$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ed5f7977-6160-4d53-b0f1-e9f67aa56766.roa File: ed5f7977-6160-4d53-b0f1-e9f67aa56766.roa (raw, json) Hash identifier: lGGTN7YXHNvT/nVrecigT+C/5f7BL2j5d5mNpJW6LWE= Subject key identifier: 6B:00:EB:04:F5:B5:E0:EF:08:A9:7F:FD:C3:11:03:18:30:F9:F9:F2 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 7B0675551E44157BD66EAEB0681A5DAC133BE343 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ed5f7977-6160-4d53-b0f1-e9f67aa56766.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 72.44.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:06:75:55:1e:44:15:7b:d6:6e:ae:b0:68:1a:5d:ac:13:3b:e3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=1a3d2d7d431c5087dcb3de5815dddb9c1d456e50b94f602c4eddbbef0f77d028, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:10:ff:15:65:c6:34:02:b9:38:9c:30:1b:71: 17:ae:a2:c0:f8:d4:03:a3:3f:d8:dc:5c:d3:d6:1d: 56:59:7b:ad:74:0b:f3:86:a8:4e:5b:54:18:ab:39: ae:8a:1e:a2:3e:73:3a:5f:80:a1:01:b3:b7:fd:e6: d8:96:98:42:57:1d:80:d5:e8:25:54:9d:77:63:64: 68:cc:36:b0:6d:87:56:a8:46:a9:df:77:75:10:85: c1:1a:90:2e:d9:25:33:2c:82:32:a0:85:8b:3a:4a: 4e:d4:8f:6f:76:76:27:e6:4c:75:01:17:96:0f:c9: a0:e3:28:93:56:86:7c:a5:07:ca:1f:22:da:4f:86: d9:bf:90:e1:06:f2:08:f8:5a:6f:76:19:4d:58:0c: 5a:5e:b5:6f:79:92:da:5f:b3:e0:9e:3d:23:94:93: 39:c7:52:b0:26:fb:0e:46:13:9b:10:1d:a8:db:8e: aa:e1:ef:2c:94:93:a7:33:06:82:da:dc:a1:71:a0: e5:6c:08:86:78:30:ef:55:7c:18:69:89:9b:22:82: d4:ce:47:bf:32:ad:9e:ef:cf:e5:be:f7:81:51:60: fa:fc:a3:0b:8b:3c:6b:01:a6:4f:a2:44:8e:38:1b: 72:76:20:44:b9:be:c0:42:6e:56:f3:27:84:20:ba: fb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:00:EB:04:F5:B5:E0:EF:08:A9:7F:FD:C3:11:03:18:30:F9:F9:F2 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ed5f7977-6160-4d53-b0f1-e9f67aa56766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.44.64.0/20 Signature Algorithm: sha256WithRSAEncryption 8d:42:8b:8d:9a:ae:d5:c5:0e:04:ef:6e:9b:f6:54:90:84:69: 51:2d:4b:5e:c7:35:6a:8e:4b:b0:24:16:71:22:ff:b1:79:3a: 17:46:e1:1f:2c:94:34:9d:9a:6e:4a:46:57:9b:e8:85:d3:af: c8:bb:81:5c:b7:eb:d6:07:8c:bf:28:1d:02:34:1b:be:df:89: 3a:bb:f5:3c:88:cf:05:2e:da:69:b6:1f:37:49:af:b8:a9:e8: 18:8f:bf:64:fa:f8:94:34:5f:0e:b0:c7:a5:33:93:51:f3:11: a5:8f:97:22:e6:1a:30:e5:3b:f4:c7:ad:b9:60:85:ce:ae:6a: 1c:48:a9:73:94:dc:39:00:b8:2c:dd:81:4d:b6:70:99:4c:76: 5a:98:91:aa:e5:84:ec:99:c4:56:22:5a:60:9d:dd:63:74:97: 59:f2:2b:8e:8c:1f:6b:2b:fb:b2:bf:37:ba:cc:5b:95:99:32: ef:ac:22:9b:bd:64:0e:b9:d2:8a:e2:19:3d:ce:23:b7:f2:2c: e8:0a:16:e4:67:48:a5:00:64:59:62:dc:fc:a7:ab:3d:fd:fc: 60:c6:94:2e:92:f8:e0:0b:74:f8:7d:a8:51:e2:55:47:1c:00: 03:ed:cb:13:56:b8:34:ff:2c:13:62:5c:c6:73:4a:ac:9c:b1: 96:d0:68:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUewZ1VR5EFXvWbq6waBpdrBM740MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTNkMmQ3ZDQzMWM1MDg3ZGNiM2RlNTgxNWRkZGI5YzFk NDU2ZTUwYjk0ZjYwMmM0ZWRkYmJlZjBmNzdkMDI4MS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnEP8VZcY0Ark4nDAbcReuosD41AOjP9jcXNPWHVZZe610 C/OGqE5bVBirOa6KHqI+czpfgKEBs7f95tiWmEJXHYDV6CVUnXdjZGjMNrBth1ao Rqnfd3UQhcEakC7ZJTMsgjKghYs6Sk7Uj292difmTHUBF5YPyaDjKJNWhnylB8of ItpPhtm/kOEG8gj4Wm92GU1YDFpetW95ktpfs+CePSOUkznHUrAm+w5GE5sQHajb jqrh7yyUk6czBoLa3KFxoOVsCIZ4MO9VfBhpiZsigtTOR78yrZ7vz+W+94FRYPr8 owuLPGsBpk+iRI44G3J2IES5vsBCblbzJ4QguvvzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUawDrBPW14O8IqX/9wxEDGDD5+fIwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL2VkNWY3OTc3LTYxNjAtNGQ1My1iMGYxLWU5ZjY3YWE1Njc2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARILEAwDQYJKoZIhvcNAQELBQADggEBAI1Ci42artXFDgTvbpv2VJCEaVEt S17HNWqOS7AkFnEi/7F5OhdG4R8slDSdmm5KRleb6IXTr8i7gVy369YHjL8oHQI0 G77fiTq79TyIzwUu2mm2HzdJr7ip6BiPv2T6+JQ0Xw6wx6Uzk1HzEaWPlyLmGjDl O/THrblghc6uahxIqXOU3DkAuCzdgU22cJlMdlqYkarlhOyZxFYiWmCd3WN0l1ny K46MH2sr+7K/N7rMW5WZMu+sIpu9ZA650oriGT3OI7fyLOgKFuRnSKUAZFli3Pyn qz39/GDGlC6S+OALdPh9qFHiVUccAAPtyxNWuDT/LBNiXMZzSqycsZbQaE0= -----END CERTIFICATE-----Generated at Thu May 2 00:10:37 2024 by rpki-client on console-ams.rpki-client.org