$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/dfac4fcf-d2c4-4869-a661-bbbe16186b42.roa File: dfac4fcf-d2c4-4869-a661-bbbe16186b42.roa (raw, json) Hash identifier: ck7MuFZzCnoEAS7ud2B+L5R6zVwCnDk35M50NDCePHE= Subject key identifier: 2B:32:27:F5:62:67:53:AE:F7:40:F7:E6:2C:8D:AD:93:CE:38:8A:AF Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 15F4841CFE5E6E2B5054174407E7031C496FA9FB Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/dfac4fcf-d2c4-4869-a661-bbbe16186b42.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 395681 IP address blocks: 43.226.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f4:84:1c:fe:5e:6e:2b:50:54:17:44:07:e7:03:1c:49:6f:a9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=cea8cc3acda27525eaa65ff8a9202d8c27e18584d1afce2575c2595ff4d5ba09, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:a8:79:5f:73:1e:e2:cc:5f:18:17:a4:1d: 00:65:87:b9:d7:ea:aa:5e:e2:c9:3c:db:08:e4:1b: a7:85:58:47:ed:f8:1f:a3:51:8c:9e:9f:4d:23:a5: da:ec:8a:5a:ce:8b:1c:45:72:08:22:63:09:d3:22: 14:5c:80:37:fc:23:60:50:f8:12:d9:a0:cf:81:09: a2:c3:a3:5c:01:53:dd:8b:a7:d5:b4:8b:6a:66:0c: 0e:73:02:62:b8:96:d4:1d:52:2f:bf:f3:8a:90:ef: a2:68:0e:88:2b:21:69:1a:bb:66:8c:64:13:26:b9: 8d:98:c6:b7:77:24:3d:b2:c5:95:d7:b0:ca:6f:11: 11:14:45:88:51:21:f3:74:dd:07:53:e0:5b:66:3a: ef:51:b0:70:9e:01:aa:93:3a:77:7e:f3:86:f5:00: a1:c3:11:a0:7d:b7:4d:7d:f1:36:fd:0d:e6:ab:05: 46:61:44:6c:24:df:00:bf:23:01:9c:32:31:e4:4b: 7f:98:da:9f:0e:0a:39:09:cd:a9:fe:b5:49:a2:4a: fd:90:af:ef:5a:72:2e:3c:61:d6:31:d9:5f:03:51: 01:ce:fc:0b:f1:ce:97:a0:95:8f:aa:a9:3a:58:77: 1b:ab:d1:71:56:3a:a6:aa:d5:d7:af:59:0d:b9:eb: fb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:32:27:F5:62:67:53:AE:F7:40:F7:E6:2C:8D:AD:93:CE:38:8A:AF X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/dfac4fcf-d2c4-4869-a661-bbbe16186b42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.24.0/22 Signature Algorithm: sha256WithRSAEncryption 58:f2:dc:8b:e7:a7:cf:22:b7:93:30:80:45:cd:be:37:40:88: e3:9d:bc:da:a7:c6:33:76:cb:7b:64:00:92:e2:f5:06:f1:58: 5e:51:d2:1c:93:9c:f3:dc:38:50:6a:60:a5:0f:49:f1:96:2a: 46:72:a5:de:d3:23:f1:1f:e5:07:5d:54:7c:04:63:39:4f:10: dc:c3:43:3f:8a:0a:eb:9d:aa:fa:ea:1c:fe:91:35:6c:b5:32: d2:8a:d4:84:c1:e2:85:30:e7:05:80:35:e6:29:61:15:01:47: 57:62:f6:1b:ee:cb:82:47:cb:12:c8:8b:11:09:ae:81:5b:8f: 99:66:cd:2b:ff:b1:1f:56:6a:2f:fa:41:c4:85:ce:65:37:d3: 9e:12:a7:e8:c1:61:fa:b3:27:fa:4e:3c:89:ae:23:67:79:1e: a4:9b:a2:ff:d8:c4:1b:03:73:e4:17:f7:c3:22:d1:50:0c:35: 6e:a8:40:ce:23:cf:2d:71:cd:02:ba:04:b2:8f:ed:ff:87:fd: 29:6e:79:a6:9e:dc:4b:8a:9d:c4:44:e1:0e:02:84:ea:46:29: a0:44:c7:06:a7:da:90:b1:f7:fb:c5:e1:ed:0b:8d:88:91:06: c9:b5:8c:ee:3a:33:13:67:a9:0e:03:62:13:a1:71:68:64:0e: 1c:de:52:27 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFfSEHP5ebitQVBdEB+cDHElvqfswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWE4Y2MzYWNkYTI3NTI1ZWFhNjVmZjhhOTIwMmQ4YzI3 ZTE4NTg0ZDFhZmNlMjU3NWMyNTk1ZmY0ZDViYTA5MS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH76h5X3Me4sxfGBekHQBlh7nX6qpe4sk82wjkG6eFWEft +B+jUYyen00jpdrsilrOixxFcggiYwnTIhRcgDf8I2BQ+BLZoM+BCaLDo1wBU92L p9W0i2pmDA5zAmK4ltQdUi+/84qQ76JoDogrIWkau2aMZBMmuY2Yxrd3JD2yxZXX sMpvEREURYhRIfN03QdT4FtmOu9RsHCeAaqTOnd+84b1AKHDEaB9t0198Tb9Dear BUZhRGwk3wC/IwGcMjHkS3+Y2p8OCjkJzan+tUmiSv2Qr+9aci48YdYx2V8DUQHO /AvxzpeglY+qqTpYdxur0XFWOqaq1devWQ256/vFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKzIn9WJnU673QPfmLI2tk844iq8wHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL2RmYWM0ZmNmLWQyYzQtNDg2OS1hNjYxLWJiYmUxNjE4NmI0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIr4hgwDQYJKoZIhvcNAQELBQADggEBAFjy3Ivnp88it5MwgEXNvjdAiOOd vNqnxjN2y3tkAJLi9QbxWF5R0hyTnPPcOFBqYKUPSfGWKkZypd7TI/Ef5QddVHwE YzlPENzDQz+KCuudqvrqHP6RNWy1MtKK1ITB4oUw5wWANeYpYRUBR1di9hvuy4JH yxLIixEJroFbj5lmzSv/sR9Wai/6QcSFzmU3054Sp+jBYfqzJ/pOPImuI2d5HqSb ov/YxBsDc+QX98Mi0VAMNW6oQM4jzy1xzQK6BLKP7f+H/Slueaae3EuKncRE4Q4C hOpGKaBExwan2pCx9/vF4e0LjYiRBsm1jO46MxNnqQ4DYhOhcWhkDhzeUic= -----END CERTIFICATE-----Generated at Tue May 7 00:53:12 2024 by rpki-client on console-ams.rpki-client.org