$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdb13ad1-7a36-42c3-8b21-306fc8f914b1.roa File: bdb13ad1-7a36-42c3-8b21-306fc8f914b1.roa (raw, json) Hash identifier: wDGTDG8LrXKMIuMRoBdo6CPdPyca1Hlvpgofryka2t0= Subject key identifier: 4B:6A:53:43:AE:51:8E:6E:0D:99:66:16:98:85:E5:17:53:99:1F:3C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D31021F5110AF5E4C8F9247B802258EEE395268 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdb13ad1-7a36-42c3-8b21-306fc8f914b1.roa Signing time: Tue 22 Apr 2025 16:12:05 +0000 ROA not before: Tue 22 Apr 2025 16:12:05 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 210.56.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:31:02:1f:51:10:af:5e:4c:8f:92:47:b8:02:25:8e:ee:39:52:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:12:05 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=417a3696b1b7f5a45efd09b27149ec4d8058ba6a8ee047521e5e08731f29661d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c5:28:6e:6f:a4:09:0c:16:32:97:c0:d0:37: b5:73:2a:fb:e6:7e:da:62:67:0a:cc:df:ee:88:83: 91:1f:92:70:8d:94:ea:c0:32:a5:81:2d:a9:29:54: 72:d7:16:30:a0:88:d6:48:d3:f6:2c:f7:fe:10:8a: df:32:be:dc:c7:17:49:29:17:40:ac:ad:4a:61:78: e8:ca:96:86:9b:a0:be:65:da:6e:3a:42:a2:c1:cb: 4f:15:d0:65:2f:76:fc:bf:e8:d0:14:07:91:9d:18: 4c:65:e3:e8:c0:6c:85:1f:1f:be:75:25:0c:90:96: a2:9c:45:f3:15:26:10:98:90:b7:91:2b:97:66:86: c8:c4:8f:3d:ac:f0:be:ab:e3:dd:e0:a6:f4:0b:b6: 4e:e7:53:ec:69:56:74:9c:03:7e:d2:fb:4e:53:f3: 6e:3e:cb:7d:6c:fd:58:51:31:9a:31:68:f7:40:7f: ba:e7:36:de:a9:f4:4e:ec:43:90:f7:93:f0:e2:d0: 38:2e:88:25:63:92:27:87:93:61:3c:a3:ef:df:1f: f3:ca:e0:d4:0d:9f:e1:47:cf:6c:3c:fb:7a:e9:da: 46:77:be:2f:e3:2c:af:1b:a2:26:c6:1f:4f:3a:7f: 37:5d:02:98:f4:84:a7:8e:0b:7d:9e:e5:1d:8a:f8: 10:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6A:53:43:AE:51:8E:6E:0D:99:66:16:98:85:E5:17:53:99:1F:3C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdb13ad1-7a36-42c3-8b21-306fc8f914b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.56.72.0/21 Signature Algorithm: sha256WithRSAEncryption 42:ef:d8:d5:2f:7b:02:96:b1:4a:40:9a:1e:df:f6:2d:34:e4: 1b:6b:30:41:e3:08:57:a5:e1:57:81:5a:0a:f2:fe:a6:11:37: 22:7d:a7:4c:0e:c9:38:85:28:c8:c2:88:ba:a8:e2:9d:63:3d: 64:6c:1b:fa:3a:8c:d1:a6:23:17:61:c8:a7:2f:bb:12:5e:69: ae:e3:31:21:ca:c1:5b:7b:95:18:49:2b:ea:9a:96:7e:28:c1: 8a:7e:fc:67:04:82:d8:bc:8a:9c:a5:af:f1:97:b2:d7:d2:57: 41:e8:0e:f2:10:77:38:05:94:c2:27:51:1b:67:36:b5:27:a4: 62:5a:f9:ec:8e:48:12:68:32:7b:f1:8f:e6:5f:4f:22:3f:44: 13:d0:ce:bb:18:34:65:81:13:1e:76:45:76:8d:d3:06:e5:fd: 07:6a:ce:1e:41:cf:7f:14:34:51:43:df:91:ff:da:7c:68:89: cb:12:da:69:85:b0:a9:60:0a:22:34:f8:82:75:e7:5c:a9:3d: 66:14:58:84:31:47:fd:88:f9:36:8c:4c:20:bd:eb:30:97:bb: 45:42:31:36:52:da:c2:99:a6:bc:32:b1:9e:36:86:9b:1f:7b: e6:97:1e:0e:67:bc:63:5c:1f:dc:8e:da:fd:85:50:4a:ac:f4: fa:d0:28:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbTECH1EQr15Mj5JHuAIlju45UmgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYxMjA1WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTdhMzY5NmIxYjdmNWE0NWVmZDA5YjI3MTQ5ZWM0ZDgw NThiYTZhOGVlMDQ3NTIxZTVlMDg3MzFmMjk2NjFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOxShub6QJDBYyl8DQN7VzKvvmftpiZwrM3+6Ig5EfknCN lOrAMqWBLakpVHLXFjCgiNZI0/Ys9/4Qit8yvtzHF0kpF0CsrUpheOjKloaboL5l 2m46QqLBy08V0GUvdvy/6NAUB5GdGExl4+jAbIUfH751JQyQlqKcRfMVJhCYkLeR K5dmhsjEjz2s8L6r493gpvQLtk7nU+xpVnScA37S+05T824+y31s/VhRMZoxaPdA f7rnNt6p9E7sQ5D3k/Di0DguiCVjkieHk2E8o+/fH/PK4NQNn+FHz2w8+3rp2kZ3 vi/jLK8boibGH086fzddApj0hKeOC32e5R2K+BBPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS2pTQ65Rjm4NmWYWmIXlF1OZHzwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkYjEzYWQxLTdhMzYtNDJjMy04YjIxLTMwNmZjOGY5MTRiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPSOEgwDQYJKoZIhvcNAQELBQADggEBAELv2NUvewKWsUpAmh7f9i005Btr MEHjCFel4VeBWgry/qYRNyJ9p0wOyTiFKMjCiLqo4p1jPWRsG/o6jNGmIxdhyKcv uxJeaa7jMSHKwVt7lRhJK+qaln4owYp+/GcEgti8ipylr/GXstfSV0HoDvIQdzgF lMInURtnNrUnpGJa+eyOSBJoMnvxj+ZfTyI/RBPQzrsYNGWBEx52RXaN0wbl/Qdq zh5Bz38UNFFD35H/2nxoicsS2mmFsKlgCiI0+IJ151ypPWYUWIQxR/2I+TaMTCC9 6zCXu0VCMTZS2sKZprwysZ42hpsfe+aXHg5nvGNcH9yO2v2FUEqs9PrQKGY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:53 2025 by rpki-client