$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/711afc9c-219b-409d-9c7f-0d2fb54ac829.roa File: 711afc9c-219b-409d-9c7f-0d2fb54ac829.roa (raw, json) Hash identifier: XJbyUp5OQEa1jGJ4mwBd9wsho4tNW7vaWOEQcY4sjRE= Subject key identifier: 4C:8C:34:96:64:E0:B1:5D:22:A7:58:55:50:B0:00:AA:BF:A1:E7:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45BF3E1F8F8C2F7E5AA12652AF8F5F4C04955FA3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/711afc9c-219b-409d-9c7f-0d2fb54ac829.roa Signing time: Sat 17 May 2025 00:01:01 +0000 ROA not before: Sat 17 May 2025 00:01:01 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 119.13.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:bf:3e:1f:8f:8c:2f:7e:5a:a1:26:52:af:8f:5f:4c:04:95:5f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:01:01 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=b55149906e5bf0e3df50baceaf145868f390c2221de0938d0d241c064b2d6013, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:51:8a:53:27:85:8b:15:3b:2f:1e:52:84: a2:5a:c0:fd:70:89:39:21:73:c4:1f:15:e4:a0:82: f8:83:e7:0c:a6:84:8d:63:18:5a:6b:cf:dc:bd:37: 75:2a:8e:18:68:ff:35:e5:e1:cf:97:f4:da:f9:da: 1d:bf:0e:71:cb:2c:cd:06:db:a0:63:8c:c5:2e:cf: 8a:7a:f8:7d:fe:76:aa:50:e8:21:df:c1:4f:55:b6: 2a:ca:1a:03:f1:ce:62:c7:4f:37:26:52:b5:da:92: 81:3f:7e:62:8b:74:19:62:6e:50:0f:3a:94:7e:94: 66:f1:c7:b4:9f:fe:55:61:67:51:62:3f:81:c5:a2: df:af:e6:9d:ce:57:bf:72:28:3d:1b:fd:89:69:b0: f9:69:e2:f8:c2:18:ab:f9:3f:80:5a:30:24:11:f4: 0c:df:c7:e1:0d:da:6a:65:2a:12:21:65:23:ea:32: c3:e6:80:ab:8f:3c:5b:1e:b6:b9:95:4a:99:29:21: 32:a7:b8:26:c1:92:4e:bf:88:76:14:8f:be:01:b9: d6:b7:81:89:a9:33:4a:5d:59:c6:73:39:85:ec:96: 63:ef:d5:5e:82:cf:ab:c1:c0:39:f5:b3:bb:0f:0f: 2c:85:64:51:5b:ba:5a:0f:6b:83:89:50:6f:3d:9a: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8C:34:96:64:E0:B1:5D:22:A7:58:55:50:B0:00:AA:BF:A1:E7:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/711afc9c-219b-409d-9c7f-0d2fb54ac829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.13.128.0/20 Signature Algorithm: sha256WithRSAEncryption 1a:d8:2d:fb:c9:8f:76:3b:75:67:15:31:6e:10:b5:a3:a7:0f: 2b:9e:49:88:de:ee:65:5f:17:a5:e1:a1:18:34:b3:fd:c1:da: a6:e9:17:19:c1:68:e8:60:92:14:fc:7f:b3:b5:71:72:39:89: aa:07:4e:93:3f:20:c2:93:b2:5a:2a:d4:2d:95:fa:e3:6c:2c: 4b:a3:74:cc:e3:c5:ab:72:fa:f9:e9:4e:f3:fd:cc:ed:78:57: 06:91:7f:61:4a:ab:90:13:4e:75:44:c7:7b:b9:f8:4b:53:6c: 38:aa:0c:dd:9c:d0:5b:69:85:12:b6:5a:4d:96:61:2e:e2:35: 39:db:72:9e:be:6c:87:f5:c1:cc:4d:cd:40:d6:32:45:8c:ed: 3a:d4:d1:43:ae:1b:82:3a:fe:b2:d8:05:f6:48:a6:99:df:5b: 2d:8e:24:23:25:05:eb:23:5a:e1:5f:9d:a8:b7:17:cb:7e:ff: c9:17:1f:28:94:7b:0d:32:6f:13:35:f8:b3:38:7a:f3:81:cd: b0:d3:5b:fd:78:5e:f3:08:b5:14:a0:98:63:26:c5:e2:be:25: 45:a4:05:84:a2:e3:4a:f2:48:08:dd:fc:5c:25:8c:25:6b:ee: 4b:eb:02:73:d0:af:93:79:74:df:ff:c2:17:55:5e:7d:7a:90: 8e:a8:c2:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURb8+H4+ML35aoSZSr49fTASVX6MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDAwMTAxWhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTUxNDk5MDZlNWJmMGUzZGY1MGJhY2VhZjE0NTg2OGYz OTBjMjIyMWRlMDkzOGQwZDI0MWMwNjRiMmQ2MDEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6UVGKUyeFixU7Lx5ShKJawP1wiTkhc8QfFeSggviD5wym hI1jGFprz9y9N3Uqjhho/zXl4c+X9Nr52h2/DnHLLM0G26BjjMUuz4p6+H3+dqpQ 6CHfwU9VtirKGgPxzmLHTzcmUrXakoE/fmKLdBliblAPOpR+lGbxx7Sf/lVhZ1Fi P4HFot+v5p3OV79yKD0b/YlpsPlp4vjCGKv5P4BaMCQR9Azfx+EN2mplKhIhZSPq MsPmgKuPPFsetrmVSpkpITKnuCbBkk6/iHYUj74Buda3gYmpM0pdWcZzOYXslmPv 1V6Cz6vBwDn1s7sPDyyFZFFbuloPa4OJUG89ms8jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTIw0lmTgsV0ip1hVULAAqr+h50YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxMWFmYzljLTIxOWItNDA5ZC05YzdmLTBkMmZiNTRhYzgyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAR3DYAwDQYJKoZIhvcNAQELBQADggEBABrYLfvJj3Y7dWcVMW4QtaOnDyue SYje7mVfF6XhoRg0s/3B2qbpFxnBaOhgkhT8f7O1cXI5iaoHTpM/IMKTsloq1C2V +uNsLEujdMzjxaty+vnpTvP9zO14VwaRf2FKq5ATTnVEx3u5+EtTbDiqDN2c0Ftp hRK2Wk2WYS7iNTnbcp6+bIf1wcxNzUDWMkWM7TrU0UOuG4I6/rLYBfZIppnfWy2O JCMlBesjWuFfnai3F8t+/8kXHyiUew0ybxM1+LM4evOBzbDTW/14XvMItRSgmGMm xeK+JUWkBYSi40rySAjd/FwljCVr7kvrAnPQr5N5dN//whdVXn16kI6owoQ= -----END CERTIFICATE-----Generated at Sun Jun 1 04:35:35 2025 by rpki-client