$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/eb8dc77b-3c21-43be-88ce-ade889343a5e.roa File: eb8dc77b-3c21-43be-88ce-ade889343a5e.roa (raw, json) Hash identifier: 0/KAGasPGqvOlFE7atDpJM0L7NjyQ8LzooFQ9CToZ9M= Subject key identifier: E0:E5:B1:76:09:CE:75:7C:F2:98:6B:40:F7:23:B0:90:48:79:62:B9 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 2AED530A76CEEE5416F867E6EE91B9CE7AB0B6D2 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/eb8dc77b-3c21-43be-88ce-ade889343a5e.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 198.211.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ed:53:0a:76:ce:ee:54:16:f8:67:e6:ee:91:b9:ce:7a:b0:b6:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=9da2b6b99abc50b27481d88cd03f266839a9089f2e6944646d6683a80202fa07, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e6:58:4e:f0:29:98:29:38:3e:7a:46:b4:76: a1:65:cc:95:88:98:79:7e:28:0f:a2:94:2a:ed:9a: 44:48:af:12:ec:7c:d7:6d:87:04:4d:84:36:e5:a1: ac:85:b4:03:a9:0e:87:79:7a:d6:b2:50:3c:d7:57: bb:79:e4:ec:b6:50:2d:98:b0:d2:5e:03:fb:8d:27: 75:54:e7:f6:8e:54:db:6a:a5:86:56:e9:7f:17:7f: ae:65:da:25:e6:15:30:cc:eb:b3:46:47:60:f9:28: 14:b2:d1:96:c8:70:f8:f6:f9:cf:9b:41:45:1c:ac: 9b:97:b4:89:9e:7e:a0:37:f4:98:db:35:fb:85:30: fa:7a:db:31:73:ba:36:8c:88:0c:0b:31:8c:d7:e9: 1a:4e:26:e0:06:0a:52:1c:f5:d0:ee:71:a0:e9:b3: 48:35:25:dd:66:08:9e:b8:13:3d:c4:00:8f:4c:5c: 0b:9b:63:6a:58:ef:93:51:49:5c:90:26:99:32:83: 54:31:20:f5:06:ff:f6:44:a4:ee:8e:4d:a8:08:e6: 4f:5a:19:8e:0b:6a:d4:96:90:c9:93:ad:78:67:b3: d8:9c:69:86:fe:1a:6c:70:cd:db:fc:73:f2:7e:9c: 34:2c:f9:2a:ab:1e:8c:78:c4:d8:5d:da:e3:9a:b2: 67:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E5:B1:76:09:CE:75:7C:F2:98:6B:40:F7:23:B0:90:48:79:62:B9 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/eb8dc77b-3c21-43be-88ce-ade889343a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.211.33.0/24 Signature Algorithm: sha256WithRSAEncryption 82:c2:c5:fd:6d:25:ca:d8:a4:af:00:c7:94:cc:49:c1:38:38: f6:d4:64:ce:48:5f:07:a2:ae:13:70:d1:6e:f5:87:64:3e:a2: ce:83:7e:65:b4:ca:54:68:a0:d8:78:74:9a:90:c1:86:90:db: 11:51:3d:1c:28:95:69:21:c2:18:31:21:0f:cf:62:44:18:6e: f0:56:26:d5:c2:b1:20:eb:ba:0a:ef:4f:84:03:8c:e5:d8:b9: 01:c8:0e:6c:ee:e3:e7:15:25:de:0c:ae:de:e8:65:6f:1a:7b: 3c:a6:87:57:d2:5e:1b:b7:8c:57:ea:d0:d1:9b:db:fa:ce:8a: bc:86:99:e4:c8:78:aa:97:3b:a0:60:b7:67:e5:dc:af:82:22: 36:d4:18:d4:a7:b9:8b:a5:0b:fe:8f:0f:ee:d3:c2:a5:1c:6d: f3:88:61:3a:6c:3a:37:c5:80:0b:48:56:b8:a6:f1:79:2d:33: 6a:db:04:cc:dc:d1:96:3e:0e:bb:42:1c:cc:c7:74:4a:2b:26: 87:ca:5d:32:28:ed:56:53:d0:cc:b1:03:45:78:3a:af:4f:90: 18:27:57:ae:fd:61:f1:9c:73:f3:59:a6:b9:6c:0d:d7:72:c1: 52:81:37:a4:87:ed:78:cb:bb:ea:08:65:2f:9b:22:fb:3e:d8: 99:79:8b:00 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKu1TCnbO7lQW+Gfm7pG5znqwttIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGEyYjZiOTlhYmM1MGIyNzQ4MWQ4OGNkMDNmMjY2ODM5 YTkwODlmMmU2OTQ0NjQ2ZDY2ODNhODAyMDJmYTA3MS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDT5lhO8CmYKTg+eka0dqFlzJWImHl+KA+ilCrtmkRIrxLs fNdthwRNhDbloayFtAOpDod5etayUDzXV7t55Oy2UC2YsNJeA/uNJ3VU5/aOVNtq pYZW6X8Xf65l2iXmFTDM67NGR2D5KBSy0ZbIcPj2+c+bQUUcrJuXtImefqA39Jjb NfuFMPp62zFzujaMiAwLMYzX6RpOJuAGClIc9dDucaDps0g1Jd1mCJ64Ez3EAI9M XAubY2pY75NRSVyQJpkyg1QxIPUG//ZEpO6OTagI5k9aGY4LatSWkMmTrXhns9ic aYb+Gmxwzdv8c/J+nDQs+SqrHox4xNhd2uOasmd9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4OWxdgnOdXzymGtA9yOwkEh5YrkwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL2ViOGRjNzdiLTNjMjEtNDNiZS04OGNlLWFkZTg4OTM0M2E1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADG0yEwDQYJKoZIhvcNAQELBQADggEBAILCxf1tJcrYpK8Ax5TMScE4OPbU ZM5IXweirhNw0W71h2Q+os6DfmW0ylRooNh4dJqQwYaQ2xFRPRwolWkhwhgxIQ/P YkQYbvBWJtXCsSDrugrvT4QDjOXYuQHIDmzu4+cVJd4Mrt7oZW8aezymh1fSXhu3 jFfq0NGb2/rOiryGmeTIeKqXO6Bgt2fl3K+CIjbUGNSnuYulC/6PD+7TwqUcbfOI YTpsOjfFgAtIVrim8XktM2rbBMzc0ZY+DrtCHMzHdEorJofKXTIo7VZT0MyxA0V4 Oq9PkBgnV679YfGcc/NZprlsDddywVKBN6SH7XjLu+oIZS+bIvs+2Jl5iwA= -----END CERTIFICATE-----Generated at Wed May 8 23:47:45 2024 by rpki-client on console-ams.rpki-client.org