$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c780baa0-06c5-445a-984e-d7815dedcf95.roa File: c780baa0-06c5-445a-984e-d7815dedcf95.roa (raw, json) Hash identifier: ifWaDT6kPZ+zaWB87jt1lr/jSgc8V5rvmBWUPdr1v9Y= Subject key identifier: 79:68:2B:E3:0D:F3:97:C2:DA:BC:F4:12:75:8A:9A:BE:A6:34:4E:1F Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 490BB7572D8E11D58B7E32E2F6D94221914B840E Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c780baa0-06c5-445a-984e-d7815dedcf95.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 206.125.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0b:b7:57:2d:8e:11:d5:8b:7e:32:e2:f6:d9:42:21:91:4b:84:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=5cf931d77e06527d27854b7bcb979dd9e0d47cb13ae926413601c80a7a6a2930, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:ae:a8:f3:78:9e:ed:0b:c2:44:1e:5f:dd: 44:99:39:ac:ee:a2:90:2e:9f:41:de:62:a2:3c:82: 6e:9a:ca:24:e6:3f:cd:b4:8c:f9:31:1e:b4:b3:e2: 0d:88:94:5c:f1:8d:79:35:a3:44:e6:45:dd:f8:9b: 06:00:e8:7f:0d:fa:6d:a9:ea:33:7b:31:04:fd:b1: 5c:33:6c:f4:ca:e2:5f:57:b2:93:bc:8e:3d:6b:33: 56:39:73:75:58:06:8c:68:66:8b:f0:fa:e8:d3:d8: 95:2c:2f:ee:96:a3:08:41:4e:ff:2b:ea:fb:7d:8a: 5b:8f:c8:54:d2:53:7c:85:8b:b7:f9:e7:a2:03:a8: 04:ad:03:00:85:bb:33:a4:eb:98:1f:1d:c1:79:d5: 7f:91:83:86:40:63:06:56:a4:60:c7:2f:f9:be:35: c2:4e:7a:66:96:77:72:61:f8:71:c3:cb:c6:de:77: 80:ac:14:22:a6:58:a9:e1:c8:0a:a3:61:7f:8d:bc: 1a:5f:b0:8c:d4:32:b0:13:9f:ff:32:af:f6:d9:d9: 74:7b:bd:91:70:e5:c1:d9:99:7a:a6:52:67:19:08: aa:13:58:3d:5f:fa:0f:fc:41:03:b6:1d:af:c6:4d: ac:f8:03:a9:e1:45:7e:47:78:2a:27:fa:e5:a9:d5: e3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:68:2B:E3:0D:F3:97:C2:DA:BC:F4:12:75:8A:9A:BE:A6:34:4E:1F X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c780baa0-06c5-445a-984e-d7815dedcf95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.125.40.0/21 Signature Algorithm: sha256WithRSAEncryption 61:30:1e:4f:1a:77:ae:e1:86:64:f8:96:d1:02:2e:9a:0a:f9: 9b:4e:22:ee:e8:38:89:05:4d:1e:7f:ef:82:85:95:5a:c5:3f: e8:34:f3:64:8b:28:bb:71:e7:6a:df:a6:20:24:82:37:5d:20: f2:0b:90:e6:c4:a0:4c:cf:eb:54:2a:8a:6a:d8:dc:de:8e:9f: df:af:19:78:d2:7d:d8:ac:0e:28:49:d9:e9:88:b6:e4:88:0b: 18:d5:45:c5:8e:79:6c:d2:bc:65:b5:b9:55:55:1b:c5:82:66: e9:bb:8a:fd:6b:8b:67:65:a4:61:08:a8:35:01:fd:4e:d1:e0: 1a:1c:c9:fe:b2:08:f1:d8:76:46:52:7c:67:20:bb:92:5a:79: 96:02:30:ff:29:16:58:cb:ee:8e:cf:13:bb:b9:77:12:f3:a3: 28:ce:76:4f:f1:0b:e7:1e:05:4d:da:c0:e2:b8:1b:56:1d:86: 53:47:0c:d9:39:3e:4e:0f:e6:b8:a8:45:0c:f9:2e:16:9b:c3: d9:ca:11:ba:91:7c:a2:45:95:13:e9:79:1b:07:ea:a0:37:bc: fe:cd:50:96:7d:2d:0b:5b:ac:4f:14:54:97:73:41:85:27:8f: 2b:c1:ad:d1:35:cf:6f:e6:6d:01:54:3d:80:e7:19:bc:06:8a: e2:49:b8:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSQu3Vy2OEdWLfjLi9tlCIZFLhA4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Y2Y5MzFkNzdlMDY1MjdkMjc4NTRiN2JjYjk3OWRkOWUw ZDQ3Y2IxM2FlOTI2NDEzNjAxYzgwYTdhNmEyOTMwMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgYK6o83ie7QvCRB5f3USZOazuopAun0HeYqI8gm6ayiTm P820jPkxHrSz4g2IlFzxjXk1o0TmRd34mwYA6H8N+m2p6jN7MQT9sVwzbPTK4l9X spO8jj1rM1Y5c3VYBoxoZovw+ujT2JUsL+6WowhBTv8r6vt9iluPyFTSU3yFi7f5 56IDqAStAwCFuzOk65gfHcF51X+Rg4ZAYwZWpGDHL/m+NcJOemaWd3Jh+HHDy8be d4CsFCKmWKnhyAqjYX+NvBpfsIzUMrATn/8yr/bZ2XR7vZFw5cHZmXqmUmcZCKoT WD1f+g/8QQO2Ha/GTaz4A6nhRX5HeCon+uWp1eNHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeWgr4w3zl8LavPQSdYqavqY0Th8wHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL2M3ODBiYWEwLTA2YzUtNDQ1YS05ODRlLWQ3ODE1ZGVkY2Y5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPOfSgwDQYJKoZIhvcNAQELBQADggEBAGEwHk8ad67hhmT4ltECLpoK+ZtO Iu7oOIkFTR5/74KFlVrFP+g082SLKLtx52rfpiAkgjddIPILkObEoEzP61QqimrY 3N6On9+vGXjSfdisDihJ2emItuSICxjVRcWOeWzSvGW1uVVVG8WCZum7iv1ri2dl pGEIqDUB/U7R4Bocyf6yCPHYdkZSfGcgu5JaeZYCMP8pFljL7o7PE7u5dxLzoyjO dk/xC+ceBU3awOK4G1YdhlNHDNk5Pk4P5rioRQz5Lhabw9nKEbqRfKJFlRPpeRsH 6qA3vP7NUJZ9LQtbrE8UVJdzQYUnjyvBrdE1z2/mbQFUPYDnGbwGiuJJuO4= -----END CERTIFICATE-----Generated at Wed May 8 23:44:51 2024 by rpki-client on console-fra.rpki-client.org