$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52b90263-e8f2-4ef9-b397-8e2abfc822b4.roa File: 52b90263-e8f2-4ef9-b397-8e2abfc822b4.roa (raw, json) Hash identifier: fFXJW2y+Vc/Z1c2aJV/S2iaFi9r31fIULGV6vRealAQ= Subject key identifier: D5:F4:26:1D:BF:7D:E5:24:2A:34:67:1F:1E:D1:DF:C9:B5:A0:0A:48 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0A7A6DFABAA7223E7EEA8CE3E07F9CC8DF7837CC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52b90263-e8f2-4ef9-b397-8e2abfc822b4.roa Signing time: Thu 23 Mar 2023 00:00:00 +0000 ROA not before: Thu 23 Mar 2023 00:00:00 +0000 ROA not after: Thu 27 Apr 2023 23:59:59 +0000 asID: 16509 IP address blocks: 15.130.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Mar 2023 12:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7a:6d:fa:ba:a7:22:3e:7e:ea:8c:e3:e0:7f:9c:c8:df:78:37:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Mar 23 00:00:00 2023 GMT Not After : Apr 27 23:59:59 2023 GMT Subject: serialNumber=94153d5a8650740f4699436bf7119f4d74f804cbb750675eb993e09e135cce88, CN=5f276045-5b9f-45ef-923d-f3fce24a6225, OU=Amazon RPKI, O=Amazon.com Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2e:ef:98:be:ac:95:d9:b1:48:fd:17:9d:a1: 38:f0:5d:4e:21:a0:e1:d9:62:89:c5:23:d0:c9:8a: c1:20:8d:ea:d6:ab:21:3e:da:7d:3e:4a:6f:f0:57: 27:42:73:11:64:0f:af:88:fc:1f:05:42:00:62:0c: a7:38:47:d3:18:fb:a1:23:6d:7d:68:f4:15:ff:bc: f9:ce:74:96:4a:97:29:df:2d:52:0e:e1:81:e5:cc: 93:17:d5:07:65:60:4b:e5:15:e5:93:99:21:48:9e: a8:c8:b0:94:93:c7:9e:d8:f7:c7:4e:5b:d6:dd:66: b0:d4:eb:4e:5a:b3:29:6c:6c:eb:e5:4a:8e:7a:b0: 2a:92:1b:bf:e4:c4:80:cf:3c:69:5b:c9:56:44:0b: 66:88:78:60:52:c3:6a:40:af:4b:03:b6:02:68:68: 61:a6:c1:fc:39:81:e1:6b:1d:38:d4:11:46:9c:5e: 72:b1:36:08:74:ae:8c:f4:29:88:c2:78:06:16:79: 69:d4:0a:00:41:4e:cb:71:38:ca:bd:47:a7:af:6c: 21:e6:c6:09:20:db:0f:15:f7:ca:cb:d1:53:54:7b: 9b:c6:9a:49:45:d2:c0:45:e1:1b:97:59:25:79:37: a8:45:b4:ce:42:a3:59:02:f9:6b:47:5e:02:37:63: 0e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F4:26:1D:BF:7D:E5:24:2A:34:67:1F:1E:D1:DF:C9:B5:A0:0A:48 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52b90263-e8f2-4ef9-b397-8e2abfc822b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.130.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3c:5a:7d:67:d7:eb:9c:ef:d8:88:d3:13:05:4a:21:af:4d:65: ad:4c:80:b1:56:e1:8c:98:e1:4c:63:44:1b:6e:21:7f:0b:5c: ea:5b:dd:ec:23:1a:c8:52:b6:b6:0a:cf:82:83:c8:53:be:2e: b1:2a:38:02:a2:d4:84:7b:7f:39:d0:6d:34:6e:1b:9b:8b:ca: b1:3b:d6:24:b1:dc:6a:5a:32:f9:8b:24:0f:0e:e0:27:43:70: e8:49:d1:0b:90:34:95:06:e9:b1:91:bd:77:93:53:13:49:7c: 81:e3:df:83:cc:5c:07:24:19:11:1e:0b:d1:3e:84:35:c7:86: 9a:f5:35:0b:45:23:fa:9a:23:2c:c4:5b:2c:0f:e6:6f:c1:1f: 28:b5:cf:04:a4:8a:2d:79:f8:2a:b7:b7:f5:fe:f0:48:37:4b: 80:dc:21:df:97:b3:38:33:d2:1e:70:2a:b2:88:c2:f8:c1:a9: 15:58:6c:0e:40:2f:80:99:c6:f6:47:6c:e3:ce:33:c3:15:45: 7f:e2:ee:e7:0f:a2:76:7e:5e:59:d1:c3:7b:e9:d4:99:2c:71: 18:3d:ee:17:ef:07:f2:d3:63:0b:79:af:37:c2:29:4d:85:46: ff:cd:ae:c3:63:81:ab:86:9e:23:7a:4e:f8:3b:94:26:3e:51: d5:05:ab:0c -----BEGIN CERTIFICATE----- MIIGIzCCBQugAwIBAgIUCnpt+rqnIj5+6ozj4H+cyN94N8wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjMwMzIzMDAwMDAwWhcNMjMwNDI3MjM1OTU5 WjCBpTFJMEcGA1UEBRNAOTQxNTNkNWE4NjUwNzQwZjQ2OTk0MzZiZjcxMTlmNGQ3 NGY4MDRjYmI3NTA2NzVlYjk5M2UwOWUxMzVjY2U4ODEtMCsGA1UEAxMkNWYyNzYw NDUtNWI5Zi00NWVmLTkyM2QtZjNmY2UyNGE2MjI1MRQwEgYDVQQLEwtBbWF6b24g UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ4u75i+rJXZsUj9F52hOPBdTiGg4dliicUj0MmKwSCN6tarIT7a fT5Kb/BXJ0JzEWQPr4j8HwVCAGIMpzhH0xj7oSNtfWj0Ff+8+c50lkqXKd8tUg7h geXMkxfVB2VgS+UV5ZOZIUieqMiwlJPHntj3x05b1t1msNTrTlqzKWxs6+VKjnqw KpIbv+TEgM88aVvJVkQLZoh4YFLDakCvSwO2AmhoYabB/DmB4WsdONQRRpxecrE2 CHSujPQpiMJ4BhZ5adQKAEFOy3E4yr1Hp69sIebGCSDbDxX3ysvRU1R7m8aaSUXS wEXhG5dZJXk3qEW0zkKjWQL5a0deAjdjDv0CAwEAAaOCArAwggKsMB0GA1UdDgQW BBTV9CYdv33lJCo0Zx8e0d/JtaAKSDAfBgNVHSMEGDAWgBQlrdNCsB63pY6tGZAm iLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEy NDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEzMmEt NDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRm YTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6 b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02ZjgwOTA0 ZTQyZDIvNTJiOTAyNjMtZThmMi00ZWY5LWIzOTctOGUyYWJmYzgyMmI0LnJvYTCB iAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AA+CMA0GCSqGSIb3DQEBCwUAA4IBAQA8Wn1n1+uc79iI0xMFSiGvTWWtTICxVuGM mOFMY0QbbiF/C1zqW93sIxrIUra2Cs+Cg8hTvi6xKjgCotSEe3850G00bhubi8qx O9YksdxqWjL5iyQPDuAnQ3DoSdELkDSVBumxkb13k1MTSXyB49+DzFwHJBkRHgvR PoQ1x4aa9TULRSP6miMsxFssD+ZvwR8otc8EpIotefgqt7f1/vBIN0uA3CHfl7M4 M9IecCqyiML4wakVWGwOQC+Amcb2R2zjzjPDFUV/4u7nD6J2fl5Z0cN76dSZLHEY Pe4X7wfy02MLea83wilNhUb/za7DY4Grhp4jek74O5QmPlHVBasM -----END CERTIFICATE-----Generated at Thu Mar 23 00:32:36 2023 by rpki-client on console-fra.rpki-client.org