$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/34b4b2f2-5cb0-4229-b127-8bc6a4ad80c3.roa File: 34b4b2f2-5cb0-4229-b127-8bc6a4ad80c3.roa (raw, json) Hash identifier: rmnhZzRCegK+0ykPQ2eBwfnVj/NYCm0HwYkBtRZtihU= Subject key identifier: AC:56:0F:F7:88:B3:29:EC:0E:00:E5:0F:44:E5:01:08:CE:BB:8A:D3 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 5F4D7781A6E1EEF5D65736B017ECDFB7827CE3F6 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/34b4b2f2-5cb0-4229-b127-8bc6a4ad80c3.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 216.127.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4d:77:81:a6:e1:ee:f5:d6:57:36:b0:17:ec:df:b7:82:7c:e3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=396ac1f9502deef8345d6de8bdc88860de950615c310b132b513a9a7eb27300e, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6a:78:12:9e:c3:78:a1:84:d7:1d:e4:c5:ea: 4d:d1:8b:43:d4:5a:4a:c4:f1:72:60:5a:37:78:52: ea:ce:d8:60:da:f2:1a:1d:5b:eb:70:46:ad:94:3a: b2:f0:d3:f5:ec:48:b6:61:dd:91:e6:4b:99:f0:25: 24:66:ee:29:bb:c2:cc:4f:8b:d6:8a:88:23:ff:23: 87:0d:66:2f:92:e9:7c:15:29:f4:64:a7:a0:bc:aa: 7b:98:77:ce:da:9f:a4:77:4f:b8:c1:ac:15:ab:6c: 85:26:fb:cb:a7:c2:95:a5:48:40:ef:1b:51:79:5d: 5c:73:28:b1:54:79:60:46:33:15:10:d7:a0:aa:b0: 9c:f9:7c:bc:3b:30:4d:1c:b0:cd:4b:13:2e:20:79: e4:ec:e4:d7:37:50:38:91:4b:ea:27:93:f2:8f:43: 58:6c:88:76:6f:83:80:c3:a7:4f:f4:64:a3:a2:e9: 58:ca:79:55:4e:a5:da:34:52:17:cb:4a:56:79:83: 64:fd:16:e1:7f:92:ec:22:06:44:42:8a:4f:5f:ad: bb:01:87:07:0b:47:f4:5f:32:f2:9d:38:95:45:87: da:94:43:63:c9:4b:21:8c:95:72:e0:40:45:52:cb: a6:b7:36:71:35:cc:15:7b:ca:5b:b0:5b:45:1e:58: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:56:0F:F7:88:B3:29:EC:0E:00:E5:0F:44:E5:01:08:CE:BB:8A:D3 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/34b4b2f2-5cb0-4229-b127-8bc6a4ad80c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.127.160.0/19 Signature Algorithm: sha256WithRSAEncryption 5b:34:6f:57:2b:b0:05:41:9a:e8:3a:9d:7d:52:ea:0b:10:6b: a1:be:f2:82:7a:6c:8c:33:34:b3:4e:45:49:d7:f3:4d:b5:bd: 3f:bd:94:af:89:e4:b3:85:ff:ef:53:57:9a:b3:c6:d6:c7:fd: f6:e7:4c:83:73:ec:2a:fd:ad:e0:43:76:7f:f6:65:6a:ea:e6: 40:6d:c9:73:aa:5a:59:75:48:75:9b:73:86:cf:e2:23:64:b8: bb:63:4c:76:ce:46:4e:81:e4:fc:c0:c5:73:ee:24:09:bc:54: dc:55:cf:58:cf:f5:d9:58:23:c9:08:be:ed:de:0e:14:a2:91: c8:54:a7:35:37:03:f2:2a:ea:90:ad:63:91:49:52:31:8a:b5: 79:f5:cd:3c:0d:70:b4:05:c6:1a:63:dc:02:8d:28:90:74:33: 8a:d5:86:2c:fd:c7:bb:99:d9:8c:33:74:85:80:4b:e0:36:eb: 9c:f6:94:ac:9c:d6:f8:95:a3:db:de:73:52:a6:93:cc:c5:67: 60:3f:8b:40:f7:30:91:bf:64:ae:a2:d3:ad:bd:0e:9f:bb:b0: 82:ab:e9:18:9e:b6:19:93:0e:d4:30:c4:ef:2f:76:8a:fc:43: b8:51:13:01:7f:c7:34:81:1e:3e:cb:3c:3b:d2:d5:2b:3d:d5: 6c:b2:20:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX013gabh7vXWVzawF+zft4J84/YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTZhYzFmOTUwMmRlZWY4MzQ1ZDZkZThiZGM4ODg2MGRl OTUwNjE1YzMxMGIxMzJiNTEzYTlhN2ViMjczMDBlMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1angSnsN4oYTXHeTF6k3Ri0PUWkrE8XJgWjd4UurO2GDa 8hodW+twRq2UOrLw0/XsSLZh3ZHmS5nwJSRm7im7wsxPi9aKiCP/I4cNZi+S6XwV KfRkp6C8qnuYd87an6R3T7jBrBWrbIUm+8unwpWlSEDvG1F5XVxzKLFUeWBGMxUQ 16CqsJz5fLw7ME0csM1LEy4geeTs5Nc3UDiRS+onk/KPQ1hsiHZvg4DDp0/0ZKOi 6VjKeVVOpdo0UhfLSlZ5g2T9FuF/kuwiBkRCik9frbsBhwcLR/RfMvKdOJVFh9qU Q2PJSyGMlXLgQEVSy6a3NnE1zBV7yluwW0UeWH2DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrFYP94izKewOAOUPROUBCM67itMwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzM0YjRiMmYyLTVjYjAtNDIyOS1iMTI3LThiYzZhNGFkODBjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXYf6AwDQYJKoZIhvcNAQELBQADggEBAFs0b1crsAVBmug6nX1S6gsQa6G+ 8oJ6bIwzNLNORUnX8021vT+9lK+J5LOF/+9TV5qzxtbH/fbnTINz7Cr9reBDdn/2 ZWrq5kBtyXOqWll1SHWbc4bP4iNkuLtjTHbORk6B5PzAxXPuJAm8VNxVz1jP9dlY I8kIvu3eDhSikchUpzU3A/Iq6pCtY5FJUjGKtXn1zTwNcLQFxhpj3AKNKJB0M4rV hiz9x7uZ2YwzdIWAS+A265z2lKyc1viVo9vec1Kmk8zFZ2A/i0D3MJG/ZK6i0629 Dp+7sIKr6RiethmTDtQwxO8vdor8Q7hREwF/xzSBHj7LPDvS1Ss91WyyIH4= -----END CERTIFICATE-----Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org