$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/1e21f4fe-d578-4808-b9a0-b57a5853318c.roa File: 1e21f4fe-d578-4808-b9a0-b57a5853318c.roa (raw, json) Hash identifier: L6txdajYWof17q8NqkGBMpsQe1WSWE5mydLVu8lwEtI= Subject key identifier: C5:51:FE:90:4C:53:73:6F:6A:30:78:E7:EC:88:F3:99:DF:1F:33:81 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 24BCB6C32628D4FB5D219D101C47E5843A35AD17 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/1e21f4fe-d578-4808-b9a0-b57a5853318c.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 395681 IP address blocks: 23.234.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:bc:b6:c3:26:28:d4:fb:5d:21:9d:10:1c:47:e5:84:3a:35:ad:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=0203049422324c5884ac824dfd896d796faa678a882a3e43ae0be9c024729cdb, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d6:c0:c7:4b:aa:c1:4a:d3:de:86:ca:77:b1: 1d:16:56:51:28:77:04:60:8b:d0:fb:67:e7:f9:8c: c9:57:fd:73:ad:a4:e7:c8:b7:8a:1d:1e:6e:5c:90: 8b:a6:79:20:eb:55:3d:50:5c:66:d7:67:87:bd:e2: f0:a5:60:c8:89:9d:af:6a:21:3d:4a:a1:fa:c7:44: 85:4d:99:2a:6a:19:4c:70:d7:56:4d:d7:29:2f:92: 4d:e3:eb:f1:5a:84:3f:91:98:16:0c:cc:a6:07:f5: dc:a0:6f:bc:2d:8a:ba:2b:ff:48:1e:82:f7:da:b7: 91:53:3d:9a:f5:b7:a8:a8:f4:07:1c:b1:b9:aa:e9: 75:b0:2b:57:68:0a:32:24:91:92:25:aa:38:6f:d0: 24:cd:86:6a:0b:f1:75:16:ea:59:a8:88:c1:e0:ba: b4:64:da:87:67:bc:31:0a:15:82:7a:dc:b9:70:91: 26:a5:11:6b:1f:33:7b:2c:91:6c:d0:f7:d8:2c:1e: a8:37:40:6b:5d:e6:b7:9a:7c:f9:f0:bb:0b:1b:c9: 68:7b:52:54:ca:93:22:5d:b0:a3:4d:b4:83:e5:90: db:bb:3c:0d:1e:43:5a:b8:0e:10:32:4e:63:0a:4a: 78:3b:42:c5:09:90:5f:98:88:da:22:ed:de:1e:c9: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:51:FE:90:4C:53:73:6F:6A:30:78:E7:EC:88:F3:99:DF:1F:33:81 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/1e21f4fe-d578-4808-b9a0-b57a5853318c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.234.192.0/18 Signature Algorithm: sha256WithRSAEncryption 7d:c3:24:97:52:c0:3d:5f:f8:3b:88:9d:5c:40:ec:e1:cc:2a: f1:6e:2f:d5:97:f4:fd:b8:43:00:85:e9:41:ee:9f:f1:65:1e: eb:69:74:a5:89:0e:24:da:a4:87:50:4c:1c:b4:4b:c4:c7:ec: 07:1c:b6:bd:96:30:2e:27:8f:7e:51:87:7b:d5:11:4e:6f:e4: 85:d4:6a:76:99:11:12:2b:95:7b:e7:75:e4:bd:67:11:20:ca: cc:d3:88:d7:1a:3d:65:57:cb:13:19:4f:94:57:82:4c:4e:0b: fb:5f:4a:34:d4:4e:32:b0:c7:ba:2b:d9:a9:71:be:83:00:a0: a3:af:d2:ca:75:62:bd:35:47:d4:86:b7:b7:31:a2:c8:cc:05: c7:02:c7:2b:2f:65:cd:9e:56:84:2e:b3:61:70:02:d2:5f:64: ec:3d:dc:1b:c3:9a:2b:13:fb:fb:3d:03:8b:82:1b:42:15:60: 12:d3:90:ba:ba:42:d6:47:82:31:74:e4:96:b1:a8:a7:bb:01: 2e:ca:db:ca:37:ba:c5:b5:60:9c:ba:98:92:c4:ef:b9:87:34: 0b:1d:b1:ab:b8:0b:34:d3:24:35:38:89:fe:6d:57:53:4c:26: 6e:a1:0a:3f:59:8d:68:ce:63:98:d7:8e:9e:83:d6:64:f6:77: 2d:e4:e5:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJLy2wyYo1PtdIZ0QHEflhDo1rRcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjAzMDQ5NDIyMzI0YzU4ODRhYzgyNGRmZDg5NmQ3OTZm YWE2NzhhODgyYTNlNDNhZTBiZTljMDI0NzI5Y2RiMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCb1sDHS6rBStPehsp3sR0WVlEodwRgi9D7Z+f5jMlX/XOt pOfIt4odHm5ckIumeSDrVT1QXGbXZ4e94vClYMiJna9qIT1KofrHRIVNmSpqGUxw 11ZN1ykvkk3j6/FahD+RmBYMzKYH9dygb7wtiror/0gegvfat5FTPZr1t6io9Acc sbmq6XWwK1doCjIkkZIlqjhv0CTNhmoL8XUW6lmoiMHgurRk2odnvDEKFYJ63Llw kSalEWsfM3sskWzQ99gsHqg3QGtd5reafPnwuwsbyWh7UlTKkyJdsKNNtIPlkNu7 PA0eQ1q4DhAyTmMKSng7QsUJkF+YiNoi7d4eyWRtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxVH+kExTc29qMHjn7Ijzmd8fM4EwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzFlMjFmNGZlLWQ1NzgtNDgwOC1iOWEwLWI1N2E1ODUzMzE4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYX6sAwDQYJKoZIhvcNAQELBQADggEBAH3DJJdSwD1f+DuInVxA7OHMKvFu L9WX9P24QwCF6UHun/FlHutpdKWJDiTapIdQTBy0S8TH7Acctr2WMC4nj35Rh3vV EU5v5IXUanaZERIrlXvndeS9ZxEgyszTiNcaPWVXyxMZT5RXgkxOC/tfSjTUTjKw x7or2alxvoMAoKOv0sp1Yr01R9SGt7cxosjMBccCxysvZc2eVoQus2FwAtJfZOw9 3BvDmisT+/s9A4uCG0IVYBLTkLq6QtZHgjF05JaxqKe7AS7K28o3usW1YJy6mJLE 77mHNAsdsau4CzTTJDU4if5tV1NMJm6hCj9ZjWjOY5jXjp6D1mT2dy3k5U0= -----END CERTIFICATE-----Generated at Tue May 7 01:57:25 2024 by rpki-client on console-fra.rpki-client.org