$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/341f0896-41e0-4178-9313-ebfe71b5c449.roa File: 341f0896-41e0-4178-9313-ebfe71b5c449.roa (raw, json) Hash identifier: 5/7uGotikd+6qQRB78z6pFz7azd/4KWgyRFjcq06auE= Subject key identifier: 38:A3:CB:54:1E:A9:F6:63:A3:CB:0B:55:67:5F:61:CE:84:72:10:BD Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 5107421F14F8097BD9BA07E86633725A80DDC2E0 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/341f0896-41e0-4178-9313-ebfe71b5c449.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 96.43.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:07:42:1f:14:f8:09:7b:d9:ba:07:e8:66:33:72:5a:80:dd:c2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=917fdca049d830a64ea0427ef2be0bacdb5eec5dbbd13b0b5f38f1d5c9a4d24b, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:b9:85:d7:ff:32:60:c7:ff:74:98:8f:1a: 95:58:57:2d:d1:85:e2:fa:6c:8e:a3:0b:8e:4c:71: 65:04:74:a0:d9:e9:c0:d9:f8:8e:08:fe:51:08:67: 83:66:87:25:38:30:09:43:d8:ed:06:48:cd:f1:98: df:42:90:46:4b:33:ce:b7:a8:5a:8f:8f:d9:e8:f6: 7c:a2:87:17:2f:8f:21:92:ab:69:7b:73:31:1e:0a: cd:ad:b8:7a:95:d3:59:7a:a0:17:0d:5c:c6:34:ac: 00:96:60:de:d2:d7:87:db:ad:0f:ab:08:af:71:ec: 8f:b1:19:97:05:72:61:c0:88:5d:a9:43:55:ce:c2: 4e:cd:00:68:76:c6:ce:5f:27:2b:db:9d:8c:cb:d6: 9f:08:cd:8e:c0:de:b7:12:ff:3f:fa:85:2a:02:76: 8e:28:8a:54:63:36:df:2f:07:73:36:74:d5:88:f5: 04:23:18:1f:16:ec:ea:d4:44:ec:f0:15:81:98:11: 82:08:33:01:13:f4:bd:76:a1:48:32:a7:7c:29:87: 0d:79:b4:2f:07:4f:13:f2:c0:d6:67:9f:c0:86:3e: 9b:e2:3f:ac:0d:67:02:98:6a:6c:1c:c9:f7:78:ab: 78:d4:66:68:3d:3d:7b:ce:25:78:1e:ad:3e:34:fc: 06:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A3:CB:54:1E:A9:F6:63:A3:CB:0B:55:67:5F:61:CE:84:72:10:BD X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/341f0896-41e0-4178-9313-ebfe71b5c449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.43.95.0/24 Signature Algorithm: sha256WithRSAEncryption 97:53:2b:fe:23:b4:c1:18:a1:8e:2d:48:62:2f:a4:3c:c6:d3: 85:d0:c4:28:38:91:79:72:f5:db:59:37:20:ce:4e:bd:3c:37: 39:fb:eb:6f:33:03:21:b6:13:cc:75:39:f3:f2:17:40:61:70: c3:b4:8f:cf:67:a6:66:42:ce:33:cb:7c:60:0e:09:4c:66:d6: 95:91:ea:c0:65:42:24:bb:ed:cb:db:c0:d8:cc:66:7f:91:ec: c2:8b:a5:37:c4:44:5f:c4:3d:b5:aa:bd:47:80:01:f3:3e:9a: 28:74:58:0e:4c:39:20:25:a0:c0:20:bb:df:ce:3a:d2:56:03: 1c:8b:85:e8:95:12:b8:1d:23:9f:d4:f1:80:b9:19:a4:6c:3c: 0a:35:3e:c0:16:35:02:7d:6d:30:fa:c2:d1:da:54:59:7b:52: b8:40:71:c8:f8:ea:10:80:09:62:99:d8:12:96:4f:c6:b5:3b: 96:ff:68:eb:81:3f:37:2c:27:a1:3a:c8:1a:c4:5e:23:f0:85: d8:f8:69:ff:ed:14:c4:8d:fa:e4:b5:18:9c:72:e0:67:8c:ef: f4:d6:b1:dc:4a:e6:a2:e0:f4:12:ae:5b:35:1f:b4:d0:2c:8b: 9d:74:e0:dd:3f:43:fc:fd:15:b1:db:bd:24:b7:3f:c3:6d:83: 00:5f:8b:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUQdCHxT4CXvZugfoZjNyWoDdwuAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTdmZGNhMDQ5ZDgzMGE2NGVhMDQyN2VmMmJlMGJhY2Ri NWVlYzVkYmJkMTNiMGI1ZjM4ZjFkNWM5YTRkMjRiMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1brmF1/8yYMf/dJiPGpVYVy3RheL6bI6jC45McWUEdKDZ 6cDZ+I4I/lEIZ4NmhyU4MAlD2O0GSM3xmN9CkEZLM863qFqPj9no9nyihxcvjyGS q2l7czEeCs2tuHqV01l6oBcNXMY0rACWYN7S14fbrQ+rCK9x7I+xGZcFcmHAiF2p Q1XOwk7NAGh2xs5fJyvbnYzL1p8IzY7A3rcS/z/6hSoCdo4oilRjNt8vB3M2dNWI 9QQjGB8W7OrUROzwFYGYEYIIMwET9L12oUgyp3wphw15tC8HTxPywNZnn8CGPpvi P6wNZwKYamwcyfd4q3jUZmg9PXvOJXgerT40/AYJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOKPLVB6p9mOjywtVZ19hzoRyEL0wHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzM0MWYwODk2LTQxZTAtNDE3OC05MzEzLWViZmU3MWI1YzQ0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgK18wDQYJKoZIhvcNAQELBQADggEBAJdTK/4jtMEYoY4tSGIvpDzG04XQ xCg4kXly9dtZNyDOTr08Nzn7628zAyG2E8x1OfPyF0BhcMO0j89npmZCzjPLfGAO CUxm1pWR6sBlQiS77cvbwNjMZn+R7MKLpTfERF/EPbWqvUeAAfM+mih0WA5MOSAl oMAgu9/OOtJWAxyLheiVErgdI5/U8YC5GaRsPAo1PsAWNQJ9bTD6wtHaVFl7UrhA ccj46hCACWKZ2BKWT8a1O5b/aOuBPzcsJ6E6yBrEXiPwhdj4af/tFMSN+uS1GJxy 4GeM7/TWsdxK5qLg9BKuWzUftNAsi5104N0/Q/z9FbHbvSS3P8NtgwBfi68= -----END CERTIFICATE-----Generated at Wed May 8 23:47:45 2024 by rpki-client on console-ams.rpki-client.org