$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55bded14-b92c-456c-8b35-00e1c490d1c4.roa File: 55bded14-b92c-456c-8b35-00e1c490d1c4.roa (raw, json) Hash identifier: vCTr1LMgkJ5vVZ+tn404kCqjPsXTbcbc8pbkjsUIwPA= Subject key identifier: E8:A8:D8:3D:B4:0F:33:60:23:68:EC:19:27:AB:0D:F3:D5:AE:5F:AB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 49A3D04E60BCB6B5FB5880B16B6C6C1AAB9B6123 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55bded14-b92c-456c-8b35-00e1c490d1c4.roa Signing time: Fri 28 Mar 2025 21:06:34 +0000 ROA not before: Fri 28 Mar 2025 21:06:34 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 121.91.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a3:d0:4e:60:bc:b6:b5:fb:58:80:b1:6b:6c:6c:1a:ab:9b:61:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 21:06:34 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:eb:ab:98:0f:cc:bb:7f:bd:d2:59:bb:f4: 4f:7e:51:b5:22:70:3f:62:8f:06:eb:4f:1b:bf:a6: 76:3f:38:e8:95:94:68:c4:67:72:b2:f7:34:d8:e3: eb:60:20:bf:ef:60:bc:39:67:15:6e:d9:cc:14:36: 24:b1:cf:77:c9:48:cc:24:d7:d3:4c:92:af:e4:d6: 1f:78:a5:78:70:de:14:b7:f9:e6:03:9b:7c:2c:26: 7b:9c:4f:75:d5:7b:72:b9:e3:26:6f:67:3c:31:e6: e1:4d:7d:37:80:c7:2b:9c:fc:99:20:d9:95:4d:29: c2:6e:ef:2d:c7:f1:ca:f1:1a:15:db:1f:6a:74:aa: 43:6c:f2:3b:ce:07:96:2d:76:ae:27:c4:48:a6:d2: be:a4:7e:fb:c3:9c:5e:76:32:85:52:56:89:4e:3e: de:4d:43:af:10:8e:2c:de:f0:e2:87:43:6b:7b:b3: 61:8b:04:1e:33:ca:13:a1:7f:22:4f:71:ba:3d:35: 20:40:79:7d:eb:63:e9:e6:40:43:92:aa:d6:e4:2b: 5e:e5:bf:5c:db:18:31:69:f1:ff:c6:28:ca:52:d0: 94:b3:b6:f1:db:13:df:b2:20:64:61:1f:7f:c0:05: 3a:ed:c5:2f:0e:59:11:e8:11:c6:54:43:e1:c5:53: 71:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A8:D8:3D:B4:0F:33:60:23:68:EC:19:27:AB:0D:F3:D5:AE:5F:AB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55bded14-b92c-456c-8b35-00e1c490d1c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.91.16.0/20 Signature Algorithm: sha256WithRSAEncryption 21:2c:3d:77:7b:d3:be:9b:ae:49:12:0e:d8:dd:96:da:fe:49: 9c:af:42:7d:bb:1c:80:5c:73:b1:09:32:cb:68:2f:a4:77:0a: 92:dd:a7:55:21:fd:6f:39:06:7f:11:6e:03:2b:9d:d7:dc:31: 98:c7:c6:78:2e:29:b4:b4:9c:ee:32:4b:1e:65:57:2d:e4:23: 21:e1:22:bd:96:d6:86:a9:e7:52:7f:99:fd:b8:8a:76:35:93: b5:a7:65:90:73:23:79:46:6c:d0:cb:a7:a6:69:7c:ea:07:ec: a5:12:8b:99:a1:ff:13:e0:e8:ac:13:46:f1:1a:48:ca:41:3d: 83:a3:80:0f:60:dd:17:bf:9c:84:01:70:42:ca:01:f1:16:f9: 24:60:c9:f2:5f:dc:15:4c:e5:6a:7d:55:90:fa:71:0a:43:ea: f3:23:25:90:cb:c6:4c:4b:d1:1f:78:1a:5f:5a:50:a3:b2:1c: 05:de:d9:c8:ac:d9:46:3a:c3:5b:78:52:2a:f8:88:ad:83:89: d1:bf:68:a0:a1:10:3e:0b:90:12:1a:6b:f6:87:81:97:69:a8: 2e:13:d0:2d:dd:25:fa:74:22:52:1f:7b:a3:6a:79:f3:d7:31: f2:f8:87:9c:fe:c7:1e:42:da:d9:ed:61:2e:69:45:7e:85:b7: 69:df:4e:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSaPQTmC8trX7WICxa2xsGqubYSMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MjEwNjM0WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTUxODRhMGEyY2VjODgxMDk1ZjA0NGE4MTg0MTlkNzgw NGYxODJlNDUzZmZmNmYyNjFhMGYxMGQxYjk1MzFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChwuurmA/Mu3+90lm79E9+UbUicD9ijwbrTxu/pnY/OOiV lGjEZ3Ky9zTY4+tgIL/vYLw5ZxVu2cwUNiSxz3fJSMwk19NMkq/k1h94pXhw3hS3 +eYDm3wsJnucT3XVe3K54yZvZzwx5uFNfTeAxyuc/Jkg2ZVNKcJu7y3H8crxGhXb H2p0qkNs8jvOB5Ytdq4nxEim0r6kfvvDnF52MoVSVolOPt5NQ68Qjize8OKHQ2t7 s2GLBB4zyhOhfyJPcbo9NSBAeX3rY+nmQEOSqtbkK17lv1zbGDFp8f/GKMpS0JSz tvHbE9+yIGRhH3/ABTrtxS8OWRHoEcZUQ+HFU3EhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6KjYPbQPM2AjaOwZJ6sN89WuX6swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU1YmRlZDE0LWI5MmMtNDU2Yy04YjM1LTAwZTFjNDkwZDFjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAR5WxAwDQYJKoZIhvcNAQELBQADggEBACEsPXd7076brkkSDtjdltr+SZyv Qn27HIBcc7EJMstoL6R3CpLdp1Uh/W85Bn8RbgMrndfcMZjHxnguKbS0nO4ySx5l Vy3kIyHhIr2W1oap51J/mf24inY1k7WnZZBzI3lGbNDLp6ZpfOoH7KUSi5mh/xPg 6KwTRvEaSMpBPYOjgA9g3Re/nIQBcELKAfEW+SRgyfJf3BVM5Wp9VZD6cQpD6vMj JZDLxkxL0R94Gl9aUKOyHAXe2cis2UY6w1t4Uir4iK2DidG/aKChED4LkBIaa/aH gZdpqC4T0C3dJfp0IlIfe6NqefPXMfL4h5z+xx5C2tntYS5pRX6Ft2nfTp0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:46 2025 by rpki-client