$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/37a40821-6ca2-441c-b006-dbf2a514cc5b.roa File: 37a40821-6ca2-441c-b006-dbf2a514cc5b.roa (raw, json) Hash identifier: Lb1+xKuljdh9Bck2MKcfjmDdN0EVtSh7T2BHES4YTqA= Subject key identifier: 68:34:22:E1:77:F4:04:4C:C7:35:A2:64:5D:C4:A2:11:0F:C1:1D:72 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 2AA4F04E4FD36056E8DE73BE89B709008D4D634C Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/37a40821-6ca2-441c-b006-dbf2a514cc5b.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 395681 IP address blocks: 216.127.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a4:f0:4e:4f:d3:60:56:e8:de:73:be:89:b7:09:00:8d:4d:63:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=3b23ca613a1f17277097d3a7b38892534f89282b2197cf37359038d90a524e4c, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e2:6a:2c:d1:0f:fb:cc:e4:9f:08:47:31:7b: 4d:48:5f:a6:8d:35:a4:de:b6:ee:26:e2:38:bf:34: 92:b7:ef:3c:45:a5:cd:a0:9b:86:d2:2b:db:f3:6b: 89:10:9b:f8:73:7e:f0:05:80:17:a8:65:da:3f:30: 41:6e:ad:fa:63:81:c7:13:35:1b:5f:22:23:20:be: 0b:b2:02:2e:a4:d8:ee:4f:fd:24:19:24:04:a8:35: 7e:95:0e:68:6e:40:17:87:d1:e8:4b:41:b0:24:d8: 6c:92:2a:78:39:54:96:9c:13:75:75:79:3a:62:0b: d8:79:5f:2e:95:b7:60:0a:b0:a4:8a:70:9a:99:a4: ca:c1:ae:95:6f:68:f3:f2:b4:ec:21:ed:db:8a:9f: ea:53:83:4f:e0:6f:f2:cd:65:d0:6d:e8:45:bb:d3: c4:62:26:09:48:76:22:06:f8:6d:63:db:15:ca:47: 13:56:0b:3d:da:95:72:d8:b8:1d:bd:fc:15:02:d0: 99:49:e1:8b:19:73:f3:e3:ae:14:81:16:ba:65:c6: 48:be:d0:7c:2d:41:61:ff:25:f3:fe:c9:6a:4a:54: 40:3b:05:98:be:68:aa:cd:e9:ee:de:46:6c:b2:ee: 8c:0d:17:95:bb:7e:5f:c0:97:e7:da:18:97:2d:13: 26:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:34:22:E1:77:F4:04:4C:C7:35:A2:64:5D:C4:A2:11:0F:C1:1D:72 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/37a40821-6ca2-441c-b006-dbf2a514cc5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.127.160.0/19 Signature Algorithm: sha256WithRSAEncryption 4b:5b:53:f5:58:40:9c:e5:c9:5f:51:92:de:91:3c:65:46:11: 5b:44:3a:2d:b6:f1:d8:ee:9f:9b:4b:15:36:51:f9:33:83:13: 3e:6e:b7:60:53:67:f8:3c:e2:d2:6c:df:2e:1c:2a:f7:d8:10: f0:7d:b0:53:9e:33:86:51:81:28:01:1a:2b:93:14:ef:c2:fb: 88:17:b5:d9:98:7d:da:ef:02:11:62:b0:b1:e8:31:f7:ea:72: c6:26:9f:0d:d3:f4:2f:48:88:bd:a2:fe:e0:b7:65:ef:ac:48: 4d:d7:b5:1d:41:2e:32:be:9c:72:b6:bb:53:e5:e2:37:a3:54: 5d:dc:53:3d:0e:76:d7:cd:05:02:fb:63:e5:b2:a4:63:04:1a: ed:53:65:b6:de:48:06:26:d5:f2:e9:03:e0:4c:43:f1:98:db: 61:08:c2:67:59:ed:25:cf:46:41:56:58:6f:03:d5:3b:6e:11: 39:ea:80:f7:d7:18:c1:54:54:44:f9:78:90:2b:3a:0b:cf:15: b1:28:43:e0:91:1b:b3:09:a3:ff:75:4b:f3:df:51:b1:a5:e2: 46:f5:9e:12:e4:ef:4c:bf:98:f8:07:d3:ac:05:97:72:cf:3e: 9c:a4:fb:f5:15:39:cb:94:d9:84:90:3d:44:24:9b:70:4a:c9: 98:c2:1d:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKqTwTk/TYFbo3nO+ibcJAI1NY0wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjIzY2E2MTNhMWYxNzI3NzA5N2QzYTdiMzg4OTI1MzRm ODkyODJiMjE5N2NmMzczNTkwMzhkOTBhNTI0ZTRjMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY4mos0Q/7zOSfCEcxe01IX6aNNaTetu4m4ji/NJK37zxF pc2gm4bSK9vza4kQm/hzfvAFgBeoZdo/MEFurfpjgccTNRtfIiMgvguyAi6k2O5P /SQZJASoNX6VDmhuQBeH0ehLQbAk2GySKng5VJacE3V1eTpiC9h5Xy6Vt2AKsKSK cJqZpMrBrpVvaPPytOwh7duKn+pTg0/gb/LNZdBt6EW708RiJglIdiIG+G1j2xXK RxNWCz3alXLYuB29/BUC0JlJ4YsZc/PjrhSBFrplxki+0HwtQWH/JfP+yWpKVEA7 BZi+aKrN6e7eRmyy7owNF5W7fl/Al+faGJctEyZTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaDQi4Xf0BEzHNaJkXcSiEQ/BHXIwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzM3YTQwODIxLTZjYTItNDQxYy1iMDA2LWRiZjJhNTE0Y2M1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXYf6AwDQYJKoZIhvcNAQELBQADggEBAEtbU/VYQJzlyV9Rkt6RPGVGEVtE Oi228djun5tLFTZR+TODEz5ut2BTZ/g84tJs3y4cKvfYEPB9sFOeM4ZRgSgBGiuT FO/C+4gXtdmYfdrvAhFisLHoMffqcsYmnw3T9C9IiL2i/uC3Ze+sSE3XtR1BLjK+ nHK2u1Pl4jejVF3cUz0OdtfNBQL7Y+WypGMEGu1TZbbeSAYm1fLpA+BMQ/GY22EI wmdZ7SXPRkFWWG8D1TtuETnqgPfXGMFUVET5eJArOgvPFbEoQ+CRG7MJo/91S/Pf UbGl4kb1nhLk70y/mPgH06wFl3LPPpyk+/UVOcuU2YSQPUQkm3BKyZjCHZg= -----END CERTIFICATE-----Generated at Tue May 7 00:53:12 2024 by rpki-client on console-ams.rpki-client.org