$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02990819-f2e0-4de8-bb2a-00a87a7262dd.roa File: 02990819-f2e0-4de8-bb2a-00a87a7262dd.roa (raw, json) Hash identifier: UTFM0dy58JmFxGaiZ/oFMBiS0YSyhi1tRV0Dh9rd6ak= Subject key identifier: DF:B6:A8:41:B5:DC:CD:24:42:47:BF:00:E6:80:36:90:B4:C5:32:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43D046672B18B8BB2F037CA0BB5E3BE2E354CE38 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02990819-f2e0-4de8-bb2a-00a87a7262dd.roa Signing time: Fri 18 Apr 2025 00:20:23 +0000 ROA not before: Fri 18 Apr 2025 00:20:23 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 121.95.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d0:46:67:2b:18:b8:bb:2f:03:7c:a0:bb:5e:3b:e2:e3:54:ce:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:20:23 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=c81f115413bfae32870533ab412f71f72de09ea39f96cf27b6a5352d9f5b9d08, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7b:81:e7:5e:92:c8:67:6d:44:dc:02:96:f2: e7:28:9d:dc:33:8d:7d:f0:e5:a8:af:a4:63:c7:fa: 3b:d9:f2:11:d2:66:78:07:84:b5:f8:33:b7:10:00: 37:95:cd:57:5a:6c:de:cc:7a:0c:d9:c9:aa:67:66: 79:8e:e8:23:a3:de:df:83:a2:1c:d2:f0:ac:cb:db: 72:f9:5b:d4:4f:9e:94:48:51:4e:b5:0d:1e:83:73: b4:66:70:06:0d:04:48:e6:25:68:26:1c:fc:8e:5d: b4:16:55:23:68:4d:6e:cf:2e:e7:54:4c:92:e0:61: a6:ec:6e:c1:62:3e:18:fc:a1:f1:1d:98:23:95:70: 3d:ae:6f:13:d7:da:67:d4:2e:ce:2f:3c:07:29:c7: 7a:10:97:3a:76:34:d1:55:ae:5c:65:3a:84:d4:d7: 8a:d7:74:75:16:63:f2:f4:87:f5:1f:7d:cc:5f:6d: e8:17:99:b5:4b:9a:7c:c4:43:b5:2f:8e:6c:3d:ee: cd:4c:e3:5d:cc:b4:4e:da:69:03:ac:e3:e6:0e:3b: 4b:15:a5:bd:af:37:b7:37:53:49:16:e2:02:6a:df: 6e:b3:ae:dd:a1:73:11:1d:19:d5:03:07:78:66:e0: 4e:cc:50:59:57:2a:55:4c:a4:4b:d2:5d:60:f6:15: d8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B6:A8:41:B5:DC:CD:24:42:47:BF:00:E6:80:36:90:B4:C5:32:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02990819-f2e0-4de8-bb2a-00a87a7262dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.95.0.0/18 Signature Algorithm: sha256WithRSAEncryption 15:25:18:81:3d:b0:b4:b2:ca:70:81:64:5e:ca:e1:00:9a:ab: 85:f4:db:ba:2a:f0:ba:07:d7:a9:bf:c6:61:49:66:be:08:2e: d1:0a:a3:c5:b8:ea:e2:de:6f:6e:20:62:eb:09:0c:1e:db:4f: 0e:ad:74:6a:56:e0:af:bc:32:90:4a:d1:ab:8a:f5:75:2d:db: 01:47:4b:b3:05:59:99:08:46:1d:e7:b9:26:14:7a:80:68:70: db:92:21:45:be:52:60:4b:44:f4:a6:0c:cc:de:6f:f6:36:c4: dd:cf:94:3d:be:78:f9:03:7f:29:38:1e:2a:03:5f:ce:fe:b4: ac:af:28:0a:ed:83:d4:4d:32:b4:e5:8a:c5:d2:c2:c8:a8:a7: 72:0b:fa:d7:e7:79:e3:f6:15:7d:da:b0:60:af:5b:93:a8:03: 2b:b4:23:6c:1f:5a:7b:df:8c:93:4e:29:3b:3d:a0:a3:42:59: c8:3e:29:ff:9b:90:01:7a:ce:da:0e:c6:3b:ba:1b:e9:12:4d: 99:02:30:7d:0e:4c:b0:08:2b:49:cf:34:d3:f5:40:3e:74:c7: f9:3c:29:fc:ea:2e:66:5c:47:5b:28:5a:96:61:6e:0a:c6:cc: d2:82:19:c5:3d:44:9d:65:0f:6d:1a:f3:72:f8:73:19:59:20: a6:78:d0:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ9BGZysYuLsvA3ygu1474uNUzjgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE4MDAyMDIzWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjODFmMTE1NDEzYmZhZTMyODcwNTMzYWI0MTJmNzFmNzJk ZTA5ZWEzOWY5NmNmMjdiNmE1MzUyZDlmNWI5ZDA4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSe4HnXpLIZ21E3AKW8ucondwzjX3w5aivpGPH+jvZ8hHS ZngHhLX4M7cQADeVzVdabN7MegzZyapnZnmO6COj3t+DohzS8KzL23L5W9RPnpRI UU61DR6Dc7RmcAYNBEjmJWgmHPyOXbQWVSNoTW7PLudUTJLgYabsbsFiPhj8ofEd mCOVcD2ubxPX2mfULs4vPAcpx3oQlzp2NNFVrlxlOoTU14rXdHUWY/L0h/Uffcxf begXmbVLmnzEQ7Uvjmw97s1M413MtE7aaQOs4+YOO0sVpb2vN7c3U0kW4gJq326z rt2hcxEdGdUDB3hm4E7MUFlXKlVMpEvSXWD2FdjbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU37aoQbXczSRCR78A5oA2kLTFMpAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyOTkwODE5LWYyZTAtNGRlOC1iYjJhLTAwYTg3YTcyNjJkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ5XwAwDQYJKoZIhvcNAQELBQADggEBABUlGIE9sLSyynCBZF7K4QCaq4X0 27oq8LoH16m/xmFJZr4ILtEKo8W46uLeb24gYusJDB7bTw6tdGpW4K+8MpBK0auK 9XUt2wFHS7MFWZkIRh3nuSYUeoBocNuSIUW+UmBLRPSmDMzeb/Y2xN3PlD2+ePkD fyk4HioDX87+tKyvKArtg9RNMrTlisXSwsiop3IL+tfneeP2FX3asGCvW5OoAyu0 I2wfWnvfjJNOKTs9oKNCWcg+Kf+bkAF6ztoOxju6G+kSTZkCMH0OTLAIK0nPNNP1 QD50x/k8KfzqLmZcR1soWpZhbgrGzNKCGcU9RJ1lD20a83L4cxlZIKZ40DM= -----END CERTIFICATE-----Generated at Sat Apr 26 16:55:31 2025 by rpki-client