$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9fbeacc-6aee-4ef8-8970-8939b39106fd.roa File: e9fbeacc-6aee-4ef8-8970-8939b39106fd.roa (raw, json) Hash identifier: oPiwwPz+qfUtzZX6pevxhTe/ab832QIzkem2jOiyq+4= Subject key identifier: 69:23:D3:62:3C:54:CC:BD:4C:9A:A4:38:FB:25:BE:D9:95:13:28:CC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 59B094E9FC0AEDA10C26F287D5824E21A53D5B7A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9fbeacc-6aee-4ef8-8970-8939b39106fd.roa Signing time: Sat 25 Mar 2023 00:00:00 +0000 ROA not before: Sat 25 Mar 2023 00:00:00 +0000 ROA not after: Sat 29 Apr 2023 23:59:59 +0000 asID: 16509 IP address blocks: 160.1.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Mar 2023 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b0:94:e9:fc:0a:ed:a1:0c:26:f2:87:d5:82:4e:21:a5:3d:5b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Mar 25 00:00:00 2023 GMT Not After : Apr 29 23:59:59 2023 GMT Subject: serialNumber=c9e6dbc839fe3b047192263c34be1afc9ffbdbf9a8604742bb86aeeb1152078c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225, OU=Amazon RPKI, O=Amazon.com Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:0e:e1:b8:c3:03:a9:5e:8a:64:91:44:e0: 7c:1e:da:f1:30:89:4f:a9:3f:6e:ec:5d:bf:66:60: 96:31:15:f2:78:16:96:e6:f5:6d:b6:2a:28:18:ec: 39:d5:34:e7:ce:87:62:88:9b:ae:86:6a:47:29:ed: 84:d8:d7:57:ed:27:4e:cf:72:03:af:4c:87:e2:76: 44:9c:36:31:7c:9e:9d:7d:45:76:66:89:bf:79:e2: b0:2c:40:d2:fe:6e:5f:b7:7f:1f:93:cd:0c:b7:1a: 97:a0:2d:7a:06:b9:1d:af:24:bf:4b:94:3d:58:f3: ed:0c:5b:56:53:52:10:05:fb:ee:55:17:f6:98:65: c3:40:0b:68:16:8c:37:42:1a:35:cc:8c:be:28:36: fc:94:60:fa:65:8c:95:b6:3b:ae:c0:97:94:bf:00: e5:40:76:ec:1a:a9:d5:14:e7:55:45:69:2a:7c:fa: 60:ba:0f:c6:5c:42:31:79:0b:56:75:2e:38:5a:f6: c0:27:0a:11:ca:5e:19:25:83:f5:e1:14:0f:d7:54: 90:5b:9a:26:fe:9d:f9:95:b9:1f:dc:04:2d:2d:8e: b1:e3:22:21:d0:45:5a:76:61:2a:69:ba:20:e4:f5: 09:56:80:7c:bc:cb:44:1d:22:36:0f:22:a6:22:86: 6a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:23:D3:62:3C:54:CC:BD:4C:9A:A4:38:FB:25:BE:D9:95:13:28:CC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9fbeacc-6aee-4ef8-8970-8939b39106fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.1.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4a:d3:70:14:8b:e5:c8:3e:26:89:29:34:36:ab:b8:8c:eb:c9: 17:5a:62:ca:38:36:72:db:0b:96:1d:5f:d7:b2:e7:a9:bf:e8: ca:b3:f7:00:d0:cb:c9:e9:91:bd:04:e9:50:67:f1:fc:e6:0a: 7b:ba:24:e9:99:cf:5f:e8:e5:93:32:c2:4b:0a:2b:7e:a3:9c: ff:4c:12:5f:9b:21:9a:cf:29:9d:b0:5d:5a:1f:d3:66:99:5d: 78:d2:63:fb:4f:e2:7f:b2:ad:9e:69:e8:a6:d5:ec:41:ae:09: bf:8f:db:8c:c0:dc:dd:46:40:ff:13:94:d5:e9:94:68:15:0a: a9:d0:a2:b5:c8:eb:38:7c:48:8c:86:5b:89:dd:66:35:ec:4e: 9d:02:9e:b1:bb:dd:61:82:16:89:2e:f9:4c:e6:49:8b:ec:3d: 4f:0e:4b:57:af:ed:e6:1c:18:4a:55:3c:5c:41:69:e8:01:9c: 09:5f:d3:a4:2f:23:5c:39:6f:f7:c9:2d:65:2a:97:53:a6:9d: 7f:4d:bd:d4:5d:34:b9:c8:80:25:f1:29:e0:c3:d1:07:ff:c6: fd:2b:e8:55:04:1e:90:07:29:bd:cf:a0:27:45:aa:61:89:00: c5:51:1f:f1:c7:7c:6c:7b:00:7f:48:83:5d:95:e2:c6:28:fc: 8a:8e:ad:55 -----BEGIN CERTIFICATE----- MIIGIzCCBQugAwIBAgIUWbCU6fwK7aEMJvKH1YJOIaU9W3owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjMwMzI1MDAwMDAwWhcNMjMwNDI5MjM1OTU5 WjCBpTFJMEcGA1UEBRNAYzllNmRiYzgzOWZlM2IwNDcxOTIyNjNjMzRiZTFhZmM5 ZmZiZGJmOWE4NjA0NzQyYmI4NmFlZWIxMTUyMDc4YzEtMCsGA1UEAxMkNWYyNzYw NDUtNWI5Zi00NWVmLTkyM2QtZjNmY2UyNGE2MjI1MRQwEgYDVQQLEwtBbWF6b24g UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKgJDuG4wwOpXopkkUTgfB7a8TCJT6k/buxdv2ZgljEV8ngWlub1 bbYqKBjsOdU0586HYoibroZqRynthNjXV+0nTs9yA69Mh+J2RJw2MXyenX1FdmaJ v3nisCxA0v5uX7d/H5PNDLcal6Atega5Ha8kv0uUPVjz7QxbVlNSEAX77lUX9phl w0ALaBaMN0IaNcyMvig2/JRg+mWMlbY7rsCXlL8A5UB27Bqp1RTnVUVpKnz6YLoP xlxCMXkLVnUuOFr2wCcKEcpeGSWD9eEUD9dUkFuaJv6d+ZW5H9wELS2OseMiIdBF WnZhKmm6IOT1CVaAfLzLRB0iNg8ipiKGaqUCAwEAAaOCArAwggKsMB0GA1UdDgQW BBRpI9NiPFTMvUyapDj7Jb7ZlRMozDAfBgNVHSMEGDAWgBQlrdNCsB63pY6tGZAm iLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEy NDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEzMmEt NDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRm YTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6 b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02ZjgwOTA0 ZTQyZDIvZTlmYmVhY2MtNmFlZS00ZWY4LTg5NzAtODkzOWIzOTEwNmZkLnJvYTCB iAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AKABMA0GCSqGSIb3DQEBCwUAA4IBAQBK03AUi+XIPiaJKTQ2q7iM68kXWmLKODZy 2wuWHV/Xsuepv+jKs/cA0MvJ6ZG9BOlQZ/H85gp7uiTpmc9f6OWTMsJLCit+o5z/ TBJfmyGazymdsF1aH9NmmV140mP7T+J/sq2eaeim1exBrgm/j9uMwNzdRkD/E5TV 6ZRoFQqp0KK1yOs4fEiMhluJ3WY17E6dAp6xu91hghaJLvlM5kmL7D1PDktXr+3m HBhKVTxcQWnoAZwJX9OkLyNcOW/3yS1lKpdTpp1/Tb3UXTS5yIAl8Sngw9EH/8b9 K+hVBB6QBym9z6AnRaphiQDFUR/xx3xsewB/SINdleLGKPyKjq1V -----END CERTIFICATE-----Generated at Sat Mar 25 16:22:29 2023 by rpki-client on console-fra.rpki-client.org