$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/afa79db8-a616-4b76-9c3d-c9503a0fd711.roa File: afa79db8-a616-4b76-9c3d-c9503a0fd711.roa (raw, json) Hash identifier: 50apm7rqQPVJlDo/hObdatwgU939SpYxIAMcOZsPTBk= Subject key identifier: F6:2E:89:BC:7E:F0:12:C3:C1:C6:E7:6F:C6:8D:D9:45:90:6A:3D:43 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 01F760B12E7B2E3666189566E4580F8101E9C53A Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/afa79db8-a616-4b76-9c3d-c9503a0fd711.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 35916 IP address blocks: 198.211.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f7:60:b1:2e:7b:2e:36:66:18:95:66:e4:58:0f:81:01:e9:c5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=46292f9b65680e03bf64bb693b604431abf357a6e3383a5e7b15577b97ffad77, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:0d:1f:4c:ec:0d:18:86:47:02:57:b8:4a: a9:af:e5:54:c2:cb:d3:44:87:6b:05:5a:b0:6d:91: 24:a6:64:38:3d:ff:3d:08:b7:cd:b5:43:62:d4:2b: 65:06:cc:33:19:33:b5:fb:d3:0d:4e:e8:25:90:a7: f2:b8:dd:9a:82:51:27:ec:16:d6:bd:38:b2:04:c2: 76:05:d8:ab:45:87:14:70:7f:be:a8:0f:3a:ca:10: 58:d8:67:9f:57:ee:a2:73:0f:1a:62:23:a2:fd:f8: f6:d8:bd:1a:6f:ce:0e:f3:b9:c7:b8:1e:07:00:c1: 47:b5:7f:ff:8a:5c:b3:10:98:4f:37:90:20:68:6b: e7:2b:28:33:1a:ec:a9:31:fa:de:f5:83:aa:3d:8c: 52:ff:dc:ec:8c:52:7d:a6:74:49:b7:0f:85:1d:2c: 42:f8:8d:6b:06:0e:f1:47:03:53:6d:3b:cf:c6:e0: fa:82:f2:2e:be:47:65:af:7e:cd:a2:5a:e5:26:49: d0:1b:cf:d3:85:21:b0:9d:7d:ce:2d:b4:dc:2a:a4: 17:31:f7:14:81:91:1e:a4:5f:95:6d:b9:c3:7c:1a: 9e:1e:ca:f1:9c:c3:98:9d:b2:f5:ae:ce:9c:08:6c: 13:7e:ee:b1:28:3c:a2:d9:4e:b7:15:d6:93:6f:db: 5f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2E:89:BC:7E:F0:12:C3:C1:C6:E7:6F:C6:8D:D9:45:90:6A:3D:43 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/afa79db8-a616-4b76-9c3d-c9503a0fd711.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.211.33.0/24 Signature Algorithm: sha256WithRSAEncryption 53:56:8a:bf:3b:d2:e9:25:a6:80:cb:7b:5c:f4:e2:17:63:d0: 18:c7:a6:c1:49:7b:c4:64:f6:4f:96:30:65:b3:a6:05:83:18: 25:18:58:0a:86:bf:d3:09:52:18:18:10:25:6b:76:01:1d:4b: ff:37:99:9a:9b:54:2b:7c:99:e9:87:c2:62:22:f4:22:39:c1: 13:23:21:f8:f3:c2:aa:5a:19:75:32:fe:7d:7e:14:42:6c:08: 7f:d0:40:c4:eb:8e:a9:0a:8b:77:4e:f6:e3:e6:82:e1:af:5f: 5b:f2:06:47:60:92:08:75:19:5d:5b:58:3d:aa:35:fd:7c:04: e1:c8:be:78:a1:e8:ce:2e:3a:43:c8:66:e1:bf:07:b9:fe:e3: f7:56:e2:8c:05:3c:79:6b:9c:3c:8f:b0:27:84:0b:98:08:ea: 83:44:3a:c8:10:f5:e5:6a:ea:33:22:de:68:15:ee:a6:17:c4: d8:0f:8f:83:7b:7a:55:9a:03:2b:ce:dd:80:57:a5:d5:90:f0: 11:f8:54:06:d2:ea:78:92:46:4b:80:85:b5:e6:e4:61:3c:3d: 46:68:c1:1d:a5:90:61:81:a2:eb:23:a5:4c:f9:76:90:36:f3: 65:12:d3:6d:ee:b6:f0:0f:e2:cd:be:81:68:be:c4:19:ce:fc: be:96:14:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAfdgsS57LjZmGJVm5FgPgQHpxTowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjI5MmY5YjY1NjgwZTAzYmY2NGJiNjkzYjYwNDQzMWFi ZjM1N2E2ZTMzODNhNWU3YjE1NTc3Yjk3ZmZhZDc3MS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC93w0fTOwNGIZHAle4Sqmv5VTCy9NEh2sFWrBtkSSmZDg9 /z0It821Q2LUK2UGzDMZM7X70w1O6CWQp/K43ZqCUSfsFta9OLIEwnYF2KtFhxRw f76oDzrKEFjYZ59X7qJzDxpiI6L9+PbYvRpvzg7zuce4HgcAwUe1f/+KXLMQmE83 kCBoa+crKDMa7Kkx+t71g6o9jFL/3OyMUn2mdEm3D4UdLEL4jWsGDvFHA1NtO8/G 4PqC8i6+R2Wvfs2iWuUmSdAbz9OFIbCdfc4ttNwqpBcx9xSBkR6kX5VtucN8Gp4e yvGcw5idsvWuzpwIbBN+7rEoPKLZTrcV1pNv21/vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9i6JvH7wEsPBxudvxo3ZRZBqPUMwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL2FmYTc5ZGI4LWE2MTYtNGI3Ni05YzNkLWM5NTAzYTBmZDcxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADG0yEwDQYJKoZIhvcNAQELBQADggEBAFNWir870uklpoDLe1z04hdj0BjH psFJe8Rk9k+WMGWzpgWDGCUYWAqGv9MJUhgYECVrdgEdS/83mZqbVCt8memHwmIi 9CI5wRMjIfjzwqpaGXUy/n1+FEJsCH/QQMTrjqkKi3dO9uPmguGvX1vyBkdgkgh1 GV1bWD2qNf18BOHIvnih6M4uOkPIZuG/B7n+4/dW4owFPHlrnDyPsCeEC5gI6oNE OsgQ9eVq6jMi3mgV7qYXxNgPj4N7elWaAyvO3YBXpdWQ8BH4VAbS6niSRkuAhbXm 5GE8PUZowR2lkGGBousjpUz5dpA282US023utvAP4s2+gWi+xBnO/L6WFOs= -----END CERTIFICATE-----Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org