$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6661985d-c51f-4c5f-8453-80d68575535b.roa File: 6661985d-c51f-4c5f-8453-80d68575535b.roa (raw, json) Hash identifier: ECPGhK312JCP2CRt2haKB9dZb5/+o1WxGSclJStnb6E= Subject key identifier: BB:1D:1B:D8:77:AA:3F:C8:1B:3B:5E:B7:34:3E:C9:10:5C:2B:08:E5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2BF5C34860B3EA06882FE014AB37E32761A9BB0E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6661985d-c51f-4c5f-8453-80d68575535b.roa Signing time: Tue 13 May 2025 00:20:24 +0000 ROA not before: Tue 13 May 2025 00:20:24 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 125.1.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f5:c3:48:60:b3:ea:06:88:2f:e0:14:ab:37:e3:27:61:a9:bb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:20:24 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=04dd50ad78d18c4bd96625ed3b8cb0be966d67bf04a61415dad9df9c410efa5a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:16:86:87:ad:14:85:4a:ed:9a:3d:f1:81:ba: b6:4d:d6:fd:e4:e3:bf:db:68:ef:71:a6:d1:3e:03: 3d:b1:31:2a:e8:53:fb:41:7d:96:0d:8b:09:46:46: 18:d1:c3:af:7c:19:f8:a8:a8:68:10:17:94:5f:e2: 56:79:81:2f:38:54:08:c9:8d:7a:d4:1d:67:a6:b5: 6b:3a:ce:12:b1:22:90:46:fd:d0:3f:90:91:db:34: 58:c9:07:2d:13:8c:58:bb:f8:6c:b1:89:f6:9b:c3: 59:7d:aa:0f:20:bb:d6:e0:03:86:95:e6:ab:a0:38: 92:bc:c2:e9:b3:b5:d8:9b:c9:7d:c9:12:cf:e5:9a: b3:6f:3e:bb:10:27:14:48:93:94:57:3d:5a:b0:9a: 2e:29:e2:f3:72:c5:dc:49:67:10:3f:b9:ef:b1:48: f8:ff:8e:0a:17:cc:a3:2d:03:83:c6:0f:d2:80:b0: 02:f0:86:89:ca:56:77:f6:2d:16:2f:e4:83:8e:6e: 12:f3:67:4f:a4:90:14:87:a0:80:c1:ba:17:08:eb: c1:df:ca:d7:ec:22:50:3c:2f:aa:25:03:94:f7:0d: 92:61:91:01:b5:03:01:04:91:d5:6f:6c:0d:4b:fe: b3:d5:04:05:86:46:0d:d4:10:cb:82:2b:b3:41:a9: 26:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1D:1B:D8:77:AA:3F:C8:1B:3B:5E:B7:34:3E:C9:10:5C:2B:08:E5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6661985d-c51f-4c5f-8453-80d68575535b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 125.1.128.0/18 Signature Algorithm: sha256WithRSAEncryption 33:30:8f:9e:82:4f:e0:86:0c:2f:10:27:c8:74:dd:18:36:38: e3:62:0a:81:00:77:5a:fd:be:a4:03:42:22:2b:9c:84:4f:5e: 8e:0a:05:be:b8:1a:73:f7:74:48:7e:62:cd:b3:5d:c8:28:ab: 4f:f5:d6:2d:37:20:43:21:0b:d0:b0:5e:6e:06:51:b6:b6:c0: 45:a7:e7:b3:34:b9:13:75:2e:62:b5:7f:92:a0:8a:63:d7:4f: 7c:88:90:51:f1:88:40:8d:c5:22:27:02:dc:52:d8:c5:af:e4: e9:de:cf:f4:bf:a9:a3:98:c6:34:6d:75:21:bb:59:35:f6:67: 65:54:96:93:72:02:0e:88:fa:8d:88:13:03:cd:f3:b9:c7:ce: 54:53:2a:90:fa:44:22:73:c5:14:cb:74:b9:05:9d:2a:1f:f8: 6f:9d:80:68:9a:da:1d:1a:25:c8:0e:5d:51:ec:3e:24:7b:95: b0:96:51:ae:0d:2b:ea:ea:e7:16:73:98:18:49:b7:e3:19:a4: e7:7f:0f:5e:1d:58:28:1a:1e:9e:58:7d:c6:da:a5:be:ab:25: cb:46:ea:ef:bd:a5:00:1f:85:68:be:31:d7:28:65:18:07:db: db:ae:eb:63:a9:2e:95:dc:71:1c:08:03:e8:b1:1c:8b:05:86: 01:a2:80:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK/XDSGCz6gaIL+AUqzfjJ2Gpuw4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEzMDAyMDI0WhcNMjUwNjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNGRkNTBhZDc4ZDE4YzRiZDk2NjI1ZWQzYjhjYjBiZTk2 NmQ2N2JmMDRhNjE0MTVkYWQ5ZGY5YzQxMGVmYTVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZFoaHrRSFSu2aPfGBurZN1v3k47/baO9xptE+Az2xMSro U/tBfZYNiwlGRhjRw698GfioqGgQF5Rf4lZ5gS84VAjJjXrUHWemtWs6zhKxIpBG /dA/kJHbNFjJBy0TjFi7+Gyxifabw1l9qg8gu9bgA4aV5qugOJK8wumztdibyX3J Es/lmrNvPrsQJxRIk5RXPVqwmi4p4vNyxdxJZxA/ue+xSPj/jgoXzKMtA4PGD9KA sALwhonKVnf2LRYv5IOObhLzZ0+kkBSHoIDBuhcI68HfytfsIlA8L6olA5T3DZJh kQG1AwEEkdVvbA1L/rPVBAWGRg3UEMuCK7NBqSbhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUux0b2HeqP8gbO163ND7JEFwrCOUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY2NjE5ODVkLWM1MWYtNGM1Zi04NDUzLTgwZDY4NTc1NTM1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ9AYAwDQYJKoZIhvcNAQELBQADggEBADMwj56CT+CGDC8QJ8h03Rg2OONi CoEAd1r9vqQDQiIrnIRPXo4KBb64GnP3dEh+Ys2zXcgoq0/11i03IEMhC9CwXm4G Uba2wEWn57M0uRN1LmK1f5KgimPXT3yIkFHxiECNxSInAtxS2MWv5Onez/S/qaOY xjRtdSG7WTX2Z2VUlpNyAg6I+o2IEwPN87nHzlRTKpD6RCJzxRTLdLkFnSof+G+d gGia2h0aJcgOXVHsPiR7lbCWUa4NK+rq5xZzmBhJt+MZpOd/D14dWCgaHp5Yfcba pb6rJctG6u+9pQAfhWi+MdcoZRgH29uu62OpLpXccRwIA+ixHIsFhgGigKI= -----END CERTIFICATE-----Generated at Sun Jun 1 05:20:54 2025 by rpki-client