$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa File: efff1c41-4813-4726-a794-2bd64d641531.roa (raw, json) Hash identifier: bSG2b432pcOy+f1Ku7mJgLOn8+6g7Nvo7HXQALAjIHA= Subject key identifier: 29:3C:7E:3D:F6:85:D3:90:4B:4E:77:3A:19:6C:69:7A:8F:C8:65:AE Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 13403150AC79534189ABD5C0D03AC01C4B90428B Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa Signing time: Mon 11 Nov 2024 00:00:00 +0000 ROA not before: Mon 11 Nov 2024 00:00:00 +0000 ROA not after: Mon 16 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:40:31:50:ac:79:53:41:89:ab:d5:c0:d0:3a:c0:1c:4b:90:42:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Nov 11 00:00:00 2024 GMT Not After : Dec 16 23:59:59 2024 GMT Subject: serialNumber=b6e2c73a8faf041bc78b43b17a47ab3c4cf633db1441175870ec54cb50ea276f, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:cc:44:eb:29:4d:28:5b:4b:48:a0:85:0c: 78:b9:e2:17:a2:5d:c0:bb:41:14:9d:15:99:96:d7: d9:8b:a7:46:c3:ad:26:dc:ad:5a:bb:da:91:ff:8b: 16:a7:c9:bb:51:72:6c:ae:cd:cb:88:5a:09:8e:74: 35:90:d2:70:af:c9:34:3e:a8:23:af:0e:bd:c0:7a: 5e:ec:f7:f3:db:a1:62:b8:5c:f3:32:83:3e:20:67: 2c:45:d0:e1:19:8a:cc:44:34:31:c1:ac:6d:21:1a: d2:c8:56:7e:20:85:b0:65:dc:84:6e:92:83:da:42: b7:04:84:43:f8:11:d8:f4:42:f6:4f:d4:6a:2e:35: 2b:ef:fe:1b:58:4e:0a:5a:18:9b:80:f4:09:f4:72: bf:fd:d1:13:23:41:93:31:9e:de:2d:4b:9e:03:a0: 53:be:44:49:37:49:fa:3b:57:20:6e:50:ee:af:ba: 42:2b:df:49:03:98:93:b5:16:96:e0:27:b7:35:0d: 06:81:24:9d:82:d1:9f:49:b2:80:23:05:38:36:fd: 90:74:25:c8:d7:ec:ff:6c:44:9c:ea:1f:7a:6b:b8: 9d:c4:95:a8:b0:1e:64:87:bd:82:2f:91:19:54:9a: 9d:ef:be:c5:f0:0c:77:b5:1b:64:25:37:96:e7:d0: 17:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3C:7E:3D:F6:85:D3:90:4B:4E:77:3A:19:6C:69:7A:8F:C8:65:AE X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.235.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:84:26:ed:40:38:fe:60:6c:78:d3:6e:a4:df:3e:ca:6d:5c: 9d:1d:93:6c:a9:c3:8f:3b:9e:22:0f:c7:5b:4f:4d:73:f7:e6: 02:f0:b7:50:53:3b:70:2a:e2:c5:a4:3c:95:d2:df:e5:77:3f: 4a:14:8d:92:3e:b9:92:3c:b0:d7:37:45:ae:00:71:67:08:32: 88:d6:82:05:03:cd:44:16:73:80:97:4b:12:1d:76:cc:6e:a8: e8:b7:a7:a3:20:87:ec:e9:ac:ee:70:ce:0c:58:23:97:27:9e: e5:77:81:4c:7c:2a:e5:c7:95:5b:fc:63:28:ca:71:72:29:f8: c0:e7:31:e3:f6:7b:5f:75:d2:a5:88:72:6e:0c:79:f0:31:4a: d9:6f:c2:a9:0b:dd:b0:95:cc:f9:77:4a:d1:dd:9c:20:8e:c6: f8:30:4c:37:2f:e3:95:6b:70:74:26:04:d0:fd:13:21:69:7f: b0:3c:b3:9d:45:fc:ab:8b:ec:b4:99:fb:23:41:26:ff:9b:56: af:68:6c:45:8f:6d:bf:5f:36:ed:16:02:c7:ae:c6:87:26:8a: 8c:97:65:c3:4d:0d:18:28:6b:3d:32:2f:8b:58:4c:0e:e7:bb: c3:c2:6c:6b:35:a0:93:e1:60:bd:f4:2e:2b:c8:90:2c:83:17: 75:b2:a6:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE0AxUKx5U0GJq9XA0DrAHEuQQoswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjQxMTExMDAwMDAwWhcNMjQxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNmUyYzczYThmYWYwNDFiYzc4YjQzYjE3YTQ3YWIzYzRj ZjYzM2RiMTQ0MTE3NTg3MGVjNTRjYjUwZWEyNzZmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM2cxE6ylNKFtLSKCFDHi54heiXcC7QRSdFZmW19mLp0bD rSbcrVq72pH/ixanybtRcmyuzcuIWgmOdDWQ0nCvyTQ+qCOvDr3Ael7s9/PboWK4 XPMygz4gZyxF0OEZisxENDHBrG0hGtLIVn4ghbBl3IRukoPaQrcEhEP4Edj0QvZP 1GouNSvv/htYTgpaGJuA9An0cr/90RMjQZMxnt4tS54DoFO+REk3Sfo7VyBuUO6v ukIr30kDmJO1FpbgJ7c1DQaBJJ2C0Z9JsoAjBTg2/ZB0JcjX7P9sRJzqH3pruJ3E laiwHmSHvYIvkRlUmp3vvsXwDHe1G2QlN5bn0BdBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKTx+PfaF05BLTnc6GWxpeo/IZa4wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2VmZmYxYzQxLTQ4MTMtNDcyNi1hNzk0LTJiZDY0ZDY0MTUzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++swDQYJKoZIhvcNAQELBQADggEBAIqEJu1AOP5gbHjTbqTfPsptXJ0d k2ypw487niIPx1tPTXP35gLwt1BTO3Aq4sWkPJXS3+V3P0oUjZI+uZI8sNc3Ra4A cWcIMojWggUDzUQWc4CXSxIddsxuqOi3p6Mgh+zprO5wzgxYI5cnnuV3gUx8KuXH lVv8YyjKcXIp+MDnMeP2e1910qWIcm4MefAxStlvwqkL3bCVzPl3StHdnCCOxvgw TDcv45VrcHQmBND9EyFpf7A8s51F/KuL7LSZ+yNBJv+bVq9obEWPbb9fNu0WAseu xocmioyXZcNNDRgoaz0yL4tYTA7nu8PCbGs1oJPhYL30LivIkCyDF3WypiY= -----END CERTIFICATE-----Generated at Thu Nov 21 18:50:38 2024 by rpki-client on console-ams.rpki-client.org