$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/367c0bbc-6881-48c5-b2e9-0e1e30f9fb7a.roa File: 367c0bbc-6881-48c5-b2e9-0e1e30f9fb7a.roa (raw, json) Hash identifier: QQB7/VwKwOKdJ6JZh0+g/QZIYZHOLu6TsTg7LSjTFoQ= Subject key identifier: 2E:76:AE:77:2D:8B:10:20:3A:83:25:95:6F:F2:17:B9:2D:F4:97:58 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53EFCCEEC53718214EC95025C2D60221D132AADA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/367c0bbc-6881-48c5-b2e9-0e1e30f9fb7a.roa Signing time: Mon 29 Apr 2024 00:00:00 +0000 ROA not before: Mon 29 Apr 2024 00:00:00 +0000 ROA not after: Mon 03 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 52.220.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ef:cc:ee:c5:37:18:21:4e:c9:50:25:c2:d6:02:21:d1:32:aa:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 29 00:00:00 2024 GMT Not After : Jun 3 23:59:59 2024 GMT Subject: serialNumber=1a414c1d535fe870149ed5b55fbc2dd6bd4aa59595233ebb1d7509b20e86b511, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f5:2d:6e:26:db:35:a5:b6:33:85:f0:4d:f9: 5c:2d:43:60:81:8d:3d:e4:3f:de:b6:35:11:cb:e7: ed:e0:65:2f:e3:e3:36:23:82:bb:3e:09:93:41:91: 8c:b1:2d:69:75:92:5e:13:00:87:38:b5:9b:f1:52: 47:b8:b8:26:3e:60:01:66:11:0c:a8:c9:35:72:b7: f1:d3:20:f1:e1:ae:70:e4:19:27:b0:26:47:f5:59: 5f:30:32:54:36:9f:53:66:ca:0a:8c:e3:3a:46:7e: 22:92:17:ff:4f:d7:cc:fa:53:e1:37:80:fc:54:41: e6:55:3c:38:15:2e:f2:56:e1:a0:c9:23:ca:3f:1b: 04:69:e9:e9:d1:0c:b1:42:00:cf:2a:65:34:77:76: 0e:4a:12:53:c0:11:33:45:32:65:3b:3c:89:2f:29: 56:4f:05:ec:be:4e:c2:8b:bb:68:da:e9:b0:c7:57: bd:6d:f7:b2:99:8c:bd:35:04:de:6e:93:de:ff:1d: e9:05:41:41:96:26:04:d8:c5:67:0e:90:60:f0:af: 23:24:29:98:5d:0c:3a:15:4a:c8:15:30:ea:2e:05: 2d:23:a3:fe:f2:6b:46:ba:20:28:7a:50:11:66:f6: 43:aa:be:fa:3e:3d:be:54:5c:84:a3:78:64:65:7b: 4c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:76:AE:77:2D:8B:10:20:3A:83:25:95:6F:F2:17:B9:2D:F4:97:58 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/367c0bbc-6881-48c5-b2e9-0e1e30f9fb7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.220.0.0/15 Signature Algorithm: sha256WithRSAEncryption 68:53:f0:74:dd:ca:5e:a8:90:6e:a6:10:f5:dc:9c:ba:b0:03: 05:f6:70:11:2a:fd:9d:9c:6f:4b:65:17:25:c5:9e:23:e6:46: 06:a4:ab:4b:0c:ce:35:d0:44:e9:6f:3d:90:73:04:14:a0:d0: e4:aa:70:28:23:75:a9:0b:92:b3:25:23:49:3f:8e:7a:ab:38: c6:f3:32:a8:57:75:db:41:17:2f:fb:e5:93:f5:99:3c:f5:fa: 66:85:16:14:77:79:07:94:3d:62:4e:2e:a7:6b:db:ff:a0:98: 2e:80:58:70:62:13:f5:eb:2d:2f:ba:84:48:b2:4e:04:81:fe: a9:ba:da:42:b4:52:06:b1:fd:d9:39:97:9c:6c:c0:18:7e:a1: 17:4a:12:59:77:8e:9a:10:0c:03:5d:06:21:64:8f:80:a0:5b: 92:9d:9b:c4:f8:8b:e8:19:cd:6a:c8:c9:a4:ab:c1:aa:dd:21: 4c:2c:7d:29:33:cc:cc:2b:43:a6:57:fa:b2:da:f9:92:37:60: 3f:b7:2a:c0:50:75:2f:6d:b4:87:3b:07:bb:7c:12:5f:fc:51: 79:f7:d9:d4:db:e7:c5:c4:c5:e9:3e:6d:33:6d:9d:fd:b7:a3: 3d:d9:21:58:06:22:f9:2d:9a:19:35:a1:2d:fc:c3:99:ff:6c: 07:d3:05:f8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUU+/M7sU3GCFOyVAlwtYCIdEyqtowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDI5MDAwMDAwWhcNMjQwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTQxNGMxZDUzNWZlODcwMTQ5ZWQ1YjU1ZmJjMmRkNmJk NGFhNTk1OTUyMzNlYmIxZDc1MDliMjBlODZiNTExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDm9S1uJts1pbYzhfBN+VwtQ2CBjT3kP962NRHL5+3gZS/j 4zYjgrs+CZNBkYyxLWl1kl4TAIc4tZvxUke4uCY+YAFmEQyoyTVyt/HTIPHhrnDk GSewJkf1WV8wMlQ2n1NmygqM4zpGfiKSF/9P18z6U+E3gPxUQeZVPDgVLvJW4aDJ I8o/GwRp6enRDLFCAM8qZTR3dg5KElPAETNFMmU7PIkvKVZPBey+TsKLu2ja6bDH V71t97KZjL01BN5uk97/HekFQUGWJgTYxWcOkGDwryMkKZhdDDoVSsgVMOouBS0j o/7ya0a6ICh6UBFm9kOqvvo+Pb5UXISjeGRle0z3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQULnaudy2LECA6gyWVb/IXuS30l1gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM2N2MwYmJjLTY4ODEtNDhjNS1iMmU5LTBlMWUzMGY5ZmI3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE03DANBgkqhkiG9w0BAQsFAAOCAQEAaFPwdN3KXqiQbqYQ9dycurADBfZw ESr9nZxvS2UXJcWeI+ZGBqSrSwzONdBE6W89kHMEFKDQ5KpwKCN1qQuSsyUjST+O eqs4xvMyqFd120EXL/vlk/WZPPX6ZoUWFHd5B5Q9Yk4up2vb/6CYLoBYcGIT9est L7qESLJOBIH+qbraQrRSBrH92TmXnGzAGH6hF0oSWXeOmhAMA10GIWSPgKBbkp2b xPiL6BnNasjJpKvBqt0hTCx9KTPMzCtDplf6str5kjdgP7cqwFB1L220hzsHu3wS X/xReffZ1NvnxcTF6T5tM22d/bejPdkhWAYi+S2aGTWhLfzDmf9sB9MF+A== -----END CERTIFICATE-----Generated at Mon May 6 00:47:35 2024 by rpki-client on console-ams.rpki-client.org