$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/15755613-41b1-467c-a43a-d32ca891fc5d.roa File: 15755613-41b1-467c-a43a-d32ca891fc5d.roa (raw, json) Hash identifier: XEyf9wW7Bg0oWKx+yVprWezFvYMi6WtzBgQoc4eTxNI= Subject key identifier: FB:29:06:25:BE:3F:C9:B0:34:58:E0:FE:CA:5F:3D:7D:ED:A4:09:9D Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 592FA8486F35CDB9E8F817FCD6D9AAC58D2D3543 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/15755613-41b1-467c-a43a-d32ca891fc5d.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 23.234.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2f:a8:48:6f:35:cd:b9:e8:f8:17:fc:d6:d9:aa:c5:8d:2d:35:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=936d3e06d6f5e3087dd19377389f7f8bd3baa7e7ad9e143e02e4e358b2991cc4, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:35:26:85:27:ad:b4:ed:2a:0b:63:45:d7: ff:4a:84:4a:6a:80:ee:6f:12:12:bb:be:fb:42:a9: 0e:7b:07:74:bb:b1:20:d8:a7:cb:26:d1:07:77:e0: 2b:00:0a:75:61:1f:8e:c3:05:f5:45:34:1c:b0:86: cc:f9:81:a0:81:11:64:bc:ea:88:76:ee:f7:f7:81: b3:ae:7b:93:29:04:77:7d:e8:ba:2a:33:0f:4e:d3: a7:cd:a9:25:9f:4a:17:6d:e2:1a:f6:af:57:84:b6: 5a:c6:de:b6:8a:b7:c0:66:87:c5:25:6b:ec:cf:a7: d1:aa:a4:bd:4a:f1:af:a8:b9:17:76:46:52:0a:b2: f6:15:12:6d:39:9c:dd:da:e5:6a:61:77:28:17:35: e7:ad:fd:8c:28:c6:1b:f8:87:9b:44:90:49:46:d4: 3c:78:0b:d7:0b:ef:e1:71:d7:8a:75:1d:85:da:d6: 9e:0f:97:12:30:d5:f2:25:e1:20:ae:7e:d4:65:07: c5:b1:51:c0:e4:0e:c7:8c:4e:fd:33:4e:f6:45:2a: 91:be:34:72:c5:71:0a:b5:13:77:e0:d3:87:77:b7: c8:ae:98:59:b8:22:90:0b:b3:52:37:d5:ad:a4:a5: aa:3d:c5:0c:0e:dc:ba:97:87:36:27:a8:17:42:25: ce:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:29:06:25:BE:3F:C9:B0:34:58:E0:FE:CA:5F:3D:7D:ED:A4:09:9D X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/15755613-41b1-467c-a43a-d32ca891fc5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.234.192.0/18 Signature Algorithm: sha256WithRSAEncryption 46:ec:d0:be:4b:c8:e3:be:42:6f:35:b7:20:2f:57:f7:cd:e8: ad:d6:89:5b:4b:d4:9b:6a:cc:84:aa:53:d5:43:96:f3:ab:ca: ba:1e:18:e5:6e:bf:4b:6a:e2:64:fa:c6:b2:3e:80:be:94:2f: c1:92:c2:33:b8:5d:5a:f2:05:6b:0d:39:0b:cb:9a:ee:3f:07: 5f:31:f1:eb:4c:9e:84:6c:c0:20:9c:12:61:29:a0:69:36:92: 2b:92:13:4b:2d:e9:c4:96:db:cc:ac:bc:97:f3:64:9b:08:38: d8:a3:16:37:29:d2:a8:1e:ac:ed:34:a7:c2:1a:5a:07:de:06: 23:b6:4f:46:22:bf:eb:eb:8a:68:f6:fd:5e:9b:77:10:3e:f4: 56:33:00:94:c3:f0:d6:41:1a:52:7d:a7:18:e8:14:cd:3c:31: 0f:7f:57:89:e9:eb:89:8b:04:5a:e3:37:b5:d3:cb:32:1d:1e: 96:38:31:a4:4e:fc:3d:c8:54:29:84:82:f6:8d:89:b7:6c:37: 6d:08:60:ad:4f:25:70:bc:55:7a:7d:2a:d6:62:a7:19:22:66: a0:04:49:91:9e:ad:40:7d:15:63:e0:d6:6e:07:b0:df:3c:14: 0c:e1:53:87:c6:b9:f9:59:29:36:18:90:e2:b8:a2:f0:c1:11: 6c:63:81:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWS+oSG81zbno+Bf81tmqxY0tNUMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzZkM2UwNmQ2ZjVlMzA4N2RkMTkzNzczODlmN2Y4YmQz YmFhN2U3YWQ5ZTE0M2UwMmU0ZTM1OGIyOTkxY2M0MS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPcTUmhSettO0qC2NF1/9KhEpqgO5vEhK7vvtCqQ57B3S7 sSDYp8sm0Qd34CsACnVhH47DBfVFNBywhsz5gaCBEWS86oh27vf3gbOue5MpBHd9 6LoqMw9O06fNqSWfShdt4hr2r1eEtlrG3raKt8Bmh8Ula+zPp9GqpL1K8a+ouRd2 RlIKsvYVEm05nN3a5WphdygXNeet/Ywoxhv4h5tEkElG1Dx4C9cL7+Fx14p1HYXa 1p4PlxIw1fIl4SCuftRlB8WxUcDkDseMTv0zTvZFKpG+NHLFcQq1E3fg04d3t8iu mFm4IpALs1I31a2kpao9xQwO3LqXhzYnqBdCJc5nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+ykGJb4/ybA0WOD+yl89fe2kCZ0wHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzE1NzU1NjEzLTQxYjEtNDY3Yy1hNDNhLWQzMmNhODkxZmM1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYX6sAwDQYJKoZIhvcNAQELBQADggEBAEbs0L5LyOO+Qm81tyAvV/fN6K3W iVtL1JtqzISqU9VDlvOryroeGOVuv0tq4mT6xrI+gL6UL8GSwjO4XVryBWsNOQvL mu4/B18x8etMnoRswCCcEmEpoGk2kiuSE0st6cSW28ysvJfzZJsIONijFjcp0qge rO00p8IaWgfeBiO2T0Yiv+vrimj2/V6bdxA+9FYzAJTD8NZBGlJ9pxjoFM08MQ9/ V4np64mLBFrjN7XTyzIdHpY4MaRO/D3IVCmEgvaNibdsN20IYK1PJXC8VXp9KtZi pxkiZqAESZGerUB9FWPg1m4HsN88FAzhU4fGuflZKTYYkOK4ovDBEWxjgfA= -----END CERTIFICATE-----Generated at Thu May 2 00:10:37 2024 by rpki-client on console-ams.rpki-client.org