$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ecbf08-dd1f-4660-af54-3c3bb1f37cb2.roa File: f9ecbf08-dd1f-4660-af54-3c3bb1f37cb2.roa (raw, json) Hash identifier: pfrpZNhQb5AkoGKB4cewJXWdOwf+W0ocpMrrzsMK1Uc= Subject key identifier: 3D:B1:1A:76:8D:4C:04:B6:94:35:14:9A:E2:B7:01:32:42:F2:8B:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D545EB8F58E95669BB8090C8512147160BB77FB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ecbf08-dd1f-4660-af54-3c3bb1f37cb2.roa Signing time: Fri 28 Mar 2025 20:51:59 +0000 ROA not before: Fri 28 Mar 2025 20:51:59 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 119.13.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:54:5e:b8:f5:8e:95:66:9b:b8:09:0c:85:12:14:71:60:bb:77:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 20:51:59 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:36:61:69:57:70:87:bb:50:b9:31:5f:e1: 8f:01:0a:42:4a:b9:3b:9e:dd:91:ee:a7:16:68:95: a8:51:14:ad:f8:32:39:34:a3:f9:e2:a3:7e:d2:da: 8d:3b:b0:67:1b:97:81:57:d1:bc:65:75:69:10:0d: 08:ec:94:16:4d:18:43:e6:6a:50:31:9d:40:59:54: 18:7c:ff:fd:d2:e0:bb:25:d8:bb:47:8b:35:56:f2: 84:b4:14:1b:0d:a8:be:a7:cf:99:b8:30:a7:dc:0e: e4:00:da:be:23:ab:81:04:ed:a4:3e:11:ec:6b:24: b6:2c:5b:55:8b:3a:b5:ba:42:6f:09:37:c5:40:56: 74:52:9c:c0:d2:4b:f5:3d:8b:e1:17:4b:96:9e:19: c9:f9:a9:5b:78:5c:06:cf:95:6d:84:4e:c7:b8:08: fb:ff:db:ad:76:63:f9:ec:6b:81:9a:a2:90:39:e7: 0d:6a:54:73:7f:1a:38:e4:f6:3d:e7:ef:04:cb:70: 83:5a:13:fb:f6:d7:2c:2d:e0:60:15:ff:f4:1b:92: b1:28:c3:b5:a2:88:f6:73:43:11:f4:fe:03:4d:44: 7e:94:98:71:8f:2c:a9:c9:ba:17:5f:3e:7b:be:95: 78:15:30:18:b7:e9:80:bf:f2:d4:df:da:4f:87:74: f0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B1:1A:76:8D:4C:04:B6:94:35:14:9A:E2:B7:01:32:42:F2:8B:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ecbf08-dd1f-4660-af54-3c3bb1f37cb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.13.16.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:2d:3d:85:57:40:7f:26:d4:3d:70:a6:70:36:0e:90:87:46: 83:88:dd:5b:50:85:1c:9b:13:df:af:d1:ec:86:6a:26:60:49: ec:3a:82:84:7e:50:17:fe:c7:f0:43:a7:46:eb:b1:f6:46:b1: a6:9d:da:fd:5d:61:ed:b4:73:cb:ae:10:59:58:94:f6:df:a3: 48:09:34:20:5d:dd:5b:e9:e1:fd:89:ec:59:59:59:e6:cf:90: c3:df:df:07:ce:d6:1f:33:48:b3:05:2c:89:3b:0c:51:1b:b6: 23:55:f0:17:75:89:16:7a:c1:a1:cd:07:8d:fe:e3:4b:0c:de: 0e:45:24:d9:f7:bd:a9:96:99:6a:38:db:8f:d9:d3:75:94:1a: ff:9f:22:05:cf:5f:47:d7:e8:2a:65:b2:ba:91:90:8e:7e:53: b7:89:15:a4:04:9b:cb:bc:6c:21:48:4e:17:be:c6:ce:db:e7: 29:d3:67:94:ae:90:f3:64:2d:1c:e9:df:80:b0:09:49:bf:1b: 6a:33:a3:e8:f3:1d:c7:d3:e3:26:df:0a:17:d6:91:85:92:a1: dc:0f:97:23:e3:eb:79:b9:a0:53:fe:cf:eb:ff:cd:4b:62:36: bd:01:e8:a7:ac:55:8c:25:d0:d0:63:1f:15:40:d5:71:94:51: df:68:b1:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPVReuPWOlWabuAkMhRIUcWC7d/swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MjA1MTU5WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDRjZDkyYWVhOWI1YjYyN2JmMmZmN2ViNGMwYmRmMWZj OWU5YmJlMGYwN2UzZWI3N2IxZTUyZDE1NDM3N2YzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2VTZhaVdwh7tQuTFf4Y8BCkJKuTue3ZHupxZolahRFK34 Mjk0o/nio37S2o07sGcbl4FX0bxldWkQDQjslBZNGEPmalAxnUBZVBh8//3S4Lsl 2LtHizVW8oS0FBsNqL6nz5m4MKfcDuQA2r4jq4EE7aQ+EexrJLYsW1WLOrW6Qm8J N8VAVnRSnMDSS/U9i+EXS5aeGcn5qVt4XAbPlW2ETse4CPv/2612Y/nsa4GaopA5 5w1qVHN/Gjjk9j3n7wTLcINaE/v21ywt4GAV//QbkrEow7WiiPZzQxH0/gNNRH6U mHGPLKnJuhdfPnu+lXgVMBi36YC/8tTf2k+HdPDNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPbEado1MBLaUNRSa4rcBMkLyi8MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y5ZWNiZjA4LWRkMWYtNDY2MC1hZjU0LTNjM2JiMWYzN2NiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN3DRAwDQYJKoZIhvcNAQELBQADggEBAG4tPYVXQH8m1D1wpnA2DpCHRoOI 3VtQhRybE9+v0eyGaiZgSew6goR+UBf+x/BDp0brsfZGsaad2v1dYe20c8uuEFlY lPbfo0gJNCBd3Vvp4f2J7FlZWebPkMPf3wfO1h8zSLMFLIk7DFEbtiNV8Bd1iRZ6 waHNB43+40sM3g5FJNn3vamWmWo424/Z03WUGv+fIgXPX0fX6CplsrqRkI5+U7eJ FaQEm8u8bCFIThe+xs7b5ynTZ5SukPNkLRzp34CwCUm/G2ozo+jzHcfT4ybfChfW kYWSodwPlyPj63m5oFP+z+v/zUtiNr0B6KesVYwl0NBjHxVA1XGUUd9osb4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:44 2025 by rpki-client