$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/3ccaec0b-8862-498b-93ef-b69087ff2d34.roa File: 3ccaec0b-8862-498b-93ef-b69087ff2d34.roa (raw, json) Hash identifier: lJ2rAG6Hxiqo2i7Xd2rgyTtwmj3xIRRmZEkVIj4Ce1A= Subject key identifier: 13:7F:0A:5C:44:22:DA:06:CD:AD:EB:25:64:8C:58:25:F0:60:FF:BC Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 4923E611AC38534971E9410985FB4A96C18B92C2 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/3ccaec0b-8862-498b-93ef-b69087ff2d34.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 395681 IP address blocks: 96.43.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:23:e6:11:ac:38:53:49:71:e9:41:09:85:fb:4a:96:c1:8b:92:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=f4fe8afa654ac151af72e96d52194d3475a3f0935c888e4484618a946a8545c8, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e3:c9:e5:93:93:c4:5b:e6:37:1c:49:04:a9: 0c:59:d4:02:6e:42:ee:2e:96:e1:10:f2:53:a4:5b: 7f:a7:51:55:cf:db:c6:c4:d2:95:c7:ea:17:7e:90: a8:91:6f:c4:64:25:58:d0:25:aa:37:a5:5b:12:45: 28:6f:86:f5:a9:0c:bc:30:b4:84:29:35:e2:79:31: 12:d9:f5:c0:bb:fe:d0:e7:de:8c:48:40:36:6d:e4: b6:ed:bb:6e:c1:90:63:bc:95:ce:b4:36:19:ff:27: f9:08:28:7a:3b:90:78:1f:6b:81:7e:72:0e:36:98: d5:24:63:55:b5:c6:58:df:9e:fd:09:e1:92:8c:d7: 22:9c:e9:cb:be:2d:93:cf:be:23:1b:eb:8a:a0:45: 33:5f:11:65:c2:cb:0b:d9:4b:77:27:d6:cf:f3:04: 40:dc:38:52:43:0a:d2:12:60:b5:13:a6:1f:d8:21: 1c:00:1f:5f:97:41:ed:3b:9b:6c:be:48:ff:ce:c6: c0:fc:6d:c2:01:16:86:b6:40:c9:19:ff:53:72:e4: 77:89:35:f9:99:db:4f:48:d0:ff:9a:08:19:80:d9: e8:2d:a9:e0:ff:12:ec:3d:3b:e7:84:97:de:19:1e: d6:7f:f1:5e:02:4d:65:b4:78:58:e3:25:4f:8f:74: 88:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7F:0A:5C:44:22:DA:06:CD:AD:EB:25:64:8C:58:25:F0:60:FF:BC X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/3ccaec0b-8862-498b-93ef-b69087ff2d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.43.95.0/24 Signature Algorithm: sha256WithRSAEncryption 59:73:93:c1:99:8a:f7:36:86:04:8d:5f:7c:d0:98:9b:8d:34: 39:26:80:53:93:a0:bd:92:ef:c1:b3:09:74:b0:73:6d:ee:66: 0d:56:f7:ae:8e:2a:58:2c:84:b7:5e:38:51:e8:c8:bc:bb:43: 36:14:e4:eb:ed:b5:79:64:0a:4c:e7:51:e1:ea:78:e9:cf:ad: 22:0d:5e:7d:db:d5:83:28:89:a6:5b:31:42:c1:73:1f:28:a4: ee:89:91:db:de:48:e8:b8:39:f6:73:82:b0:16:37:cd:b7:b0: 5c:0d:a2:b6:82:f5:b9:03:c0:4e:1b:d8:dd:78:60:87:a0:a0: f7:b8:49:56:49:c6:57:01:9c:05:94:ea:85:92:ef:5c:49:7d: 8d:0c:5e:52:b7:4a:ad:aa:ae:6d:2b:e4:7a:24:9d:91:cc:f5: 09:d5:77:ab:d1:df:9b:61:27:ee:5b:9a:e2:4b:81:e7:9c:71: 85:a0:d2:b3:14:b5:5e:cf:99:fd:73:8a:72:92:ab:53:90:ff: 5e:62:f8:9c:5f:a9:d2:b9:05:38:68:36:e0:d4:60:b7:56:d1: 47:6f:75:75:e2:59:50:d6:0a:55:dd:5d:8e:c4:ba:ca:d8:4e: 9f:36:2e:32:ad:bc:d1:e6:58:ec:14:aa:f3:28:51:4b:ff:b0: 3d:8c:2d:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSSPmEaw4U0lx6UEJhftKlsGLksIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNGZlOGFmYTY1NGFjMTUxYWY3MmU5NmQ1MjE5NGQzNDc1 YTNmMDkzNWM4ODhlNDQ4NDYxOGE5NDZhODU0NWM4MS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU48nlk5PEW+Y3HEkEqQxZ1AJuQu4uluEQ8lOkW3+nUVXP 28bE0pXH6hd+kKiRb8RkJVjQJao3pVsSRShvhvWpDLwwtIQpNeJ5MRLZ9cC7/tDn 3oxIQDZt5Lbtu27BkGO8lc60Nhn/J/kIKHo7kHgfa4F+cg42mNUkY1W1xljfnv0J 4ZKM1yKc6cu+LZPPviMb64qgRTNfEWXCywvZS3cn1s/zBEDcOFJDCtISYLUTph/Y IRwAH1+XQe07m2y+SP/OxsD8bcIBFoa2QMkZ/1Ny5HeJNfmZ209I0P+aCBmA2egt qeD/Euw9O+eEl94ZHtZ/8V4CTWW0eFjjJU+PdIiJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUE38KXEQi2gbNreslZIxYJfBg/7wwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzNjY2FlYzBiLTg4NjItNDk4Yi05M2VmLWI2OTA4N2ZmMmQzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgK18wDQYJKoZIhvcNAQELBQADggEBAFlzk8GZivc2hgSNX3zQmJuNNDkm gFOToL2S78GzCXSwc23uZg1W966OKlgshLdeOFHoyLy7QzYU5OvttXlkCkznUeHq eOnPrSINXn3b1YMoiaZbMULBcx8opO6JkdveSOi4OfZzgrAWN823sFwNoraC9bkD wE4b2N14YIegoPe4SVZJxlcBnAWU6oWS71xJfY0MXlK3Sq2qrm0r5HoknZHM9QnV d6vR35thJ+5bmuJLgeeccYWg0rMUtV7Pmf1zinKSq1OQ/15i+JxfqdK5BThoNuDU YLdW0UdvdXXiWVDWClXdXY7EusrYTp82LjKtvNHmWOwUqvMoUUv/sD2MLRo= -----END CERTIFICATE-----Generated at Tue May 7 01:57:25 2024 by rpki-client on console-fra.rpki-client.org