$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/4833ac0a-33c3-44c3-8b1c-938fa7e9a012.roa File: 4833ac0a-33c3-44c3-8b1c-938fa7e9a012.roa (raw, json) Hash identifier: qUQnXa8XRVbquci2ztHvEzE4kHxOwlUrLs6lBWEO/kY= Subject key identifier: AF:45:1C:10:C7:58:48:B2:53:57:CE:F8:6F:67:A4:94:1A:4B:D4:4A Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 40F0BF2FE5AE3FDDBCC60D6C21D619A164153A9A Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/4833ac0a-33c3-44c3-8b1c-938fa7e9a012.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 35916 IP address blocks: 198.211.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f0:bf:2f:e5:ae:3f:dd:bc:c6:0d:6c:21:d6:19:a1:64:15:3a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=dbb8321ab7c4b2d6dae0468e08a0187ad6f2caed5edcee2de84c6554a448bba2, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:98:b3:58:97:5d:1f:5f:85:ad:23:86:ea:a2: 63:37:b9:fb:65:1b:74:49:3f:3f:76:c4:61:e4:17: c1:18:25:bb:3e:55:fa:fc:a1:1e:0a:99:46:ec:57: b7:1b:4f:57:2f:04:9f:4f:10:fb:ae:a7:0f:16:5a: e6:ff:b7:fa:b9:40:ab:56:60:d3:45:ab:83:a7:6c: 67:df:b4:61:f6:57:f7:60:db:b3:fd:dd:ba:25:d8: a3:d1:af:a9:72:b3:6f:5d:cd:df:85:5c:46:c2:7c: 45:68:08:62:76:ee:67:5d:0a:2b:e5:89:99:7c:5d: d5:ed:27:dd:dd:08:8d:ff:b6:13:7f:b3:c5:51:d1: 61:ab:e7:fd:e9:af:00:86:f7:41:3a:8f:bc:ca:34: 1c:1a:ca:8c:c1:a4:18:e9:5d:d7:39:85:9a:0c:6e: f3:e5:a2:3e:3f:c7:84:f4:e9:3b:3e:28:94:0d:e3: a6:5b:ec:bb:70:90:4f:04:c8:8b:0e:c0:99:5a:97: 8a:f7:f4:ce:1e:f3:c8:c1:ee:37:a1:da:18:a4:da: 18:d3:32:a0:bf:c4:2b:d0:bd:a8:27:fa:02:0c:90: 77:1a:d1:44:c7:f6:18:1b:9d:cd:cf:24:4d:6f:b0: e3:a1:9e:44:9f:e4:1e:de:71:8b:d5:bc:47:b9:a9: 09:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:45:1C:10:C7:58:48:B2:53:57:CE:F8:6F:67:A4:94:1A:4B:D4:4A X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/4833ac0a-33c3-44c3-8b1c-938fa7e9a012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.211.0.0/18 Signature Algorithm: sha256WithRSAEncryption 0d:4a:5f:a1:71:7c:1b:f8:7a:3c:e2:c6:cf:b1:16:bc:36:a8: 8e:79:a8:32:9d:8d:fa:d2:1e:bb:51:e5:7c:f7:57:af:f4:5f: ae:f5:f8:aa:05:ad:98:17:3e:14:6f:72:e9:48:a1:7e:c5:d0: 12:75:29:0c:10:60:3f:81:b2:74:15:c4:44:73:e6:24:1e:44: c9:d5:cb:47:a7:5a:81:ff:27:13:d6:8b:82:7a:83:0e:69:80: 81:94:83:5c:ba:ee:91:46:4c:d1:02:9d:2c:94:79:55:67:da: a7:e9:ac:07:79:34:39:c8:b2:7b:62:b2:a5:c7:62:5c:11:f7: 5c:d5:fb:2b:57:8f:f1:a4:e0:91:d3:94:9f:48:08:40:02:19: 4f:d0:0a:41:65:ec:ba:b7:0d:dd:e5:64:36:8f:18:99:27:bc: 1e:7b:63:37:f4:10:67:ff:51:8b:90:fb:7d:9d:3f:7f:2d:0c: 5e:51:d4:26:00:29:35:ec:3e:d6:2e:52:0a:87:8d:85:4b:bc: 52:d1:ce:f7:b6:3a:d7:1a:d7:9a:4f:0c:fb:a5:20:7b:4b:e8: ac:4a:2e:7c:99:5d:ec:b1:97:7c:dc:d9:93:72:ad:b1:ff:a4: 7b:52:b5:d8:d1:88:c2:57:87:ae:61:b5:38:2c:53:e1:0a:14: 43:c2:8a:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQPC/L+WuP928xg1sIdYZoWQVOpowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmI4MzIxYWI3YzRiMmQ2ZGFlMDQ2OGUwOGEwMTg3YWQ2 ZjJjYWVkNWVkY2VlMmRlODRjNjU1NGE0NDhiYmEyMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD2mLNYl10fX4WtI4bqomM3uftlG3RJPz92xGHkF8EYJbs+ Vfr8oR4KmUbsV7cbT1cvBJ9PEPuupw8WWub/t/q5QKtWYNNFq4OnbGfftGH2V/dg 27P93bol2KPRr6lys29dzd+FXEbCfEVoCGJ27mddCivliZl8XdXtJ93dCI3/thN/ s8VR0WGr5/3prwCG90E6j7zKNBwayozBpBjpXdc5hZoMbvPloj4/x4T06Ts+KJQN 46Zb7LtwkE8EyIsOwJlal4r39M4e88jB7jeh2hik2hjTMqC/xCvQvagn+gIMkHca 0UTH9hgbnc3PJE1vsOOhnkSf5B7ecYvVvEe5qQmlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr0UcEMdYSLJTV874b2eklBpL1EowHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzQ4MzNhYzBhLTMzYzMtNDRjMy04YjFjLTkzOGZhN2U5YTAxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbG0wAwDQYJKoZIhvcNAQELBQADggEBAA1KX6FxfBv4ejzixs+xFrw2qI55 qDKdjfrSHrtR5Xz3V6/0X671+KoFrZgXPhRvculIoX7F0BJ1KQwQYD+BsnQVxERz 5iQeRMnVy0enWoH/JxPWi4J6gw5pgIGUg1y67pFGTNECnSyUeVVn2qfprAd5NDnI sntisqXHYlwR91zV+ytXj/Gk4JHTlJ9ICEACGU/QCkFl7Lq3Dd3lZDaPGJknvB57 Yzf0EGf/UYuQ+32dP38tDF5R1CYAKTXsPtYuUgqHjYVLvFLRzve2Otca15pPDPul IHtL6KxKLnyZXeyxl3zc2ZNyrbH/pHtStdjRiMJXh65htTgsU+EKFEPCiqw= -----END CERTIFICATE-----Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org