$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31cb7314-81ae-4405-a48a-7bb3fbbe75c3.roa File: 31cb7314-81ae-4405-a48a-7bb3fbbe75c3.roa (raw, json) Hash identifier: Q+qB0kIax8CQfDGD3u2dG518pf7FPtCixeYSUrrxKoI= Subject key identifier: 42:39:9F:73:4F:4A:4E:0A:F1:06:32:A7:CE:38:08:0F:8F:FA:05:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 53540837CE752BDC6D996254E4365D3749C825E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31cb7314-81ae-4405-a48a-7bb3fbbe75c3.roa Signing time: Fri 21 Mar 2025 00:10:25 +0000 ROA not before: Fri 21 Mar 2025 00:10:25 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.3.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:54:08:37:ce:75:2b:dc:6d:99:62:54:e4:36:5d:37:49:c8:25:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 21 00:10:25 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d8:c7:14:b4:66:c5:e2:bc:e4:aa:95:74:73: 61:96:57:e3:8d:5e:0e:70:ab:65:34:f0:50:3b:a4: 21:84:1f:e3:97:fa:82:ca:bb:07:34:33:55:18:02: be:df:cb:76:af:ad:66:58:2e:5b:5d:63:8e:e8:8c: 3b:90:d4:1e:88:21:8a:4c:82:e3:8d:ff:4a:1d:ee: 45:b4:9f:79:a0:8e:45:5f:45:36:d9:e7:80:b4:9b: 99:a0:6c:b6:81:2d:b3:4b:46:5a:a9:97:0e:8e:77: 6c:ba:20:e9:ae:1d:1b:06:df:36:2d:43:b2:31:23: 7b:6b:cf:35:92:d9:9f:26:a1:7f:70:bf:4c:2a:c4: d8:e8:90:3d:1c:47:68:85:36:b8:4b:69:a0:c8:5c: fe:74:e0:e2:60:92:22:4b:72:d3:8e:aa:32:2a:9d: 0c:90:83:58:52:66:65:58:bd:c1:d2:d8:a7:70:84: 7a:23:6c:df:08:d9:d4:e2:95:8a:81:c0:67:8e:61: 42:d6:39:39:5c:94:57:45:1c:9d:97:40:1e:3e:60: 11:d0:de:f2:bb:92:c9:29:bc:d2:8a:df:61:23:50: 87:4b:cc:bc:19:0c:ac:cb:9d:9c:22:dc:63:06:32: 22:0d:3a:dc:e7:3e:3b:30:71:4c:52:ec:64:b3:16: cb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:39:9F:73:4F:4A:4E:0A:F1:06:32:A7:CE:38:08:0F:8F:FA:05:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31cb7314-81ae-4405-a48a-7bb3fbbe75c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.3.0.0/16 Signature Algorithm: sha256WithRSAEncryption 95:a8:a7:f3:40:d7:7f:51:52:aa:ea:c6:39:cd:4d:7c:53:7d: ac:da:a1:66:bf:60:0d:e4:c9:e9:fd:e2:43:ae:1b:c1:a1:d1: 2c:c0:96:e1:de:01:d4:f0:86:a0:e5:0d:49:c2:11:19:48:ef: 6d:93:c4:b8:07:8e:8d:76:aa:70:74:07:13:de:27:11:5c:f2: 8c:a5:fb:8f:57:bf:5c:1f:95:49:3e:84:9b:05:15:01:2b:86: 3a:20:33:ea:2c:86:07:86:d6:fa:44:fa:bb:01:c5:c6:3b:0b: e0:f2:dd:b8:b7:47:fb:28:08:a5:81:a6:31:24:38:b9:19:0f: e6:91:1c:b7:9e:c5:b5:24:88:4b:5f:bd:0a:e2:65:66:33:39: 77:1d:f0:6e:2f:9e:9d:93:7b:e1:04:3a:e0:9a:7f:2a:57:cb: 99:47:d0:de:45:01:6e:0f:be:5b:f9:b4:08:3b:b9:47:41:5b: 31:68:57:f5:5d:bd:bc:e4:86:dd:d4:cd:48:63:cc:0f:0e:3f: 50:1a:48:b8:a1:92:7c:d6:a7:5b:92:c1:3d:f1:33:1c:34:e3: 09:a1:cf:78:dd:41:77:87:c9:39:f7:6c:24:7c:d2:4f:7d:51: 89:e6:29:60:75:11:2f:d5:65:66:7f:09:52:af:20:8d:ca:49: 80:d7:84:db -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUU1QIN851K9xtmWJU5DZdN0nIJekwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzIxMDAxMDI1WhcNMjUwNDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTcxY2U0Yzk3N2MyMGJmY2RlMmNjYzNjYzgzYTk1ZTU4 MmNlN2M5MjdkNzUyYmJlMzIwNDJjYjNkZDM4YjFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDv2McUtGbF4rzkqpV0c2GWV+ONXg5wq2U08FA7pCGEH+OX +oLKuwc0M1UYAr7fy3avrWZYLltdY47ojDuQ1B6IIYpMguON/0od7kW0n3mgjkVf RTbZ54C0m5mgbLaBLbNLRlqplw6Od2y6IOmuHRsG3zYtQ7IxI3trzzWS2Z8moX9w v0wqxNjokD0cR2iFNrhLaaDIXP504OJgkiJLctOOqjIqnQyQg1hSZmVYvcHS2Kdw hHojbN8I2dTilYqBwGeOYULWOTlclFdFHJ2XQB4+YBHQ3vK7kskpvNKK32EjUIdL zLwZDKzLnZwi3GMGMiINOtznPjswcUxS7GSzFsvTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQjmfc09KTgrxBjKnzjgID4/6BaIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMxY2I3MzE0LTgxYWUtNDQwNS1hNDhhLTdiYjNmYmJlNzVjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4AzANBgkqhkiG9w0BAQsFAAOCAQEAlain80DXf1FSqurGOc1NfFN9rNqh Zr9gDeTJ6f3iQ64bwaHRLMCW4d4B1PCGoOUNScIRGUjvbZPEuAeOjXaqcHQHE94n EVzyjKX7j1e/XB+VST6EmwUVASuGOiAz6iyGB4bW+kT6uwHFxjsL4PLduLdH+ygI pYGmMSQ4uRkP5pEct57FtSSIS1+9CuJlZjM5dx3wbi+enZN74QQ64Jp/KlfLmUfQ 3kUBbg++W/m0CDu5R0FbMWhX9V29vOSG3dTNSGPMDw4/UBpIuKGSfNanW5LBPfEz HDTjCaHPeN1Bd4fJOfdsJHzST31RieYpYHURL9VlZn8JUq8gjcpJgNeE2w== -----END CERTIFICATE-----Generated at Sat Apr 5 19:56:11 2025 by rpki-client