$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235c0063-092b-429b-a092-b2a72e7b993f.roa File: 235c0063-092b-429b-a092-b2a72e7b993f.roa (raw, json) Hash identifier: eweygaXhcg5BMsmQpiSaJdheYIrtYgWwPjAVzqOlnSQ= Subject key identifier: EE:77:57:FC:D0:41:11:CF:67:88:3A:F5:DE:02:B0:E8:F7:C5:2A:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B52BC77AB2357A5EE96FD6687C0F7CD89D5D329 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235c0063-092b-429b-a092-b2a72e7b993f.roa Signing time: Fri 04 Apr 2025 00:52:05 +0000 ROA not before: Fri 04 Apr 2025 00:52:05 +0000 ROA not after: Fri 09 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 203.86.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:52:bc:77:ab:23:57:a5:ee:96:fd:66:87:c0:f7:cd:89:d5:d3:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 4 00:52:05 2025 GMT Not After : May 9 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:d0:1c:67:4f:7d:2f:1b:20:b6:d4:72:ba: 8b:05:ea:19:3b:d0:38:4c:1d:d9:37:fc:ab:4d:ed: 3d:1f:38:29:65:8f:8b:6e:75:08:3d:1f:c0:ab:93: fe:78:fe:b8:7c:fd:eb:55:9e:1a:f2:29:b9:da:68: d9:c4:ea:cd:2a:a1:2b:a6:1e:22:1f:87:46:cc:26: 57:ae:51:e7:18:95:38:be:3c:8c:fe:fe:a0:77:55: fd:12:77:9c:d8:0e:e4:02:43:d4:58:6d:f0:c5:df: 1b:94:f3:d4:e2:ef:c9:2b:ff:b5:7e:20:7f:08:aa: 41:05:2a:8f:0b:b8:2a:04:77:99:79:54:63:e8:3a: 2a:1d:45:c7:ec:f1:13:02:d2:e9:83:cc:0b:b2:ad: 2a:83:09:68:53:19:10:91:44:2c:77:99:80:7f:54: 8c:a4:e6:31:e3:ce:f7:56:01:a6:f3:54:44:e3:ed: 62:b9:76:0b:de:51:eb:ef:fb:f8:42:5e:58:2a:e1: 0c:60:83:ea:b2:05:be:b3:41:74:7d:4d:2d:95:79: 86:0d:e2:94:82:24:09:d8:28:8b:51:7f:78:34:47: f8:e9:40:68:98:10:e4:4a:65:48:38:73:b7:47:79: 3c:af:91:74:48:72:6e:54:32:b9:99:92:50:39:8b: 54:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:77:57:FC:D0:41:11:CF:67:88:3A:F5:DE:02:B0:E8:F7:C5:2A:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235c0063-092b-429b-a092-b2a72e7b993f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.86.216.0/23 Signature Algorithm: sha256WithRSAEncryption 14:a8:1c:03:c9:12:e2:6e:c7:46:fe:da:74:e3:fe:db:d6:45: 4e:ef:1c:66:e0:98:2e:40:ea:07:32:04:0b:1c:3e:0f:db:d6: 85:72:97:16:56:bf:73:df:75:60:00:a0:85:48:32:47:29:9e: 1b:86:ad:01:4d:5d:39:fe:d1:85:17:ed:0a:77:b8:0b:f9:f8: 10:15:f3:67:93:6d:36:31:98:4d:05:55:66:69:a9:25:0b:71: 6d:1c:3d:1e:86:68:fb:6d:60:85:98:61:69:fa:91:96:d4:68: ae:26:86:18:7b:f7:ed:36:93:4a:3d:25:45:a9:b0:cd:03:a7: 7d:a1:5b:22:94:a5:2a:3b:d3:e6:6b:1f:d3:bd:50:73:96:05: a8:c7:fc:aa:29:6b:92:90:fc:87:a1:82:23:d1:73:f6:e8:23: 90:14:8f:02:10:98:5f:97:6b:e3:43:cb:ed:4c:a7:d4:86:58: f5:30:03:e7:49:ba:e2:c9:59:40:bb:cf:3f:58:6f:a0:cd:f7: 16:44:02:1f:5d:7b:4c:31:c2:95:ea:2b:43:30:bf:da:e0:2b: eb:62:b6:16:21:d9:f5:b0:8c:c6:5d:85:36:3e:e4:81:e1:a2: 35:f2:5e:f5:a7:c2:ca:0e:39:92:dd:d1:55:73:c7:58:8c:24: 2b:5e:76:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW1K8d6sjV6Xulv1mh8D3zYnV0ykwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA0MDA1MjA1WhcNMjUwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxODdmZDg3MDIzMWU2ZjNhNWExMWUwYWNkZDIzZjM5NTM0 MmI2NGM3ZGViMDkxNmMyNjNiMzQyMTczNTNhNTkyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHStAcZ099LxsgttRyuosF6hk70DhMHdk3/KtN7T0fOCll j4tudQg9H8Crk/54/rh8/etVnhryKbnaaNnE6s0qoSumHiIfh0bMJleuUecYlTi+ PIz+/qB3Vf0Sd5zYDuQCQ9RYbfDF3xuU89Ti78kr/7V+IH8IqkEFKo8LuCoEd5l5 VGPoOiodRcfs8RMC0umDzAuyrSqDCWhTGRCRRCx3mYB/VIyk5jHjzvdWAabzVETj 7WK5dgveUevv+/hCXlgq4Qxgg+qyBb6zQXR9TS2VeYYN4pSCJAnYKItRf3g0R/jp QGiYEORKZUg4c7dHeTyvkXRIcm5UMrmZklA5i1RDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7ndX/NBBEc9niDr13gKw6PfFKvAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzNWMwMDYzLTA5MmItNDI5Yi1hMDkyLWIyYTcyZTdiOTkzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHLVtgwDQYJKoZIhvcNAQELBQADggEBABSoHAPJEuJux0b+2nTj/tvWRU7v HGbgmC5A6gcyBAscPg/b1oVylxZWv3PfdWAAoIVIMkcpnhuGrQFNXTn+0YUX7Qp3 uAv5+BAV82eTbTYxmE0FVWZpqSULcW0cPR6GaPttYIWYYWn6kZbUaK4mhhh79+02 k0o9JUWpsM0Dp32hWyKUpSo70+ZrH9O9UHOWBajH/Kopa5KQ/IehgiPRc/boI5AU jwIQmF+Xa+NDy+1Mp9SGWPUwA+dJuuLJWUC7zz9Yb6DN9xZEAh9de0wxwpXqK0Mw v9rgK+tithYh2fWwjMZdhTY+5IHhojXyXvWnwsoOOZLd0VVzx1iMJCtedkE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:37 2025 by rpki-client