$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fc90e01-ac33-4623-a697-374d7929f75d.roa File: 0fc90e01-ac33-4623-a697-374d7929f75d.roa (raw, json) Hash identifier: Jie8rAK9LYxAHLi3T4DT76OmUGvCW5sN5gPFJd6XvEc= Subject key identifier: B8:3A:0A:EB:8D:3A:96:C8:75:4D:7C:C6:52:FF:D4:A8:4A:73:70:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 276980C227C3DC5CA5C856CAE64E4B0EC1B9349B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fc90e01-ac33-4623-a697-374d7929f75d.roa Signing time: Wed 07 May 2025 00:11:02 +0000 ROA not before: Wed 07 May 2025 00:11:02 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 31.220.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:69:80:c2:27:c3:dc:5c:a5:c8:56:ca:e6:4e:4b:0e:c1:b9:34:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:11:02 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=16e8eebdf71021d0801ecde92d2298a6e783881c8814989de54b005b7f661a80, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:07:5e:6e:73:1e:c6:9f:95:7b:cc:85:8a: a4:be:8c:1e:a9:a8:5a:09:bf:9b:76:8a:b3:c9:41: f3:3d:b5:fd:be:bb:1a:36:7a:9f:ca:0b:9c:85:aa: 9f:2b:f9:2c:ef:69:bd:e6:90:c1:40:71:d5:dc:c2: 19:5d:7e:d0:38:e0:91:cf:58:88:ba:ac:2a:a9:3b: a4:83:9e:63:1d:16:69:5f:58:13:a2:ea:32:89:c7: 5b:e5:5e:05:38:85:4b:ee:b6:29:bb:17:6c:5b:a3: f8:66:40:5a:d8:5e:7e:df:55:7b:00:80:c3:6d:45: 99:6d:f9:a9:b0:0d:3d:cf:ae:a9:50:09:6e:12:63: 17:43:d2:8c:8c:1a:e8:db:ae:9d:35:5c:7c:df:f4: d5:aa:0f:16:90:c2:6e:ba:e3:67:49:a1:c7:17:ef: 82:e4:19:18:d7:9d:34:5a:9e:6b:9c:cc:ed:cd:5c: f3:62:31:93:0f:c9:4c:0a:9d:18:a7:95:58:0f:a9: dc:07:f0:c7:8a:ea:c0:8e:10:7a:30:4c:aa:93:b3: 93:f8:30:bb:a8:92:fb:fc:fc:10:76:44:aa:f1:ab: 62:65:af:d6:a7:9c:ce:26:ea:96:11:0c:f3:5e:cc: 02:13:4c:60:2a:01:8a:40:b5:10:fa:7c:05:f5:64: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3A:0A:EB:8D:3A:96:C8:75:4D:7C:C6:52:FF:D4:A8:4A:73:70:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fc90e01-ac33-4623-a697-374d7929f75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.224.0/22 Signature Algorithm: sha256WithRSAEncryption 47:93:97:81:23:48:f3:8f:83:c3:ce:e5:59:44:50:ae:b1:62: 08:d4:1a:7d:d3:32:9d:33:0f:43:66:64:73:35:e7:34:44:12: 14:b3:f9:18:95:6a:0c:6d:d6:8d:ed:45:81:78:87:28:68:25: ed:ce:ef:32:ba:32:5f:0c:8d:90:32:90:16:4f:62:cd:7f:e2: 78:82:e3:7a:2a:8f:3f:a3:2b:e0:06:c6:ab:d0:ea:70:c7:66: e6:57:d1:02:2d:ae:fa:55:7f:49:0d:c8:26:e9:94:a9:9e:fd: f9:ce:ad:15:df:73:9b:66:0c:9e:ee:1d:85:0d:69:7e:12:71: a5:1b:c0:1d:d1:75:0c:7c:f7:97:d8:bd:99:84:23:ff:7b:c2: 88:35:ef:8f:7f:36:3f:b6:a0:bd:59:74:a7:24:c8:28:a9:18: 49:29:5d:ba:c5:df:be:4a:5d:62:cf:0e:29:5d:4e:df:ae:d8: 2e:41:b0:d8:c5:53:c3:e2:14:1e:a4:a3:c0:95:ab:e0:a0:e4: 1d:84:96:2f:7f:f9:58:72:ca:a0:57:66:28:88:46:2c:5b:52: cd:6e:10:83:34:82:a0:0e:20:d9:8c:36:0b:60:86:12:c7:71: d8:59:6b:34:d5:bd:60:dd:66:9e:b9:ba:98:32:23:ce:89:2f: f7:14:a0:45 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ2mAwifD3FylyFbK5k5LDsG5NJswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDAxMTAyWhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNmU4ZWViZGY3MTAyMWQwODAxZWNkZTkyZDIyOThhNmU3 ODM4ODFjODgxNDk4OWRlNTRiMDA1YjdmNjYxYTgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0yQdebnMexp+Ve8yFiqS+jB6pqFoJv5t2irPJQfM9tf2+ uxo2ep/KC5yFqp8r+Szvab3mkMFAcdXcwhldftA44JHPWIi6rCqpO6SDnmMdFmlf WBOi6jKJx1vlXgU4hUvutim7F2xbo/hmQFrYXn7fVXsAgMNtRZlt+amwDT3PrqlQ CW4SYxdD0oyMGujbrp01XHzf9NWqDxaQwm6642dJoccX74LkGRjXnTRanmuczO3N XPNiMZMPyUwKnRinlVgPqdwH8MeK6sCOEHowTKqTs5P4MLuokvv8/BB2RKrxq2Jl r9annM4m6pYRDPNezAITTGAqAYpAtRD6fAX1ZCG1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuDoK6406lsh1TXzGUv/UqEpzcD4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmYzkwZTAxLWFjMzMtNDYyMy1hNjk3LTM3NGQ3OTI5Zjc1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIf3OAwDQYJKoZIhvcNAQELBQADggEBAEeTl4EjSPOPg8PO5VlEUK6xYgjU Gn3TMp0zD0NmZHM15zREEhSz+RiVagxt1o3tRYF4hyhoJe3O7zK6Ml8MjZAykBZP Ys1/4niC43oqjz+jK+AGxqvQ6nDHZuZX0QItrvpVf0kNyCbplKme/fnOrRXfc5tm DJ7uHYUNaX4ScaUbwB3RdQx895fYvZmEI/97wog1749/Nj+2oL1ZdKckyCipGEkp XbrF375KXWLPDildTt+u2C5BsNjFU8PiFB6ko8CVq+Cg5B2Eli9/+VhyyqBXZiiI RixbUs1uEIM0gqAOINmMNgtghhLHcdhZazTVvWDdZp65upgyI86JL/cUoEU= -----END CERTIFICATE-----Generated at Sun May 11 10:35:29 2025 by rpki-client