$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfc06570-1c08-42bc-91fd-3d5ee81024c4.roa File: bfc06570-1c08-42bc-91fd-3d5ee81024c4.roa (raw, json) Hash identifier: PBtHo2qE5Ulggj9PenxgOwOIgzk8vKypjUUw93upH84= Subject key identifier: CC:09:CD:B5:A0:16:12:4A:CB:93:B6:F4:D1:62:C5:1A:3E:66:A6:28 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 389C577C57D3A04BD444260F7E0EF310584B6F2C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfc06570-1c08-42bc-91fd-3d5ee81024c4.roa Signing time: Wed 11 Jun 2025 00:01:05 +0000 ROA not before: Wed 11 Jun 2025 00:01:05 +0000 ROA not after: Wed 16 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.238.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:9c:57:7c:57:d3:a0:4b:d4:44:26:0f:7e:0e:f3:10:58:4b:6f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 11 00:01:05 2025 GMT Not After : Jul 16 23:59:59 2025 GMT Subject: serialNumber=396c4d333a909d0abf2d2d23d054a84ffb4a35139bb031e5edc1ce586b9109fd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:79:82:5c:26:4e:e9:d9:f8:fa:78:54:cb: b7:ad:71:6e:2a:5c:c6:0f:c2:e0:55:53:32:be:64: 28:e0:8d:83:78:94:3f:2e:05:d4:06:21:97:fb:cb: cd:1b:a0:05:fa:12:16:c2:c9:77:58:dd:86:f6:df: cf:1c:fe:3b:65:ed:a9:98:da:a7:52:1a:67:dd:21: a5:4e:20:e0:9b:d7:b2:d8:63:89:dd:64:7e:d2:60: 2b:7b:08:6c:d2:fe:5d:02:07:ab:78:ef:fe:11:19: 14:45:0c:2c:bf:7d:66:47:1d:7f:e0:83:8b:65:7a: 67:0b:86:df:e9:30:5f:e9:2a:d0:cd:80:a9:0e:40: 14:9e:97:d1:37:c6:08:c7:f8:37:3c:b5:46:e3:05: 50:42:23:7e:9a:d6:1a:7f:66:58:24:a9:d3:06:9f: 2d:46:25:05:49:04:dd:07:3d:ea:7d:a0:c0:f4:41: 7b:db:a8:4f:0a:e8:57:d7:85:cd:54:99:c0:1e:eb: 08:d3:b6:aa:a6:3a:c9:79:a9:e5:40:a3:07:a1:2a: 94:52:a5:aa:a5:da:bf:05:67:ff:dd:2e:22:24:c4: 08:40:3b:92:a9:85:9d:bb:6f:49:70:88:dc:7a:dd: 16:5d:4f:d2:b6:17:17:fa:ca:e1:5e:14:d1:59:2a: f7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:09:CD:B5:A0:16:12:4A:CB:93:B6:F4:D1:62:C5:1A:3E:66:A6:28 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfc06570-1c08-42bc-91fd-3d5ee81024c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.238.4.0/22 Signature Algorithm: sha256WithRSAEncryption 41:9e:33:d6:06:64:93:d7:6d:9f:40:f4:f0:14:41:a4:f4:63: a0:fa:b3:0a:8d:63:a1:2b:b7:3e:12:1f:b8:a8:e3:b0:06:ae: d9:23:14:91:3c:13:bd:88:84:06:11:c1:34:05:56:66:5b:7d: 5f:33:87:21:cc:1f:fd:1e:25:86:20:d3:97:6d:72:84:db:85: 32:76:57:a2:e6:f5:21:73:84:7b:31:4f:83:22:88:50:25:3a: f8:4f:ab:1f:50:8d:30:ae:1e:cc:b2:ad:a7:44:e3:3a:a4:fb: b2:d9:4b:f9:95:fa:90:75:b2:69:62:07:a1:22:e0:a6:65:d4: 3c:47:4e:a9:33:1a:55:93:4d:50:a0:f2:3b:6d:8c:05:f0:91: 21:ca:b8:c2:05:99:97:fe:79:6e:6c:34:ce:ec:47:35:8d:29: f9:47:9a:1e:bc:81:13:59:c0:c6:1b:06:b6:d9:01:e7:5f:c7: af:c0:0b:6e:13:e5:b2:06:60:93:8f:13:c3:7d:7e:4c:a6:3a: 9c:92:ed:9a:c4:b4:45:e9:3d:ee:4b:71:04:ae:bf:74:80:fa: 3e:1d:0b:3b:ac:d0:92:59:4b:34:45:f3:ad:6e:76:4d:85:82: d3:9e:1b:85:7a:51:1d:ac:7f:7b:78:2b:45:50:f1:72:e1:59: 6c:8b:51:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOJxXfFfToEvURCYPfg7zEFhLbywwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjExMDAwMTA1WhcNMjUwNzE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTZjNGQzMzNhOTA5ZDBhYmYyZDJkMjNkMDU0YTg0ZmZi NGEzNTEzOWJiMDMxZTVlZGMxY2U1ODZiOTEwOWZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwQXmCXCZO6dn4+nhUy7etcW4qXMYPwuBVUzK+ZCjgjYN4 lD8uBdQGIZf7y80boAX6EhbCyXdY3Yb2388c/jtl7amY2qdSGmfdIaVOIOCb17LY Y4ndZH7SYCt7CGzS/l0CB6t47/4RGRRFDCy/fWZHHX/gg4tlemcLht/pMF/pKtDN gKkOQBSel9E3xgjH+Dc8tUbjBVBCI36a1hp/ZlgkqdMGny1GJQVJBN0HPep9oMD0 QXvbqE8K6FfXhc1UmcAe6wjTtqqmOsl5qeVAowehKpRSpaql2r8FZ//dLiIkxAhA O5KphZ27b0lwiNx63RZdT9K2Fxf6yuFeFNFZKvfVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzAnNtaAWEkrLk7b00WLFGj5mpigwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmYzA2NTcwLTFjMDgtNDJiYy05MWZkLTNkNWVlODEwMjRjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJu7gQwDQYJKoZIhvcNAQELBQADggEBAEGeM9YGZJPXbZ9A9PAUQaT0Y6D6 swqNY6Ertz4SH7io47AGrtkjFJE8E72IhAYRwTQFVmZbfV8zhyHMH/0eJYYg05dt coTbhTJ2V6Lm9SFzhHsxT4MiiFAlOvhPqx9QjTCuHsyyradE4zqk+7LZS/mV+pB1 smliB6Ei4KZl1DxHTqkzGlWTTVCg8jttjAXwkSHKuMIFmZf+eW5sNM7sRzWNKflH mh68gRNZwMYbBrbZAedfx6/AC24T5bIGYJOPE8N9fkymOpyS7ZrEtEXpPe5LcQSu v3SA+j4dCzus0JJZSzRF861udk2FgtOeG4V6UR2sf3t4K0VQ8XLhWWyLUao= -----END CERTIFICATE-----Generated at Sat Jun 14 06:56:14 2025 by rpki-client