$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/931f2512-832a-495d-8bb7-565fc4502fd3.roa File: 931f2512-832a-495d-8bb7-565fc4502fd3.roa (raw, json) Hash identifier: aVQHS4OMHrAkKtkUiGa2pEXLIO6QSVSqc8p7Z0787nU= Subject key identifier: CF:05:D8:3A:4A:44:A4:7D:35:1F:74:D8:E2:47:32:E2:7D:C5:65:22 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 0CCFFD91C40EDEEBC003F5A967EBF1FA1B02DFE6 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/931f2512-832a-495d-8bb7-565fc4502fd3.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 216.127.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cf:fd:91:c4:0e:de:eb:c0:03:f5:a9:67:eb:f1:fa:1b:02:df:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=c1d6afcc14021b0325ae180b3daa3d715158f094c2842b073ee1f74fa5df7a94, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:79:a7:b4:fb:7f:8a:dd:b3:00:98:4a:c9:00: 6e:a1:2d:1f:9a:d3:cb:f0:8c:b7:7b:d7:54:49:5a: 6d:88:b1:2a:33:a5:37:3f:39:97:54:98:94:c6:43: 1c:c8:b9:0d:9c:2e:ce:c5:9d:d0:ac:57:7b:71:c0: 47:ae:ac:b6:b9:bc:b2:5f:33:42:aa:9c:35:fd:11: 5f:ef:37:38:d3:7b:36:9f:3d:bb:7d:70:a1:2a:03: bb:af:a1:e9:30:3f:08:31:ca:3d:4e:54:8c:cf:36: 83:dd:26:e4:e1:54:b4:e8:df:db:e9:06:4f:6d:f2: 7b:4c:b7:d0:ce:b8:ec:c9:71:e0:d4:41:9b:0a:35: f2:e2:f7:fc:c8:eb:0a:95:80:32:02:17:12:0e:24: fa:4f:68:b4:ff:58:a9:69:71:94:a7:03:32:72:71: 43:18:bc:42:75:7f:49:67:5a:10:9b:78:8a:84:a6: e6:df:19:73:eb:ab:e9:ad:24:91:5d:5e:4a:22:9b: 4f:10:f3:ca:48:a3:db:90:a2:05:9e:0d:85:f4:33: d0:7e:ef:d7:63:60:9d:2a:04:e3:fb:ae:67:d8:c0: f1:42:a8:6c:52:ce:f1:ec:b9:e9:50:7f:d5:f1:72: 0a:c5:4f:57:4e:ec:1e:3e:ac:be:cb:51:4c:80:11: e4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:05:D8:3A:4A:44:A4:7D:35:1F:74:D8:E2:47:32:E2:7D:C5:65:22 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/931f2512-832a-495d-8bb7-565fc4502fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.127.160.0/19 Signature Algorithm: sha256WithRSAEncryption 10:34:28:80:ff:ff:d1:11:b5:cc:00:59:ba:e4:74:7e:34:63: a5:1e:de:07:65:3f:29:dd:1e:09:8c:e8:98:02:fb:9c:bc:ec: 7c:fc:69:01:5d:ce:71:03:e8:39:35:bb:f3:5f:e4:d7:4b:02: d5:f0:1e:00:5e:ab:85:41:35:5e:ac:64:d3:9f:f4:ea:69:6c: 50:19:89:31:eb:40:d9:e4:87:ee:15:7f:cb:68:a5:59:3d:c3: bf:01:f9:be:c0:5b:25:3d:68:ea:1f:93:d8:62:e1:41:ff:94: 5b:a9:9a:b8:80:3e:6a:3c:4f:12:5e:89:30:d8:a2:ce:03:96: c1:48:d0:b8:b8:16:ee:72:b4:15:67:eb:43:d9:ac:68:a6:33: a1:43:05:e0:78:c6:81:28:cf:7a:60:12:e4:d8:25:df:44:08: f8:ff:50:3d:1b:13:59:db:e5:5a:b0:9f:63:54:4d:00:33:73: 84:b4:4b:ba:e6:11:49:82:b9:e8:96:66:1d:98:4f:3e:3f:24: ce:12:8d:7d:f1:76:6d:d8:ec:73:b8:3d:12:b5:e0:0c:3d:33: b0:21:4d:b2:4e:b2:e3:38:f0:9f:bb:a3:19:0a:e1:e4:ca:92: 5f:7a:37:1a:05:1d:8c:c3:c6:18:6d:76:f6:17:c4:a4:d5:8f: a1:45:79:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDM/9kcQO3uvAA/WpZ+vx+hsC3+YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWQ2YWZjYzE0MDIxYjAzMjVhZTE4MGIzZGFhM2Q3MTUx NThmMDk0YzI4NDJiMDczZWUxZjc0ZmE1ZGY3YTk0MS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDreae0+3+K3bMAmErJAG6hLR+a08vwjLd711RJWm2IsSoz pTc/OZdUmJTGQxzIuQ2cLs7FndCsV3txwEeurLa5vLJfM0KqnDX9EV/vNzjTezaf Pbt9cKEqA7uvoekwPwgxyj1OVIzPNoPdJuThVLTo39vpBk9t8ntMt9DOuOzJceDU QZsKNfLi9/zI6wqVgDICFxIOJPpPaLT/WKlpcZSnAzJycUMYvEJ1f0lnWhCbeIqE pubfGXPrq+mtJJFdXkoim08Q88pIo9uQogWeDYX0M9B+79djYJ0qBOP7rmfYwPFC qGxSzvHsuelQf9XxcgrFT1dO7B4+rL7LUUyAEeTdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzwXYOkpEpH01H3TY4kcy4n3FZSIwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzkzMWYyNTEyLTgzMmEtNDk1ZC04YmI3LTU2NWZjNDUwMmZkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXYf6AwDQYJKoZIhvcNAQELBQADggEBABA0KID//9ERtcwAWbrkdH40Y6Ue 3gdlPyndHgmM6JgC+5y87Hz8aQFdznED6Dk1u/Nf5NdLAtXwHgBeq4VBNV6sZNOf 9OppbFAZiTHrQNnkh+4Vf8topVk9w78B+b7AWyU9aOofk9hi4UH/lFupmriAPmo8 TxJeiTDYos4DlsFI0Li4Fu5ytBVn60PZrGimM6FDBeB4xoEoz3pgEuTYJd9ECPj/ UD0bE1nb5Vqwn2NUTQAzc4S0S7rmEUmCueiWZh2YTz4/JM4SjX3xdm3Y7HO4PRK1 4Aw9M7AhTbJOsuM48J+7oxkK4eTKkl96NxoFHYzDxhhtdvYXxKTVj6FFeVc= -----END CERTIFICATE-----Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org