$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/da06bbea-bbcb-4743-90b1-85d385d62358.roa File: da06bbea-bbcb-4743-90b1-85d385d62358.roa (raw, json) Hash identifier: BoYLxPyMfeVguMsUNxevgz+YuhFXeNiVqtJun79LBR8= Subject key identifier: E7:C5:05:21:3D:AD:F7:1C:2A:E0:19:52:D1:2B:AE:8B:A0:36:9A:04 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 75B89374E9C678B3930D468D6BDF44C4E88900B6 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/da06bbea-bbcb-4743-90b1-85d385d62358.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 206.125.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b8:93:74:e9:c6:78:b3:93:0d:46:8d:6b:df:44:c4:e8:89:00:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=140091a2c79353e5dc2886f8abade30eff5a6e673106edaa9503333929f1c55f, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:26:45:1e:53:ac:c3:e0:a6:b2:f7:de:87:3c: 36:1b:91:9e:47:20:a2:28:25:8d:7b:ce:f0:70:ea: 59:72:61:31:d0:c4:a0:67:6b:44:f2:7a:c7:f9:c6: a9:ba:72:08:73:38:12:6f:fa:24:f2:06:32:2f:d8: f5:8b:1a:90:8e:82:19:26:61:a1:5c:da:40:06:8f: 32:df:23:f2:45:71:49:85:ce:04:ce:a7:51:3a:75: 56:49:15:63:df:eb:ed:c2:2d:fb:c1:af:39:9a:e3: 7d:f2:a5:5d:48:d6:af:76:55:e1:ff:a0:5c:52:f4: b5:b7:76:a7:bb:08:f6:f7:f9:74:b1:96:4b:33:fe: b6:23:f9:f6:ca:15:8e:a9:bb:de:f4:c6:33:85:ec: a5:4e:f4:b7:06:65:3c:00:30:12:e6:f8:49:50:95: 11:4b:ee:6a:33:82:91:51:23:65:79:96:e8:f6:e4: a8:bf:30:db:89:02:e4:19:62:85:11:c9:ad:09:10: 0d:73:19:a9:6d:8d:70:1b:4e:27:ab:2e:bf:da:08: 65:0d:88:ef:28:59:3c:f1:77:1f:17:cb:24:44:9d: 3c:96:43:6e:04:fd:6c:6d:28:ad:21:cf:e8:ab:8a: f1:a0:9b:01:e9:61:9f:fa:63:8b:7e:6d:55:b2:d0: d9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C5:05:21:3D:AD:F7:1C:2A:E0:19:52:D1:2B:AE:8B:A0:36:9A:04 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/da06bbea-bbcb-4743-90b1-85d385d62358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.125.40.0/21 Signature Algorithm: sha256WithRSAEncryption 78:9d:cf:33:d4:02:83:3d:a0:18:b6:55:b0:81:20:88:bc:e5: 3c:37:27:b8:3f:b5:8d:e5:d3:b9:21:71:97:c8:ee:ae:5a:9b: 0f:f6:95:6c:07:76:27:7c:ec:71:58:e7:b6:f0:c1:83:b8:56: 4c:40:5f:e4:ea:bd:a2:1d:e9:5c:79:2c:ce:7d:bf:52:a4:5b: d0:d1:14:69:8e:c7:a3:18:ba:12:3b:9a:49:e6:af:52:84:90: 91:60:d5:4a:01:2c:04:ef:38:59:57:88:0a:07:3c:67:99:90: 24:b9:6b:30:cd:9b:dc:95:3d:ae:91:1c:21:9e:26:4f:85:b1: 2d:fb:a8:90:ec:97:82:bf:38:5f:6f:12:27:29:57:ad:23:a2: bc:0f:8f:f2:9c:12:9a:b8:9e:e6:bd:09:96:47:71:fa:d3:72: c5:ed:3f:b3:c0:1a:61:75:60:87:ad:ec:64:e9:c8:9c:65:45: 8b:5f:c6:cb:ea:e5:bb:e4:cf:5c:99:e5:bf:f9:6f:f3:6c:c6: 5a:6d:12:87:44:25:27:bc:48:04:03:7f:23:d8:5c:3d:3e:5e: b8:42:c4:1b:58:c7:6c:ac:63:bf:30:67:d7:b2:28:22:7c:cd: 37:ca:e1:7b:2b:be:29:18:ea:26:97:38:f5:2c:40:54:8f:2d: b0:ac:0d:67 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdbiTdOnGeLOTDUaNa99ExOiJALYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDAwOTFhMmM3OTM1M2U1ZGMyODg2ZjhhYmFkZTMwZWZm NWE2ZTY3MzEwNmVkYWE5NTAzMzMzOTI5ZjFjNTVmMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpJkUeU6zD4Kay996HPDYbkZ5HIKIoJY17zvBw6llyYTHQ xKBna0Tyesf5xqm6cghzOBJv+iTyBjIv2PWLGpCOghkmYaFc2kAGjzLfI/JFcUmF zgTOp1E6dVZJFWPf6+3CLfvBrzma433ypV1I1q92VeH/oFxS9LW3dqe7CPb3+XSx lksz/rYj+fbKFY6pu970xjOF7KVO9LcGZTwAMBLm+ElQlRFL7mozgpFRI2V5luj2 5Ki/MNuJAuQZYoURya0JEA1zGaltjXAbTierLr/aCGUNiO8oWTzxdx8XyyREnTyW Q24E/WxtKK0hz+irivGgmwHpYZ/6Y4t+bVWy0NkxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU58UFIT2t9xwq4BlS0Suui6A2mgQwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL2RhMDZiYmVhLWJiY2ItNDc0My05MGIxLTg1ZDM4NWQ2MjM1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPOfSgwDQYJKoZIhvcNAQELBQADggEBAHidzzPUAoM9oBi2VbCBIIi85Tw3 J7g/tY3l07khcZfI7q5amw/2lWwHdid87HFY57bwwYO4VkxAX+TqvaId6Vx5LM59 v1KkW9DRFGmOx6MYuhI7mknmr1KEkJFg1UoBLATvOFlXiAoHPGeZkCS5azDNm9yV Pa6RHCGeJk+FsS37qJDsl4K/OF9vEicpV60jorwPj/KcEpq4nua9CZZHcfrTcsXt P7PAGmF1YIet7GTpyJxlRYtfxsvq5bvkz1yZ5b/5b/NsxlptEodEJSe8SAQDfyPY XD0+XrhCxBtYx2ysY78wZ9eyKCJ8zTfK4XsrvikY6iaXOPUsQFSPLbCsDWc= -----END CERTIFICATE-----Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org