$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfcfe9a0-5cb3-497e-a0bc-f735c12c78a0.roa File: bfcfe9a0-5cb3-497e-a0bc-f735c12c78a0.roa (raw, json) Hash identifier: TpJm5/zVttfY+NHC9HsTaFnPYTl9m2Crpx+k3Ew8d5k= Subject key identifier: 8A:BA:EF:3C:0F:7F:06:15:A7:6D:17:E1:7A:10:C7:13:B1:60:1D:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 063F23633D81DFC9C3840EC04810AD8EB7F780CA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfcfe9a0-5cb3-497e-a0bc-f735c12c78a0.roa Signing time: Tue 13 May 2025 00:30:27 +0000 ROA not before: Tue 13 May 2025 00:30:27 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 203.110.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3f:23:63:3d:81:df:c9:c3:84:0e:c0:48:10:ad:8e:b7:f7:80:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:30:27 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=4e5f266194489384afd7714eec1c6fd6eb77e9826fc6517cb1d1db85af6a842b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a7:df:ad:87:cc:3c:bf:d6:07:73:b4:a3:78: d9:94:9b:c2:4e:3c:76:d1:54:01:40:cd:c1:d2:2f: 79:b3:cc:ce:cc:0a:48:22:52:ed:8b:f4:08:c8:b2: 81:a4:13:c3:d5:e6:8b:df:ef:21:3a:09:67:e8:0f: 3c:34:9d:73:bf:57:19:a6:52:c7:fd:6d:09:2c:1c: 7e:be:7b:35:31:a6:d7:0c:cb:56:b4:bc:a4:7c:45: 32:73:e8:a4:f9:c9:98:78:99:b6:4f:aa:7d:5d:bc: fa:dd:18:56:15:cc:92:05:a2:fa:01:07:cc:6d:c6: 5d:fa:54:a3:f1:d8:9a:bf:31:a9:76:11:c7:ca:ea: bd:0e:2e:21:53:1f:87:a1:ab:79:06:f5:0e:f4:54: 55:19:1a:07:61:be:63:65:07:b1:0b:e6:36:df:31: ba:96:61:87:50:d4:b3:14:e6:e7:4f:48:2c:e0:b3: 68:df:ca:f8:b2:fe:51:09:1f:18:91:18:22:d9:20: 1a:9c:67:cd:f2:b2:36:13:fd:1e:3e:1e:9d:2b:6f: 8e:2c:8b:ef:a4:8d:3f:3d:4a:aa:bc:d5:e4:d4:69: b3:5d:8e:71:65:5b:72:f7:2a:3c:7d:7e:95:2e:f8: c1:e0:c2:94:98:d9:53:5f:c7:c5:a2:33:64:5f:29: 6c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BA:EF:3C:0F:7F:06:15:A7:6D:17:E1:7A:10:C7:13:B1:60:1D:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfcfe9a0-5cb3-497e-a0bc-f735c12c78a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.110.198.0/24 Signature Algorithm: sha256WithRSAEncryption 68:e7:de:bc:85:69:ba:6e:4e:7e:9b:f1:d0:23:5b:35:6b:05: 62:af:5a:83:c0:26:97:99:09:8b:c5:ad:57:69:75:7c:83:b2: 64:8b:e3:d9:71:84:d6:99:19:42:d1:fb:f5:8e:e1:4d:72:2a: 9a:fa:78:f6:2c:b5:3e:d9:c2:d0:05:12:77:97:3d:38:d7:92: 03:1a:98:8b:b3:14:dd:56:fe:12:5d:de:99:e4:88:d2:2d:4d: 7e:1b:11:7c:5b:18:8d:7b:b5:3c:ea:9a:8d:a6:f2:1a:fa:e3: 6c:2e:ca:a0:07:8c:a6:e3:6b:ad:9a:90:fb:0e:6e:ce:29:b1: d4:0f:91:d9:65:3b:91:cf:46:91:11:83:b6:4a:59:09:03:80: 7b:48:05:92:55:47:2f:bb:9a:5e:27:6e:9e:cb:c5:8c:27:78: 0b:1a:71:b2:38:76:d9:9b:6e:9b:f0:0f:1b:7f:50:b5:a2:a7: 8d:77:e3:e1:de:47:f5:d7:03:2a:61:bf:d5:da:b8:61:4a:fe: 96:78:e1:e5:f7:4b:da:e0:ca:39:0c:7d:a9:28:50:f9:ad:32: 78:09:0b:9b:52:f6:c5:5f:85:86:63:72:be:bd:11:0c:69:10: 91:22:b1:d5:d4:c5:b3:57:3c:79:66:10:5d:f4:d5:ef:e7:d8: 11:39:52:a1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBj8jYz2B38nDhA7ASBCtjrf3gMowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEzMDAzMDI3WhcNMjUwNjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTVmMjY2MTk0NDg5Mzg0YWZkNzcxNGVlYzFjNmZkNmVi NzdlOTgyNmZjNjUxN2NiMWQxZGI4NWFmNmE4NDJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDep9+th8w8v9YHc7SjeNmUm8JOPHbRVAFAzcHSL3mzzM7M CkgiUu2L9AjIsoGkE8PV5ovf7yE6CWfoDzw0nXO/VxmmUsf9bQksHH6+ezUxptcM y1a0vKR8RTJz6KT5yZh4mbZPqn1dvPrdGFYVzJIFovoBB8xtxl36VKPx2Jq/Mal2 EcfK6r0OLiFTH4ehq3kG9Q70VFUZGgdhvmNlB7EL5jbfMbqWYYdQ1LMU5udPSCzg s2jfyviy/lEJHxiRGCLZIBqcZ83ysjYT/R4+Hp0rb44si++kjT89Sqq81eTUabNd jnFlW3L3Kjx9fpUu+MHgwpSY2VNfx8WiM2RfKWw5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUirrvPA9/BhWnbRfhehDHE7FgHV4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmY2ZlOWEwLTVjYjMtNDk3ZS1hMGJjLWY3MzVjMTJjNzhhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADLbsYwDQYJKoZIhvcNAQELBQADggEBAGjn3ryFabpuTn6b8dAjWzVrBWKv WoPAJpeZCYvFrVdpdXyDsmSL49lxhNaZGULR+/WO4U1yKpr6ePYstT7ZwtAFEneX PTjXkgMamIuzFN1W/hJd3pnkiNItTX4bEXxbGI17tTzqmo2m8hr642wuyqAHjKbj a62akPsObs4psdQPkdllO5HPRpERg7ZKWQkDgHtIBZJVRy+7ml4nbp7LxYwneAsa cbI4dtmbbpvwDxt/ULWip4134+HeR/XXAyphv9XauGFK/pZ44eX3S9rgyjkMfako UPmtMngJC5tS9sVfhYZjcr69EQxpEJEisdXUxbNXPHlmEF301e/n2BE5UqE= -----END CERTIFICATE-----Generated at Sun Jun 1 04:25:56 2025 by rpki-client