$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d9b1ca-9364-4ed2-997e-dd893686a86b.roa File: 28d9b1ca-9364-4ed2-997e-dd893686a86b.roa (raw, json) Hash identifier: DwDbLZCrytqcj0OP3fAiNnjgeqJ9o84/eI+Vd+IY804= Subject key identifier: 00:6D:E5:D8:BA:31:E3:72:53:E0:DD:DE:9E:E5:3F:99:A7:59:4A:E0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30F4D85207DE56CE11480604318EDAEF08C2ACED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d9b1ca-9364-4ed2-997e-dd893686a86b.roa Signing time: Tue 22 Apr 2025 00:00:18 +0000 ROA not before: Tue 22 Apr 2025 00:00:18 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 114.56.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f4:d8:52:07:de:56:ce:11:48:06:04:31:8e:da:ef:08:c2:ac:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:00:18 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=b73a670b38e17fcc01f0066cd7b42f8d64ca986aaf7063b9ee2a520c38ba0fe5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:15:cc:20:86:9d:e0:c8:cc:5f:70:f0:db:bd: 24:7f:2a:d6:1c:c9:49:fd:0d:56:aa:b2:bf:cf:c4: cb:b4:e5:59:17:2a:9e:1c:f6:00:10:44:87:f0:78: 6c:1d:7d:98:d5:02:50:39:25:09:96:b3:69:85:68: 7a:10:cf:d0:f2:7f:1d:2e:8c:65:f5:9b:af:53:25: 36:29:f0:44:88:10:c6:3c:e0:9e:36:49:e5:00:df: 6a:93:5a:71:4e:f8:23:eb:b3:12:ed:af:9c:e9:1e: 81:2a:22:f6:40:8d:46:db:29:77:da:7c:ae:34:05: df:22:d0:a6:a5:cc:ce:0d:8d:eb:00:72:21:15:6d: 8e:2a:5c:31:41:14:d6:6d:dc:78:f4:5d:8a:21:0d: d3:3b:82:c7:70:b8:4e:46:57:75:a5:bc:59:14:63: a4:ea:3e:2f:f3:47:9d:57:18:69:a9:6e:22:c1:4d: 94:92:5d:b4:cf:00:09:53:bc:03:ff:cf:c5:be:95: dd:b3:a4:42:19:77:57:5d:c7:12:5e:92:82:99:c8: 6f:a9:8d:69:35:79:f3:40:23:bd:ff:d9:ff:a5:fb: f3:3a:2a:b0:e8:23:98:03:62:3d:24:da:fc:27:10: a3:8d:40:e3:bc:bf:cc:55:a1:1c:9d:36:9f:b9:4c: 12:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6D:E5:D8:BA:31:E3:72:53:E0:DD:DE:9E:E5:3F:99:A7:59:4A:E0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d9b1ca-9364-4ed2-997e-dd893686a86b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.56.187.0/24 Signature Algorithm: sha256WithRSAEncryption 73:54:f8:16:87:65:a4:26:68:ef:aa:41:54:8e:88:c8:05:eb: 39:2b:88:bd:74:5a:2b:51:2d:88:b3:78:ab:15:4e:47:73:4a: b0:1f:c5:c2:20:e1:60:52:cb:85:43:7f:0d:cc:51:6a:5d:49: 71:83:0f:92:f6:b8:1b:c1:05:f7:50:66:13:71:03:9b:6c:b3: 9b:7a:a8:e8:b9:a6:88:37:53:70:d7:ed:fc:15:57:cf:8d:ca: d7:c7:a9:da:9b:d8:d2:c5:c4:24:24:7c:dc:fb:de:dc:65:b1: 51:ed:b4:7f:3d:cd:fa:b7:64:9a:6a:75:2a:85:a5:67:6a:c2: b6:b6:36:c3:f4:4d:a5:81:c9:83:09:fd:82:8a:38:fd:4d:6a: 94:cf:ff:e5:26:29:1f:44:91:c7:91:52:ab:fe:9c:de:d1:91: f2:c4:8a:e1:43:91:51:c5:53:52:e5:35:3a:5d:bb:25:3d:10: fc:34:38:4e:4f:52:18:a1:31:67:1f:e7:8d:14:46:e0:d7:94: dd:99:d8:f4:7e:18:ac:02:f8:5e:36:f9:fd:79:5b:a5:3b:c2: 3d:25:08:40:a2:f2:24:01:4b:c4:7d:39:14:72:8c:29:62:45: 49:95:b3:20:8b:92:b7:00:c4:07:7d:2a:23:af:0e:39:e9:29: 42:f0:0a:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMPTYUgfeVs4RSAYEMY7a7wjCrO0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAwMDE4WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzNhNjcwYjM4ZTE3ZmNjMDFmMDA2NmNkN2I0MmY4ZDY0 Y2E5ODZhYWY3MDYzYjllZTJhNTIwYzM4YmEwZmU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyFcwghp3gyMxfcPDbvSR/KtYcyUn9DVaqsr/PxMu05VkX Kp4c9gAQRIfweGwdfZjVAlA5JQmWs2mFaHoQz9Dyfx0ujGX1m69TJTYp8ESIEMY8 4J42SeUA32qTWnFO+CPrsxLtr5zpHoEqIvZAjUbbKXfafK40Bd8i0KalzM4NjesA ciEVbY4qXDFBFNZt3Hj0XYohDdM7gsdwuE5GV3WlvFkUY6TqPi/zR51XGGmpbiLB TZSSXbTPAAlTvAP/z8W+ld2zpEIZd1ddxxJekoKZyG+pjWk1efNAI73/2f+l+/M6 KrDoI5gDYj0k2vwnEKONQOO8v8xVoRydNp+5TBJrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAG3l2Lox43JT4N3enuU/madZSuAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4ZDliMWNhLTkzNjQtNGVkMi05OTdlLWRkODkzNjg2YTg2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAByOLswDQYJKoZIhvcNAQELBQADggEBAHNU+BaHZaQmaO+qQVSOiMgF6zkr iL10WitRLYizeKsVTkdzSrAfxcIg4WBSy4VDfw3MUWpdSXGDD5L2uBvBBfdQZhNx A5tss5t6qOi5pog3U3DX7fwVV8+NytfHqdqb2NLFxCQkfNz73txlsVHttH89zfq3 ZJpqdSqFpWdqwra2NsP0TaWByYMJ/YKKOP1NapTP/+UmKR9EkceRUqv+nN7RkfLE iuFDkVHFU1LlNTpduyU9EPw0OE5PUhihMWcf540URuDXlN2Z2PR+GKwC+F42+f15 W6U7wj0lCECi8iQBS8R9ORRyjCliRUmVsyCLkrcAxAd9KiOvDjnpKULwCs0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:40 2025 by rpki-client