$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ec798da-a6c2-44be-afd4-f4a224668ad8.roa File: 7ec798da-a6c2-44be-afd4-f4a224668ad8.roa (raw, json) Hash identifier: 2HjA42kjDHIvJIV+2Nim+jSnfGabFx04sBKB2im4Y1s= Subject key identifier: 1F:BF:52:B4:2F:7D:71:6B:8B:21:49:05:4F:CF:77:4B:12:26:07:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 28475043A0AB59D36A26A90A122D70B013566656 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ec798da-a6c2-44be-afd4-f4a224668ad8.roa Signing time: Fri 25 Apr 2025 00:11:01 +0000 ROA not before: Fri 25 Apr 2025 00:11:01 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 119.13.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:47:50:43:a0:ab:59:d3:6a:26:a9:0a:12:2d:70:b0:13:56:66:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:11:01 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=2e9a0dee92899309f176234d18354c94315671804a8784e1f617f7e004cb3621, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:1c:ce:da:bb:7b:ff:fa:67:c5:c4:38:e9: 5a:42:dd:ba:9d:32:e3:95:21:c6:11:d7:ab:ba:88: 7b:9e:7e:24:12:47:2e:ff:f7:64:af:da:f3:66:a3: 8a:97:d4:5f:ba:ca:31:de:a7:05:e6:28:d8:d6:2a: 2c:51:f3:92:82:46:8b:de:69:e7:0c:2f:2d:ba:3c: 80:69:97:35:cf:be:3a:9b:47:c5:62:a3:6f:d5:dc: fa:81:01:04:a5:23:a9:dc:8e:f8:84:52:ed:66:63: a4:e4:18:65:81:2d:23:6a:81:93:d1:8e:35:12:f6: 00:91:8b:36:e5:85:8f:9a:5c:55:17:ff:ea:8a:dc: fb:a2:c7:47:4b:40:03:f8:ed:1f:ff:c1:fb:76:9e: 33:46:7c:19:33:17:dc:60:f0:34:32:37:ea:df:5a: 33:ba:25:99:32:cf:6c:54:2f:3a:6f:a5:41:58:93: 1b:36:4e:b7:a7:19:b2:64:8f:f3:51:c0:60:83:c6: e2:7d:34:da:15:e0:18:23:79:ee:a3:db:f9:4c:98: 2d:69:82:6b:2e:10:c0:c4:d0:e1:bc:01:4c:0f:6e: bd:02:68:17:cc:4e:07:e6:4a:37:fa:ed:7a:41:65: 8d:82:c7:4f:b9:10:a0:64:d3:8e:07:11:74:e4:89: f4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BF:52:B4:2F:7D:71:6B:8B:21:49:05:4F:CF:77:4B:12:26:07:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ec798da-a6c2-44be-afd4-f4a224668ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.13.52.0/22 Signature Algorithm: sha256WithRSAEncryption 79:58:de:8c:d0:5a:e9:9e:fa:28:9e:75:62:65:80:07:3a:35: cf:03:4a:8c:ab:7d:78:1c:e3:9f:71:0c:94:2f:7f:c1:05:d6: 10:5f:f2:87:12:c7:7a:44:d1:c1:22:1e:6f:0f:1d:96:26:35: 99:70:4e:af:84:fd:3b:14:a0:69:e8:dc:65:59:93:e4:97:7d: 03:54:34:38:93:f5:b6:e9:54:9e:df:26:d3:db:3f:af:4c:ba: 18:82:71:25:0e:90:cd:84:3a:74:95:0c:1c:42:de:12:0a:56: 9b:da:0a:e7:2b:d6:12:76:de:4f:8f:ce:24:0c:56:78:87:7f: d6:86:a0:2f:4b:7b:65:90:c1:85:11:33:60:a3:40:75:dc:a3: 95:eb:93:ae:be:14:71:43:d1:11:4b:f8:45:67:d4:cd:dd:7d: ef:6c:4d:6a:84:81:27:a7:04:95:90:73:0f:9e:bc:a1:d0:d3: 9d:7b:43:d1:39:8e:4d:be:a1:6e:87:a2:b1:e4:8f:ec:16:ca: cd:b0:26:f8:09:ae:78:1c:fe:7d:8e:ca:6f:ad:2a:47:7c:39: 54:9b:53:d7:97:4c:9b:8d:b2:78:41:e7:76:7b:6e:31:71:da: df:87:33:95:8b:83:24:86:5e:45:66:78:bb:ba:e9:77:b7:ed: b4:92:31:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKEdQQ6CrWdNqJqkKEi1wsBNWZlYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDAxMTAxWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTlhMGRlZTkyODk5MzA5ZjE3NjIzNGQxODM1NGM5NDMx NTY3MTgwNGE4Nzg0ZTFmNjE3ZjdlMDA0Y2IzNjIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2lBzO2rt7//pnxcQ46VpC3bqdMuOVIcYR16u6iHuefiQS Ry7/92Sv2vNmo4qX1F+6yjHepwXmKNjWKixR85KCRoveaecMLy26PIBplzXPvjqb R8Vio2/V3PqBAQSlI6ncjviEUu1mY6TkGGWBLSNqgZPRjjUS9gCRizblhY+aXFUX /+qK3Puix0dLQAP47R//wft2njNGfBkzF9xg8DQyN+rfWjO6JZkyz2xULzpvpUFY kxs2TrenGbJkj/NRwGCDxuJ9NNoV4Bgjee6j2/lMmC1pgmsuEMDE0OG8AUwPbr0C aBfMTgfmSjf67XpBZY2Cx0+5EKBk044HEXTkifR7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH79StC99cWuLIUkFT893SxImB/owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdlYzc5OGRhLWE2YzItNDRiZS1hZmQ0LWY0YTIyNDY2OGFkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJ3DTQwDQYJKoZIhvcNAQELBQADggEBAHlY3ozQWume+iiedWJlgAc6Nc8D SoyrfXgc459xDJQvf8EF1hBf8ocSx3pE0cEiHm8PHZYmNZlwTq+E/TsUoGno3GVZ k+SXfQNUNDiT9bbpVJ7fJtPbP69MuhiCcSUOkM2EOnSVDBxC3hIKVpvaCucr1hJ2 3k+PziQMVniHf9aGoC9Le2WQwYURM2CjQHXco5Xrk66+FHFD0RFL+EVn1M3dfe9s TWqEgSenBJWQcw+evKHQ0517Q9E5jk2+oW6HorHkj+wWys2wJvgJrngc/n2Oym+t Kkd8OVSbU9eXTJuNsnhB53Z7bjFx2t+HM5WLgySGXkVmeLu66Xe37bSSMbs= -----END CERTIFICATE-----Generated at Sat Apr 26 16:43:38 2025 by rpki-client