$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c9eee6b-4dd7-4759-9647-45fd3b47502b.roa File: 2c9eee6b-4dd7-4759-9647-45fd3b47502b.roa (raw, json) Hash identifier: bZ3pBgX1PLTO333qccg8ESxCKqaNmEBHLYpU6Ja24U4= Subject key identifier: 5D:58:BE:75:AA:9C:48:AA:D4:5F:1F:3A:F4:81:75:35:CD:C7:1B:8F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A1A16F6943F8BDB1C39BA1E0A5E7004A9580C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c9eee6b-4dd7-4759-9647-45fd3b47502b.roa Signing time: Fri 18 Apr 2025 00:31:53 +0000 ROA not before: Fri 18 Apr 2025 00:31:53 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 203.110.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1a:16:f6:94:3f:8b:db:1c:39:ba:1e:0a:5e:70:04:a9:58:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:31:53 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=892abd2aa4ec917923bccd3e42762c5d3a9dc3b9be03b3904651421bc0c7c026, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:0c:18:e2:3a:f4:bc:33:c9:0d:88:df:ef: 2e:fd:9a:c7:3e:07:94:56:36:21:00:53:d5:9a:dd: d2:80:3f:00:42:ec:6a:b4:42:6f:cc:3c:da:97:4e: 0d:c0:66:96:71:d1:74:c8:97:3c:ff:65:b8:65:56: 05:17:c6:79:00:04:23:d6:a4:87:4f:bf:9a:ee:52: 4c:74:05:61:2a:ea:8d:ef:40:0b:7a:2a:8d:1f:1f: a4:4e:9c:9d:9c:81:8c:ce:a5:7e:37:ed:9b:fa:6b: 0c:6c:fc:62:60:9b:86:4d:e2:d8:2d:ab:cc:22:9a: 0f:7e:8d:83:21:96:72:39:14:62:d4:67:5c:4e:a2: 3a:3a:dc:1c:51:06:7b:07:fb:8f:cd:6a:3f:7c:3a: ca:09:52:69:7e:d3:56:b8:a6:8d:d5:8f:01:5d:ae: 87:1f:a9:08:a7:10:36:f6:49:90:b4:77:73:f2:b5: 1d:8e:7c:cb:f6:8a:d4:41:88:7c:1a:96:e1:53:b3: 26:30:25:f7:84:32:c5:03:14:43:2d:4a:a6:4b:6c: 9c:1a:cf:47:ab:1c:84:20:9e:b5:72:42:11:15:dd: 86:37:b7:fc:30:50:26:06:e6:33:89:a9:89:e5:1b: bb:cd:e0:6c:72:15:75:25:a7:47:4a:a8:76:63:4c: 7c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:58:BE:75:AA:9C:48:AA:D4:5F:1F:3A:F4:81:75:35:CD:C7:1B:8F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c9eee6b-4dd7-4759-9647-45fd3b47502b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.110.202.0/24 Signature Algorithm: sha256WithRSAEncryption 23:22:37:ff:20:ba:da:70:8b:39:7d:8f:65:ad:f8:df:ef:5e: 57:2d:56:0d:b9:3a:19:10:0a:55:9a:36:57:d8:ba:93:c5:c3: 97:92:7a:47:18:94:1e:e6:b7:d1:03:2f:16:5d:b1:08:d5:3b: 04:5d:45:d7:06:45:3b:7a:b3:bc:89:2c:8a:5d:87:cb:83:85: 53:88:dc:16:bd:37:10:22:eb:19:9f:6a:61:d2:22:80:f8:15: 56:8c:98:99:36:0d:29:2d:49:30:41:70:eb:98:b6:6f:58:aa: 2c:0f:91:55:d3:2b:f6:3c:7c:c4:17:c1:1a:67:c1:bd:09:b5: 46:41:35:fc:bf:7d:4a:c2:cc:22:7c:b4:9c:54:6b:fe:75:a0: aa:c8:6e:af:48:df:8a:b5:ad:7e:2d:5c:ed:34:f8:4e:10:bd: 42:33:78:78:5b:2f:46:d9:46:a7:21:e0:4d:fe:2d:f9:e8:1c: 2e:16:a6:85:e7:0f:37:0b:36:25:59:dc:76:28:71:78:0b:3b: 23:55:24:8b:21:23:e5:06:41:9d:c2:d7:b5:de:e8:be:eb:4d: 18:c0:d0:2e:87:7a:e4:8a:a7:ea:fe:0b:b5:d5:08:d1:5a:ef: 61:55:5b:7a:f5:66:a3:8a:80:1a:3d:c5:79:3a:a9:e6:ee:59: 63:a3:ce:b5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITahoW9pQ/i9scOboeCl5wBKlYDDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA0MTgwMDMxNTNaFw0yNTA1MjMyMzU5NTla MHoxSTBHBgNVBAUTQDg5MmFiZDJhYTRlYzkxNzkyM2JjY2QzZTQyNzYyYzVkM2E5 ZGMzYjliZTAzYjM5MDQ2NTE0MjFiYzBjN2MwMjYxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAK+oDBjiOvS8M8kNiN/vLv2axz4HlFY2IQBT1Zrd0oA/AELs arRCb8w82pdODcBmlnHRdMiXPP9luGVWBRfGeQAEI9akh0+/mu5STHQFYSrqje9A C3oqjR8fpE6cnZyBjM6lfjftm/prDGz8YmCbhk3i2C2rzCKaD36NgyGWcjkUYtRn XE6iOjrcHFEGewf7j81qP3w6yglSaX7TVrimjdWPAV2uhx+pCKcQNvZJkLR3c/K1 HY58y/aK1EGIfBqW4VOzJjAl94QyxQMUQy1KpktsnBrPR6schCCetXJCERXdhje3 /DBQJgbmM4mpieUbu83gbHIVdSWnR0qodmNMfO0CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBRdWL51qpxIqtRfHzr0gXU1zccbjzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMmM5ZWVlNmItNGRkNy00NzU5LTk2NDctNDVmZDNiNDc1MDJiLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtuyjANBgkqhkiG9w0BAQsFAAOCAQEAIyI3/yC62nCLOX2PZa343+9eVy1W Dbk6GRAKVZo2V9i6k8XDl5J6RxiUHua30QMvFl2xCNU7BF1F1wZFO3qzvIksil2H y4OFU4jcFr03ECLrGZ9qYdIigPgVVoyYmTYNKS1JMEFw65i2b1iqLA+RVdMr9jx8 xBfBGmfBvQm1RkE1/L99SsLMIny0nFRr/nWgqshur0jfirWtfi1c7TT4ThC9QjN4 eFsvRtlGpyHgTf4t+egcLhamhecPNws2JVncdihxeAs7I1UkiyEj5QZBncLXtd7o vutNGMDQLod65Iqn6v4LtdUI0VrvYVVbevVmo4qAGj3FeTqp5u5ZY6POtQ== -----END CERTIFICATE-----Generated at Sat Apr 26 15:00:32 2025 by rpki-client