$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a04ec450-ea34-47bb-8591-c3db8cfa73f5.roa File: a04ec450-ea34-47bb-8591-c3db8cfa73f5.roa (raw, json) Hash identifier: 947C6SdQSB4A2FmthHVworK/l56DGoUKlUJFTau5nb4= Subject key identifier: 53:E9:87:0E:C6:FA:1D:F0:A3:65:4B:7D:2D:0E:D3:19:84:EB:5D:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2B5DD6012B3BBE966C9C75EE7DA59D770C09E728 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a04ec450-ea34-47bb-8591-c3db8cfa73f5.roa Signing time: Mon 31 Mar 2025 20:52:03 +0000 ROA not before: Mon 31 Mar 2025 20:52:03 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.239.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5d:d6:01:2b:3b:be:96:6c:9c:75:ee:7d:a5:9d:77:0c:09:e7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 31 20:52:03 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:14:68:f0:5e:13:97:91:de:18:34:05:da:16: ce:b0:bd:75:b4:7f:19:1b:6e:4c:05:58:68:30:2e: e0:fd:2f:b7:78:dc:40:46:34:56:65:af:6e:20:2d: 46:4a:0e:1b:b2:6f:21:42:71:d3:91:4a:35:ee:b6: 72:2f:1e:db:74:c2:3a:55:7f:20:c5:b9:f6:15:02: 6d:de:7e:d8:18:22:46:cc:76:ab:7f:37:4d:16:10: 28:ca:88:50:ae:95:df:7c:57:b7:2e:0d:b9:ca:5b: 4c:43:72:6e:2f:e6:ae:03:d0:2c:07:ad:ad:94:bd: cc:a3:d2:8f:3a:07:27:b7:b5:92:43:35:b0:43:db: 34:83:6f:88:d7:f4:f3:98:59:f5:b3:09:03:b7:fd: 4c:71:64:86:27:b0:f9:5a:ea:3d:c4:42:fc:45:f2: eb:4f:c0:56:ce:ac:d5:99:9c:4c:0f:e5:ba:50:e6: 70:d3:e9:1e:71:41:fc:bd:30:04:63:09:de:96:f1: fb:a3:e6:75:f9:b4:59:ba:86:a0:48:d2:35:dd:c3: ee:77:6b:c1:47:f1:e5:8a:ba:a2:39:72:3a:56:d9: 2b:9c:a6:56:3c:f4:86:6a:76:2d:52:3c:5f:55:3b: ae:fb:70:71:da:76:49:3c:87:64:dc:a4:69:fe:0b: e7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E9:87:0E:C6:FA:1D:F0:A3:65:4B:7D:2D:0E:D3:19:84:EB:5D:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a04ec450-ea34-47bb-8591-c3db8cfa73f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.239.14.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:35:21:56:3f:b3:67:07:ca:ae:22:f4:de:b6:56:e7:45:b9: 84:2c:fe:36:27:fe:45:b5:f5:19:30:c3:09:8b:d7:d0:20:6d: fa:2e:eb:cc:fe:b3:9f:0e:ef:7c:97:f5:c6:c9:a1:21:13:bd: f2:25:9b:98:25:56:22:69:67:4b:2f:87:69:ed:06:6b:b0:12: 95:be:68:68:3e:45:b3:c1:78:5e:98:6e:59:42:1c:57:db:43: 52:c3:40:f1:c2:95:41:08:51:96:fb:cb:11:74:0b:eb:9b:e1: c8:b0:1a:9b:b0:d4:85:9a:99:81:d3:0e:cb:7c:34:d2:cf:e4: 96:22:66:df:f8:20:d9:3b:5b:ea:f8:c5:eb:1a:7d:d6:79:5f: 5a:56:0d:1a:a3:9a:d3:df:00:88:b9:89:1e:6f:9a:a1:da:6a: a8:2e:d6:4e:22:a6:3c:1f:4c:56:e0:0a:43:10:09:0e:20:77: 60:b1:73:7b:55:de:92:c9:54:80:f0:cf:6d:69:cb:b1:e9:ff: c5:00:a3:b2:2e:45:e4:f4:f1:42:85:16:8c:a2:c8:7f:38:72: 4c:43:78:da:86:34:0e:64:16:6b:17:44:5d:ec:a4:10:0c:05: 9b:ab:5d:6d:c7:f3:2f:bb:03:81:c0:94:ce:37:96:bd:6d:bb: 90:d4:f7:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK13WASs7vpZsnHXufaWddwwJ5ygwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMjA1MjAzWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmNjMTViMDMyOGQxY2RjZTU0Y2Q3YjM5MGZmYzAwZmEw ODIxODUwODU1ZGJiYzk3NWU1NjY0ZTU4YzkzN2M2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqFGjwXhOXkd4YNAXaFs6wvXW0fxkbbkwFWGgwLuD9L7d4 3EBGNFZlr24gLUZKDhuybyFCcdORSjXutnIvHtt0wjpVfyDFufYVAm3eftgYIkbM dqt/N00WECjKiFCuld98V7cuDbnKW0xDcm4v5q4D0CwHra2Uvcyj0o86Bye3tZJD NbBD2zSDb4jX9POYWfWzCQO3/UxxZIYnsPla6j3EQvxF8utPwFbOrNWZnEwP5bpQ 5nDT6R5xQfy9MARjCd6W8fuj5nX5tFm6hqBI0jXdw+53a8FH8eWKuqI5cjpW2Suc plY89IZqdi1SPF9VO677cHHadkk8h2TcpGn+C+dNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUU+mHDsb6HfCjZUt9LQ7TGYTrXVwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwNGVjNDUwLWVhMzQtNDdiYi04NTkxLWMzZGI4Y2ZhNzNmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABu7w4wDQYJKoZIhvcNAQELBQADggEBADw1IVY/s2cHyq4i9N62VudFuYQs /jYn/kW19RkwwwmL19Agbfou68z+s58O73yX9cbJoSETvfIlm5glViJpZ0svh2nt BmuwEpW+aGg+RbPBeF6YbllCHFfbQ1LDQPHClUEIUZb7yxF0C+ub4ciwGpuw1IWa mYHTDst8NNLP5JYiZt/4INk7W+r4xesafdZ5X1pWDRqjmtPfAIi5iR5vmqHaaqgu 1k4ipjwfTFbgCkMQCQ4gd2Cxc3tV3pLJVIDwz21py7Hp/8UAo7IuReT08UKFFoyi yH84ckxDeNqGNA5kFmsXRF3spBAMBZurXW3H8y+7A4HAlM43lr1tu5DU90w= -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:53 2025 by rpki-client