$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/9df24ba6-7814-4775-81d9-db42ca5f3023.roa File: 9df24ba6-7814-4775-81d9-db42ca5f3023.roa (raw, json) Hash identifier: 1eE1bM4ur9ijpFYZHbCkY5qStxyP1CGPF96eLOpuN5Y= Subject key identifier: 8F:C6:3E:6A:52:BE:35:D2:36:E5:75:46:A0:3C:7A:B2:C5:E9:C9:D1 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 7593E50A87E639DA4C06F5544D519D31A491B805 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/9df24ba6-7814-4775-81d9-db42ca5f3023.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 395681 IP address blocks: 66.152.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:93:e5:0a:87:e6:39:da:4c:06:f5:54:4d:51:9d:31:a4:91:b8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=110e49efec75c4eed12462bee92559e368fb5fbdc16d6fb5460403cfe53dc96f, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:04:78:0f:b6:2b:67:fe:2e:6e:e7:9b:3c:4f: 93:68:35:7b:13:57:5d:5f:9f:a8:03:38:d2:54:91: 19:af:4a:38:a4:b0:79:3a:fb:c3:31:bb:b3:b8:05: b1:62:ea:65:a7:1d:4f:3e:bd:12:2b:a6:d0:6d:1b: bc:0f:60:b7:04:4d:04:53:a0:ad:ca:cf:55:0e:0c: 37:b5:32:e5:46:c6:2f:54:0d:72:76:18:61:84:27: 61:88:91:bb:e2:42:a4:7e:d5:04:40:d7:3b:21:19: 30:11:33:4e:e8:a7:89:ed:78:32:10:fa:e5:21:c4: 4c:85:76:fb:a9:0e:2f:4e:06:cc:f0:26:a9:66:0c: d0:1f:6a:1a:d3:c5:bb:86:80:33:d0:af:1f:ed:e5: e5:87:97:c7:95:fa:2c:af:30:af:ad:18:43:b1:cd: 49:f7:d7:f5:b7:ea:b2:e3:f0:52:8a:59:68:52:6e: 7e:44:87:43:b3:21:63:a7:21:ca:6c:36:bb:32:56: 58:0d:05:a8:1c:d0:6e:9c:26:24:54:a5:de:be:2e: 90:ec:1a:12:5f:86:4d:fb:c6:b3:b6:c8:1a:4c:8a: d7:be:24:08:06:ec:3c:32:7b:ef:b4:ea:63:7c:cd: b6:67:37:88:3c:76:ae:82:17:5a:25:12:03:74:4c: 2e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C6:3E:6A:52:BE:35:D2:36:E5:75:46:A0:3C:7A:B2:C5:E9:C9:D1 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/9df24ba6-7814-4775-81d9-db42ca5f3023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.152.181.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:e0:62:85:22:f3:a3:88:5d:ea:16:93:21:2f:8e:54:91:87: 2e:03:05:a6:3a:46:14:6e:b3:dd:b8:8a:bc:0a:07:04:84:90: fe:5a:74:58:95:af:59:53:c7:a3:16:ff:b7:93:71:af:a3:e4: 76:8d:13:3c:44:57:d4:be:43:c5:13:c7:62:ff:21:47:ae:e6: 0f:e1:ef:28:b4:e5:fc:b1:4f:6e:79:d0:d1:85:ee:03:61:b8: 53:76:4e:da:78:30:b8:6a:fe:18:78:7b:89:5a:2d:07:65:da: 73:4f:1c:cf:9d:18:a2:ea:26:56:36:35:e9:7f:9c:d7:36:07: 61:1f:ab:4c:1f:77:77:af:fd:8b:6a:a9:83:11:0f:94:ee:2a: 94:b9:de:57:09:ff:1b:2b:64:e5:96:5e:08:31:1d:fa:01:34: 80:e5:1e:e6:93:0a:77:c0:3e:11:3d:c9:f1:f1:c1:e0:1b:5e: 2a:cc:ab:df:3a:94:11:4d:ac:90:ac:fb:e7:2b:a6:3b:55:8e: b8:ce:09:51:ba:b9:b0:c3:d2:76:4f:f7:7a:86:42:fa:46:68: 3d:35:b0:0d:66:fe:d4:9c:2d:3f:f7:45:dd:da:cf:99:84:51: 20:2e:ea:51:17:c7:e8:45:11:72:b6:b6:f4:c5:06:6c:87:7f: 48:a4:9f:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdZPlCofmOdpMBvVUTVGdMaSRuAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTBlNDllZmVjNzVjNGVlZDEyNDYyYmVlOTI1NTllMzY4 ZmI1ZmJkYzE2ZDZmYjU0NjA0MDNjZmU1M2RjOTZmMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoBHgPtitn/i5u55s8T5NoNXsTV11fn6gDONJUkRmvSjik sHk6+8Mxu7O4BbFi6mWnHU8+vRIrptBtG7wPYLcETQRToK3Kz1UODDe1MuVGxi9U DXJ2GGGEJ2GIkbviQqR+1QRA1zshGTARM07op4nteDIQ+uUhxEyFdvupDi9OBszw JqlmDNAfahrTxbuGgDPQrx/t5eWHl8eV+iyvMK+tGEOxzUn31/W36rLj8FKKWWhS bn5Eh0OzIWOnIcpsNrsyVlgNBagc0G6cJiRUpd6+LpDsGhJfhk37xrO2yBpMite+ JAgG7Dwye++06mN8zbZnN4g8dq6CF1olEgN0TC6jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUj8Y+alK+NdI25XVGoDx6ssXpydEwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzlkZjI0YmE2LTc4MTQtNDc3NS04MWQ5LWRiNDJjYTVmMzAyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABCmLUwDQYJKoZIhvcNAQELBQADggEBAF7gYoUi86OIXeoWkyEvjlSRhy4D BaY6RhRus924irwKBwSEkP5adFiVr1lTx6MW/7eTca+j5HaNEzxEV9S+Q8UTx2L/ IUeu5g/h7yi05fyxT2550NGF7gNhuFN2Ttp4MLhq/hh4e4laLQdl2nNPHM+dGKLq JlY2Nel/nNc2B2Efq0wfd3ev/YtqqYMRD5TuKpS53lcJ/xsrZOWWXggxHfoBNIDl HuaTCnfAPhE9yfHxweAbXirMq986lBFNrJCs++crpjtVjrjOCVG6ubDD0nZP93qG QvpGaD01sA1m/tScLT/3Rd3az5mEUSAu6lEXx+hFEXK2tvTFBmyHf0ikn+I= -----END CERTIFICATE-----Generated at Tue May 7 00:53:12 2024 by rpki-client on console-ams.rpki-client.org