$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c84ecf40-0bd2-40be-8bd5-d4b03c28b106.roa File: c84ecf40-0bd2-40be-8bd5-d4b03c28b106.roa (raw, json) Hash identifier: +rMASlfExnrstuseo3zpWMzMfwq9HHWdF2MP4xRAWd8= Subject key identifier: 34:D7:0F:CB:31:39:CB:71:5A:11:AE:4C:41:25:18:4C:C9:BB:B0:56 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 1CBB0867D36F9485F9347788820DDE6E39D2C301 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c84ecf40-0bd2-40be-8bd5-d4b03c28b106.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 216.127.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:bb:08:67:d3:6f:94:85:f9:34:77:88:82:0d:de:6e:39:d2:c3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=770136de425347ac694e9d9fb7913a53e496c513dcd25ab6b3251723d69282e2, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:cc:8e:a9:9c:f2:07:66:4e:b0:15:e1:ee: 87:69:3a:50:e7:32:72:ca:1a:50:50:63:24:2b:f6: 98:ea:52:6f:8d:d8:d0:c8:6b:bc:04:16:4c:a0:fe: df:3b:87:c3:d2:ec:da:44:62:60:84:ee:1f:87:bf: 25:d6:56:b5:ae:8b:7e:e0:29:22:8a:58:33:80:87: 11:42:96:d6:bc:74:4f:10:17:dc:80:d3:f9:bc:13: bc:2d:4c:f6:14:46:d8:ae:0e:45:14:a4:7a:ae:da: 25:b0:a0:1b:76:27:c7:77:2d:de:2f:7f:7b:fa:4e: 12:92:54:ec:e1:54:89:7b:ed:2b:ed:1b:7b:e6:81: 07:f7:d9:eb:85:22:ee:00:e8:35:c3:84:f0:6e:5d: 70:a5:23:9c:74:36:3c:76:16:75:98:fd:f2:7d:bb: d9:85:40:2e:cd:ab:98:2d:98:55:7f:b4:fc:ab:5a: b3:b0:14:4c:9d:ce:19:aa:2a:cd:3e:5c:12:0f:47: 6f:bb:f8:99:76:4b:6b:06:ad:29:db:c0:1c:72:9c: 03:88:f1:b3:3e:5c:4d:e2:48:31:92:9f:eb:84:03: 87:63:25:8d:8c:1f:2e:ec:42:90:84:2d:9a:f1:ce: da:7f:a2:21:06:04:90:0e:95:f3:0a:4b:de:ff:14: bc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D7:0F:CB:31:39:CB:71:5A:11:AE:4C:41:25:18:4C:C9:BB:B0:56 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/c84ecf40-0bd2-40be-8bd5-d4b03c28b106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.127.191.0/24 Signature Algorithm: sha256WithRSAEncryption 92:9d:20:5b:73:e6:08:0e:01:01:b2:2d:1c:ee:c6:c3:d5:fa: 75:5d:1a:2e:44:5c:af:66:ed:1f:50:5b:6d:2b:0c:f3:69:54: 16:49:fc:1e:52:e6:f1:47:08:4e:93:2d:9c:d5:8f:b9:bb:9e: 14:6c:e6:9c:7f:0b:43:88:16:10:32:c5:e2:8b:4c:1d:58:13: dc:da:ec:94:13:f6:56:a8:43:fb:2c:b9:06:9b:1e:fd:14:0c: 8b:46:2b:90:ce:7f:15:16:98:a0:68:cb:16:c2:19:54:30:2d: c3:03:22:ed:5f:55:b3:ad:97:de:54:b3:cc:3b:f1:74:b2:14: f3:51:8c:ee:45:37:d5:73:49:4c:fd:fc:fc:80:bc:e1:30:47: d3:57:dd:7f:6b:3d:23:3d:7b:2c:5a:33:df:22:23:6b:a7:8c: 05:3b:50:12:c3:80:48:79:ca:02:26:ad:43:81:4a:a7:6b:4f: 6e:ff:f9:f5:3f:e1:84:8f:3c:cf:a1:1f:44:11:cb:d3:9e:6b: 99:d4:9c:f0:e1:f3:e1:73:30:43:0b:52:5c:2e:94:6a:29:3c: 1c:2b:f6:b8:92:4e:6e:9a:09:5e:2b:73:b2:b6:4f:aa:3d:e2: c5:15:3f:52:35:ab:15:b4:a7:de:7b:4a:e5:45:7f:b0:2a:d5: b9:b6:4d:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHLsIZ9NvlIX5NHeIgg3ebjnSwwEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzAxMzZkZTQyNTM0N2FjNjk0ZTlkOWZiNzkxM2E1M2U0 OTZjNTEzZGNkMjVhYjZiMzI1MTcyM2Q2OTI4MmUyMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1wcyOqZzyB2ZOsBXh7odpOlDnMnLKGlBQYyQr9pjqUm+N 2NDIa7wEFkyg/t87h8PS7NpEYmCE7h+HvyXWVrWui37gKSKKWDOAhxFClta8dE8Q F9yA0/m8E7wtTPYURtiuDkUUpHqu2iWwoBt2J8d3Ld4vf3v6ThKSVOzhVIl77Svt G3vmgQf32euFIu4A6DXDhPBuXXClI5x0Njx2FnWY/fJ9u9mFQC7Nq5gtmFV/tPyr WrOwFEydzhmqKs0+XBIPR2+7+Jl2S2sGrSnbwBxynAOI8bM+XE3iSDGSn+uEA4dj JY2MHy7sQpCELZrxztp/oiEGBJAOlfMKS97/FLyVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNNcPyzE5y3FaEa5MQSUYTMm7sFYwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL2M4NGVjZjQwLTBiZDItNDBiZS04YmQ1LWQ0YjAzYzI4YjEwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYf78wDQYJKoZIhvcNAQELBQADggEBAJKdIFtz5ggOAQGyLRzuxsPV+nVd Gi5EXK9m7R9QW20rDPNpVBZJ/B5S5vFHCE6TLZzVj7m7nhRs5px/C0OIFhAyxeKL TB1YE9za7JQT9laoQ/ssuQabHv0UDItGK5DOfxUWmKBoyxbCGVQwLcMDIu1fVbOt l95Us8w78XSyFPNRjO5FN9VzSUz9/PyAvOEwR9NX3X9rPSM9eyxaM98iI2unjAU7 UBLDgEh5ygImrUOBSqdrT27/+fU/4YSPPM+hH0QRy9Oea5nUnPDh8+FzMEMLUlwu lGopPBwr9riSTm6aCV4rc7K2T6o94sUVP1I1qxW0p957SuVFf7Aq1bm2TQU= -----END CERTIFICATE-----Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org