$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa File: efff1c41-4813-4726-a794-2bd64d641531.roa (raw, json) Hash identifier: BfICcHQ8OYYkZsMTTXWyUkGKa/jkBCB7fNx6+oyLx94= Subject key identifier: 77:05:D9:05:6C:80:25:15:5C:CA:F0:24:BD:DC:FD:00:2B:87:05:75 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 495399C3D48F542537108C1DBEA6536CA0E0CC24 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa Signing time: Sat 09 Sep 2023 00:00:00 +0000 ROA not before: Sat 09 Sep 2023 00:00:00 +0000 ROA not after: Sat 14 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:53:99:c3:d4:8f:54:25:37:10:8c:1d:be:a6:53:6c:a0:e0:cc:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Sep 9 00:00:00 2023 GMT Not After : Oct 14 23:59:59 2023 GMT Subject: serialNumber=3dfb6e972eb7864aeacff1e599d02f3a54e31a00a085dd107b6a8b58a8cc34ef, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:b7:a5:e7:c9:26:02:9d:aa:9e:ab:fe:55: 6f:39:9a:81:c0:e9:3d:06:d0:e9:77:53:76:c7:1f: fd:94:be:8b:f2:33:ac:94:a3:5f:a8:b0:7d:4e:ff: a1:aa:02:59:a9:6f:15:4f:3b:0a:c8:e3:45:29:91: 08:4e:7d:c0:07:99:75:4f:35:92:bd:e1:eb:46:ba: bf:9b:ef:15:e9:ac:f1:02:a4:45:64:4c:49:ec:53: 25:d2:74:ae:35:28:95:c9:7c:ac:26:53:62:b4:2e: c0:b1:f9:6f:b4:11:8e:fb:59:31:b9:d0:23:93:da: 5c:93:7a:cb:ff:be:ae:a2:2a:1e:10:8f:ac:6f:04: 22:2a:1d:be:5e:e6:05:6b:89:4d:d8:73:23:5a:97: 68:68:e3:9e:b5:ab:10:39:f7:4b:b5:be:6d:0a:9f: b5:af:54:16:f0:f6:b4:d5:7c:50:98:df:ad:e4:42: 3e:45:11:e1:21:fb:6f:eb:d7:4e:f9:47:2f:e2:70: 77:26:7e:92:47:b9:5d:99:20:27:75:11:fe:97:0c: 36:45:c8:ec:22:da:34:51:24:12:9b:1e:e4:65:fb: d0:02:60:e0:f6:89:53:dd:1c:7d:5b:cf:8a:72:cd: 93:b9:32:ed:cb:ff:a7:96:9c:8c:99:07:6d:22:34: 97:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:05:D9:05:6C:80:25:15:5C:CA:F0:24:BD:DC:FD:00:2B:87:05:75 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.235.0/24 Signature Algorithm: sha256WithRSAEncryption 83:11:9b:05:d8:4d:c5:ee:df:4c:05:e0:a2:10:84:4d:76:bc: 3f:64:79:a8:35:3e:2c:6b:4e:b5:7b:26:49:2a:a3:a2:6f:cf: e0:6c:08:32:dd:29:ff:0d:4c:dc:26:75:6f:f8:d6:2a:58:f4: 71:7f:12:c6:22:17:22:55:97:4b:58:47:c5:e1:13:88:a6:5d: e3:6d:c2:47:c4:cf:3e:08:c8:de:4d:cd:02:2c:1f:30:52:ba: 97:68:81:fd:ec:34:23:c2:7f:57:a9:13:ec:b8:f4:28:5e:45: d5:60:0b:8c:bc:74:f8:09:e3:2a:38:d1:d6:0c:a1:ab:71:1c: ab:9d:c7:64:79:83:71:29:6e:97:72:62:d3:e0:f7:63:38:53: f8:c2:75:6c:68:d7:70:19:23:62:83:aa:b3:e9:61:7a:38:dd: f6:4b:8e:76:a5:39:8a:62:3c:23:1e:00:49:14:12:9f:0e:13: 88:b8:06:95:33:8c:be:c2:d2:23:cd:95:a5:00:d2:f8:c9:d0: 52:16:39:df:92:89:9d:58:9b:4e:f4:bc:12:29:36:7e:c3:d6: 5f:1b:9c:12:3a:8f:19:84:83:49:7e:a8:bf:a8:d8:ad:35:d1: db:13:c2:20:be:10:bf:d4:44:19:50:c8:12:d0:dc:bb:51:b9: 5e:65:fb:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSVOZw9SPVCU3EIwdvqZTbKDgzCQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjMwOTA5MDAwMDAwWhcNMjMxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZGZiNmU5NzJlYjc4NjRhZWFjZmYxZTU5OWQwMmYzYTU0 ZTMxYTAwYTA4NWRkMTA3YjZhOGI1OGE4Y2MzNGVmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpW7el58kmAp2qnqv+VW85moHA6T0G0Ol3U3bHH/2Uvovy M6yUo1+osH1O/6GqAlmpbxVPOwrI40UpkQhOfcAHmXVPNZK94etGur+b7xXprPEC pEVkTEnsUyXSdK41KJXJfKwmU2K0LsCx+W+0EY77WTG50COT2lyTesv/vq6iKh4Q j6xvBCIqHb5e5gVriU3YcyNal2ho4561qxA590u1vm0Kn7WvVBbw9rTVfFCY363k Qj5FEeEh+2/r1075Ry/icHcmfpJHuV2ZICd1Ef6XDDZFyOwi2jRRJBKbHuRl+9AC YOD2iVPdHH1bz4pyzZO5Mu3L/6eWnIyZB20iNJc/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdwXZBWyAJRVcyvAkvdz9ACuHBXUwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2VmZmYxYzQxLTQ4MTMtNDcyNi1hNzk0LTJiZDY0ZDY0MTUzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++swDQYJKoZIhvcNAQELBQADggEBAIMRmwXYTcXu30wF4KIQhE12vD9k eag1PixrTrV7Jkkqo6Jvz+BsCDLdKf8NTNwmdW/41ipY9HF/EsYiFyJVl0tYR8Xh E4imXeNtwkfEzz4IyN5NzQIsHzBSupdogf3sNCPCf1epE+y49CheRdVgC4y8dPgJ 4yo40dYMoatxHKudx2R5g3EpbpdyYtPg92M4U/jCdWxo13AZI2KDqrPpYXo43fZL jnalOYpiPCMeAEkUEp8OE4i4BpUzjL7C0iPNlaUA0vjJ0FIWOd+SiZ1Ym070vBIp Nn7D1l8bnBI6jxmEg0l+qL+o2K010dsTwiC+EL/URBlQyBLQ3LtRuV5l+xs= -----END CERTIFICATE-----Generated at Sat Sep 9 00:20:01 2023 by rpki-client on console-ams.rpki-client.org