$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1979bbc-89d1-4e07-aad6-85080b17a463.roa File: d1979bbc-89d1-4e07-aad6-85080b17a463.roa (raw, json) Hash identifier: HI8BXKBTwDzNsqNKOZULv1oU3uvSU1Hprtyg+ZUY30Q= Subject key identifier: 86:5D:2E:00:D4:A8:C4:98:53:EE:BA:0B:DE:18:76:95:CB:CE:CD:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 366240478D9BA34DF07C28BC6FC85B6174A203F1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1979bbc-89d1-4e07-aad6-85080b17a463.roa Signing time: Tue 13 May 2025 00:20:17 +0000 ROA not before: Tue 13 May 2025 00:20:17 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 121.93.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:62:40:47:8d:9b:a3:4d:f0:7c:28:bc:6f:c8:5b:61:74:a2:03:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:20:17 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=53ac22bd61811551c237e701abda86adc73678bcaa0da7654ab06674df58d4cd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b2:ba:6b:61:91:57:ee:2b:40:fd:ee:a1:14: bf:ec:63:3f:2e:56:0e:4d:4a:09:77:72:94:c5:8c: 32:98:a8:a9:fd:fe:90:2f:ba:8d:bf:7a:6a:71:cf: f1:6e:6c:c5:f8:7f:5c:e1:32:a2:71:c0:3a:a2:59: 4d:f6:98:d8:27:4a:57:20:9f:b4:c3:78:36:d0:ec: f8:6d:0e:3b:a9:ec:ad:10:a0:90:d9:fc:d9:af:a4: 08:d6:02:da:6d:82:58:14:72:96:98:5e:33:31:0b: 07:0b:30:03:44:ee:64:aa:c4:93:fa:42:61:ae:c0: 59:07:e7:af:65:e9:c7:70:82:c5:05:ec:39:ff:0a: 1d:62:45:ad:ac:44:8b:de:7e:30:20:c2:98:d1:48: 7e:a4:e6:cf:af:98:7d:69:56:9c:72:61:3d:87:b8: 21:15:f5:1f:1d:dc:25:d3:48:92:94:5e:fb:57:38: 48:60:bc:cf:7a:b0:f3:6a:eb:9a:da:ab:8e:f3:6c: 71:87:bd:6d:4b:dc:5f:0e:5f:ed:ce:34:49:eb:b4: 0f:0a:40:86:40:b9:d5:9a:2d:c6:ed:95:b7:47:76: a0:fb:b3:57:3f:23:d7:dd:51:3c:3a:5b:20:27:93: e1:59:a4:ab:ee:b9:fc:84:b6:31:49:78:37:1c:c3: b8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5D:2E:00:D4:A8:C4:98:53:EE:BA:0B:DE:18:76:95:CB:CE:CD:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1979bbc-89d1-4e07-aad6-85080b17a463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.93.128.0/18 Signature Algorithm: sha256WithRSAEncryption 35:33:7f:22:74:ea:32:e0:1b:15:cc:e8:bf:52:2c:7e:1f:31: 40:7f:e7:3a:d9:d0:23:94:da:c6:34:2f:c5:8b:84:94:48:11: 5c:d6:b2:29:7e:6c:b2:89:bc:57:75:86:d8:93:ae:86:ed:66: 94:78:e0:7b:15:98:b6:b6:4a:1a:1b:18:ee:cc:a8:61:0a:99: f1:23:10:1d:93:9c:92:6d:1c:68:cc:22:e8:c2:13:f4:56:1b: 9d:18:d9:07:77:0d:dd:f0:4c:6d:be:6a:40:d4:a4:e8:92:10: 79:45:89:b2:a9:02:ba:76:09:97:e5:e1:47:64:03:7e:40:8b: c8:75:5e:c8:63:55:6b:79:6d:6c:96:58:b0:11:31:b8:87:a9: d4:b0:6f:12:67:60:86:bf:2e:43:5a:0f:eb:30:73:17:41:ee: 0e:1e:81:f1:86:0b:93:df:c6:5f:69:97:1b:fc:45:62:a5:60: b5:06:94:a5:5e:44:73:39:ae:35:97:d2:2f:23:c1:0c:1b:76: 89:c8:77:c3:94:31:6a:d4:36:85:2c:c7:59:1b:d0:ac:07:fb: 2b:56:63:3a:67:cd:90:7d:f5:ab:8d:53:39:2b:06:7e:b6:23: be:29:45:2f:6e:f2:e6:e9:8b:ad:1d:8d:09:6a:6b:7f:d2:48: a6:0b:3d:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNmJAR42bo03wfCi8b8hbYXSiA/EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEzMDAyMDE3WhcNMjUwNjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1M2FjMjJiZDYxODExNTUxYzIzN2U3MDFhYmRhODZhZGM3 MzY3OGJjYWEwZGE3NjU0YWIwNjY3NGRmNThkNGNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEsrprYZFX7itA/e6hFL/sYz8uVg5NSgl3cpTFjDKYqKn9 /pAvuo2/empxz/FubMX4f1zhMqJxwDqiWU32mNgnSlcgn7TDeDbQ7PhtDjup7K0Q oJDZ/NmvpAjWAtptglgUcpaYXjMxCwcLMANE7mSqxJP6QmGuwFkH569l6cdwgsUF 7Dn/Ch1iRa2sRIvefjAgwpjRSH6k5s+vmH1pVpxyYT2HuCEV9R8d3CXTSJKUXvtX OEhgvM96sPNq65raq47zbHGHvW1L3F8OX+3ONEnrtA8KQIZAudWaLcbtlbdHdqD7 s1c/I9fdUTw6WyAnk+FZpKvuufyEtjFJeDccw7grAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhl0uANSoxJhT7roL3hh2lcvOzYIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxOTc5YmJjLTg5ZDEtNGUwNy1hYWQ2LTg1MDgwYjE3YTQ2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ5XYAwDQYJKoZIhvcNAQELBQADggEBADUzfyJ06jLgGxXM6L9SLH4fMUB/ 5zrZ0COU2sY0L8WLhJRIEVzWsil+bLKJvFd1htiTrobtZpR44HsVmLa2ShobGO7M qGEKmfEjEB2TnJJtHGjMIujCE/RWG50Y2Qd3Dd3wTG2+akDUpOiSEHlFibKpArp2 CZfl4UdkA35Ai8h1XshjVWt5bWyWWLARMbiHqdSwbxJnYIa/LkNaD+swcxdB7g4e gfGGC5Pfxl9plxv8RWKlYLUGlKVeRHM5rjWX0i8jwQwbdonId8OUMWrUNoUsx1kb 0KwH+ytWYzpnzZB99auNUzkrBn62I74pRS9u8ubpi60djQlqa3/SSKYLPew= -----END CERTIFICATE-----Generated at Sun Jun 1 04:39:22 2025 by rpki-client