$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25f2c0c2-b535-4699-9790-e41a1bf11d51.roa File: 25f2c0c2-b535-4699-9790-e41a1bf11d51.roa (raw, json) Hash identifier: M28vd5Alf/zmMK0oACXCGyIlcdxuvdwnehqqzBTuMXA= Subject key identifier: F3:1A:26:72:8C:63:0A:B7:7E:D0:4A:3C:D1:1F:C8:89:61:CF:B6:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3A166F68D25AEF1510EA388590F1BF7A7CC908B8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25f2c0c2-b535-4699-9790-e41a1bf11d51.roa Signing time: Wed 21 May 2025 00:01:54 +0000 ROA not before: Wed 21 May 2025 00:01:54 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 220.157.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:16:6f:68:d2:5a:ef:15:10:ea:38:85:90:f1:bf:7a:7c:c9:08:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 21 00:01:54 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=478e22afe10736aeca0ce4f32d4409d07dda4ae6fd91aaad812cc7baad941b83, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c2:e1:c5:5d:7b:79:7b:53:83:4d:31:11:80: 16:83:6c:56:1e:03:da:a5:62:e9:cc:b0:19:f1:e4: e2:5c:42:b1:6c:cb:5a:62:08:aa:cf:7f:30:29:a4: 20:54:a7:e8:e0:60:3d:c7:39:7e:bc:8d:a0:c2:2b: 89:33:90:8e:9d:e7:55:ec:b4:95:f4:21:a1:97:37: 0f:d4:19:16:39:1e:f2:db:bf:1c:af:9d:2a:dc:f3: 69:35:5d:5f:f8:6b:fb:bd:82:b1:44:90:0f:22:13: 7f:f7:0b:4f:60:35:ba:60:7f:28:7b:7f:5d:60:8b: 62:35:55:68:4c:6d:d9:28:71:2f:1e:d3:a9:45:28: 75:b9:04:f3:c7:ac:31:b6:ea:01:04:80:c5:e0:1d: 5e:18:8b:e6:89:fe:06:5b:f4:ef:b8:9c:59:cb:b7: 75:63:4d:dc:2c:a3:66:fc:d7:e2:34:0e:14:bf:a4: e2:8e:b4:bb:5b:10:01:29:c3:79:a0:10:1a:ed:92: 5d:3f:84:4f:ca:95:2c:c4:40:0a:37:5a:aa:a0:7a: 6b:d9:fa:ce:de:ca:6a:10:05:eb:50:88:79:02:74: d7:60:1f:a4:80:c9:81:42:2a:bb:1b:ec:74:82:82: b1:b6:fa:5e:67:77:29:50:32:12:7b:1c:36:f8:54: a9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1A:26:72:8C:63:0A:B7:7E:D0:4A:3C:D1:1F:C8:89:61:CF:B6:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25f2c0c2-b535-4699-9790-e41a1bf11d51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.157.66.0/23 Signature Algorithm: sha256WithRSAEncryption 97:28:43:94:a7:1d:9a:78:56:bf:6f:dc:90:5e:be:75:70:c4: d2:bc:59:fb:99:87:ec:39:ea:c3:55:3e:27:83:9f:83:e3:ff: 29:e2:86:a3:fa:3b:22:79:e1:0c:ef:79:46:1f:f1:af:93:15: 30:c7:b1:b2:c8:c0:fa:ef:c0:ae:59:31:a9:a2:b7:9a:4e:6e: ac:e9:25:61:a4:a5:e2:27:33:c7:34:d5:45:b2:8b:ae:08:75: f1:92:0f:fb:bd:c0:d0:d0:68:a5:26:3a:f9:fd:a9:4b:75:28: c0:b2:09:60:3a:d1:20:c2:35:a9:1d:55:51:b5:1f:e6:01:5c: 7f:ae:b0:52:d0:0d:53:e9:0e:99:52:fe:57:b7:d2:64:ee:04: 82:0c:8b:48:17:0a:ba:bb:e2:c9:97:2c:c7:3b:73:36:22:76: 3e:a8:5a:07:67:d8:20:56:70:ca:cb:06:5a:99:d0:27:e2:da: e7:85:02:2f:84:5d:9b:b5:9e:0c:b6:d3:b0:d4:e4:0e:c5:12: 33:72:39:54:8f:8b:bd:83:c4:d3:a2:cc:c3:3c:be:ff:55:b2: c7:25:b5:3f:5d:a5:89:32:07:2a:83:ed:85:db:8a:df:6f:32: b6:a0:57:fe:6c:d1:c6:23:b0:ae:f2:b1:4b:55:e3:64:0f:99: 63:7f:87:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOhZvaNJa7xUQ6jiFkPG/enzJCLgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIxMDAwMTU0WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzhlMjJhZmUxMDczNmFlY2EwY2U0ZjMyZDQ0MDlkMDdk ZGE0YWU2ZmQ5MWFhYWQ4MTJjYzdiYWFkOTQxYjgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRwuHFXXt5e1ODTTERgBaDbFYeA9qlYunMsBnx5OJcQrFs y1piCKrPfzAppCBUp+jgYD3HOX68jaDCK4kzkI6d51XstJX0IaGXNw/UGRY5HvLb vxyvnSrc82k1XV/4a/u9grFEkA8iE3/3C09gNbpgfyh7f11gi2I1VWhMbdkocS8e 06lFKHW5BPPHrDG26gEEgMXgHV4Yi+aJ/gZb9O+4nFnLt3VjTdwso2b81+I0DhS/ pOKOtLtbEAEpw3mgEBrtkl0/hE/KlSzEQAo3WqqgemvZ+s7eymoQBetQiHkCdNdg H6SAyYFCKrsb7HSCgrG2+l5ndylQMhJ7HDb4VKm3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8xomcoxjCrd+0Eo80R/IiWHPtt8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1ZjJjMGMyLWI1MzUtNDY5OS05NzkwLWU0MWExYmYxMWQ1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcnUIwDQYJKoZIhvcNAQELBQADggEBAJcoQ5SnHZp4Vr9v3JBevnVwxNK8 WfuZh+w56sNVPieDn4Pj/ynihqP6OyJ54QzveUYf8a+TFTDHsbLIwPrvwK5ZMami t5pObqzpJWGkpeInM8c01UWyi64IdfGSD/u9wNDQaKUmOvn9qUt1KMCyCWA60SDC NakdVVG1H+YBXH+usFLQDVPpDplS/le30mTuBIIMi0gXCrq74smXLMc7czYidj6o Wgdn2CBWcMrLBlqZ0Cfi2ueFAi+EXZu1ngy207DU5A7FEjNyOVSPi72DxNOizMM8 vv9VsscltT9dpYkyByqD7YXbit9vMragV/5s0cYjsK7ysUtV42QPmWN/h8w= -----END CERTIFICATE-----Generated at Sun Jun 1 05:19:11 2025 by rpki-client