$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e6fc649-df21-49e2-a93e-321e5fc8451b.roa File: 1e6fc649-df21-49e2-a93e-321e5fc8451b.roa (raw, json) Hash identifier: l+gzjBnSUYw0PznlbzMasasGHqRupRRdnKbbyNlNiK4= Subject key identifier: CE:FE:36:64:DC:A0:9C:31:AC:1A:27:A1:5D:14:FE:D4:34:E1:4F:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6953936E0A821FDE106D6A530DF728552CE12088 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e6fc649-df21-49e2-a93e-321e5fc8451b.roa Signing time: Wed 21 May 2025 00:01:56 +0000 ROA not before: Wed 21 May 2025 00:01:56 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 220.157.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:53:93:6e:0a:82:1f:de:10:6d:6a:53:0d:f7:28:55:2c:e1:20:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 21 00:01:56 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=6b718891daf36e7c1b6e55e33b4c6ca59fd50312dcc00748b13caaa4e7d9acd4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:00:6b:d6:61:4d:e2:b8:e1:63:b4:b5:39: 85:20:10:75:a3:37:af:e5:39:7f:ce:12:cd:a4:74: 17:b8:ad:7b:16:90:09:2a:b4:4b:81:f9:69:b1:42: a5:3b:e6:ae:4c:60:d5:fb:f9:6d:8e:f3:9b:75:ed: cc:31:98:52:9e:0e:ff:a5:76:ba:d1:09:41:04:76: 95:fc:02:68:a8:3e:82:f2:41:02:69:07:d5:7c:df: 59:50:f0:91:8b:7e:db:1b:60:a2:06:2b:e4:71:dd: b4:09:b1:b4:59:59:98:4d:72:6c:bc:c6:ca:06:43: 97:a4:86:66:8c:ae:1f:30:55:8a:7e:b1:6c:4a:b8: 49:7d:ff:00:05:d9:0f:8c:8e:af:ed:9c:d0:a7:2f: e0:a9:6e:88:46:44:26:79:cb:8d:45:4d:06:90:9f: 4a:6c:35:96:ca:2e:1a:e3:2d:a3:c5:62:b2:3e:b4: d0:3a:eb:92:c0:4c:d2:b8:6b:a3:af:f5:93:30:85: 71:5a:ec:ad:cd:51:01:dd:cb:5d:1a:ef:02:b2:1f: e4:4d:87:27:46:5a:e2:21:87:ca:3e:e6:35:03:13: 3a:a6:52:2b:54:01:05:aa:60:4c:3e:24:55:bc:7f: 80:2d:18:b9:5e:3b:41:20:0f:73:e2:0f:fe:06:6f: 60:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FE:36:64:DC:A0:9C:31:AC:1A:27:A1:5D:14:FE:D4:34:E1:4F:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e6fc649-df21-49e2-a93e-321e5fc8451b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.157.76.0/23 Signature Algorithm: sha256WithRSAEncryption 25:97:e6:56:5c:0e:f5:ac:6a:8c:1f:d6:c4:ad:62:a3:60:e3: 1f:a4:b5:78:fe:d7:b9:e3:9f:2c:cd:44:a3:9f:f4:f0:75:6b: ba:98:e0:e8:73:19:74:ea:36:3a:bf:31:57:3f:9e:9d:4d:8b: 33:56:4e:f8:b3:15:56:7c:0b:85:83:51:6d:9c:54:21:ed:11: a7:be:18:ba:65:7e:de:e8:4d:15:28:ae:6a:a1:96:56:aa:8a: 96:f9:d5:b0:c0:7c:5a:d2:ed:3c:20:8e:f1:2c:f0:45:24:c4: 06:18:95:81:10:78:cd:39:e3:81:46:77:de:85:35:8a:8e:3c: c6:ad:58:e1:ae:e8:e4:4b:96:d0:5f:b6:60:a0:bc:b8:72:3b: 88:c8:d9:60:1e:56:04:6a:8a:57:0a:19:d7:c4:9f:33:3c:0c: ca:3e:a0:08:98:ee:83:4b:51:c3:03:47:79:4c:99:3b:e0:4a: 03:2e:22:cc:19:f5:e1:2d:57:eb:3f:c3:38:e9:d2:fb:21:59: 51:81:1f:70:9c:53:36:fd:28:d6:13:7a:7a:2f:bc:ea:b1:b1: 19:2e:70:f3:d9:1e:0d:5d:78:8c:35:08:15:49:4d:83:9a:fa: 55:30:16:ac:93:c2:89:2f:a7:6e:91:a5:f4:67:22:76:80:be: 5c:e1:51:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaVOTbgqCH94QbWpTDfcoVSzhIIgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIxMDAwMTU2WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjcxODg5MWRhZjM2ZTdjMWI2ZTU1ZTMzYjRjNmNhNTlm ZDUwMzEyZGNjMDA3NDhiMTNjYWFhNGU3ZDlhY2Q0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaQABr1mFN4rjhY7S1OYUgEHWjN6/lOX/OEs2kdBe4rXsW kAkqtEuB+WmxQqU75q5MYNX7+W2O85t17cwxmFKeDv+ldrrRCUEEdpX8AmioPoLy QQJpB9V831lQ8JGLftsbYKIGK+Rx3bQJsbRZWZhNcmy8xsoGQ5ekhmaMrh8wVYp+ sWxKuEl9/wAF2Q+Mjq/tnNCnL+CpbohGRCZ5y41FTQaQn0psNZbKLhrjLaPFYrI+ tNA665LATNK4a6Ov9ZMwhXFa7K3NUQHdy10a7wKyH+RNhydGWuIhh8o+5jUDEzqm UitUAQWqYEw+JFW8f4AtGLleO0EgD3PiD/4Gb2DrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzv42ZNygnDGsGiehXRT+1DThT+kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFlNmZjNjQ5LWRmMjEtNDllMi1hOTNlLTMyMWU1ZmM4NDUxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcnUwwDQYJKoZIhvcNAQELBQADggEBACWX5lZcDvWsaowf1sStYqNg4x+k tXj+17njnyzNRKOf9PB1a7qY4OhzGXTqNjq/MVc/np1NizNWTvizFVZ8C4WDUW2c VCHtEae+GLplft7oTRUormqhllaqipb51bDAfFrS7TwgjvEs8EUkxAYYlYEQeM05 44FGd96FNYqOPMatWOGu6ORLltBftmCgvLhyO4jI2WAeVgRqilcKGdfEnzM8DMo+ oAiY7oNLUcMDR3lMmTvgSgMuIswZ9eEtV+s/wzjp0vshWVGBH3CcUzb9KNYTenov vOqxsRkucPPZHg1deIw1CBVJTYOa+lUwFqyTwokvp26RpfRnInaAvlzhUTs= -----END CERTIFICATE-----Generated at Sun Jun 1 04:23:20 2025 by rpki-client