$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73bd9505-0725-4127-91af-3a87708861ee.roa File: 73bd9505-0725-4127-91af-3a87708861ee.roa (raw, json) Hash identifier: voiWgqubDvsR/93UuwvTpztgZhyXyv2om8uwRLHkEE0= Subject key identifier: DC:6B:4C:2A:B9:56:C5:20:11:0E:01:E2:51:41:6E:5D:E9:92:C3:8E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 552379ED65714B0DE6B70B4533A0DC72D73C22FF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73bd9505-0725-4127-91af-3a87708861ee.roa Signing time: Fri 13 Jun 2025 16:01:48 +0000 ROA not before: Fri 13 Jun 2025 16:01:48 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 119.13.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:23:79:ed:65:71:4b:0d:e6:b7:0b:45:33:a0:dc:72:d7:3c:22:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 16:01:48 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=ff3a71d4e25f04fb345ece9d127e2464a9c04acc7599f17d546322faaf0438d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:57:dc:23:15:0c:93:59:7c:9f:13:84:cb: e4:c7:fc:94:d2:f9:1b:95:76:29:a2:d2:bd:13:a6: c4:58:fb:fa:c4:3b:de:bc:b6:f9:cd:bd:62:e5:32: fa:d1:52:56:f1:98:87:6f:9a:a9:18:93:c4:40:f2: dc:33:a6:e3:6f:96:f4:e8:34:04:40:2f:d9:dd:67: 61:82:10:63:8b:2c:19:ca:13:dc:71:d4:9a:78:12: 23:fd:70:b4:a0:16:0b:4d:22:ec:0d:39:63:d7:c2: a9:42:74:fa:01:04:58:70:25:e9:01:f0:52:1b:ff: c9:25:96:2f:02:8f:42:6e:c9:63:48:33:8c:b2:ab: b1:a2:9b:a7:31:85:7b:8c:2d:dd:a7:49:99:18:68: ef:66:f5:0c:39:97:9c:ff:44:86:22:4f:de:54:5e: d9:2f:ad:80:19:40:8a:2e:41:1a:0d:7d:b8:da:d8: 87:0e:7d:eb:11:dd:02:2c:50:4d:28:16:ce:91:54: 51:ce:02:0c:76:d5:b8:d8:f1:61:7a:96:2b:02:aa: 44:a2:58:6b:fc:fe:24:0d:63:6a:5d:5c:f8:7b:8f: 5a:c8:ff:c4:84:de:00:1f:e1:28:ec:7e:6c:42:a3: a4:b9:52:2b:9e:18:65:d1:ea:c6:d8:8f:af:6b:9c: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6B:4C:2A:B9:56:C5:20:11:0E:01:E2:51:41:6E:5D:E9:92:C3:8E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73bd9505-0725-4127-91af-3a87708861ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.13.12.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:1a:dd:c0:84:03:d4:ed:23:94:57:73:10:1f:61:ce:fa:fc: b3:f5:67:ab:9c:73:3c:f0:e9:3e:4b:6e:95:54:07:23:79:f6: b0:31:4f:af:4a:32:18:74:99:dc:24:31:70:95:1e:b7:92:3a: 77:61:10:6d:0f:97:22:a0:6e:ce:0d:95:a4:d0:3e:9d:cb:39: 9f:be:9f:31:eb:54:48:7b:17:57:67:ff:34:3d:cf:06:53:ac: 86:0a:26:5f:50:74:ab:b0:c2:4c:0d:52:a3:5d:c2:7f:5b:b2: 59:e7:07:f5:0c:61:c4:73:28:3f:85:61:59:80:f5:8b:9a:67: 3b:a0:f3:ae:12:c3:b9:44:fb:5e:de:20:a3:fe:28:38:0f:8c: 90:47:90:1b:ca:6b:31:18:a4:b4:f6:d8:b1:34:29:3c:86:ed: ab:18:d3:b7:65:0f:70:92:ce:0d:0d:65:59:6e:58:25:f6:fa: 86:14:c7:28:3d:0a:2a:75:40:ca:bd:84:7d:1a:7c:55:82:8d: e0:ee:f4:17:82:3f:75:35:90:e6:97:14:5f:a8:0d:2a:95:e2: d1:2a:1b:16:27:e3:6c:3b:4e:4f:ec:41:9d:58:34:f8:93:d3: 92:27:32:cc:5f:a2:db:55:70:fe:f0:1c:83:2f:16:b6:ef:74: 5f:55:b0:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVSN57WVxSw3mtwtFM6Dcctc8Iv8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTYwMTQ4WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjNhNzFkNGUyNWYwNGZiMzQ1ZWNlOWQxMjdlMjQ2NGE5 YzA0YWNjNzU5OWYxN2Q1NDYzMjJmYWFmMDQzOGQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDLFfcIxUMk1l8nxOEy+TH/JTS+RuVdimi0r0TpsRY+/rE O968tvnNvWLlMvrRUlbxmIdvmqkYk8RA8twzpuNvlvToNARAL9ndZ2GCEGOLLBnK E9xx1Jp4EiP9cLSgFgtNIuwNOWPXwqlCdPoBBFhwJekB8FIb/8klli8Cj0JuyWNI M4yyq7Gim6cxhXuMLd2nSZkYaO9m9Qw5l5z/RIYiT95UXtkvrYAZQIouQRoNfbja 2IcOfesR3QIsUE0oFs6RVFHOAgx21bjY8WF6lisCqkSiWGv8/iQNY2pdXPh7j1rI /8SE3gAf4SjsfmxCo6S5UiueGGXR6sbYj69rnP3VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3GtMKrlWxSARDgHiUUFuXemSw44wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzczYmQ5NTA1LTA3MjUtNDEyNy05MWFmLTNhODc3MDg4NjFlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJ3DQwwDQYJKoZIhvcNAQELBQADggEBAC0a3cCEA9TtI5RXcxAfYc76/LP1 Z6ucczzw6T5LbpVUByN59rAxT69KMhh0mdwkMXCVHreSOndhEG0PlyKgbs4NlaTQ Pp3LOZ++nzHrVEh7F1dn/zQ9zwZTrIYKJl9QdKuwwkwNUqNdwn9bslnnB/UMYcRz KD+FYVmA9YuaZzug864Sw7lE+17eIKP+KDgPjJBHkBvKazEYpLT22LE0KTyG7asY 07dlD3CSzg0NZVluWCX2+oYUxyg9Cip1QMq9hH0afFWCjeDu9BeCP3U1kOaXFF+o DSqV4tEqGxYn42w7Tk/sQZ1YNPiT05InMsxfottVcP7wHIMvFrbvdF9VsIU= -----END CERTIFICATE-----Generated at Sat Jun 14 07:15:54 2025 by rpki-client