$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/e4372835-66b9-43e3-92ac-9ed154576c55.roa File: e4372835-66b9-43e3-92ac-9ed154576c55.roa (raw, json) Hash identifier: M+hnWQneMMRBEcFXh4jV4V9vxbuDHG4notXGIlle07k= Subject key identifier: 82:6B:60:23:3E:41:73:D0:3E:58:87:31:46:C0:E7:B5:F8:3B:91:34 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 0A97974CA562063B432F4AF3610A74FD4DB6A063 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/e4372835-66b9-43e3-92ac-9ed154576c55.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 395681 IP address blocks: 216.127.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:97:97:4c:a5:62:06:3b:43:2f:4a:f3:61:0a:74:fd:4d:b6:a0:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=c4454596107435dcb8abf9cdcc19905990448f0a3de437d2e5d5ac38ce2e4688, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a7:b9:b4:ee:d4:07:a9:e9:e0:11:1c:d0:d2: 73:4b:08:a6:db:c5:fa:83:b6:c0:ef:df:24:50:fb: 2c:36:1d:40:59:fc:9e:1a:a1:69:29:01:34:23:c6: f8:3a:b3:47:47:a6:83:db:ed:72:f4:b4:2b:3c:b0: 71:67:93:51:66:30:31:84:85:fa:f6:8f:0d:d8:62: 67:a2:10:e7:9a:b0:73:04:e8:00:89:34:c2:3d:60: 97:bf:67:aa:6c:1e:38:2c:43:e7:18:d7:e2:3c:74: fa:75:9b:19:6a:8c:35:83:aa:75:2c:9f:1c:d3:0e: 5f:e1:95:7e:92:3c:b2:62:ca:f4:c9:0b:8b:df:3c: 19:b1:cb:20:07:37:db:a7:01:d1:df:e4:f7:1b:7c: 75:74:9e:f6:3e:cc:09:96:8f:28:bf:3b:73:01:a6: c9:86:c7:22:66:52:77:44:4a:77:cf:39:48:db:83: 2f:9e:45:4a:1b:de:13:c2:45:b1:83:ca:96:8c:f3: aa:68:d4:0e:94:0f:a3:d7:85:6f:2b:84:9e:d6:31: 09:cb:cf:2a:38:f7:cf:c2:43:fb:5b:98:78:67:06: c9:85:3f:6f:68:e4:fb:39:63:dc:16:97:65:73:e0: aa:f7:a1:6a:f6:02:d0:fe:86:ed:f9:7e:54:79:7e: b5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6B:60:23:3E:41:73:D0:3E:58:87:31:46:C0:E7:B5:F8:3B:91:34 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/e4372835-66b9-43e3-92ac-9ed154576c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.127.191.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:15:8f:00:36:ac:60:e2:1c:20:69:0e:3a:12:6c:43:01:71: e6:13:c6:cd:00:d8:61:5c:25:e3:1b:e9:13:a6:5c:8f:c7:12: fe:0e:86:57:d5:d8:10:6e:5a:7b:2e:25:88:03:d8:c0:35:6b: a2:23:89:8f:d3:10:6e:35:a0:b8:c0:59:b7:c1:ce:54:1b:71: 4e:4e:68:2e:9e:ab:0d:c3:5d:2f:25:2a:d8:b7:01:85:ab:f0: 9a:fd:9b:d7:63:50:79:ec:f5:ac:06:20:5c:9d:a0:8d:07:ee: 77:bc:1e:3f:26:69:23:ad:4a:3a:e4:6d:99:80:da:49:d1:0e: 3c:a7:49:9f:68:ff:4d:a8:f4:8d:f7:e3:d4:69:5c:10:5d:3e: e6:07:4f:3d:b4:dd:3f:cd:21:b0:e9:84:ef:5a:4e:31:28:6c: 11:d5:85:9d:6d:09:eb:99:84:5b:30:3f:a3:f7:dd:27:b7:f9: ab:b1:e6:38:63:f4:8f:08:75:66:04:e7:b0:d7:2a:0a:92:e7: d0:2f:1c:1a:cc:15:87:16:fa:37:84:d9:06:ce:e1:bb:e2:8f: 1f:52:ae:c9:cc:2b:58:44:5c:96:cb:1a:74:f0:10:96:45:e3: 36:92:69:19:f1:45:3a:3d:01:0f:96:d0:67:80:50:3c:b9:31: 72:0f:e4:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCpeXTKViBjtDL0rzYQp0/U22oGMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDQ1NDU5NjEwNzQzNWRjYjhhYmY5Y2RjYzE5OTA1OTkw NDQ4ZjBhM2RlNDM3ZDJlNWQ1YWMzOGNlMmU0Njg4MS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCap7m07tQHqengERzQ0nNLCKbbxfqDtsDv3yRQ+yw2HUBZ /J4aoWkpATQjxvg6s0dHpoPb7XL0tCs8sHFnk1FmMDGEhfr2jw3YYmeiEOeasHME 6ACJNMI9YJe/Z6psHjgsQ+cY1+I8dPp1mxlqjDWDqnUsnxzTDl/hlX6SPLJiyvTJ C4vfPBmxyyAHN9unAdHf5PcbfHV0nvY+zAmWjyi/O3MBpsmGxyJmUndESnfPOUjb gy+eRUob3hPCRbGDypaM86po1A6UD6PXhW8rhJ7WMQnLzyo498/CQ/tbmHhnBsmF P29o5Ps5Y9wWl2Vz4Kr3oWr2AtD+hu35flR5frWDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgmtgIz5Bc9A+WIcxRsDntfg7kTQwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL2U0MzcyODM1LTY2YjktNDNlMy05MmFjLTllZDE1NDU3NmM1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYf78wDQYJKoZIhvcNAQELBQADggEBAJ8VjwA2rGDiHCBpDjoSbEMBceYT xs0A2GFcJeMb6ROmXI/HEv4OhlfV2BBuWnsuJYgD2MA1a6IjiY/TEG41oLjAWbfB zlQbcU5OaC6eqw3DXS8lKti3AYWr8Jr9m9djUHns9awGIFydoI0H7ne8Hj8maSOt SjrkbZmA2knRDjynSZ9o/02o9I3349RpXBBdPuYHTz203T/NIbDphO9aTjEobBHV hZ1tCeuZhFswP6P33Se3+aux5jhj9I8IdWYE57DXKgqS59AvHBrMFYcW+jeE2QbO 4bvijx9SrsnMK1hEXJbLGnTwEJZF4zaSaRnxRTo9AQ+W0GeAUDy5MXIP5JE= -----END CERTIFICATE-----Generated at Tue May 7 00:53:12 2024 by rpki-client on console-ams.rpki-client.org