$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/f6a2cb18-62f6-4ee2-a1d8-f66282225214.roa File: f6a2cb18-62f6-4ee2-a1d8-f66282225214.roa (raw, json) Hash identifier: qlCp+oYam/GAJYjBdceS5bRSJqg13XEE9/CpDx8WyEQ= Subject key identifier: 65:8B:1C:09:45:F5:C8:4C:BE:7D:BB:73:4A:39:BF:A7:A2:AB:0B:4C Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 60FD40C315520CFE6F8D9F498350A726A66C58A0 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/f6a2cb18-62f6-4ee2-a1d8-f66282225214.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 35916 IP address blocks: 205.172.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fd:40:c3:15:52:0c:fe:6f:8d:9f:49:83:50:a7:26:a6:6c:58:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=d9fe8f9e699c822bfb6f8b436b0e0d44744fcaef911463af0cbe5d3db501e97a, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:e2:b4:a1:02:dd:52:f6:0b:dc:29:76:53: 70:eb:14:86:36:ac:35:1f:5c:8a:bc:49:92:b5:57: f0:dc:bd:6c:60:fc:b5:73:08:5c:14:aa:71:b0:7e: b7:26:68:a9:97:89:f4:b0:d6:30:fe:56:d9:1f:5d: a4:20:bb:bb:81:38:4e:a8:df:4d:34:c2:49:1c:09: 8e:03:be:c0:eb:d6:05:85:c5:c8:c9:d2:b8:e7:cf: 31:2c:02:1f:02:0b:05:8a:1c:cb:38:57:ad:02:ea: 96:ab:bc:17:94:c6:03:42:c7:e9:14:d3:7f:e6:72: 76:e6:e8:dd:80:9a:62:0c:20:2a:55:c5:a1:41:1d: 35:86:86:38:a2:55:9e:12:2a:bc:24:25:7a:d7:5d: 6a:aa:4d:86:d1:e0:4a:9e:63:3a:7b:ef:fb:0b:47: e2:f9:13:fb:8d:13:5a:5d:b5:47:fb:b9:59:d8:42: fd:81:6b:79:52:2f:55:18:7a:29:7b:83:4f:fa:e1: 2c:29:3c:11:10:43:ba:ff:68:9c:3c:49:aa:93:3e: 28:f3:0c:a4:99:4f:e9:a3:d3:5c:c9:a1:df:e3:09: 63:f9:2d:66:28:6c:0a:46:64:88:24:4c:fe:86:5a: 32:42:c3:da:34:62:50:b9:e9:dc:cb:60:8d:fd:02: 6b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8B:1C:09:45:F5:C8:4C:BE:7D:BB:73:4A:39:BF:A7:A2:AB:0B:4C X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/f6a2cb18-62f6-4ee2-a1d8-f66282225214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.172.176.0/22 Signature Algorithm: sha256WithRSAEncryption 01:71:cf:da:fe:b2:e5:07:6d:c0:ef:c9:74:65:2e:5d:be:98: 3b:32:9a:0e:8c:c2:4d:7c:69:28:87:ae:f4:79:c3:86:41:d3: 84:28:0b:ae:4c:d4:d9:35:7c:d0:17:ff:a5:17:a5:3c:cc:6d: 35:0d:07:75:99:96:0d:bc:74:e4:0a:f5:c8:c5:76:df:68:83: 7a:c8:51:85:79:94:3e:93:03:46:4f:1f:33:af:51:01:25:b4: 3e:f8:59:b8:32:05:52:f9:05:c6:a3:87:20:ac:a0:2c:80:26: a8:23:11:0e:7e:d8:03:a0:bd:e6:1d:68:51:b9:74:5d:1b:cc: 35:24:30:0d:17:2d:4c:c7:19:fd:19:8f:de:fb:46:40:83:a9: 63:d8:a1:b2:5b:0e:e3:7e:85:a7:20:9f:ae:1b:f2:0d:38:84: c6:63:67:69:12:8e:dd:f6:90:96:b8:fb:41:07:5d:c8:eb:bb: fb:a0:1e:97:fc:1d:58:d6:fb:63:ed:37:f7:44:96:de:d7:14: 7c:a3:bf:b5:28:93:31:a0:17:18:53:11:e7:38:48:05:a3:2b: e6:16:2c:86:94:69:97:2f:6a:39:fd:19:37:6d:5d:e9:fe:72: f4:22:b9:4d:ed:e5:f6:67:4e:a9:af:68:e1:1e:9d:cd:86:03: d7:3a:f3:d8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYP1AwxVSDP5vjZ9Jg1CnJqZsWKAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWZlOGY5ZTY5OWM4MjJiZmI2ZjhiNDM2YjBlMGQ0NDc0 NGZjYWVmOTExNDYzYWYwY2JlNWQzZGI1MDFlOTdhMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYeOK0oQLdUvYL3Cl2U3DrFIY2rDUfXIq8SZK1V/DcvWxg /LVzCFwUqnGwfrcmaKmXifSw1jD+VtkfXaQgu7uBOE6o3000wkkcCY4DvsDr1gWF xcjJ0rjnzzEsAh8CCwWKHMs4V60C6parvBeUxgNCx+kU03/mcnbm6N2AmmIMICpV xaFBHTWGhjiiVZ4SKrwkJXrXXWqqTYbR4EqeYzp77/sLR+L5E/uNE1pdtUf7uVnY Qv2Ba3lSL1UYeil7g0/64SwpPBEQQ7r/aJw8SaqTPijzDKSZT+mj01zJod/jCWP5 LWYobApGZIgkTP6GWjJCw9o0YlC56dzLYI39AmuxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZYscCUX1yEy+fbtzSjm/p6KrC0wwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL2Y2YTJjYjE4LTYyZjYtNGVlMi1hMWQ4LWY2NjI4MjIyNTIxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALNrLAwDQYJKoZIhvcNAQELBQADggEBAAFxz9r+suUHbcDvyXRlLl2+mDsy mg6Mwk18aSiHrvR5w4ZB04QoC65M1Nk1fNAX/6UXpTzMbTUNB3WZlg28dOQK9cjF dt9og3rIUYV5lD6TA0ZPHzOvUQEltD74WbgyBVL5BcajhyCsoCyAJqgjEQ5+2AOg veYdaFG5dF0bzDUkMA0XLUzHGf0Zj977RkCDqWPYobJbDuN+hacgn64b8g04hMZj Z2kSjt32kJa4+0EHXcjru/ugHpf8HVjW+2PtN/dElt7XFHyjv7UokzGgFxhTEec4 SAWjK+YWLIaUaZcvajn9GTdtXen+cvQiuU3t5fZnTqmvaOEenc2GA9c689g= -----END CERTIFICATE-----Generated at Thu May 2 00:10:37 2024 by rpki-client on console-ams.rpki-client.org