$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/30666321-f4cf-497f-852a-1ef98b26ad37.roa File: 30666321-f4cf-497f-852a-1ef98b26ad37.roa (raw, json) Hash identifier: dNGzIrYqq5glYLO0jdtR8ZB843GSU4poykFdyfxQ6mM= Subject key identifier: CE:BC:91:25:E4:13:B7:3C:E2:FD:4B:13:0C:36:45:A0:B6:FF:D2:EF Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 5E1E066CE09044A20ED1625833D65EA768EE75D6 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/30666321-f4cf-497f-852a-1ef98b26ad37.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 66.152.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1e:06:6c:e0:90:44:a2:0e:d1:62:58:33:d6:5e:a7:68:ee:75:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=86423375a9c739d106dacb2cb697e40e8da5306ebf01522152270f9f29c7eee3, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2e:98:42:32:2e:16:05:2a:4c:a4:1a:00:a9: 42:9c:d1:29:fb:66:81:d7:39:8d:72:42:5b:d8:47: 24:ee:07:86:c0:95:82:35:b0:04:76:9d:30:f0:30: a1:01:b2:7c:c2:6a:2c:93:d6:4c:a8:a5:9c:82:b2: 6a:9b:4b:b6:ba:cd:55:a9:6b:94:6f:75:a5:fe:84: cc:a8:3b:26:e6:31:47:ee:50:82:e1:cc:f3:ef:1d: fc:3a:38:6e:95:30:e9:79:ee:d4:06:69:3d:e2:f3: 51:7b:56:c0:3e:b7:5f:94:12:62:74:8d:99:7c:62: 2b:81:9b:d6:f7:12:b2:e0:64:a0:2f:0c:c8:bb:8b: 23:d2:26:21:1a:a1:71:61:14:ce:8e:2c:8a:da:9c: 56:9b:a9:0a:09:7b:f6:b6:e2:56:48:e8:56:fa:3c: 82:d3:7f:91:54:1c:ab:10:7a:eb:da:44:a6:ac:ab: 48:3d:80:fc:9e:f7:b5:3f:16:75:0c:00:43:31:61: 8e:68:07:2f:2d:b1:95:80:5d:d3:6e:a3:cb:1e:2b: a1:ed:ef:a7:6c:da:38:91:6f:8d:aa:2f:f9:09:41: a1:c1:bc:83:da:d0:da:eb:83:81:31:da:47:1d:ad: af:0e:7c:3b:af:5e:14:fa:d8:c8:ba:00:e0:e4:19: 2e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BC:91:25:E4:13:B7:3C:E2:FD:4B:13:0C:36:45:A0:B6:FF:D2:EF X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/30666321-f4cf-497f-852a-1ef98b26ad37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.152.160.0/19 Signature Algorithm: sha256WithRSAEncryption 7a:1c:68:ae:4e:eb:6d:ea:fe:f3:e1:4a:6c:bf:12:a0:02:79: d1:44:cf:20:ae:20:7a:bb:1d:c6:9a:f1:70:b7:d9:60:54:cd: bf:e4:29:69:d9:ef:32:5d:2b:0f:99:a0:af:8d:cf:7c:6f:c6: d4:cf:76:1d:68:0a:6c:b6:c4:98:7e:b5:73:55:ca:31:a3:20: 13:26:3e:c4:9b:29:94:f1:f4:3e:85:57:8e:7e:f4:c0:bd:f4: 56:53:0b:d0:ae:a7:5b:f7:02:a5:b4:d8:c8:37:b1:26:3c:7f: 19:6f:1a:bf:e7:b4:e5:2e:13:00:a2:59:7b:38:2e:70:d6:d3: 38:c2:e9:df:31:f9:30:08:9e:0c:35:09:b0:6b:2f:9e:57:14: c8:6c:29:05:0d:be:eb:b2:2f:65:71:7f:ec:dd:39:24:19:ca: 92:e0:16:2f:f4:b8:14:8f:8f:e4:69:d0:44:e0:7a:51:05:f6: c9:ef:c5:6b:49:5f:ef:71:1d:92:88:bf:28:94:2a:d9:52:b5: 7c:3f:36:3f:10:e1:45:05:b2:c0:45:66:df:c3:9a:f2:06:8f: 9d:58:5a:71:6d:ea:ef:7d:53:3c:10:6a:f9:42:f0:5e:2a:39: b6:7f:47:ae:8d:2e:d4:48:be:34:42:2c:86:1c:f8:35:9c:9c: fc:d7:eb:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXh4GbOCQRKIO0WJYM9Zep2juddYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjQyMzM3NWE5YzczOWQxMDZkYWNiMmNiNjk3ZTQwZThk YTUzMDZlYmYwMTUyMjE1MjI3MGY5ZjI5YzdlZWUzMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtLphCMi4WBSpMpBoAqUKc0Sn7ZoHXOY1yQlvYRyTuB4bA lYI1sAR2nTDwMKEBsnzCaiyT1kyopZyCsmqbS7a6zVWpa5RvdaX+hMyoOybmMUfu UILhzPPvHfw6OG6VMOl57tQGaT3i81F7VsA+t1+UEmJ0jZl8YiuBm9b3ErLgZKAv DMi7iyPSJiEaoXFhFM6OLIranFabqQoJe/a24lZI6Fb6PILTf5FUHKsQeuvaRKas q0g9gPye97U/FnUMAEMxYY5oBy8tsZWAXdNuo8seK6Ht76ds2jiRb42qL/kJQaHB vIPa0Nrrg4Ex2kcdra8OfDuvXhT62Mi6AODkGS6JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzryRJeQTtzzi/UsTDDZFoLb/0u8wHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzMwNjY2MzIxLWY0Y2YtNDk3Zi04NTJhLTFlZjk4YjI2YWQzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVCmKAwDQYJKoZIhvcNAQELBQADggEBAHocaK5O623q/vPhSmy/EqACedFE zyCuIHq7Hcaa8XC32WBUzb/kKWnZ7zJdKw+ZoK+Nz3xvxtTPdh1oCmy2xJh+tXNV yjGjIBMmPsSbKZTx9D6FV45+9MC99FZTC9Cup1v3AqW02Mg3sSY8fxlvGr/ntOUu EwCiWXs4LnDW0zjC6d8x+TAIngw1CbBrL55XFMhsKQUNvuuyL2Vxf+zdOSQZypLg Fi/0uBSPj+Rp0ETgelEF9snvxWtJX+9xHZKIvyiUKtlStXw/Nj8Q4UUFssBFZt/D mvIGj51YWnFt6u99UzwQavlC8F4qObZ/R66NLtRIvjRCLIYc+DWcnPzX6wI= -----END CERTIFICATE-----Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org