$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91a8de1a-1488-427e-a09b-887d90de5699.roa File: 91a8de1a-1488-427e-a09b-887d90de5699.roa (raw, json) Hash identifier: axMR9dMpge3UTAsNg1cmllnSHQqpcWNr3HcsqGMKPGQ= Subject key identifier: D9:B7:24:04:1D:C7:89:10:8A:D3:B7:83:52:5C:E0:4C:22:F0:BA:83 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5163CB566458BD6E341160F4E5C3E9E8FC66372D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91a8de1a-1488-427e-a09b-887d90de5699.roa Signing time: Tue 21 Jan 2025 00:00:00 +0000 ROA not before: Tue 21 Jan 2025 00:00:00 +0000 ROA not after: Tue 25 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.219.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:63:cb:56:64:58:bd:6e:34:11:60:f4:e5:c3:e9:e8:fc:66:37:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 21 00:00:00 2025 GMT Not After : Feb 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:a0:1c:64:08:3d:e4:bf:44:d5:a6:3c:ee: c5:8a:47:72:c6:f8:6c:70:0b:51:9d:4a:a7:a1:af: 65:48:d4:e2:dd:69:00:27:bb:5b:b6:71:76:c8:1b: 5c:e4:7c:18:e6:cc:77:23:45:5b:c1:12:1a:36:e9: 16:cf:72:01:4f:10:ac:f1:c1:35:78:bc:ba:15:e6: e5:5e:ab:bb:9d:04:a5:66:42:81:56:7d:bc:65:d7: 99:67:27:ef:d7:2d:c6:58:ee:02:99:57:e3:32:88: 54:02:c3:67:76:30:2f:8f:fe:b7:39:f6:f4:f8:e1: 13:d8:be:ab:a4:f9:48:5d:54:30:52:99:ab:cc:a7: c3:8e:f3:c4:fa:94:5e:62:94:2c:74:70:ba:5a:91: e7:4e:0c:66:07:18:52:e9:53:0a:84:e7:07:0b:1a: fc:34:d2:0f:9f:42:07:c2:43:f7:18:e3:4b:04:95: a5:f8:f8:fb:09:02:7b:4a:bc:d0:de:c5:2f:92:60: 6c:eb:6b:47:73:30:5f:4c:a8:c1:2e:71:08:37:da: 31:54:dc:d4:ed:64:70:23:3c:31:83:cb:6e:50:4d: 3c:84:d8:dd:12:5b:7e:f3:ae:35:79:a7:e2:08:60: 16:06:e0:a7:4c:d3:14:7c:32:23:09:e1:cd:ea:33: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B7:24:04:1D:C7:89:10:8A:D3:B7:83:52:5C:E0:4C:22:F0:BA:83 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91a8de1a-1488-427e-a09b-887d90de5699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.219.0.0/16 Signature Algorithm: sha256WithRSAEncryption 94:da:6a:ba:22:42:6e:bf:cd:b3:15:7e:dd:b4:18:85:2d:5b: 70:93:a6:d1:1d:47:72:2a:34:60:e4:93:47:81:09:c2:19:14: 5a:f5:07:3c:b2:6f:a3:cc:cb:8b:2f:51:8f:da:e8:06:34:81: aa:66:6f:ce:03:79:a4:96:d5:7b:30:53:a4:06:78:2b:df:5e: db:b2:c6:c8:af:12:2b:73:ec:ea:d1:78:cc:34:c3:7d:b3:d8: 64:5c:1a:26:c6:d2:b8:99:c0:bd:65:f5:be:4e:f7:42:9e:d8: 80:43:e3:fa:00:f9:fb:31:c9:cf:c9:76:35:d8:c9:65:d0:3f: bb:26:0d:59:d6:04:f3:71:b9:7e:60:d2:7c:df:0b:4a:ac:ae: f2:87:3c:0f:12:b5:d7:90:4e:f4:14:e5:f8:25:cc:87:bf:08: 93:92:ce:99:ce:4f:a2:f6:0c:77:ba:ef:36:17:fd:98:f6:6e: 8c:5e:92:f6:51:ae:c2:bb:f8:33:f9:4e:25:ec:37:20:81:2a: 12:01:cf:17:59:1a:d0:ea:c1:84:e6:7c:c3:fa:a7:47:b8:c9: 91:83:95:0c:90:8e:10:a4:f1:b8:d0:10:64:7e:5f:8f:18:f2: 79:ce:c4:64:5b:be:c3:55:6d:62:67:65:b3:35:ca:aa:b8:29: aa:1e:cf:c9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUWPLVmRYvW40EWD05cPp6PxmNy0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwODNiZTJmMWE3YmQ1Y2EyZGQ5Yzg5NGZhY2U2ZjIzNmY0 MDU0Yjc1ZDM1MWYzYjEwY2FiNDQ3NTk5YjdjYjgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+V6AcZAg95L9E1aY87sWKR3LG+GxwC1GdSqehr2VI1OLd aQAnu1u2cXbIG1zkfBjmzHcjRVvBEho26RbPcgFPEKzxwTV4vLoV5uVeq7udBKVm QoFWfbxl15lnJ+/XLcZY7gKZV+MyiFQCw2d2MC+P/rc59vT44RPYvquk+UhdVDBS mavMp8OO88T6lF5ilCx0cLpakedODGYHGFLpUwqE5wcLGvw00g+fQgfCQ/cY40sE laX4+PsJAntKvNDexS+SYGzra0dzMF9MqMEucQg32jFU3NTtZHAjPDGDy25QTTyE 2N0SW37zrjV5p+IIYBYG4KdM0xR8MiMJ4c3qM/T3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2bckBB3HiRCK07eDUlzgTCLwuoMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxYThkZTFhLTE0ODgtNDI3ZS1hMDliLTg4N2Q5MGRlNTY5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA42zANBgkqhkiG9w0BAQsFAAOCAQEAlNpquiJCbr/NsxV+3bQYhS1bcJOm 0R1Hcio0YOSTR4EJwhkUWvUHPLJvo8zLiy9Rj9roBjSBqmZvzgN5pJbVezBTpAZ4 K99e27LGyK8SK3Ps6tF4zDTDfbPYZFwaJsbSuJnAvWX1vk73Qp7YgEPj+gD5+zHJ z8l2NdjJZdA/uyYNWdYE83G5fmDSfN8LSqyu8oc8DxK115BO9BTl+CXMh78Ik5LO mc5PovYMd7rvNhf9mPZujF6S9lGuwrv4M/lOJew3IIEqEgHPF1ka0OrBhOZ8w/qn R7jJkYOVDJCOEKTxuNAQZH5fjxjyec7EZFu+w1VtYmdlszXKqrgpqh7PyQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:10 2025 by rpki-client