$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/782c9d19-5957-43a9-bc03-cff522cf7caf.roa File: 782c9d19-5957-43a9-bc03-cff522cf7caf.roa (raw, json) Hash identifier: NwRZt8kS32ujJjKWmxcyvlU9wuGufMc3WWfI3UvmC68= Subject key identifier: A2:1A:91:E6:31:21:7C:C3:3E:91:C9:5E:8F:1C:7A:4B:5F:08:F9:26 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 4CFF611DBDEA0A17AB7C1402DC1A9275AC42A923 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/782c9d19-5957-43a9-bc03-cff522cf7caf.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 35916 IP address blocks: 208.64.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ff:61:1d:bd:ea:0a:17:ab:7c:14:02:dc:1a:92:75:ac:42:a9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=d91b8c9553c1435a211352175e9a94b2cef31c88a1d2c21e46c4e90d9b6325d3, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:ca:c6:b0:30:25:e2:44:d5:b0:fe:54:c5: 1a:9a:4b:a6:74:65:43:c5:a6:c4:65:78:3f:08:e8: e4:74:61:64:6e:39:e9:d2:89:e3:40:b3:b2:18:ee: 3a:b9:d5:ff:20:7a:f4:86:a0:6d:22:c4:99:1c:56: fe:d1:14:8a:44:e8:5f:2b:7d:27:42:59:b0:ce:c5: 38:b4:8d:89:5d:fc:ad:d5:77:c1:20:ad:da:85:11: b0:0e:2e:d3:e0:a6:28:aa:3c:f6:32:11:3f:c2:f1: b1:53:d9:2e:59:4e:35:09:cf:62:33:55:c7:74:90: 34:1d:09:49:8d:ff:7b:d0:d0:99:07:17:1c:8e:d0: ac:d1:e9:e3:61:c2:db:dc:98:47:7b:34:bd:ff:da: 5b:6b:14:a8:6c:a4:80:90:c5:13:a8:db:64:e7:61: e6:ac:56:b4:47:a3:8e:c4:89:f1:e0:09:40:58:db: 7d:4e:2a:78:78:03:b6:bd:ea:4c:9c:fc:3d:6c:cf: 65:65:5f:81:5a:8b:16:57:16:06:21:35:f7:dc:15: d4:3a:ca:ca:17:d1:88:c4:6a:fc:34:8b:5a:c4:6e: dc:b6:c3:cd:9b:ef:f1:08:f2:1e:4a:f3:06:18:31: 4d:62:52:0f:d8:81:fb:7e:65:5b:0a:8a:92:d9:55: 93:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1A:91:E6:31:21:7C:C3:3E:91:C9:5E:8F:1C:7A:4B:5F:08:F9:26 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/782c9d19-5957-43a9-bc03-cff522cf7caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.64.224.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:6a:f8:6b:bc:23:d6:64:6b:bb:86:d6:9a:7b:a2:fb:b2:a4: ec:30:ab:2f:76:df:7b:e1:6d:6f:1e:42:33:cb:1d:5f:ae:ed: 28:09:ce:42:91:14:72:98:f5:ef:cc:bb:56:94:28:70:bf:1f: 85:f3:5b:62:85:0f:c1:a7:c5:50:f5:d3:22:d9:1b:93:a1:61: 97:be:8a:bb:63:93:e7:68:2f:5f:8d:07:b0:3b:05:64:b9:d0: 32:9e:6f:fe:68:a3:07:09:6e:2b:d6:5c:7a:7a:42:08:4e:2f: 58:eb:98:c2:b6:24:fb:0a:b3:a2:f8:a4:bd:de:78:bb:5a:82: 43:a0:f8:d4:7d:06:ff:58:ab:c7:05:8b:01:36:36:5b:06:2e: 0a:75:05:4d:4f:99:1c:57:37:60:0f:7d:72:85:72:85:25:2d: d4:44:cc:01:ac:d1:14:ec:bd:de:e5:97:1e:34:fa:a9:04:1c: 4b:68:9a:24:fe:b5:34:2f:5c:3b:28:97:f5:b4:c4:9e:62:ce: 06:f0:cf:0e:83:a2:b3:74:dd:3d:ce:96:c6:32:82:8f:2e:1b: 34:50:24:32:56:0b:50:22:d2:2e:ee:0f:97:68:c1:ec:72:1f: d7:31:e2:de:67:be:77:b4:a4:e5:d8:24:a8:a1:dd:0b:e7:be: 41:5d:bb:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTP9hHb3qCherfBQC3BqSdaxCqSMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTFiOGM5NTUzYzE0MzVhMjExMzUyMTc1ZTlhOTRiMmNl ZjMxYzg4YTFkMmMyMWU0NmM0ZTkwZDliNjMyNWQzMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxmcrGsDAl4kTVsP5UxRqaS6Z0ZUPFpsRleD8I6OR0YWRu OenSieNAs7IY7jq51f8gevSGoG0ixJkcVv7RFIpE6F8rfSdCWbDOxTi0jYld/K3V d8EgrdqFEbAOLtPgpiiqPPYyET/C8bFT2S5ZTjUJz2IzVcd0kDQdCUmN/3vQ0JkH FxyO0KzR6eNhwtvcmEd7NL3/2ltrFKhspICQxROo22TnYeasVrRHo47EifHgCUBY 231OKnh4A7a96kyc/D1sz2VlX4FaixZXFgYhNffcFdQ6ysoX0YjEavw0i1rEbty2 w82b7/EI8h5K8wYYMU1iUg/Ygft+ZVsKipLZVZOzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUohqR5jEhfMM+kclejxx6S18I+SYwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzc4MmM5ZDE5LTU5NTctNDNhOS1iYzAzLWNmZjUyMmNmN2NhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPQQOAwDQYJKoZIhvcNAQELBQADggEBAI1q+Gu8I9Zka7uG1pp7ovuypOww qy9233vhbW8eQjPLHV+u7SgJzkKRFHKY9e/Mu1aUKHC/H4XzW2KFD8GnxVD10yLZ G5OhYZe+irtjk+doL1+NB7A7BWS50DKeb/5oowcJbivWXHp6QghOL1jrmMK2JPsK s6L4pL3eeLtagkOg+NR9Bv9Yq8cFiwE2NlsGLgp1BU1PmRxXN2APfXKFcoUlLdRE zAGs0RTsvd7llx40+qkEHEtomiT+tTQvXDsol/W0xJ5izgbwzw6DorN03T3OlsYy go8uGzRQJDJWC1Ai0i7uD5dowexyH9cx4t5nvne0pOXYJKih3QvnvkFdu2k= -----END CERTIFICATE-----Generated at Fri May 3 00:07:10 2024 by rpki-client on console-ams.rpki-client.org