$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b20bdcb0-677e-4149-a4c2-3b6fa3549e54.roa File: b20bdcb0-677e-4149-a4c2-3b6fa3549e54.roa (raw, json) Hash identifier: oNoUYLrpmQfOzvcbTiDPBU/CnydzD8m+QOA1IEFOwfE= Subject key identifier: 7E:5A:9C:EB:9D:4C:E4:7F:CC:00:78:A5:BB:BD:E0:76:96:9D:E8:2E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4C0B7703A9F03F4A61010C0E7E59A273FDB735FE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b20bdcb0-677e-4149-a4c2-3b6fa3549e54.roa Signing time: Sat 25 Mar 2023 00:00:00 +0000 ROA not before: Sat 25 Mar 2023 00:00:00 +0000 ROA not after: Sat 29 Apr 2023 23:59:59 +0000 asID: 16509 IP address blocks: 18.102.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Mar 2023 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0b:77:03:a9:f0:3f:4a:61:01:0c:0e:7e:59:a2:73:fd:b7:35:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Mar 25 00:00:00 2023 GMT Not After : Apr 29 23:59:59 2023 GMT Subject: serialNumber=6f3693ff40e23f8d897811fa506329ee022f490d5a5c21164572c164b08ea60b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225, OU=Amazon RPKI, O=Amazon.com Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9d:34:2c:95:5d:cd:16:76:06:cf:fc:ca:f5: 01:c1:b4:b1:f3:8d:15:ca:57:b9:ed:83:7c:d5:78: e2:26:0b:35:00:5f:4e:9e:ea:6c:6c:c9:51:32:4c: fa:a5:aa:82:15:c2:97:0e:c0:80:14:24:01:68:b2: 16:03:4b:be:6b:08:cc:6f:47:00:7e:1c:62:65:07: 49:92:e7:78:02:19:06:9e:73:89:18:29:80:a1:5f: 88:d0:a7:3d:51:81:df:55:3f:c1:6f:2f:aa:35:bb: 4c:7d:ad:97:56:33:d9:67:e6:37:32:c0:8e:bc:da: 65:75:26:c0:94:91:a2:44:e0:ef:de:0b:24:7c:32: 16:a6:31:68:e4:2d:a7:e1:33:d7:eb:a1:a4:ab:11: 7d:26:a1:80:b3:d9:80:97:93:0c:1e:d8:a0:11:6b: 48:00:99:eb:d4:6d:12:a7:78:bc:35:60:15:3c:fa: 49:dd:6f:b0:b2:2a:94:e4:c2:7e:80:3e:aa:eb:08: 21:08:b1:32:ac:68:45:f5:5d:56:f3:96:f4:4f:21: 4f:a7:b8:cd:99:0b:ba:f5:4e:38:57:2e:b9:24:b8: 37:81:51:7c:fa:01:26:94:55:cb:1f:fa:98:e2:e7: 01:7f:f1:50:19:f0:eb:c1:19:11:bc:9c:7a:e8:70: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5A:9C:EB:9D:4C:E4:7F:CC:00:78:A5:BB:BD:E0:76:96:9D:E8:2E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b20bdcb0-677e-4149-a4c2-3b6fa3549e54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.102.0.0/16 Signature Algorithm: sha256WithRSAEncryption 28:68:26:65:2b:62:cf:52:b2:69:4b:ee:39:b0:14:49:32:a7: 6e:ee:4b:a4:be:e7:d7:9e:40:96:41:0c:76:14:bf:05:b6:fa: 9c:cb:95:48:ab:c9:7e:af:8d:6a:0c:52:4f:a0:50:01:71:b4: 68:8f:71:0c:4d:85:b3:16:d1:63:36:e3:0d:f6:90:0a:8d:9c: fc:f0:7d:e7:f6:4e:ec:b4:ef:3f:80:24:b6:1c:08:51:f4:ec: 23:ab:9b:fe:b4:13:52:4e:7c:ac:b5:4a:46:3d:4c:d7:b4:e5: 9c:48:07:4e:26:c6:eb:a6:c2:af:70:93:31:d5:8e:00:c0:04: c5:40:76:d4:9c:66:55:ad:dd:26:a8:66:d9:3d:27:89:75:08: 2c:79:99:9f:b8:e0:58:d2:61:5c:9e:74:ac:95:79:dd:77:8f: 75:52:61:72:da:e1:7a:a7:c6:46:25:cb:97:1d:bd:a6:35:9d: e5:1c:19:bf:38:87:39:50:76:9d:f1:31:89:b0:91:61:c4:75: c6:ab:21:15:66:5a:ee:03:fa:7e:a6:07:f8:8c:42:37:84:ab: 60:92:ea:f1:33:a2:29:91:5e:22:35:73:90:a8:13:78:02:f1: ca:97:74:98:78:8e:67:f2:d0:6d:de:e4:5d:5d:57:12:6c:b8: ec:c9:45:9d -----BEGIN CERTIFICATE----- MIIGIzCCBQugAwIBAgIUTAt3A6nwP0phAQwOflmic/23Nf4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjMwMzI1MDAwMDAwWhcNMjMwNDI5MjM1OTU5 WjCBpTFJMEcGA1UEBRNANmYzNjkzZmY0MGUyM2Y4ZDg5NzgxMWZhNTA2MzI5ZWUw MjJmNDkwZDVhNWMyMTE2NDU3MmMxNjRiMDhlYTYwYjEtMCsGA1UEAxMkNWYyNzYw NDUtNWI5Zi00NWVmLTkyM2QtZjNmY2UyNGE2MjI1MRQwEgYDVQQLEwtBbWF6b24g UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN2dNCyVXc0WdgbP/Mr1AcG0sfONFcpXue2DfNV44iYLNQBfTp7q bGzJUTJM+qWqghXClw7AgBQkAWiyFgNLvmsIzG9HAH4cYmUHSZLneAIZBp5ziRgp gKFfiNCnPVGB31U/wW8vqjW7TH2tl1Yz2WfmNzLAjrzaZXUmwJSRokTg794LJHwy FqYxaOQtp+Ez1+uhpKsRfSahgLPZgJeTDB7YoBFrSACZ69RtEqd4vDVgFTz6Sd1v sLIqlOTCfoA+qusIIQixMqxoRfVdVvOW9E8hT6e4zZkLuvVOOFcuuSS4N4FRfPoB JpRVyx/6mOLnAX/xUBnw68EZEbyceuhwgLkCAwEAAaOCArAwggKsMB0GA1UdDgQW BBR+WpzrnUzkf8wAeKW7veB2lp3oLjAfBgNVHSMEGDAWgBQlrdNCsB63pY6tGZAm iLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEy NDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEzMmEt NDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRm YTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6 b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02ZjgwOTA0 ZTQyZDIvYjIwYmRjYjAtNjc3ZS00MTQ5LWE0YzItM2I2ZmEzNTQ5ZTU0LnJvYTCB iAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD ABJmMA0GCSqGSIb3DQEBCwUAA4IBAQAoaCZlK2LPUrJpS+45sBRJMqdu7kukvufX nkCWQQx2FL8Ftvqcy5VIq8l+r41qDFJPoFABcbRoj3EMTYWzFtFjNuMN9pAKjZz8 8H3n9k7stO8/gCS2HAhR9Owjq5v+tBNSTnystUpGPUzXtOWcSAdOJsbrpsKvcJMx 1Y4AwATFQHbUnGZVrd0mqGbZPSeJdQgseZmfuOBY0mFcnnSslXndd491UmFy2uF6 p8ZGJcuXHb2mNZ3lHBm/OIc5UHad8TGJsJFhxHXGqyEVZlruA/p+pgf4jEI3hKtg kurxM6IpkV4iNXOQqBN4AvHKl3SYeI5n8tBt3uRdXVcSbLjsyUWd -----END CERTIFICATE-----Generated at Sat Mar 25 15:45:10 2023 by rpki-client on console-ams.rpki-client.org