$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3b1d0af-f175-481d-98b9-87f2f921af0c.roa File: f3b1d0af-f175-481d-98b9-87f2f921af0c.roa (raw, json) Hash identifier: d+FFYnCPggIwvepveVuv3CoUu3ddIBi3fp2NhpxARDI= Subject key identifier: F6:0D:40:13:60:F9:78:39:F7:DB:77:84:97:83:B3:06:63:96:BF:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3AB212886F00BF42EE8D45F0104B48E0D384AE2A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3b1d0af-f175-481d-98b9-87f2f921af0c.roa Signing time: Fri 18 Apr 2025 00:41:28 +0000 ROA not before: Fri 18 Apr 2025 00:41:28 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 56.136.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b2:12:88:6f:00:bf:42:ee:8d:45:f0:10:4b:48:e0:d3:84:ae:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:41:28 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=820f908d079edc112c3b7c2d47d0cb2859fb4ef5116821f6d36f8e2febd6e020, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:b5:5b:40:a4:e6:e0:4d:20:3b:ac:26:f0: 77:3d:ca:01:7d:29:66:d5:bb:32:3c:d1:3f:24:27: dd:6c:32:05:e2:e2:81:87:c9:d5:ed:53:b5:5e:f6: ad:b1:42:67:ab:b8:2d:ca:8f:27:ce:c3:86:a8:be: 0f:10:26:8f:79:cb:2e:2a:e1:32:70:2b:53:3e:e0: c6:b5:fd:2c:e8:0a:fa:74:ad:57:43:eb:4c:35:72: 29:4d:62:5e:48:0c:6d:59:20:14:83:87:bf:6f:6d: 87:01:e4:9d:f9:e0:55:0d:68:68:ff:7b:7e:1b:9d: 6f:84:40:97:58:c7:df:28:39:ca:b9:ed:bb:c5:61: 7b:66:18:eb:a2:27:db:3c:76:f1:8c:09:bf:f2:af: 04:30:2a:08:10:89:93:38:49:af:ee:45:f1:07:7b: 45:91:63:32:cf:8c:5f:41:16:84:e0:65:b8:3d:4d: bf:5d:c3:c8:9c:d2:a3:3e:4e:84:64:61:5e:1c:14: 71:d9:ce:99:f6:e9:2a:03:5a:00:49:79:25:27:e5: a5:6b:f6:54:7e:d5:db:1b:aa:79:8e:f5:77:b6:22: 8a:3d:01:21:f2:ce:a0:30:b3:4f:24:5d:94:3e:88: 08:13:ae:5b:14:ca:ef:a1:4c:8d:7c:82:3f:06:35: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0D:40:13:60:F9:78:39:F7:DB:77:84:97:83:B3:06:63:96:BF:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3b1d0af-f175-481d-98b9-87f2f921af0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.136.224.0/23 Signature Algorithm: sha256WithRSAEncryption a0:a3:b0:9f:9e:64:7f:2d:ac:56:52:d9:1c:58:48:6c:1b:e5: ce:73:40:7d:87:fc:e4:ab:73:57:ed:46:f6:df:9e:ef:ca:74: b5:7b:df:68:97:3d:d3:8c:1b:99:2d:5d:ab:13:36:93:80:3b: 64:c7:b0:d5:de:8c:a2:7a:20:cb:41:33:90:3b:51:8e:62:ce: 75:b9:d7:d2:4e:4d:2e:15:a4:d6:e2:d1:f0:78:d7:b1:fd:36: fb:1b:81:2f:cf:5d:21:73:ce:79:fc:ca:18:fd:25:78:82:b1: bb:8b:73:e4:eb:ff:58:9a:3e:70:26:56:bb:59:e9:88:08:df: f4:5f:31:4a:8e:d0:b0:92:14:67:1d:0d:0f:d5:e5:63:34:9b: 82:05:4b:80:b1:8e:cc:75:cf:76:80:78:d0:03:75:42:2a:ba: 23:d0:d4:68:ea:e8:a8:50:e8:45:73:8c:fb:b4:0b:d7:91:79: f8:56:26:e5:8b:a4:ff:c1:78:97:dc:4f:4f:47:b9:41:b2:1e: d8:b3:d4:7c:a9:a0:ea:e3:d9:09:ae:4e:97:ee:81:53:24:3e: 6a:96:38:19:93:d7:9b:72:db:4c:04:6a:c8:14:e3:97:e0:03: 96:b3:fb:35:d4:7c:67:de:a4:13:6b:55:10:5e:22:c7:2a:35: 31:78:28:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOrISiG8Av0LujUXwEEtI4NOEriowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE4MDA0MTI4WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MjBmOTA4ZDA3OWVkYzExMmMzYjdjMmQ0N2QwY2IyODU5 ZmI0ZWY1MTE2ODIxZjZkMzZmOGUyZmViZDZlMDIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC947VbQKTm4E0gO6wm8Hc9ygF9KWbVuzI80T8kJ91sMgXi 4oGHydXtU7Ve9q2xQmeruC3KjyfOw4aovg8QJo95yy4q4TJwK1M+4Ma1/SzoCvp0 rVdD60w1cilNYl5IDG1ZIBSDh79vbYcB5J354FUNaGj/e34bnW+EQJdYx98oOcq5 7bvFYXtmGOuiJ9s8dvGMCb/yrwQwKggQiZM4Sa/uRfEHe0WRYzLPjF9BFoTgZbg9 Tb9dw8ic0qM+ToRkYV4cFHHZzpn26SoDWgBJeSUn5aVr9lR+1dsbqnmO9Xe2Ioo9 ASHyzqAws08kXZQ+iAgTrlsUyu+hTI18gj8GNScfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9g1AE2D5eDn323eEl4OzBmOWv1wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YzYjFkMGFmLWYxNzUtNDgxZC05OGI5LTg3ZjJmOTIxYWYwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE4iOAwDQYJKoZIhvcNAQELBQADggEBAKCjsJ+eZH8trFZS2RxYSGwb5c5z QH2H/OSrc1ftRvbfnu/KdLV732iXPdOMG5ktXasTNpOAO2THsNXejKJ6IMtBM5A7 UY5iznW519JOTS4VpNbi0fB417H9NvsbgS/PXSFzznn8yhj9JXiCsbuLc+Tr/1ia PnAmVrtZ6YgI3/RfMUqO0LCSFGcdDQ/V5WM0m4IFS4Cxjsx1z3aAeNADdUIquiPQ 1Gjq6KhQ6EVzjPu0C9eRefhWJuWLpP/BeJfcT09HuUGyHtiz1HypoOrj2QmuTpfu gVMkPmqWOBmT15ty20wEasgU45fgA5az+zXUfGfepBNrVRBeIscqNTF4KOo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:25 2025 by rpki-client