$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa File: f67538ee-cd29-4883-9251-086023a50dc3.roa (raw, json) Hash identifier: viSnSdZH8OK0qUgmYV8SE5g7pWxJ97oYQ7I7vV77k+k= Subject key identifier: C7:3B:85:CE:AF:D0:15:46:65:2C:DE:EC:14:5D:9B:AA:26:39:18:86 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1FFBE17FDEFB548D700AA408B2C7B030835E8086 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa Signing time: Sat 09 Sep 2023 00:00:00 +0000 ROA not before: Sat 09 Sep 2023 00:00:00 +0000 ROA not after: Sat 14 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:fb:e1:7f:de:fb:54:8d:70:0a:a4:08:b2:c7:b0:30:83:5e:80:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Sep 9 00:00:00 2023 GMT Not After : Oct 14 23:59:59 2023 GMT Subject: serialNumber=6c4ed71876af1f1519609ed8d87b1d751967f2dcf98f24dfc1c969509f53bc95, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:74:70:b2:1f:40:f7:61:a7:46:83:f4:64: a0:b2:a5:f3:d8:40:f4:78:47:63:db:e8:b6:45:b3: 2a:17:dc:1e:0c:47:79:33:da:5c:f5:5d:a0:81:c3: aa:6f:d7:a4:04:44:50:a2:9b:64:8d:c9:74:f4:1e: b9:81:8d:22:c1:69:b3:18:61:73:80:be:40:1d:6a: bf:35:d9:cc:3a:4f:fc:2d:14:89:38:e4:dd:da:4c: 7e:46:80:bf:27:d3:86:32:b7:c9:d6:1c:1c:36:0d: cb:2c:cd:ea:84:8b:54:79:46:63:dd:f9:32:fa:38: d8:ed:bb:96:9f:9b:5c:42:1c:47:08:2e:09:8a:ae: ad:31:bc:48:5a:38:88:30:73:fe:ad:90:32:3d:98: 2e:3a:a7:9d:c6:9c:98:98:78:5a:08:f4:90:6c:33: 78:33:64:fc:3e:43:f4:ca:be:69:df:12:d0:e2:c4: 58:08:fd:6e:ba:9e:b9:4a:8e:1e:58:76:54:ab:44: 5c:58:66:f6:24:18:c4:1c:70:d8:79:a3:98:bc:f3: 3b:c5:a2:85:a9:47:75:41:6e:7b:a2:83:a6:13:96: 9f:f3:ca:ac:e5:cc:63:4f:e5:c0:cf:26:88:47:2d: c6:6c:bd:72:09:23:85:b1:43:14:5c:42:0f:b5:d1: f8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3B:85:CE:AF:D0:15:46:65:2C:DE:EC:14:5D:9B:AA:26:39:18:86 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.227.0/24 Signature Algorithm: sha256WithRSAEncryption 03:b0:54:1d:36:77:bd:c2:b9:a7:e7:7f:6c:4e:30:76:4d:a1: d7:3a:a3:bd:e3:a3:de:dd:6c:ec:2a:cf:7c:40:26:27:56:8c: ee:b6:e3:9c:b2:9b:99:06:68:ce:92:e4:0e:4a:b4:f3:b5:12: 99:39:56:db:e8:05:80:24:4e:62:bf:6e:3b:1e:27:58:82:c3: ea:ce:02:4d:42:3a:5a:c1:f6:b5:8c:85:a3:34:ff:81:77:50: 80:b7:5f:56:89:ad:ee:e7:2a:de:9d:8e:3a:6a:0c:5b:e6:43: 20:3c:28:db:f5:cb:23:bb:0a:bf:ff:2c:3a:37:64:3f:ab:6c: 2c:cf:0e:0a:05:83:eb:b2:60:dc:bc:44:cb:66:57:d2:1f:79: ac:7c:43:71:1b:02:1a:32:ae:e0:d7:79:c5:33:19:e2:80:e5: ed:0a:81:d3:21:04:86:86:74:80:b6:8e:79:31:96:4e:12:5b: e8:66:fa:b9:b7:ac:19:4b:cf:b5:5b:bb:7b:1b:9b:3e:28:a2: c5:b4:6b:41:f7:6a:15:73:83:22:ed:10:39:8b:a7:23:43:01: 6a:73:5d:5d:76:6a:78:a8:53:bd:90:8f:98:6c:c0:b4:7d:66: 23:93:47:9f:3f:ee:76:39:7c:e8:f6:88:52:3d:2d:ca:77:57: e9:7a:4a:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH/vhf977VI1wCqQIssewMINegIYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjMwOTA5MDAwMDAwWhcNMjMxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzRlZDcxODc2YWYxZjE1MTk2MDllZDhkODdiMWQ3NTE5 NjdmMmRjZjk4ZjI0ZGZjMWM5Njk1MDlmNTNiYzk1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpS3Rwsh9A92GnRoP0ZKCypfPYQPR4R2Pb6LZFsyoX3B4M R3kz2lz1XaCBw6pv16QERFCim2SNyXT0HrmBjSLBabMYYXOAvkAdar812cw6T/wt FIk45N3aTH5GgL8n04Yyt8nWHBw2DcsszeqEi1R5RmPd+TL6ONjtu5afm1xCHEcI LgmKrq0xvEhaOIgwc/6tkDI9mC46p53GnJiYeFoI9JBsM3gzZPw+Q/TKvmnfEtDi xFgI/W66nrlKjh5YdlSrRFxYZvYkGMQccNh5o5i88zvFooWpR3VBbnuig6YTlp/z yqzlzGNP5cDPJohHLcZsvXIJI4WxQxRcQg+10fjXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxzuFzq/QFUZlLN7sFF2bqiY5GIYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Y2NzUzOGVlLWNkMjktNDg4My05MjUxLTA4NjAyM2E1MGRjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++MwDQYJKoZIhvcNAQELBQADggEBAAOwVB02d73Cuafnf2xOMHZNodc6 o73jo97dbOwqz3xAJidWjO6245yym5kGaM6S5A5KtPO1Epk5VtvoBYAkTmK/bjse J1iCw+rOAk1COlrB9rWMhaM0/4F3UIC3X1aJre7nKt6djjpqDFvmQyA8KNv1yyO7 Cr//LDo3ZD+rbCzPDgoFg+uyYNy8RMtmV9Ifeax8Q3EbAhoyruDXecUzGeKA5e0K gdMhBIaGdIC2jnkxlk4SW+hm+rm3rBlLz7Vbu3sbmz4oosW0a0H3ahVzgyLtEDmL pyNDAWpzXV12anioU72Qj5hswLR9ZiOTR58/7nY5fOj2iFI9Lcp3V+l6SiE= -----END CERTIFICATE-----Generated at Sat Sep 9 00:20:01 2023 by rpki-client on console-ams.rpki-client.org