$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfc06570-1c08-42bc-91fd-3d5ee81024c4.roa File: bfc06570-1c08-42bc-91fd-3d5ee81024c4.roa (raw, json) Hash identifier: GA8EvjSnsQBmCEvU+Jontz//dK6ffNpSJZ3DDOMCb0Q= Subject key identifier: 5F:0E:1C:D9:A8:CE:3A:A7:7B:06:C5:CC:29:A5:3C:94:9F:94:8B:6C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 23254B25AF5576C54EFF1C25E945FA7D537B726A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfc06570-1c08-42bc-91fd-3d5ee81024c4.roa Signing time: Tue 22 Apr 2025 00:01:37 +0000 ROA not before: Tue 22 Apr 2025 00:01:37 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.238.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:25:4b:25:af:55:76:c5:4e:ff:1c:25:e9:45:fa:7d:53:7b:72:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:01:37 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=aed91b5a40009c717ee93bed238e8d68766dbb4a91ee365fd3b114fe17a014d3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3e:11:f6:b3:4c:99:6b:f5:69:d6:28:99:47: 83:9b:a6:21:87:09:bc:c4:ef:80:d5:67:19:23:1e: dc:ca:a2:91:bf:61:a2:9d:fc:eb:80:35:41:cf:8d: b5:6b:3f:8c:fd:b1:5f:7e:4e:4c:a4:8a:82:ac:df: 96:d5:26:05:ca:00:34:e8:da:4b:fc:a1:9c:6c:23: 6e:dc:e1:78:61:1c:84:bc:62:d7:e0:93:f9:25:a5: 8d:cb:55:fe:ab:2f:48:71:c5:29:32:cc:87:1d:56: ae:9e:a2:22:b0:74:4b:7d:65:9f:e8:ed:05:4c:f8: a3:7d:36:10:b1:a8:09:5f:09:10:33:ba:61:6d:f6: 9b:94:a4:e2:d0:04:65:44:c4:63:ac:0c:85:21:54: 0c:dd:69:f9:03:5d:9a:95:7c:93:46:29:85:f7:c0: 00:cd:8d:16:20:95:ad:e0:a1:82:d7:93:75:53:78: e9:4f:a7:c1:9d:de:57:dd:54:a8:02:61:8e:77:7d: 46:ed:e9:35:8a:22:cd:ab:a6:35:e1:85:29:55:28: 67:2b:91:07:2c:cb:8c:49:44:43:f6:7a:34:b5:5a: 14:39:d0:79:03:7d:cc:30:f1:4a:30:a5:f4:c9:57: 09:28:62:c0:48:c2:5f:a2:3f:ac:90:7c:6f:5d:29: 62:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0E:1C:D9:A8:CE:3A:A7:7B:06:C5:CC:29:A5:3C:94:9F:94:8B:6C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfc06570-1c08-42bc-91fd-3d5ee81024c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.238.4.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:1c:c7:aa:a4:d3:89:3c:f3:b5:e2:af:47:77:12:05:53:43: da:66:e4:cb:40:42:ac:7e:57:65:13:1f:5a:59:47:50:34:6b: 37:44:ce:2e:5a:03:a0:1b:be:05:e2:16:55:e0:e6:c3:7c:de: bc:01:6a:c2:b0:cf:18:30:e5:30:99:88:23:69:89:42:74:f7: 2f:27:ac:d7:69:e6:1d:b2:07:ca:c4:32:f3:83:54:fa:5e:0c: f5:93:c7:b9:9d:68:dc:d2:d8:0b:4a:2c:43:1a:10:4a:de:a5: 39:2f:ce:26:b9:91:8b:80:d8:db:8c:45:1c:54:26:3c:58:62: 05:db:2f:7f:92:48:e8:26:06:86:68:4f:b2:f2:69:5e:79:cf: 9d:50:22:a5:8f:a6:b5:8b:38:12:c3:7a:a1:11:60:93:e0:b0: d9:de:47:54:a8:dc:89:0a:ff:f9:24:77:e0:da:07:69:a2:61: b8:03:97:f8:a8:1d:d7:50:c6:9d:c5:bd:95:99:ec:d5:9d:c8: da:1e:27:0c:57:c5:8a:30:ec:5c:87:7c:e0:b7:70:4d:76:b9: 06:d3:c0:f8:3e:18:49:be:f8:23:3c:8e:0b:d8:1d:d6:b1:51: 7a:00:73:89:42:12:f9:1c:5d:6c:5f:79:88:e1:59:27:e6:d8: 16:fd:77:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIyVLJa9VdsVO/xwl6UX6fVN7cmowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAwMTM3WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZWQ5MWI1YTQwMDA5YzcxN2VlOTNiZWQyMzhlOGQ2ODc2 NmRiYjRhOTFlZTM2NWZkM2IxMTRmZTE3YTAxNGQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfPhH2s0yZa/Vp1iiZR4ObpiGHCbzE74DVZxkjHtzKopG/ YaKd/OuANUHPjbVrP4z9sV9+TkykioKs35bVJgXKADTo2kv8oZxsI27c4XhhHIS8 Ytfgk/klpY3LVf6rL0hxxSkyzIcdVq6eoiKwdEt9ZZ/o7QVM+KN9NhCxqAlfCRAz umFt9puUpOLQBGVExGOsDIUhVAzdafkDXZqVfJNGKYX3wADNjRYgla3goYLXk3VT eOlPp8Gd3lfdVKgCYY53fUbt6TWKIs2rpjXhhSlVKGcrkQcsy4xJREP2ejS1WhQ5 0HkDfcww8UowpfTJVwkoYsBIwl+iP6yQfG9dKWLJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXw4c2ajOOqd7BsXMKaU8lJ+Ui2wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmYzA2NTcwLTFjMDgtNDJiYy05MWZkLTNkNWVlODEwMjRjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJu7gQwDQYJKoZIhvcNAQELBQADggEBAG4cx6qk04k887Xir0d3EgVTQ9pm 5MtAQqx+V2UTH1pZR1A0azdEzi5aA6AbvgXiFlXg5sN83rwBasKwzxgw5TCZiCNp iUJ09y8nrNdp5h2yB8rEMvODVPpeDPWTx7mdaNzS2AtKLEMaEErepTkvzia5kYuA 2NuMRRxUJjxYYgXbL3+SSOgmBoZoT7LyaV55z51QIqWPprWLOBLDeqERYJPgsNne R1So3IkK//kkd+DaB2miYbgDl/ioHddQxp3FvZWZ7NWdyNoeJwxXxYow7FyHfOC3 cE12uQbTwPg+GEm++CM8jgvYHdaxUXoAc4lCEvkcXWxfeYjhWSfm2Bb9d+I= -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:12 2025 by rpki-client