$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d53215ce-6445-41ca-b34b-d7266450ee1f.roa File: d53215ce-6445-41ca-b34b-d7266450ee1f.roa (raw, json) Hash identifier: yTNxM37LeSTg/3UZEPLgTOaLIHoAOXgxHNZJ4aOnRe4= Subject key identifier: CC:B9:61:80:D8:20:4B:BB:25:F7:95:77:48:38:5C:9C:50:54:2C:89 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 675BA7129E0653F15F44091DE1D31C994CA1D5B7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d53215ce-6445-41ca-b34b-d7266450ee1f.roa Signing time: Fri 24 Mar 2023 00:00:00 +0000 ROA not before: Fri 24 Mar 2023 00:00:00 +0000 ROA not after: Fri 28 Apr 2023 23:59:59 +0000 asID: 16509 IP address blocks: 18.96.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Mar 2023 12:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:5b:a7:12:9e:06:53:f1:5f:44:09:1d:e1:d3:1c:99:4c:a1:d5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Mar 24 00:00:00 2023 GMT Not After : Apr 28 23:59:59 2023 GMT Subject: serialNumber=65bb7ac0c15d1f21eb3a5d5b3a216562fbb7700ed8f529e51ce3b472484443a1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225, OU=Amazon RPKI, O=Amazon.com Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0b:e5:b7:25:1d:fe:18:c5:f7:e6:c0:ee:68: 90:03:3f:bc:ba:63:4c:88:f7:8f:2c:3b:f4:5a:7d: 16:fc:a2:e4:ce:9b:87:ac:6c:e5:a2:ad:81:df:20: 7a:98:e6:1c:5d:57:ee:a3:fa:44:da:c4:34:e6:31: 68:ee:5e:94:ca:8e:9f:10:0f:dc:c7:4d:d2:4c:1c: 77:8a:43:3d:fa:0c:21:bb:a2:66:f9:d3:b4:10:5f: ed:d0:6e:ff:91:cd:38:4d:ac:5a:6e:fa:69:43:76: 5e:bb:ee:72:94:16:70:e2:07:3f:a1:10:ae:c7:33: 96:ec:e3:fe:19:4a:90:7d:58:4e:03:45:b7:65:f6: 48:52:8a:2c:22:98:27:c3:72:16:e0:e3:bf:75:b9: 83:54:0f:2f:7f:f0:c9:1b:1b:20:c5:35:2c:40:ff: a7:2f:72:e7:25:72:c2:8d:33:25:5a:4d:9a:bb:3e: a5:03:03:c6:c7:c8:75:02:94:6a:54:a3:de:88:f0: 4e:ee:9f:38:e2:ed:83:77:bf:1e:32:01:55:c4:01: ff:d8:32:04:99:73:36:06:85:8d:64:dd:41:bb:fa: a9:b7:2f:83:c5:c3:fd:2a:5c:7d:b7:eb:41:94:3f: 4d:9d:23:ad:a7:6f:db:73:a7:a3:b7:b2:39:fc:07: 1a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B9:61:80:D8:20:4B:BB:25:F7:95:77:48:38:5C:9C:50:54:2C:89 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d53215ce-6445-41ca-b34b-d7266450ee1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.96.0.0/14 Signature Algorithm: sha256WithRSAEncryption 97:34:8d:ab:99:c7:ea:58:4f:55:15:64:96:a0:a1:9e:99:93: a9:d5:10:2c:86:7b:fe:9c:f9:0a:dd:56:66:32:17:89:e5:7b: ea:3f:b8:74:76:78:9d:81:ab:5f:e8:84:d4:00:43:17:1b:84: ae:f4:a2:5e:2f:b7:31:a7:97:3c:e1:46:df:c7:e7:94:c5:56: 35:1a:3f:25:ff:7c:ca:a7:56:77:38:9c:aa:2c:ba:a3:a7:9b: ea:88:0c:a7:b7:5d:3c:e0:11:51:6e:aa:eb:46:9f:3a:85:f1: 60:5c:2e:e2:90:12:70:76:ab:85:25:68:80:45:e3:a1:03:98: 05:e2:e5:0f:c0:bf:5c:2c:4e:e9:7a:31:2f:95:f7:ed:82:78: 83:7e:b9:67:d3:c1:ef:43:02:d5:15:18:bb:f5:a9:db:38:90: 28:56:6b:4c:ee:7d:c3:10:21:e6:be:81:9e:b0:23:c7:0c:9c: 15:0c:71:ff:47:0b:5a:9c:ef:c4:5e:ee:5c:e8:d1:63:6f:f6: d0:cc:34:f5:95:c7:f0:c4:04:14:45:7b:35:d3:dd:c3:0f:4d: f0:b3:31:bf:d8:6d:9f:ad:c1:07:01:a9:65:22:ef:50:ab:c3: 03:88:59:fc:64:0e:ab:42:65:4c:d2:db:3b:29:a2:a1:fa:3a: 7a:25:22:fd -----BEGIN CERTIFICATE----- MIIGIzCCBQugAwIBAgIUZ1unEp4GU/FfRAkd4dMcmUyh1bcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjMwMzI0MDAwMDAwWhcNMjMwNDI4MjM1OTU5 WjCBpTFJMEcGA1UEBRNANjViYjdhYzBjMTVkMWYyMWViM2E1ZDViM2EyMTY1NjJm YmI3NzAwZWQ4ZjUyOWU1MWNlM2I0NzI0ODQ0NDNhMTEtMCsGA1UEAxMkNWYyNzYw NDUtNWI5Zi00NWVmLTkyM2QtZjNmY2UyNGE2MjI1MRQwEgYDVQQLEwtBbWF6b24g UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAIUL5bclHf4YxffmwO5okAM/vLpjTIj3jyw79Fp9Fvyi5M6bh6xs 5aKtgd8gepjmHF1X7qP6RNrENOYxaO5elMqOnxAP3MdN0kwcd4pDPfoMIbuiZvnT tBBf7dBu/5HNOE2sWm76aUN2XrvucpQWcOIHP6EQrsczluzj/hlKkH1YTgNFt2X2 SFKKLCKYJ8NyFuDjv3W5g1QPL3/wyRsbIMU1LED/py9y5yVywo0zJVpNmrs+pQMD xsfIdQKUalSj3ojwTu6fOOLtg3e/HjIBVcQB/9gyBJlzNgaFjWTdQbv6qbcvg8XD /SpcfbfrQZQ/TZ0jradv23Ono7eyOfwHGj0CAwEAAaOCArAwggKsMB0GA1UdDgQW BBTMuWGA2CBLuyX3lXdIOFycUFQsiTAfBgNVHSMEGDAWgBQlrdNCsB63pY6tGZAm iLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEy NDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEzMmEt NDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRm YTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6 b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02ZjgwOTA0 ZTQyZDIvZDUzMjE1Y2UtNjQ0NS00MWNhLWIzNGItZDcyNjY0NTBlZTFmLnJvYTCB iAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AhJgMA0GCSqGSIb3DQEBCwUAA4IBAQCXNI2rmcfqWE9VFWSWoKGemZOp1RAshnv+ nPkK3VZmMheJ5XvqP7h0dnidgatf6ITUAEMXG4Su9KJeL7cxp5c84Ubfx+eUxVY1 Gj8l/3zKp1Z3OJyqLLqjp5vqiAynt1084BFRbqrrRp86hfFgXC7ikBJwdquFJWiA ReOhA5gF4uUPwL9cLE7pejEvlfftgniDfrln08HvQwLVFRi79anbOJAoVmtM7n3D ECHmvoGesCPHDJwVDHH/RwtanO/EXu5c6NFjb/bQzDT1lcfwxAQURXs1093DD03w szG/2G2frcEHAallIu9Qq8MDiFn8ZA6rQmVM0ts7KaKh+jp6JSL9 -----END CERTIFICATE-----Generated at Fri Mar 24 00:41:49 2023 by rpki-client on console-ams.rpki-client.org