$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/e1c7e92f-3dde-4214-9a88-4b351c361ed2.roa File: e1c7e92f-3dde-4214-9a88-4b351c361ed2.roa (raw, json) Hash identifier: aQ/fAZdKqQANDIhYPiceN+2sNaN5YNG5huMebbv6h10= Subject key identifier: 4D:FB:B3:74:A2:B1:6E:29:07:FA:6D:7C:68:4C:62:B1:0B:B1:72:B5 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 698AD00285CA59A0FBBF56B9B8F78EEFF89F4A45 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/e1c7e92f-3dde-4214-9a88-4b351c361ed2.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 35916 IP address blocks: 72.44.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8a:d0:02:85:ca:59:a0:fb:bf:56:b9:b8:f7:8e:ef:f8:9f:4a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=e0bac029d8e6dbb372c735a29a5556269cb2d921e268eb70faadb34794c55bab, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:fc:63:b3:b8:91:6a:fd:45:0e:49:ab:28: 56:4e:83:d8:34:d6:80:8e:30:9b:1e:ce:c6:40:11: 1f:6f:00:53:33:d4:7d:3c:88:73:da:ac:37:d7:ec: 13:0e:da:24:54:ce:7a:3d:57:d6:a9:e0:98:63:c6: 3e:69:6c:62:4a:7c:99:7a:49:17:87:cb:c9:42:99: ba:93:3e:8a:c3:41:dd:58:17:1c:6b:10:7e:42:39: c0:30:fd:2b:aa:c8:38:1d:37:90:ee:44:4e:b2:85: 63:fd:7f:55:6f:9b:36:60:66:b7:19:73:de:a5:c9: 06:54:0c:17:c5:d1:66:33:fe:04:d4:02:6a:16:cf: da:78:b4:be:87:26:6f:ad:d9:ea:31:1e:17:6f:8a: 73:a4:9b:64:65:52:e0:08:b5:b9:1e:ff:dc:ca:24: 0c:97:84:a1:3b:2d:9c:ae:fa:5a:cd:ea:ed:6c:1c: d2:c2:7c:92:3f:e1:dd:a1:ba:98:5a:c7:cd:62:5e: da:24:30:cf:06:3b:ea:f9:cc:7b:94:24:51:53:37: c1:2d:ab:54:6e:bd:fc:c6:6d:a1:fe:70:8a:45:ed: a3:2e:e0:07:c7:53:a6:6a:53:f7:3c:0a:07:82:4a: bf:1d:a5:01:45:8c:02:05:8e:e8:63:82:df:04:cf: c7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FB:B3:74:A2:B1:6E:29:07:FA:6D:7C:68:4C:62:B1:0B:B1:72:B5 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/e1c7e92f-3dde-4214-9a88-4b351c361ed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.44.64.0/20 Signature Algorithm: sha256WithRSAEncryption 7d:0b:d9:e1:77:78:4e:58:bb:e3:f6:0f:05:f8:1d:71:d7:58: 22:d1:2d:e3:37:80:79:f3:1f:56:d3:a4:91:dd:27:6c:6c:a5: fb:73:df:d8:2c:ca:5b:38:cc:69:4d:f7:12:38:09:d6:64:7c: 76:a7:5f:4c:83:61:ae:e1:f6:24:05:04:5f:9b:a3:a1:9d:ce: 63:14:85:df:ee:9c:09:99:9e:ee:a1:75:5f:bb:cc:83:4e:58: 55:6d:9b:43:81:0a:d9:3c:1b:5a:50:83:e4:49:d4:b7:37:67: c3:b2:b2:73:69:01:71:2b:1e:1d:e6:84:5d:bb:26:fd:11:9c: 7a:af:df:45:63:43:de:d6:11:31:92:70:f2:a6:13:0e:bd:ab: 56:54:be:81:a5:b8:70:62:04:6d:b7:d1:44:8f:26:3e:aa:41: 34:cd:d9:d7:d1:37:13:07:2b:99:0c:66:9a:4f:24:7b:c5:2d: 28:66:45:52:96:58:38:91:23:e4:83:f2:df:4b:72:1f:07:91: 96:91:4d:e3:65:11:42:1d:e0:35:79:c7:3a:1d:ed:6f:1d:bf: 83:9a:85:85:b3:71:4e:35:85:23:5d:77:ab:b3:ce:b6:23:45: 85:48:0f:03:4c:eb:d4:a6:8f:8a:57:56:af:88:2b:b9:b3:20: e3:18:50:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaYrQAoXKWaD7v1a5uPeO7/ifSkUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMGJhYzAyOWQ4ZTZkYmIzNzJjNzM1YTI5YTU1NTYyNjlj YjJkOTIxZTI2OGViNzBmYWFkYjM0Nzk0YzU1YmFiMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6cvxjs7iRav1FDkmrKFZOg9g01oCOMJsezsZAER9vAFMz 1H08iHParDfX7BMO2iRUzno9V9ap4Jhjxj5pbGJKfJl6SReHy8lCmbqTPorDQd1Y FxxrEH5COcAw/SuqyDgdN5DuRE6yhWP9f1VvmzZgZrcZc96lyQZUDBfF0WYz/gTU AmoWz9p4tL6HJm+t2eoxHhdvinOkm2RlUuAItbke/9zKJAyXhKE7LZyu+lrN6u1s HNLCfJI/4d2huphax81iXtokMM8GO+r5zHuUJFFTN8Etq1RuvfzGbaH+cIpF7aMu 4AfHU6ZqU/c8CgeCSr8dpQFFjAIFjuhjgt8Ez8ddAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTfuzdKKxbikH+m18aExisQuxcrUwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL2UxYzdlOTJmLTNkZGUtNDIxNC05YTg4LTRiMzUxYzM2MWVkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARILEAwDQYJKoZIhvcNAQELBQADggEBAH0L2eF3eE5Yu+P2DwX4HXHXWCLR LeM3gHnzH1bTpJHdJ2xspftz39gsyls4zGlN9xI4CdZkfHanX0yDYa7h9iQFBF+b o6GdzmMUhd/unAmZnu6hdV+7zINOWFVtm0OBCtk8G1pQg+RJ1Lc3Z8OysnNpAXEr Hh3mhF27Jv0RnHqv30VjQ97WETGScPKmEw69q1ZUvoGluHBiBG230USPJj6qQTTN 2dfRNxMHK5kMZppPJHvFLShmRVKWWDiRI+SD8t9Lch8HkZaRTeNlEUId4DV5xzod 7W8dv4OahYWzcU41hSNdd6uzzrYjRYVIDwNM69Smj4pXVq+IK7mzIOMYUOc= -----END CERTIFICATE-----Generated at Fri May 3 00:07:10 2024 by rpki-client on console-ams.rpki-client.org