$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd036904-1b4e-465b-a758-058eb43a74c6.roa File: fd036904-1b4e-465b-a758-058eb43a74c6.roa (raw, json) Hash identifier: 76bgl9ya6ixWWhegY98Wo2Q9j/SZha3g2LONLyfZucQ= Subject key identifier: D0:54:9A:BB:2D:72:74:F8:0B:F7:30:2A:8F:CB:5C:D1:63:67:50:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 388EFC50CDF9BCBC2B38ED2C623DE2B69FAF3666 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd036904-1b4e-465b-a758-058eb43a74c6.roa Signing time: Sat 25 Mar 2023 00:00:00 +0000 ROA not before: Sat 25 Mar 2023 00:00:00 +0000 ROA not after: Sat 29 Apr 2023 23:59:59 +0000 asID: 16509 IP address blocks: 18.100.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Mar 2023 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8e:fc:50:cd:f9:bc:bc:2b:38:ed:2c:62:3d:e2:b6:9f:af:36:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Mar 25 00:00:00 2023 GMT Not After : Apr 29 23:59:59 2023 GMT Subject: serialNumber=65e19d56618d671a60c1d480b9f3c7e9d86e2fce428c22a8f6f7bfa067a174de, CN=5f276045-5b9f-45ef-923d-f3fce24a6225, OU=Amazon RPKI, O=Amazon.com Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:df:c7:32:3d:49:71:2a:4c:e4:8a:d6:ba: c7:ad:39:72:39:75:94:10:dd:9f:31:41:12:9a:34: 27:81:ee:78:89:be:8a:8b:43:2d:90:4c:01:18:5d: ac:81:4d:ff:70:38:00:b8:9f:43:55:01:68:a5:26: f1:49:e7:21:54:37:f0:5f:0d:96:04:73:16:47:a1: c1:0f:db:38:3f:d7:02:84:2a:e5:b1:6f:95:bc:ed: b9:30:94:60:e2:03:e2:80:ff:f6:54:cf:17:a4:df: 29:56:19:ce:8e:59:09:88:ae:0c:2a:3d:72:85:25: 72:f0:33:9d:4c:e2:30:09:64:ea:a6:69:72:75:11: 10:38:01:2b:bb:84:a1:9c:83:93:da:e6:66:9d:eb: 98:6e:56:a0:3c:48:b7:a8:f7:e4:9f:e9:7b:72:79: 18:b4:94:db:cd:72:73:62:c8:e6:f0:02:e1:55:27: 98:dd:6d:52:c1:60:75:ac:42:8a:a1:ac:b4:8f:f3: 0f:68:4d:df:ad:9d:f6:42:b4:6a:9e:55:d4:a2:d2: 85:f7:ba:f4:7c:74:4f:e1:63:b4:43:8b:ca:3a:a0: 12:28:6c:cb:6e:3d:c2:c8:77:ab:c4:ae:02:69:24: 79:7e:8a:42:e3:11:e8:1e:28:4c:15:26:1f:ed:53: 44:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:54:9A:BB:2D:72:74:F8:0B:F7:30:2A:8F:CB:5C:D1:63:67:50:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd036904-1b4e-465b-a758-058eb43a74c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.100.0.0/15 Signature Algorithm: sha256WithRSAEncryption 00:e7:d2:73:7b:64:db:b7:b9:c4:b3:9d:e2:bd:8b:b3:a4:dd: 8b:b3:2d:e9:74:2e:5c:f1:da:0b:c8:10:b3:18:b1:6a:9f:e2: dd:21:50:cf:cb:2d:54:bd:07:93:5f:2a:ad:93:54:e9:01:73: 3b:b9:0e:49:d2:48:30:63:11:95:14:81:f6:5c:9b:a5:33:39: a4:a9:37:32:67:cf:06:d8:ea:91:6d:2a:49:04:34:2a:eb:9c: 3e:b5:0a:8d:4d:60:3d:3c:21:72:5e:29:38:30:5b:99:80:8e: 88:43:ff:98:ef:2d:36:b1:a1:cf:f6:ec:18:9b:6e:be:61:27: 64:1c:24:95:6f:fe:07:0d:76:f6:cc:82:49:9e:2b:da:3c:77: 72:6a:47:96:f2:41:f3:9f:c3:ef:0e:e0:7d:17:d9:03:3d:96: 3a:f7:da:9d:13:fd:c4:1e:f5:66:86:c6:c8:cd:fc:3d:9c:7e: d2:d9:07:3d:dc:ae:9d:d4:00:e2:88:f4:e2:18:54:62:b9:4d: 97:16:48:d1:ed:17:38:23:52:01:98:1b:aa:84:95:50:11:8d: bf:d6:49:3d:2a:4b:85:00:f5:b5:60:f6:6f:0f:3e:b6:f4:72: fb:b9:b4:db:ea:51:b7:72:fe:1f:01:c8:1a:7a:04:58:54:89: 47:22:4c:77 -----BEGIN CERTIFICATE----- MIIGIzCCBQugAwIBAgIUOI78UM35vLwrOO0sYj3itp+vNmYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjMwMzI1MDAwMDAwWhcNMjMwNDI5MjM1OTU5 WjCBpTFJMEcGA1UEBRNANjVlMTlkNTY2MThkNjcxYTYwYzFkNDgwYjlmM2M3ZTlk ODZlMmZjZTQyOGMyMmE4ZjZmN2JmYTA2N2ExNzRkZTEtMCsGA1UEAxMkNWYyNzYw NDUtNWI5Zi00NWVmLTkyM2QtZjNmY2UyNGE2MjI1MRQwEgYDVQQLEwtBbWF6b24g UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKv838cyPUlxKkzkita6x605cjl1lBDdnzFBEpo0J4HueIm+iotD LZBMARhdrIFN/3A4ALifQ1UBaKUm8UnnIVQ38F8NlgRzFkehwQ/bOD/XAoQq5bFv lbztuTCUYOID4oD/9lTPF6TfKVYZzo5ZCYiuDCo9coUlcvAznUziMAlk6qZpcnUR EDgBK7uEoZyDk9rmZp3rmG5WoDxIt6j35J/pe3J5GLSU281yc2LI5vAC4VUnmN1t UsFgdaxCiqGstI/zD2hN362d9kK0ap5V1KLShfe69Hx0T+FjtEOLyjqgEihsy249 wsh3q8SuAmkkeX6KQuMR6B4oTBUmH+1TRAUCAwEAAaOCArAwggKsMB0GA1UdDgQW BBTQVJq7LXJ0+Av3MCqPy1zRY2dQATAfBgNVHSMEGDAWgBQlrdNCsB63pY6tGZAm iLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEy NDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEzMmEt NDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRm YTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6 b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02ZjgwOTA0 ZTQyZDIvZmQwMzY5MDQtMWI0ZS00NjViLWE3NTgtMDU4ZWI0M2E3NGM2LnJvYTCB iAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD ARJkMA0GCSqGSIb3DQEBCwUAA4IBAQAA59Jze2Tbt7nEs53ivYuzpN2Lsy3pdC5c 8doLyBCzGLFqn+LdIVDPyy1UvQeTXyqtk1TpAXM7uQ5J0kgwYxGVFIH2XJulMzmk qTcyZ88G2OqRbSpJBDQq65w+tQqNTWA9PCFyXik4MFuZgI6IQ/+Y7y02saHP9uwY m26+YSdkHCSVb/4HDXb2zIJJnivaPHdyakeW8kHzn8PvDuB9F9kDPZY699qdE/3E HvVmhsbIzfw9nH7S2Qc93K6d1ADiiPTiGFRiuU2XFkjR7Rc4I1IBmBuqhJVQEY2/ 1kk9KkuFAPW1YPZvDz629HL7ubTb6lG3cv4fAcgaegRYVIlHIkx3 -----END CERTIFICATE-----Generated at Sat Mar 25 15:45:11 2023 by rpki-client on console-ams.rpki-client.org