:74:0a:ef:3a:1e:02:21:ec:ef:1a:ff:4f:ff:b5:4e:19:e7: 82:f5:59:4b:da:28:16:1f:13:66:5a:b1:23:10:37:c8:65:85: 5b:64:af:22:54:b2:d0:48:ec:cc:af:d3:b4:14:67:45:83:53: 9a:b4:85:69:b5:81:8b:47:ee:cc:61:a6:47:b7:f3:8f:cc:81: 3d:71:5b:75:8e:ae:40:ab:29:ab:14:67:09:9f:09:ec:4c:02: c3:46:86:af:55:63:71:f2:bb:a5:54:44:bf:f1:4f:e9:49:34: 7f:99:49:7f:c4:40:ce:a7:d3:0c:a2:ac:fd:c1:1a:e2:5d:65: 4d:cc:bb:37:5b:d1:17:6f:bc:e8:ea:20:d4:88:b9:99:16:9b: 00:96:66:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFAS5v+nYkHDHTfLWiNRKNdTXudowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQwNDIzMDAwMDAwWhcNMjQwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNWI4NTBjNzY1NjZhN2IxN2NjMzBhOTA3NDNmMzI2NTY1 YmY3ODMzN2IwYzA2NTM2NjFkYjA4OGY2MGU5MDFiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+kIhkx1BmhKT0xpU24wDk5kB8nKYp/O7OJCDDyJY0VvMi glD0K8i3HzsLil3TMUnSkgkpdBzJODeJcdZe5vZgLIeIEk80UPyeQp/+BWjY8NcD G//2vo8DrZnPtd/6M3zjwCSJrjv/ZvfJsQkr48AiDA6ZVk2LD/KkG5/Za3OEEQnn J+Ct8+fp3Nl9Z8kFWNztYoZ3ww2xqid3fElYjqQhsnPbtd0U3CU++3d/+HeIPHiE HnmN3nyOHFf/v7Ey2XwfHIwv3YSkrycIC7awPhuPrWIQNTxNhTWMWqd2NnELnGcq u3oqp8jSux1Ol+mJ9PzXVH0qTxVBx6t5Zvu4CdqlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwX/2h8PggWwidgGa9j/5T8rCiDgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2U0MWFkYTc3LWZhNGYtNGRhMy1hNTMyLTE0MzgyNDM4ZjU3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM378wDQYJKoZIhvcNAQELBQADggEBABaHgb+ugKNh95giKPWsIjRloRMq fcRCQ20XeT+Y5eQKP7ALrYofqchJtw9ApgVLSrp1qsBzda4H60NejtctelDe0M62 8aWvVSaEUQesLQySk5amcq/2yhmcMpeyORwrUokNCfOSptWRNmK/Aa90Cu86HgIh 7O8a/0//tU4Z54L1WUvaKBYfE2ZasSMQN8hlhVtkryJUstBI7Myv07QUZ0WDU5q0 hWm1gYtH7sxhpke384/MgT1xW3WOrkCrKasUZwmfCexMAsNGhq9VY3Hyu6VURL/x T+lJNH+ZSX/EQM6n0wyirP3BGuJdZU3Muzdb0RdvvOjqINSIuZkWmwCWZjQ= -----END CERTIFICATE-----Generated at Thu May 2 00:52:49 2024 by rpki-client on console-ams.rpki-client.org