$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38ac66a3-78c0-4403-b446-119cf320b794.roa File: 38ac66a3-78c0-4403-b446-119cf320b794.roa (raw, json) Hash identifier: y8pIaiGS2Q0SU8wER2Qv6ERgCNPNimWRTV7015CuB7k= Subject key identifier: B6:BB:17:4E:35:BD:12:7A:D3:EC:28:E8:5B:0F:93:B4:E9:5C:A8:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C3612AAECA55C7016B22C690AFD677F209D683E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38ac66a3-78c0-4403-b446-119cf320b794.roa Signing time: Tue 13 May 2025 00:20:21 +0000 ROA not before: Tue 13 May 2025 00:20:21 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 124.25.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:36:12:aa:ec:a5:5c:70:16:b2:2c:69:0a:fd:67:7f:20:9d:68:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:20:21 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=a370d6fe6f058a0acd5c2750477577e0eb5a7b10dadd044e7e5b57cb29b8006b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:80:77:07:b0:69:9e:3f:3a:6a:cf:9e:c2:a4: ee:32:04:61:80:21:a5:a6:cf:bb:16:74:00:5b:bb: b8:32:fa:a8:08:00:db:07:40:39:6f:71:be:90:cc: fc:0e:eb:3f:d7:66:ee:17:e0:10:c0:00:0c:f6:ec: 9f:86:3a:03:56:8f:c2:a9:a5:14:80:50:67:1b:b5: 43:86:ff:cd:f2:c4:f4:74:47:62:ab:24:9c:59:9e: 9e:6d:7e:78:9a:78:46:88:31:f7:b6:45:83:0d:be: 06:a2:5a:9e:e1:2e:a0:cf:66:87:63:be:47:2c:78: 8a:c4:05:18:4a:f5:f5:03:98:2e:8c:b5:e5:86:45: 2e:33:9c:bd:b1:da:a8:2b:e5:17:da:03:b1:e4:c2: 10:64:91:f4:b2:d5:dd:99:7c:bc:e7:3a:cc:08:2a: 2f:3d:f4:90:f8:38:27:84:37:c2:ba:7c:3a:fb:7d: 10:2d:a7:93:60:8f:db:aa:a7:5a:a6:94:67:fc:79: 8e:12:44:77:0c:4e:51:b5:e4:0e:ba:b6:ed:3e:28: 4f:19:3f:4b:a4:2d:06:3f:10:b6:18:78:b7:ef:6f: 03:c0:e2:38:cc:d0:db:ac:60:da:c9:ba:4d:15:ad: 67:ce:f0:73:e9:b8:cc:67:a0:da:89:bc:e6:ae:fe: 1b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BB:17:4E:35:BD:12:7A:D3:EC:28:E8:5B:0F:93:B4:E9:5C:A8:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38ac66a3-78c0-4403-b446-119cf320b794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.25.128.0/17 Signature Algorithm: sha256WithRSAEncryption 01:f9:52:8b:f8:de:66:39:9a:7a:be:1d:1e:9d:4e:b6:ab:70: 22:e7:84:1d:75:cf:68:16:e6:f4:ec:0e:c5:ce:db:62:ac:d0: 32:37:6f:1c:d8:be:fc:91:ed:6c:fe:69:b9:79:ec:b7:6a:f4: c9:ed:28:ea:1f:3f:48:87:7f:cc:99:47:39:42:8c:31:7b:d2: dd:aa:ee:40:67:05:90:1c:69:19:9d:c7:13:6d:33:a2:ab:88: 47:85:9d:53:fb:10:07:38:ca:43:74:cf:c3:cd:11:3e:54:e8: 58:f6:bf:ed:6b:b9:2b:54:7a:c4:93:34:c2:29:58:58:70:cf: ba:db:c1:57:28:a9:5f:bb:81:ee:ad:05:14:81:de:bd:48:7d: 79:28:43:f6:32:18:c4:95:06:ea:03:26:93:17:1b:b6:26:6d: 4b:64:77:83:25:dd:37:9e:25:d8:a6:fa:bc:b8:3a:dc:44:07: 81:7a:b3:59:53:5f:14:71:63:c9:39:5a:a0:65:65:73:52:b9: 81:36:e9:50:b0:68:8e:66:93:95:30:cd:ec:5c:d6:4c:d8:14: e7:62:95:d1:48:ce:e8:59:5c:36:08:f4:99:84:12:c0:37:fd: 21:21:d8:6f:aa:fd:de:3b:2e:eb:0a:21:ea:6c:6d:5b:57:5b: 71:8d:bf:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPDYSquylXHAWsixpCv1nfyCdaD4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEzMDAyMDIxWhcNMjUwNjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzcwZDZmZTZmMDU4YTBhY2Q1YzI3NTA0Nzc1NzdlMGVi NWE3YjEwZGFkZDA0NGU3ZTViNTdjYjI5YjgwMDZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXgHcHsGmePzpqz57CpO4yBGGAIaWmz7sWdABbu7gy+qgI ANsHQDlvcb6QzPwO6z/XZu4X4BDAAAz27J+GOgNWj8KppRSAUGcbtUOG/83yxPR0 R2KrJJxZnp5tfniaeEaIMfe2RYMNvgaiWp7hLqDPZodjvkcseIrEBRhK9fUDmC6M teWGRS4znL2x2qgr5RfaA7HkwhBkkfSy1d2ZfLznOswIKi899JD4OCeEN8K6fDr7 fRAtp5Ngj9uqp1qmlGf8eY4SRHcMTlG15A66tu0+KE8ZP0ukLQY/ELYYeLfvbwPA 4jjM0NusYNrJuk0VrWfO8HPpuMxnoNqJvOau/htxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtrsXTjW9EnrT7CjoWw+TtOlcqNUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4YWM2NmEzLTc4YzAtNDQwMy1iNDQ2LTExOWNmMzIwYjc5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAd8GYAwDQYJKoZIhvcNAQELBQADggEBAAH5Uov43mY5mnq+HR6dTrarcCLn hB11z2gW5vTsDsXO22Ks0DI3bxzYvvyR7Wz+abl57Ldq9MntKOofP0iHf8yZRzlC jDF70t2q7kBnBZAcaRmdxxNtM6KriEeFnVP7EAc4ykN0z8PNET5U6Fj2v+1ruStU esSTNMIpWFhwz7rbwVcoqV+7ge6tBRSB3r1IfXkoQ/YyGMSVBuoDJpMXG7YmbUtk d4Ml3TeeJdim+ry4OtxEB4F6s1lTXxRxY8k5WqBlZXNSuYE26VCwaI5mk5Uwzexc 1kzYFOdildFIzuhZXDYI9JmEEsA3/SEh2G+q/d47LusKIepsbVtXW3GNvw4= -----END CERTIFICATE-----Generated at Sun Jun 1 05:22:29 2025 by rpki-client