$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/3df09672-9169-4a3d-b4bf-f10095f7deb3.roa File: 3df09672-9169-4a3d-b4bf-f10095f7deb3.roa (raw, json) Hash identifier: A1qzjIPGuAyr6dkvzQBVP/Sot7HATu7p+5gjB9LN2tE= Subject key identifier: A6:E0:21:75:2C:C2:82:0E:69:E9:98:41:F9:30:B5:D3:8A:51:79:01 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 1C0E8BE6614B5A4DB12C3830E9461EDE8E14D2DC Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/3df09672-9169-4a3d-b4bf-f10095f7deb3.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 23.234.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0e:8b:e6:61:4b:5a:4d:b1:2c:38:30:e9:46:1e:de:8e:14:d2:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=86d262020bf411092e20ab90bea1cc3c7dd72433d392e8b2b58cad318184f671, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0b:cf:c6:1d:1b:27:e3:2c:49:08:a5:4b:80: 7c:62:a9:a8:dc:6a:4d:6c:f1:ce:33:51:d2:1a:00: 2c:27:e3:47:df:c3:d5:fc:21:60:a6:42:ad:6b:dd: 7b:b0:eb:79:3b:6e:74:80:28:61:fc:7a:22:d0:c9: 1b:0b:ed:7a:4e:c2:d8:2e:94:24:b4:13:37:ec:1a: fa:47:bf:e8:6f:72:da:93:78:0a:02:6b:58:ff:b6: 85:16:f7:87:e6:c2:b4:9b:7e:7f:03:aa:f6:b0:cf: 67:a2:d2:d0:ae:6a:f1:b3:18:f3:d0:59:87:bc:a7: 69:b9:02:55:22:d9:bb:6f:d8:81:24:d4:d4:54:9a: c1:7d:04:3e:c9:e6:6e:54:c7:8c:de:7c:ce:0e:ee: 91:bb:3d:4f:0a:b2:ce:99:29:f7:1a:34:27:6c:6e: 6d:f3:3f:6a:21:50:92:46:18:42:8a:dc:36:c0:de: ef:c5:d8:fc:f5:3f:cd:44:b0:66:b9:3c:4a:bc:82: d3:aa:89:49:f0:9f:7a:18:b4:a3:b8:f4:fd:aa:f8: 59:73:78:e8:21:44:e9:b7:f3:91:a4:8e:bd:64:5e: a6:68:b2:b2:3e:2b:f7:bc:c7:c9:9b:23:cf:c7:11: 01:ef:40:c0:cc:ab:ec:9b:71:ff:e5:50:2b:70:a8: 23:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E0:21:75:2C:C2:82:0E:69:E9:98:41:F9:30:B5:D3:8A:51:79:01 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/3df09672-9169-4a3d-b4bf-f10095f7deb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.234.195.0/24 Signature Algorithm: sha256WithRSAEncryption a6:2a:6d:a8:74:ed:91:f5:60:09:df:40:26:21:6d:09:ef:f9: 4f:a5:c7:0d:6f:b8:ef:06:0b:90:15:b0:47:fe:02:92:d1:87: 31:a6:ca:06:11:cf:63:7e:53:41:d2:c3:4c:92:ca:de:53:cc: b1:44:b5:96:5a:38:82:e4:e7:5a:c2:e1:b3:18:e1:76:a9:ff: 39:9f:02:47:d1:33:b7:21:7c:46:55:46:d7:8b:41:e4:da:c9: 25:82:e4:69:71:2b:7c:67:a7:3d:c5:4a:72:30:a1:10:eb:73: b0:81:89:01:b7:5f:ab:cb:d7:f7:57:e8:cf:9b:ec:20:de:aa: 9c:fd:79:31:d9:c3:51:ea:51:fc:2e:4e:be:a4:1d:b9:00:ab: 9f:3e:27:6c:4f:4e:22:79:7a:63:c6:f7:eb:e2:2d:40:73:5d: 1c:be:aa:f5:cf:15:ec:4d:c4:a6:4a:c3:3f:97:ba:bc:12:63: 41:f1:ab:7b:f8:72:6c:f5:a6:bf:f0:e9:90:c7:a1:aa:6e:52: b9:ab:c5:3a:b2:69:12:44:ad:05:25:d8:1b:35:bf:06:a1:9b: 98:a6:62:2a:c1:a2:60:74:9f:23:00:6a:7f:1c:57:f2:ac:c2: ed:ed:a0:b9:25:94:01:1d:b1:54:06:62:84:e8:6d:bb:fd:8f: 8e:d7:37:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHA6L5mFLWk2xLDgw6UYe3o4U0twwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmQyNjIwMjBiZjQxMTA5MmUyMGFiOTBiZWExY2MzYzdk ZDcyNDMzZDM5MmU4YjJiNThjYWQzMTgxODRmNjcxMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBC8/GHRsn4yxJCKVLgHxiqajcak1s8c4zUdIaACwn40ff w9X8IWCmQq1r3Xuw63k7bnSAKGH8eiLQyRsL7XpOwtgulCS0EzfsGvpHv+hvctqT eAoCa1j/toUW94fmwrSbfn8Dqvawz2ei0tCuavGzGPPQWYe8p2m5AlUi2btv2IEk 1NRUmsF9BD7J5m5Ux4zefM4O7pG7PU8Kss6ZKfcaNCdsbm3zP2ohUJJGGEKK3DbA 3u/F2Pz1P81EsGa5PEq8gtOqiUnwn3oYtKO49P2q+FlzeOghROm385Gkjr1kXqZo srI+K/e8x8mbI8/HEQHvQMDMq+ybcf/lUCtwqCOBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpuAhdSzCgg5p6ZhB+TC104pReQEwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzNkZjA5NjcyLTkxNjktNGEzZC1iNGJmLWYxMDA5NWY3ZGViMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX6sMwDQYJKoZIhvcNAQELBQADggEBAKYqbah07ZH1YAnfQCYhbQnv+U+l xw1vuO8GC5AVsEf+ApLRhzGmygYRz2N+U0HSw0ySyt5TzLFEtZZaOILk51rC4bMY 4Xap/zmfAkfRM7chfEZVRteLQeTaySWC5GlxK3xnpz3FSnIwoRDrc7CBiQG3X6vL 1/dX6M+b7CDeqpz9eTHZw1HqUfwuTr6kHbkAq58+J2xPTiJ5emPG9+viLUBzXRy+ qvXPFexNxKZKwz+XurwSY0Hxq3v4cmz1pr/w6ZDHoapuUrmrxTqyaRJErQUl2Bs1 vwahm5imYirBomB0nyMAan8cV/Kswu3toLkllAEdsVQGYoTobbv9j47XN2s= -----END CERTIFICATE-----Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org