$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07db827d-5458-468d-8395-d3b2b4a26a9b.roa File: 07db827d-5458-468d-8395-d3b2b4a26a9b.roa (raw, json) Hash identifier: VIa9BiLoAmFC1lDWvHLElHqY0XnKvKbcc6fBA1I5Wm0= Subject key identifier: F9:6E:0B:80:01:3C:29:A9:CB:4D:69:BA:20:3C:9A:C7:0A:65:4F:CC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78E759AFBEF8896235592FA84AD04EEDEF9BCE91 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07db827d-5458-468d-8395-d3b2b4a26a9b.roa Signing time: Thu 20 Mar 2025 22:52:09 +0000 ROA not before: Thu 20 Mar 2025 22:52:09 +0000 ROA not after: Thu 24 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 31.220.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e7:59:af:be:f8:89:62:35:59:2f:a8:4a:d0:4e:ed:ef:9b:ce:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 20 22:52:09 2025 GMT Not After : Apr 24 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:56:59:e8:e5:ea:d6:78:b9:33:1b:39:b7: e2:d2:1a:c5:9f:5f:cf:2c:6c:ba:54:67:ce:0f:7e: ad:0e:b2:ee:c1:e4:7b:ca:1a:bb:77:f0:cf:df:b2: 77:0a:e8:b5:e3:e1:13:35:56:19:b1:5d:27:ae:f6: d4:44:2e:ad:20:88:2a:f2:54:dd:0f:bd:f9:f3:6c: c8:11:15:b6:d0:61:16:2d:76:bd:61:19:47:a2:b9: fe:31:1f:15:27:96:e8:26:24:61:c8:8a:69:da:3c: 66:a4:f5:1b:04:64:fd:df:51:2f:8f:45:94:f2:1e: 64:00:fe:1c:6c:99:a3:ea:c0:48:89:47:f3:29:50: 78:6e:8f:fb:59:d4:37:c8:e5:84:3c:b1:26:26:91: 99:92:4a:e5:ba:fc:73:d6:1c:bf:fa:28:ce:69:3e: 01:54:aa:e9:06:b1:85:23:70:cd:0b:89:e3:1e:71: f5:2d:4b:7b:28:b3:98:47:b3:95:90:e9:99:33:35: c7:2a:be:30:f1:fe:e3:43:0c:48:a7:b9:7e:36:b6: 23:fe:b0:b2:e3:a9:62:b7:87:d4:76:ef:6e:3a:2c: 28:2a:7f:9b:20:e6:8b:e7:0f:d5:e7:7a:03:34:a6: 5d:67:44:a8:76:c3:21:d9:96:71:e4:33:e7:86:c4: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6E:0B:80:01:3C:29:A9:CB:4D:69:BA:20:3C:9A:C7:0A:65:4F:CC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07db827d-5458-468d-8395-d3b2b4a26a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.220.0/22 Signature Algorithm: sha256WithRSAEncryption 63:e2:e5:a2:58:92:9f:6a:65:85:f4:45:33:6d:fb:f4:f9:ce: c1:9c:c5:bf:64:1d:39:95:75:51:a1:42:d5:98:b9:72:1e:74: 66:6b:5e:ea:ca:c1:50:bb:9d:71:f8:3e:4e:bf:de:6e:2f:59: d5:3d:b4:cf:3a:54:f5:34:f5:6c:18:f9:95:3a:bc:99:1e:4b: 1a:c6:e8:a4:0d:e2:47:cc:20:b7:ef:5b:69:1e:57:8f:3c:b2: 8d:76:c1:bd:a1:4d:82:f7:38:d7:81:6d:c5:be:00:1f:d7:83: 2a:2e:0f:33:90:e6:64:04:ba:bc:48:66:0c:9e:eb:53:34:e0: 98:e9:fa:ef:40:14:7e:03:3f:2e:0a:9a:d7:2c:e2:0a:77:a3: 44:62:1c:13:02:0c:3b:93:d5:78:fd:a2:86:cb:04:ce:66:b4: 64:24:d2:40:aa:d0:22:56:52:cf:8f:34:dd:74:4d:76:a6:4e: 5b:ad:66:ef:15:61:df:db:d4:55:2e:7f:81:b5:9b:61:b9:6a: b4:9f:34:66:a1:5e:ef:60:3c:f9:54:aa:2d:cc:7a:79:5d:03: e0:96:b1:8a:59:4e:0b:08:e3:15:a4:b5:44:ed:a2:ac:ae:2b: 74:20:95:9d:28:87:e9:02:04:04:16:36:5d:3b:97:2b:d5:ca: 90:2c:b5:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeOdZr774iWI1WS+oStBO7e+bzpEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzIwMjI1MjA5WhcNMjUwNDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NWNkMWI1OTQ2M2QzNjc1M2IyMDBkMWE2M2FmZjZlZTlk MjU4NzMyZTE5YTczNTAxODNkMDU2YWE5YjY4MDExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCes1ZZ6OXq1ni5Mxs5t+LSGsWfX88sbLpUZ84Pfq0Osu7B 5HvKGrt38M/fsncK6LXj4RM1VhmxXSeu9tRELq0giCryVN0PvfnzbMgRFbbQYRYt dr1hGUeiuf4xHxUnlugmJGHIimnaPGak9RsEZP3fUS+PRZTyHmQA/hxsmaPqwEiJ R/MpUHhuj/tZ1DfI5YQ8sSYmkZmSSuW6/HPWHL/6KM5pPgFUqukGsYUjcM0LieMe cfUtS3sos5hHs5WQ6ZkzNccqvjDx/uNDDEinuX42tiP+sLLjqWK3h9R27246LCgq f5sg5ovnD9XnegM0pl1nRKh2wyHZlnHkM+eGxInvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+W4LgAE8KanLTWm6IDyaxwplT8wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA3ZGI4MjdkLTU0NTgtNDY4ZC04Mzk1LWQzYjJiNGEyNmE5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIf3NwwDQYJKoZIhvcNAQELBQADggEBAGPi5aJYkp9qZYX0RTNt+/T5zsGc xb9kHTmVdVGhQtWYuXIedGZrXurKwVC7nXH4Pk6/3m4vWdU9tM86VPU09WwY+ZU6 vJkeSxrG6KQN4kfMILfvW2keV488so12wb2hTYL3ONeBbcW+AB/XgyouDzOQ5mQE urxIZgye61M04Jjp+u9AFH4DPy4Kmtcs4gp3o0RiHBMCDDuT1Xj9oobLBM5mtGQk 0kCq0CJWUs+PNN10TXamTlutZu8VYd/b1FUuf4G1m2G5arSfNGahXu9gPPlUqi3M enldA+CWsYpZTgsI4xWktUTtoqyuK3QglZ0oh+kCBAQWNl07lyvVypAstf8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:31 2025 by rpki-client