$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/6a210a34-80f7-4003-ab07-e8cda162bf87.roa File: 6a210a34-80f7-4003-ab07-e8cda162bf87.roa (raw, json) Hash identifier: ckR37T63BMBt6j84fNt1U14tULdDDlU1NhsJIRm/AIg= Subject key identifier: 87:28:ED:66:89:E7:3D:44:4D:52:7E:E4:F4:BE:01:55:C0:E0:48:B3 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 071BBFB48880BBB7E118F8BEF1B5275F19283C67 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/6a210a34-80f7-4003-ab07-e8cda162bf87.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 395681 IP address blocks: 23.234.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:1b:bf:b4:88:80:bb:b7:e1:18:f8:be:f1:b5:27:5f:19:28:3c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=c2c5ecd56d4ba65ad75fbf5548bc5f913cc99602c8df5055b9e651b3071aab02, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:dc:01:18:66:14:9b:d5:9b:b7:ea:1c:9a: 7f:09:39:fe:93:68:a1:52:38:9e:5a:4e:3d:96:07: 33:33:f1:f1:51:eb:ce:0d:81:11:d8:1d:79:f7:87: 93:40:b0:e3:4d:8a:97:7e:94:74:01:8d:96:45:8a: 22:b1:cb:32:0a:52:85:c4:36:cf:48:f1:9c:06:ac: 75:e2:10:d7:5f:06:c6:30:6b:d0:a1:d1:c4:81:8f: d4:0a:fb:9f:1d:93:e5:bc:dd:ee:6a:fb:ba:ee:17: e4:db:86:cb:8b:34:4d:ab:de:2b:ef:0d:a2:de:5c: fa:df:73:3b:27:e7:86:97:20:93:3a:0d:0a:a8:20: 37:9a:44:f0:d8:37:de:74:5d:60:f7:85:28:5a:74: c8:9b:63:8b:77:b0:ff:4d:4a:94:d3:cc:16:0c:79: cd:16:96:50:56:27:98:b2:b3:34:4f:7d:a1:d4:c5: 42:f2:bb:14:68:ae:2e:0b:2c:02:30:bd:dd:59:85: 43:87:0a:d5:db:60:bb:9f:7c:42:04:74:84:2f:42: bb:e1:75:9c:1a:66:7f:39:4e:d9:96:23:b6:ad:40: e8:b6:ce:2c:66:02:be:13:fc:ac:23:40:7d:35:0d: fd:07:2b:84:a3:e8:8e:05:e7:73:a7:96:83:41:b5: 52:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:28:ED:66:89:E7:3D:44:4D:52:7E:E4:F4:BE:01:55:C0:E0:48:B3 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/6a210a34-80f7-4003-ab07-e8cda162bf87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.234.210.0/24 Signature Algorithm: sha256WithRSAEncryption 09:3b:86:fd:1d:1c:1b:55:fc:9c:76:f0:7e:88:d9:0b:b7:c4: 51:ba:30:dc:7a:1d:39:6a:12:fe:c6:96:4e:6c:86:c5:25:be: 9b:dc:e9:ac:89:cc:9b:23:c1:16:ab:dd:93:01:db:3f:34:c3: 35:44:3f:e8:6a:b1:19:47:15:8f:b7:28:6f:d9:67:bf:c6:ba: 97:fb:b1:02:d3:8a:27:c4:b5:80:95:ec:3e:cb:37:a6:a1:c0: 25:d2:07:2c:dd:55:d6:81:59:20:ed:27:be:68:e4:8f:81:c4: 8b:b3:7d:b8:95:69:af:53:d2:2f:b9:12:e6:b4:38:ce:e0:7b: 98:3a:68:15:70:50:b2:78:8a:fa:1a:da:ff:10:9e:3b:9b:cd: 92:74:56:0c:f3:7a:2e:24:70:0e:d0:2a:b3:3d:f7:e8:1a:fb: 34:19:58:a0:ae:d2:c8:35:2f:24:01:c1:46:12:91:e1:12:9b: cd:b7:3f:f1:83:16:09:ad:92:cf:b9:d8:ef:3e:e8:e3:bd:32: fb:2a:f5:c7:ee:c4:78:f3:6e:a1:a5:66:1c:e6:6f:4f:58:8c: dd:08:28:a8:b1:cb:f4:8b:40:2f:5f:9a:85:6d:04:f5:39:0d: 59:52:c2:5e:8a:48:a3:ab:b9:bf:e7:31:a7:88:bd:ad:09:6a: de:8c:5b:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBxu/tIiAu7fhGPi+8bUnXxkoPGcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMmM1ZWNkNTZkNGJhNjVhZDc1ZmJmNTU0OGJjNWY5MTNj Yzk5NjAyYzhkZjUwNTViOWU2NTFiMzA3MWFhYjAyMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxbNwBGGYUm9Wbt+ocmn8JOf6TaKFSOJ5aTj2WBzMz8fFR 684NgRHYHXn3h5NAsONNipd+lHQBjZZFiiKxyzIKUoXENs9I8ZwGrHXiENdfBsYw a9Ch0cSBj9QK+58dk+W83e5q+7ruF+TbhsuLNE2r3ivvDaLeXPrfczsn54aXIJM6 DQqoIDeaRPDYN950XWD3hShadMibY4t3sP9NSpTTzBYMec0WllBWJ5iyszRPfaHU xULyuxRori4LLAIwvd1ZhUOHCtXbYLuffEIEdIQvQrvhdZwaZn85TtmWI7atQOi2 zixmAr4T/KwjQH01Df0HK4Sj6I4F53OnloNBtVJbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhyjtZonnPURNUn7k9L4BVcDgSLMwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzZhMjEwYTM0LTgwZjctNDAwMy1hYjA3LWU4Y2RhMTYyYmY4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX6tIwDQYJKoZIhvcNAQELBQADggEBAAk7hv0dHBtV/Jx28H6I2Qu3xFG6 MNx6HTlqEv7Glk5shsUlvpvc6ayJzJsjwRar3ZMB2z80wzVEP+hqsRlHFY+3KG/Z Z7/Gupf7sQLTiifEtYCV7D7LN6ahwCXSByzdVdaBWSDtJ75o5I+BxIuzfbiVaa9T 0i+5Eua0OM7ge5g6aBVwULJ4ivoa2v8QnjubzZJ0Vgzzei4kcA7QKrM99+ga+zQZ WKCu0sg1LyQBwUYSkeESm823P/GDFgmtks+52O8+6OO9Mvsq9cfuxHjzbqGlZhzm b09YjN0IKKixy/SLQC9fmoVtBPU5DVlSwl6KSKOrub/nMaeIva0Jat6MW5A= -----END CERTIFICATE-----Generated at Tue May 7 00:53:12 2024 by rpki-client on console-ams.rpki-client.org