$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebad9c7-4c28-43db-800f-ce764e3211f4.roa File: 9ebad9c7-4c28-43db-800f-ce764e3211f4.roa (raw, json) Hash identifier: Okx28mquqjuxOKLacL2V+dCNy3V2dGOQOONPIU/6siQ= Subject key identifier: F5:52:EA:23:0A:85:A3:BC:F2:5D:43:F2:5B:40:8B:2D:58:AC:B9:E7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0791175F128D97C21740EAE19B8CFBC44CE73F97 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebad9c7-4c28-43db-800f-ce764e3211f4.roa Signing time: Fri 06 Jun 2025 00:00:18 +0000 ROA not before: Fri 06 Jun 2025 00:00:18 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 114.56.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:91:17:5f:12:8d:97:c2:17:40:ea:e1:9b:8c:fb:c4:4c:e7:3f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 6 00:00:18 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=ae28738445ce849dd1a7009eaa969cf05dd54bab06437ea3301086bb1043f62e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:64:c5:83:67:69:dc:bb:80:d7:ce:1f:5a:02: aa:85:d6:c1:66:db:89:36:cf:24:ff:87:f0:7a:fa: a5:91:20:d3:9c:cb:56:4a:7b:e5:b6:ab:c1:e4:42: e4:84:63:bc:71:eb:79:6e:81:b9:c9:2a:46:71:37: e0:c1:e9:01:c7:d3:62:ac:dc:ab:28:22:25:db:f6: d9:c5:91:ab:1a:8e:c3:4c:7f:62:11:b7:92:4c:dd: 26:b1:fe:8d:06:0f:8f:97:3d:9b:a6:ff:a4:cb:91: 22:91:94:db:5d:db:5a:f2:d9:10:cf:3b:d8:b7:e7: 77:fd:72:3c:c1:13:c6:13:7c:1f:1c:d8:4b:75:bf: 6b:ba:55:2c:9f:7f:9c:eb:77:92:e3:e3:e7:ca:a4: 26:fa:b1:ae:61:8a:4b:65:03:84:d6:b3:e0:db:f8: 44:0f:16:e2:ee:6d:e0:98:1a:97:d0:01:57:21:d3: 4f:74:fc:ae:21:a5:9d:90:3c:89:89:dc:0c:95:06: 4f:9a:8d:a2:98:ec:8d:bd:3c:eb:8c:4a:67:88:13: 9d:bc:af:6e:68:bb:41:89:df:66:e5:1b:64:72:e9: 94:9c:5d:e1:aa:df:61:70:12:43:d1:85:9f:4e:ec: fd:ee:9b:10:e0:ed:e8:1a:1c:9d:29:bb:fa:80:70: 92:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:52:EA:23:0A:85:A3:BC:F2:5D:43:F2:5B:40:8B:2D:58:AC:B9:E7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebad9c7-4c28-43db-800f-ce764e3211f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.56.131.0/24 Signature Algorithm: sha256WithRSAEncryption 54:59:a8:22:4f:fa:b2:10:8f:f3:74:c2:d7:d3:f9:b5:4c:95: 3d:3e:a3:d0:4d:9b:90:4f:07:47:66:79:90:8f:5f:cb:35:50: 98:52:b0:d8:16:2e:8c:11:3b:2e:b9:55:5a:39:00:39:51:33: 08:8d:a2:17:d5:05:e7:89:3b:70:7a:41:ff:ac:89:cd:7b:3b: 7e:b8:ca:cf:4e:10:0d:a7:e4:a8:96:a4:fd:60:82:d7:3e:f1: 5e:e9:2e:39:23:6d:53:18:d3:cd:f3:f9:a9:04:1c:34:dd:99: d6:21:60:f0:13:27:65:ec:d7:24:d4:c3:b9:e3:76:e9:cf:f1: 3a:06:35:80:7a:39:1e:f3:8a:8b:46:e1:17:00:12:87:50:8e: 85:ab:fa:0d:07:27:f7:0c:ac:5c:67:98:5e:5d:7a:3c:e2:f4: 65:42:fb:12:03:7d:41:ac:81:a0:d4:f8:64:d3:63:28:d7:85: 6e:93:fe:54:89:a4:7c:18:d0:1e:75:d3:f9:2c:79:fb:b3:69: de:e5:fe:7e:28:25:ed:21:c8:3e:3e:b1:7d:9f:01:42:88:7d: a4:69:46:b1:8a:46:1e:52:48:1a:34:2a:b2:f9:58:7e:84:92: 05:06:0c:59:bd:ed:a2:e9:ca:fb:7e:49:0c:21:6c:40:dd:61: 94:9b:98:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB5EXXxKNl8IXQOrhm4z7xEznP5cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA2MDAwMDE4WhcNMjUwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTI4NzM4NDQ1Y2U4NDlkZDFhNzAwOWVhYTk2OWNmMDVk ZDU0YmFiMDY0MzdlYTMzMDEwODZiYjEwNDNmNjJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlZMWDZ2ncu4DXzh9aAqqF1sFm24k2zyT/h/B6+qWRINOc y1ZKe+W2q8HkQuSEY7xx63lugbnJKkZxN+DB6QHH02Ks3KsoIiXb9tnFkasajsNM f2IRt5JM3Sax/o0GD4+XPZum/6TLkSKRlNtd21ry2RDPO9i353f9cjzBE8YTfB8c 2Et1v2u6VSyff5zrd5Lj4+fKpCb6sa5hiktlA4TWs+Db+EQPFuLubeCYGpfQAVch 0090/K4hpZ2QPImJ3AyVBk+ajaKY7I29POuMSmeIE528r25ou0GJ32blG2Ry6ZSc XeGq32FwEkPRhZ9O7P3umxDg7egaHJ0pu/qAcJJ7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9VLqIwqFo7zyXUPyW0CLLVisuecwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzllYmFkOWM3LTRjMjgtNDNkYi04MDBmLWNlNzY0ZTMyMTFmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAByOIMwDQYJKoZIhvcNAQELBQADggEBAFRZqCJP+rIQj/N0wtfT+bVMlT0+ o9BNm5BPB0dmeZCPX8s1UJhSsNgWLowROy65VVo5ADlRMwiNohfVBeeJO3B6Qf+s ic17O364ys9OEA2n5KiWpP1ggtc+8V7pLjkjbVMY083z+akEHDTdmdYhYPATJ2Xs 1yTUw7njdunP8ToGNYB6OR7ziotG4RcAEodQjoWr+g0HJ/cMrFxnmF5dejzi9GVC +xIDfUGsgaDU+GTTYyjXhW6T/lSJpHwY0B510/ksefuzad7l/n4oJe0hyD4+sX2f AUKIfaRpRrGKRh5SSBo0KrL5WH6EkgUGDFm97aLpyvt+SQwhbEDdYZSbmGw= -----END CERTIFICATE-----Generated at Sat Jun 14 06:21:13 2025 by rpki-client