$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62fcb166-75ce-4a8c-8b4b-dc23f2b4090a.roa File: 62fcb166-75ce-4a8c-8b4b-dc23f2b4090a.roa (raw, json) Hash identifier: NRFrkNwVfAJERtaC2CKT41KfaR0GUqsFumgb22bGBIY= Subject key identifier: 82:E9:7B:69:AE:6E:66:2E:72:1B:3A:45:46:83:E9:91:5C:F5:97:22 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B842859C732226874DA64B2F1F8F4A479C31316 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62fcb166-75ce-4a8c-8b4b-dc23f2b4090a.roa Signing time: Sat 24 May 2025 00:02:12 +0000 ROA not before: Sat 24 May 2025 00:02:12 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 203.119.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:84:28:59:c7:32:22:68:74:da:64:b2:f1:f8:f4:a4:79:c3:13:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 24 00:02:12 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=c1b0b5d876f941b5ae0b73710c68402856113f261c29619aec79a7243e9720b0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:2b:60:d5:94:d5:ad:7a:46:aa:2d:d5:15: af:6c:8e:bb:34:e4:aa:da:56:d8:d8:62:7f:8f:2b: d3:3a:39:ff:6f:b0:d3:d3:54:30:67:69:e0:a0:ae: 72:97:d1:c7:f4:c2:30:7d:be:bb:58:3a:ad:fd:8b: 27:a9:79:0e:d4:a7:fb:09:9a:e6:e7:f4:83:fb:04: 9e:34:9b:28:e3:76:c2:32:dc:a7:dd:fa:72:14:ee: d8:73:a5:44:7d:6c:7d:68:ed:bd:95:cd:8e:8d:6c: e8:64:89:d5:f2:c7:b7:6c:30:33:25:cd:9c:87:c5: 44:24:46:f9:b1:7c:e7:20:74:d6:76:18:ad:b2:5c: 77:98:35:a4:3f:ad:36:bd:95:60:c4:df:9f:7b:5c: 4b:1c:f3:58:31:5d:fe:e8:24:1c:24:87:1f:b6:c0: 13:11:b1:3d:c9:e0:15:99:25:5e:b3:12:03:cd:0f: d2:8b:0e:73:a2:a6:52:28:39:06:e1:d3:e9:86:cc: f3:d7:ac:43:ed:d6:7d:fd:c5:cb:f5:e4:74:9c:0c: 15:ef:6e:04:5e:59:8a:f0:31:3d:ae:72:7e:7c:98: 47:7b:67:c7:4e:e2:0e:47:12:34:41:da:04:03:69: cc:43:c0:93:90:ba:d6:c5:f7:61:2b:34:24:d8:04: 38:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E9:7B:69:AE:6E:66:2E:72:1B:3A:45:46:83:E9:91:5C:F5:97:22 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62fcb166-75ce-4a8c-8b4b-dc23f2b4090a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.119.84.0/24 Signature Algorithm: sha256WithRSAEncryption ce:61:18:82:04:38:8b:b7:5c:c8:f0:47:de:8a:a3:61:37:25: e0:28:02:05:c3:4d:8c:22:60:10:9e:f3:9a:da:09:bb:ae:f1: 5b:b4:da:98:18:7c:4d:ba:84:cd:3a:62:fc:0d:9b:f6:19:66: d2:6c:53:5d:7d:c7:62:24:65:18:df:c1:94:6b:02:bb:2f:e5: bc:cb:ff:46:0f:2a:a4:7e:a8:f3:81:4c:b1:1c:b0:48:0e:74: 6e:ec:4a:d7:21:6a:bb:84:01:34:63:26:1c:5b:20:33:4f:b7: c3:0e:43:5c:9b:ac:63:6d:4a:f2:06:02:85:0c:ca:80:6e:26: be:8a:64:de:f5:e0:a4:c6:4b:0d:6b:82:8e:b3:23:be:94:f3: 2f:14:d3:0a:1d:35:24:6e:2a:f1:5a:bc:cf:90:4d:f0:e9:67: 76:76:f1:98:6e:01:20:fe:63:c4:e9:17:f1:0a:31:d3:d9:4a: 48:23:2c:58:75:fd:eb:c7:7d:5f:eb:cf:7e:b6:8a:4c:07:49: ff:0b:d3:4f:a4:ee:13:a8:92:d9:76:5e:c0:2d:a5:de:55:74: 56:3f:18:11:70:93:b1:7a:7a:fb:f2:3d:bf:f6:7e:a1:c0:3e: 52:cb:b0:d1:12:d6:93:8f:c9:72:a1:44:b4:c7:73:39:43:96: c0:7a:b7:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG4QoWccyImh02mSy8fj0pHnDExYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI0MDAwMjEyWhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWIwYjVkODc2Zjk0MWI1YWUwYjczNzEwYzY4NDAyODU2 MTEzZjI2MWMyOTYxOWFlYzc5YTcyNDNlOTcyMGIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUTytg1ZTVrXpGqi3VFa9sjrs05KraVtjYYn+PK9M6Of9v sNPTVDBnaeCgrnKX0cf0wjB9vrtYOq39iyepeQ7Up/sJmubn9IP7BJ40myjjdsIy 3Kfd+nIU7thzpUR9bH1o7b2VzY6NbOhkidXyx7dsMDMlzZyHxUQkRvmxfOcgdNZ2 GK2yXHeYNaQ/rTa9lWDE3597XEsc81gxXf7oJBwkhx+2wBMRsT3J4BWZJV6zEgPN D9KLDnOiplIoOQbh0+mGzPPXrEPt1n39xcv15HScDBXvbgReWYrwMT2ucn58mEd7 Z8dO4g5HEjRB2gQDacxDwJOQutbF92ErNCTYBDhbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgul7aa5uZi5yGzpFRoPpkVz1lyIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYyZmNiMTY2LTc1Y2UtNGE4Yy04YjRiLWRjMjNmMmI0MDkwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADLd1QwDQYJKoZIhvcNAQELBQADggEBAM5hGIIEOIu3XMjwR96Ko2E3JeAo AgXDTYwiYBCe85raCbuu8Vu02pgYfE26hM06YvwNm/YZZtJsU119x2IkZRjfwZRr Arsv5bzL/0YPKqR+qPOBTLEcsEgOdG7sStcharuEATRjJhxbIDNPt8MOQ1ybrGNt SvIGAoUMyoBuJr6KZN714KTGSw1rgo6zI76U8y8U0wodNSRuKvFavM+QTfDpZ3Z2 8ZhuASD+Y8TpF/EKMdPZSkgjLFh1/evHfV/rz362ikwHSf8L00+k7hOoktl2XsAt pd5VdFY/GBFwk7F6evvyPb/2fqHAPlLLsNES1pOPyXKhRLTHczlDlsB6t3g= -----END CERTIFICATE-----Generated at Sun Jun 1 05:00:32 2025 by rpki-client