$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/6d1aeb1c-6cd0-49ad-84b8-573158ef4862.roa File: 6d1aeb1c-6cd0-49ad-84b8-573158ef4862.roa (raw, json) Hash identifier: HPgLURGjSWRG3/PSa9pIjzZTo9eul1bIyyio/CIX9to= Subject key identifier: 4A:8C:39:90:01:9C:58:9D:BA:14:E2:EB:C5:C5:EA:93:55:71:E8:E1 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 62B05C40531065EC417ADBF735AFEA5342B3F86A Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/6d1aeb1c-6cd0-49ad-84b8-573158ef4862.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 64.27.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b0:5c:40:53:10:65:ec:41:7a:db:f7:35:af:ea:53:42:b3:f8:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=808abf9c43825aa31466f8c0cf65a1617adc477bf15b6ed1565e9b449eccefb4, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:4b:1f:9d:78:c9:43:42:14:55:28:8a:5e: c6:68:59:fd:d0:c4:5f:96:0d:41:7c:df:40:79:76: 80:58:70:f9:58:28:c5:5b:d3:90:6b:84:1e:b0:f9: 3b:55:cc:aa:53:d3:e6:60:ac:0a:da:7b:2d:f8:c5: d2:76:90:69:ca:4b:e8:89:f0:b2:5e:a8:3c:56:29: a3:2e:0d:0f:a3:02:b6:4f:da:70:b1:46:e9:4d:cb: 45:78:52:d6:c4:a1:b2:6f:c7:c6:cf:c2:73:ca:2e: 1e:20:69:3f:52:eb:f6:72:f2:5f:74:2e:93:2c:10: f9:68:4d:2f:3e:b8:d7:a8:d2:9a:aa:e9:c3:04:ab: 2a:1e:7b:05:d6:71:4a:0f:e4:68:5a:39:40:a3:4b: d4:31:9b:31:ed:8b:6e:83:24:75:57:30:1c:f1:73: 89:d4:b9:96:a3:71:29:1d:1c:26:b3:28:08:0f:76: ba:91:44:60:22:43:84:a1:aa:dd:11:32:1f:17:6f: 26:53:98:8e:71:3a:42:cb:2c:42:4c:7f:ce:b7:bd: 1f:b5:58:0f:d5:e9:2f:57:fd:12:14:2a:4e:38:65: 7e:db:f9:3f:5d:77:7b:be:09:cd:5d:26:00:bb:dd: 87:d8:9b:70:57:8e:d2:27:8a:15:52:ef:3e:86:3c: 39:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8C:39:90:01:9C:58:9D:BA:14:E2:EB:C5:C5:EA:93:55:71:E8:E1 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/6d1aeb1c-6cd0-49ad-84b8-573158ef4862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.27.0.0/19 Signature Algorithm: sha256WithRSAEncryption 80:90:8a:08:c0:25:97:9c:b4:e9:b5:9d:03:47:e5:1d:a6:22: 74:48:58:8c:c3:18:f1:11:c7:b2:81:9a:0f:3a:11:b3:16:c2: 74:40:de:c6:b2:3f:25:b4:cc:a8:ca:4c:9a:c6:6e:5b:e3:43: 5d:37:c1:c1:5d:79:f9:fa:05:87:7d:df:6a:59:1c:92:d6:bd: df:7f:f5:f5:e5:df:fe:74:1f:f7:b1:e2:ce:f2:2f:67:ac:dc: d5:fb:34:7f:df:0a:7e:73:42:4b:9d:bf:1b:77:d1:e6:6d:a5: 79:dd:31:94:be:6a:cc:4b:8b:97:f1:42:43:b8:0b:ba:00:87: ef:94:e0:7b:8b:51:08:83:01:72:29:36:0f:81:df:09:66:71: 4f:df:72:85:a4:d0:dd:c8:56:5d:8b:3e:67:7a:cd:4d:5c:be: 47:e5:af:23:e6:56:d3:8b:d7:d7:49:eb:87:e3:d5:94:ae:f6: bd:4a:9b:82:91:2f:be:cc:23:c3:28:18:d3:df:4f:93:2b:e9: 6f:ae:a1:02:78:8a:d9:78:cb:f2:10:17:ed:78:ab:9b:eb:a9: a6:4d:89:4e:24:2a:ee:6a:67:f0:be:ab:8f:75:ef:66:ac:7d: 3e:31:79:d1:d2:93:d6:90:9d:d6:8e:11:e9:b2:c9:fa:f6:a8: 02:32:d6:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYrBcQFMQZexBetv3Na/qU0Kz+GowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDhhYmY5YzQzODI1YWEzMTQ2NmY4YzBjZjY1YTE2MTdh ZGM0NzdiZjE1YjZlZDE1NjVlOWI0NDllY2NlZmI0MS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8n0sfnXjJQ0IUVSiKXsZoWf3QxF+WDUF830B5doBYcPlY KMVb05BrhB6w+TtVzKpT0+ZgrAraey34xdJ2kGnKS+iJ8LJeqDxWKaMuDQ+jArZP 2nCxRulNy0V4UtbEobJvx8bPwnPKLh4gaT9S6/Zy8l90LpMsEPloTS8+uNeo0pqq 6cMEqyoeewXWcUoP5GhaOUCjS9QxmzHti26DJHVXMBzxc4nUuZajcSkdHCazKAgP drqRRGAiQ4Shqt0RMh8XbyZTmI5xOkLLLEJMf863vR+1WA/V6S9X/RIUKk44ZX7b +T9dd3u+Cc1dJgC73YfYm3BXjtInihVS7z6GPDn1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSow5kAGcWJ26FOLrxcXqk1Vx6OEwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzZkMWFlYjFjLTZjZDAtNDlhZC04NGI4LTU3MzE1OGVmNDg2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVAGwAwDQYJKoZIhvcNAQELBQADggEBAICQigjAJZectOm1nQNH5R2mInRI WIzDGPERx7KBmg86EbMWwnRA3sayPyW0zKjKTJrGblvjQ103wcFdefn6BYd932pZ HJLWvd9/9fXl3/50H/ex4s7yL2es3NX7NH/fCn5zQkudvxt30eZtpXndMZS+asxL i5fxQkO4C7oAh++U4HuLUQiDAXIpNg+B3wlmcU/fcoWk0N3IVl2LPmd6zU1cvkfl ryPmVtOL19dJ64fj1ZSu9r1Km4KRL77MI8MoGNPfT5Mr6W+uoQJ4itl4y/IQF+14 q5vrqaZNiU4kKu5qZ/C+q49172asfT4xedHSk9aQndaOEemyyfr2qAIy1lE= -----END CERTIFICATE-----Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org