$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/268e47e6-0e83-4333-8c14-c7c8d95614d8.roa File: 268e47e6-0e83-4333-8c14-c7c8d95614d8.roa (raw, json) Hash identifier: 6vj9dBsZY/yzuWhVoFZP8kf9Dbxe/BrrSa97ERC0Skc= Subject key identifier: 82:42:E2:A9:DE:62:F6:CC:D9:D6:23:30:AD:A7:75:D6:C8:63:27:57 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54CF64EC9396393DC01A6B0040ED0EE617AE669F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/268e47e6-0e83-4333-8c14-c7c8d95614d8.roa Signing time: Sat 17 May 2025 00:00:59 +0000 ROA not before: Sat 17 May 2025 00:00:59 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 114.56.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:cf:64:ec:93:96:39:3d:c0:1a:6b:00:40:ed:0e:e6:17:ae:66:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:00:59 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=6884e050b6506844f1f38c2049e898a1f18b0e5bbbc6ddc2db966d2db1190746, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0a:e1:35:25:df:e3:30:04:4d:8a:46:73:7e: 27:14:2f:02:16:dd:3a:73:6d:5e:92:47:ea:68:83: 9d:bd:07:1a:8b:11:d9:a9:e9:d2:3b:b9:6f:c3:d7: 76:e2:91:0e:5b:36:29:36:cf:4d:07:17:b1:60:4d: 03:89:f3:e0:d8:7e:f1:32:e8:19:f2:ae:d2:a2:64: 23:f3:1b:54:03:b1:e6:7d:d2:85:c9:24:1c:91:22: d2:d0:39:99:55:fc:5d:f3:96:59:66:07:12:c4:fd: b2:89:00:f1:61:f4:8b:55:16:dd:b4:f0:b0:b6:42: d7:1a:05:23:de:e6:13:1a:54:39:5c:48:9a:c5:ee: 5f:29:9f:04:65:10:96:e7:a0:7b:fd:bc:08:26:0c: 7c:5a:29:12:ed:39:3a:24:c7:8e:f3:bf:ed:2a:8e: 87:af:30:31:50:76:e6:04:e8:eb:68:d1:f1:ac:87: 17:48:ed:d1:c6:d7:78:3e:76:44:4d:6e:8d:6b:15: 6d:c7:43:ec:8a:cf:15:22:db:87:a3:40:6c:4c:1d: 3d:03:ae:41:ff:6c:c1:a1:20:03:d5:68:c8:26:ab: d4:1b:72:97:f6:e6:1b:9a:cc:62:bf:8a:d9:83:57: 70:f3:65:73:be:d8:4a:99:4b:d5:1a:2a:18:e3:98: 88:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:42:E2:A9:DE:62:F6:CC:D9:D6:23:30:AD:A7:75:D6:C8:63:27:57 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/268e47e6-0e83-4333-8c14-c7c8d95614d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.56.189.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:e9:6c:ab:95:1e:7f:f3:16:25:b4:3b:62:f9:54:fe:ba:0d: 68:0f:a4:bf:9e:6f:f2:7b:a0:2d:53:cb:1d:19:87:55:8b:c6: 22:b2:fa:dc:62:65:4b:78:eb:ea:64:ba:b7:63:99:bd:81:95: a9:db:4f:eb:7a:4c:c4:54:aa:03:21:bf:00:b9:8b:b3:92:12: 86:50:f9:77:a6:0a:b2:88:3b:8e:09:70:a4:c6:76:f3:20:35: 37:c3:de:9d:b0:fb:11:88:50:82:9d:59:2f:b7:22:3b:33:a3: 1b:ae:5f:33:56:f5:6c:c1:fc:0c:0d:dd:75:67:c3:c7:de:d2: ed:71:d1:4a:21:fb:e2:f5:a5:96:87:8a:66:e6:23:ab:da:86: 3f:ba:c6:32:2f:5f:8b:da:7c:e0:82:66:50:ac:45:38:55:2a: 94:8a:95:3d:f3:bf:cc:2d:1c:0a:83:fa:b4:7b:44:2a:29:4b: 92:88:41:90:7b:fb:8c:7d:71:3b:02:78:91:6c:12:24:b2:ba: 8f:38:c1:28:73:e3:fa:a2:7a:9d:a6:df:0f:25:1f:93:4d:80: eb:3a:b8:a1:ad:dc:68:9f:62:1b:d0:0d:23:e3:53:f6:e1:3d: fb:38:4b:23:4c:c8:9c:38:5e:55:66:d3:a3:d1:01:a8:9c:ce: 20:47:48:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVM9k7JOWOT3AGmsAQO0O5heuZp8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDAwMDU5WhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODg0ZTA1MGI2NTA2ODQ0ZjFmMzhjMjA0OWU4OThhMWYx OGIwZTViYmJjNmRkYzJkYjk2NmQyZGIxMTkwNzQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8CuE1Jd/jMARNikZzficULwIW3TpzbV6SR+pog529BxqL Edmp6dI7uW/D13bikQ5bNik2z00HF7FgTQOJ8+DYfvEy6BnyrtKiZCPzG1QDseZ9 0oXJJByRItLQOZlV/F3zlllmBxLE/bKJAPFh9ItVFt208LC2QtcaBSPe5hMaVDlc SJrF7l8pnwRlEJbnoHv9vAgmDHxaKRLtOTokx47zv+0qjoevMDFQduYE6Oto0fGs hxdI7dHG13g+dkRNbo1rFW3HQ+yKzxUi24ejQGxMHT0DrkH/bMGhIAPVaMgmq9Qb cpf25huazGK/itmDV3DzZXO+2EqZS9UaKhjjmIhlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgkLiqd5i9szZ1iMwrad11shjJ1cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI2OGU0N2U2LTBlODMtNDMzMy04YzE0LWM3YzhkOTU2MTRkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAByOL0wDQYJKoZIhvcNAQELBQADggEBABvpbKuVHn/zFiW0O2L5VP66DWgP pL+eb/J7oC1Tyx0Zh1WLxiKy+txiZUt46+pkurdjmb2BlanbT+t6TMRUqgMhvwC5 i7OSEoZQ+XemCrKIO44JcKTGdvMgNTfD3p2w+xGIUIKdWS+3IjszoxuuXzNW9WzB /AwN3XVnw8fe0u1x0Uoh++L1pZaHimbmI6vahj+6xjIvX4vafOCCZlCsRThVKpSK lT3zv8wtHAqD+rR7RCopS5KIQZB7+4x9cTsCeJFsEiSyuo84wShz4/qiep2m3w8l H5NNgOs6uKGt3GifYhvQDSPjU/bhPfs4SyNMyJw4XlVm06PRAaicziBHSMk= -----END CERTIFICATE-----Generated at Sun Jun 1 04:39:25 2025 by rpki-client