$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ec7c457d-8fbf-4827-846d-00cbaf8d1164.roa File: ec7c457d-8fbf-4827-846d-00cbaf8d1164.roa (raw, json) Hash identifier: GlVPWV4cn5L8nQbGKNroMusK7fubqOn4mj64DnXxi/8= Subject key identifier: 4E:C8:04:B9:9A:D9:F9:60:59:CA:D2:9D:6C:E8:AC:AD:8E:A5:01:F0 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 4D6A06A627C82C718BC133D3DD99115F67826EBD Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ec7c457d-8fbf-4827-846d-00cbaf8d1164.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 216.24.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6a:06:a6:27:c8:2c:71:8b:c1:33:d3:dd:99:11:5f:67:82:6e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=2e41e8047724878e026caa40c063d70b2292ee9a60615c24e2711b10e0f93af2, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:77:a4:85:e7:5a:d3:ad:fc:87:f1:b9:64: d9:04:88:ae:06:3e:9e:7a:27:0e:82:64:57:dc:42: 5a:b1:fc:9c:70:e9:de:5b:12:d8:ab:8a:a7:ca:3f: 5a:a9:58:9b:74:6f:d8:af:c9:c0:38:7b:07:bb:48: cb:42:58:f4:0d:1d:5e:ab:ad:b3:43:9c:27:90:4c: 03:75:6e:6b:50:fe:ef:19:50:d8:c8:a0:57:ea:0a: 0c:96:7a:ac:ca:65:17:03:0e:02:38:c7:c0:ff:2e: 8e:85:7d:53:37:af:f1:4a:09:1e:47:81:75:5a:92: 3a:b1:be:17:83:bd:49:52:d7:0d:14:d9:52:5d:79: 8e:d7:48:e3:be:36:f1:25:6d:f0:30:8a:b4:ff:b3: c7:e5:2c:19:c0:3b:2b:00:15:31:59:84:33:b9:90: 09:d3:4b:14:74:b9:5a:ec:da:99:34:50:28:93:3c: e5:e3:7e:45:7b:e8:2f:09:90:91:49:e9:c2:ef:5e: 56:ed:d2:3d:43:ea:0c:52:1a:33:68:5b:93:ec:ea: 85:98:49:f0:87:75:0c:90:26:70:9f:67:60:7b:e6: 6f:c6:20:09:61:a0:20:ac:1c:ed:92:0e:7f:2b:5f: 41:cf:2f:ec:09:66:cf:fe:3c:4b:a2:bc:93:c8:cc: 30:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C8:04:B9:9A:D9:F9:60:59:CA:D2:9D:6C:E8:AC:AD:8E:A5:01:F0 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ec7c457d-8fbf-4827-846d-00cbaf8d1164.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.24.240.0/20 Signature Algorithm: sha256WithRSAEncryption 01:70:d1:c5:38:0d:dc:18:b7:8e:6d:bd:44:76:b5:5b:b4:88: 2e:9c:07:c4:37:78:73:ab:d1:65:46:aa:02:b5:62:2c:fb:f0: a6:39:7e:f0:e4:d4:d7:5a:de:ea:eb:08:d9:2d:8e:08:71:30: 65:dd:e0:6d:7f:94:6a:6e:f8:48:6a:0d:23:93:6a:b8:47:b9: b7:6f:d4:f6:2a:cd:2a:5a:cb:b1:db:c2:ba:62:26:a7:b9:c5: c6:8b:1c:0d:bc:51:a8:12:17:6c:9e:72:cb:be:8f:35:3c:b3: 5b:fa:65:12:2f:e7:08:51:c9:df:ae:38:f6:42:17:57:2f:e6: 55:37:e9:8b:a2:42:30:5f:e2:a7:e9:91:ff:28:1d:93:4b:13: 08:35:fd:d3:d1:94:0a:c0:56:d1:c3:44:46:64:fb:6c:37:5d: c9:79:3e:d7:b8:75:c0:67:88:e5:b9:59:3e:60:a5:a6:23:2d: d0:7f:9d:3f:c8:60:1a:0d:fa:7b:1f:f4:d9:af:a3:5a:b6:e6: 25:cd:39:64:fa:fc:b5:df:fa:03:b3:a0:f2:3a:02:29:ca:a6: 30:7e:09:e7:ce:a2:5c:23:81:ee:86:fa:ca:a5:d8:2a:e3:b5: bf:ae:1b:b0:d1:a9:5f:4e:c4:22:c8:3b:00:c4:2a:97:56:83: 27:36:b3:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTWoGpifILHGLwTPT3ZkRX2eCbr0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTQxZTgwNDc3MjQ4NzhlMDI2Y2FhNDBjMDYzZDcwYjIy OTJlZTlhNjA2MTVjMjRlMjcxMWIxMGUwZjkzYWYyMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBwXekheda0638h/G5ZNkEiK4GPp56Jw6CZFfcQlqx/Jxw 6d5bEtiriqfKP1qpWJt0b9ivycA4ewe7SMtCWPQNHV6rrbNDnCeQTAN1bmtQ/u8Z UNjIoFfqCgyWeqzKZRcDDgI4x8D/Lo6FfVM3r/FKCR5HgXVakjqxvheDvUlS1w0U 2VJdeY7XSOO+NvElbfAwirT/s8flLBnAOysAFTFZhDO5kAnTSxR0uVrs2pk0UCiT POXjfkV76C8JkJFJ6cLvXlbt0j1D6gxSGjNoW5Ps6oWYSfCHdQyQJnCfZ2B75m/G IAlhoCCsHO2SDn8rX0HPL+wJZs/+PEuivJPIzDALAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTsgEuZrZ+WBZytKdbOisrY6lAfAwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL2VjN2M0NTdkLThmYmYtNDgyNy04NDZkLTAwY2JhZjhkMTE2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATYGPAwDQYJKoZIhvcNAQELBQADggEBAAFw0cU4DdwYt45tvUR2tVu0iC6c B8Q3eHOr0WVGqgK1Yiz78KY5fvDk1Nda3urrCNktjghxMGXd4G1/lGpu+EhqDSOT arhHubdv1PYqzSpay7HbwrpiJqe5xcaLHA28UagSF2yecsu+jzU8s1v6ZRIv5whR yd+uOPZCF1cv5lU36YuiQjBf4qfpkf8oHZNLEwg1/dPRlArAVtHDREZk+2w3Xcl5 Pte4dcBniOW5WT5gpaYjLdB/nT/IYBoN+nsf9Nmvo1q25iXNOWT6/LXf+gOzoPI6 AinKpjB+CefOolwjge6G+sql2Crjtb+uG7DRqV9OxCLIOwDEKpdWgyc2s/Q= -----END CERTIFICATE-----Generated at Thu May 2 01:06:36 2024 by rpki-client on console-fra.rpki-client.org