$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/e1ffb554-c91c-4a3e-b1af-665b21964e46.roa File: e1ffb554-c91c-4a3e-b1af-665b21964e46.roa (raw, json) Hash identifier: Q/DTbhD4TdxAhQNj6v+rdWxbPs3v1d7xAlhPfdNDZd8= Subject key identifier: 5F:15:6D:F1:88:98:32:0B:66:97:81:3A:50:92:C0:B7:E4:77:03:94 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 74179EFF0CD7A86CD2E2E4A4EF0A2D89602DB22C Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/e1ffb554-c91c-4a3e-b1af-665b21964e46.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 35916 IP address blocks: 66.152.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:17:9e:ff:0c:d7:a8:6c:d2:e2:e4:a4:ef:0a:2d:89:60:2d:b2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=385eaf42f529f76187468ff4126262700caa1b6d44447cdeeb3a8d24f0148105, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3e:db:45:09:bb:fd:62:5b:15:56:1d:56:b3: a0:96:9e:2a:02:50:d4:e4:2a:49:4c:86:7b:c0:ab: d5:e3:1e:25:9b:35:a7:3b:32:bb:93:0e:09:1a:78: 53:e1:86:f5:97:1e:67:e7:b4:17:e0:2d:7a:b1:55: fb:78:7c:9f:8f:2a:ad:3b:c8:cc:65:f2:78:76:dd: 65:08:b3:86:65:22:22:10:9b:60:e3:bc:73:8b:0a: ee:5f:d6:e0:c2:bb:15:d4:c8:96:6b:c5:29:50:87: 93:64:05:3c:54:27:45:02:c9:7f:83:af:ca:1e:7c: c0:b9:0d:7a:f9:95:95:70:3e:2b:5c:e9:58:45:45: 1b:6a:5a:26:45:d2:0e:c3:74:a5:89:df:bd:07:63: 43:a1:89:94:fd:c4:44:44:51:7a:ae:7a:4a:ec:22: 2a:18:53:cd:79:e2:21:c8:65:9d:18:b8:4d:8e:9f: 44:0a:33:49:17:c6:c1:1f:41:3f:d0:51:c0:b3:58: f0:13:0a:29:14:f2:00:36:32:91:13:76:a6:57:82: 6b:a3:3c:bf:2e:22:ff:10:0e:7d:0a:c7:aa:68:65: 52:bf:05:61:22:6f:fe:3b:da:2a:c5:38:1c:b8:a8: b5:81:17:d2:7e:1e:54:ca:96:cc:f8:e7:78:c2:06: 3f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:15:6D:F1:88:98:32:0B:66:97:81:3A:50:92:C0:B7:E4:77:03:94 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/e1ffb554-c91c-4a3e-b1af-665b21964e46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.152.164.0/24 Signature Algorithm: sha256WithRSAEncryption 26:69:eb:96:1e:0b:47:99:a1:64:58:e0:b7:ad:06:51:66:91: 61:c0:9e:ed:18:b7:9c:c3:ff:de:64:61:17:08:5a:f1:3f:66: 38:b3:8d:3d:a8:b6:57:5b:19:e4:88:e6:56:09:ad:e5:68:c0: 4a:d3:5a:23:d8:03:93:4b:e2:8b:5f:7c:3b:77:ec:dc:08:15: e4:59:e6:04:b2:d6:c8:96:9d:05:dd:39:a8:a2:9e:14:a6:f0: ab:60:c6:cd:a6:b5:99:20:a1:d2:d6:22:b8:20:df:25:e9:de: ea:d7:33:56:0d:77:c9:1f:0d:32:31:ec:de:f9:ca:f7:b7:72: 56:eb:7d:ac:a4:6d:52:3f:9c:14:2f:be:9f:34:69:7f:78:fb: 58:79:95:30:be:9b:db:96:ed:d0:0c:4c:13:51:9c:e3:3f:d5: fa:35:f8:35:70:13:1d:dd:40:fc:af:25:41:c2:fa:04:e2:7e: b6:8d:27:54:e0:89:a1:50:09:10:6e:51:ab:f2:99:a9:e8:4e: 5d:03:4c:e0:23:a3:78:81:5d:d8:c2:18:73:47:13:bd:d1:32: b3:c7:58:26:cb:02:f2:ac:ea:6a:f6:d1:fc:60:46:e6:f3:91: 6a:f4:8c:60:12:09:2b:35:af:39:2c:1f:cf:44:de:fb:48:84: 81:df:c0:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdBee/wzXqGzS4uSk7wotiWAtsiwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzODVlYWY0MmY1MjlmNzYxODc0NjhmZjQxMjYyNjI3MDBj YWExYjZkNDQ0NDdjZGVlYjNhOGQyNGYwMTQ4MTA1MS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgPttFCbv9YlsVVh1Ws6CWnioCUNTkKklMhnvAq9XjHiWb Nac7MruTDgkaeFPhhvWXHmfntBfgLXqxVft4fJ+PKq07yMxl8nh23WUIs4ZlIiIQ m2DjvHOLCu5f1uDCuxXUyJZrxSlQh5NkBTxUJ0UCyX+Dr8oefMC5DXr5lZVwPitc 6VhFRRtqWiZF0g7DdKWJ370HY0OhiZT9xEREUXquekrsIioYU8154iHIZZ0YuE2O n0QKM0kXxsEfQT/QUcCzWPATCikU8gA2MpETdqZXgmujPL8uIv8QDn0Kx6poZVK/ BWEib/472irFOBy4qLWBF9J+HlTKlsz453jCBj93AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXxVt8YiYMgtml4E6UJLAt+R3A5QwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL2UxZmZiNTU0LWM5MWMtNGEzZS1iMWFmLTY2NWIyMTk2NGU0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABCmKQwDQYJKoZIhvcNAQELBQADggEBACZp65YeC0eZoWRY4LetBlFmkWHA nu0Yt5zD/95kYRcIWvE/ZjizjT2otldbGeSI5lYJreVowErTWiPYA5NL4otffDt3 7NwIFeRZ5gSy1siWnQXdOaiinhSm8Ktgxs2mtZkgodLWIrgg3yXp3urXM1YNd8kf DTIx7N75yve3clbrfaykbVI/nBQvvp80aX94+1h5lTC+m9uW7dAMTBNRnOM/1fo1 +DVwEx3dQPyvJUHC+gTifraNJ1TgiaFQCRBuUavymanoTl0DTOAjo3iBXdjCGHNH E73RMrPHWCbLAvKs6mr20fxgRubzkWr0jGASCSs1rzksH89E3vtIhIHfwNU= -----END CERTIFICATE-----Generated at Thu May 2 00:10:37 2024 by rpki-client on console-ams.rpki-client.org