$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7abe0cda-f189-4141-ab74-62db6d8b6839.roa File: 7abe0cda-f189-4141-ab74-62db6d8b6839.roa (raw, json) Hash identifier: TknuRI9G3/UPbRJ+Z3NqHwvT97nFYHgsbn27pNMxuG0= Subject key identifier: B6:EA:8F:BB:70:00:C2:2E:C1:ED:55:11:7E:D3:2E:DB:40:92:BB:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7B5513D7FFB3D7DC675400CC565AABB539134F98 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7abe0cda-f189-4141-ab74-62db6d8b6839.roa Signing time: Fri 25 Apr 2025 00:11:45 +0000 ROA not before: Fri 25 Apr 2025 00:11:45 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.238.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:55:13:d7:ff:b3:d7:dc:67:54:00:cc:56:5a:ab:b5:39:13:4f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:11:45 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=2df912d264ea95201b9be5f4ea9603ca630f1318df3092e3682270d066dcb88a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:38:7a:27:05:5f:fc:e7:8c:ef:3c:21:f1:b7: c3:03:e1:81:52:c9:af:ad:c9:9e:8d:d9:b2:fb:25: 83:94:8a:ca:e4:e4:24:27:73:48:76:45:04:0d:a1: e5:5a:49:12:8a:39:ee:26:44:cc:8c:42:3f:7d:d9: d0:19:97:96:b3:4a:f2:af:d8:5d:c8:4b:4e:d2:07: 45:1e:12:28:2e:ff:98:9b:58:0a:9c:32:f7:87:01: a1:39:36:ae:c4:96:ed:59:61:d5:e3:13:5c:e2:6e: 81:ce:81:45:ba:20:d7:ee:b7:3d:58:7a:da:b8:f2: 1f:42:4f:e5:18:12:c5:ff:8d:ef:f0:23:57:c4:00: 9f:8c:fd:00:05:33:ce:fb:ab:d6:27:cf:71:f5:31: 91:b5:a6:fe:5b:c3:10:f8:f6:49:c7:bc:b8:2c:92: 24:58:86:f2:e9:1c:98:7f:dc:69:d6:fd:95:59:81: e9:73:fd:70:1d:09:2a:96:3d:41:d1:be:93:84:68: c0:6b:73:6d:95:c6:c3:6d:85:4e:a2:70:eb:04:9a: c7:94:68:c2:e7:31:1d:61:09:41:3b:ad:47:3d:27: 8d:06:72:c3:ab:ea:c5:eb:43:37:7b:64:75:6d:55: 11:a2:22:b1:2d:d9:48:af:29:8e:af:6d:90:03:ef: e1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EA:8F:BB:70:00:C2:2E:C1:ED:55:11:7E:D3:2E:DB:40:92:BB:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7abe0cda-f189-4141-ab74-62db6d8b6839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.238.22.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:c8:fd:3c:93:83:c4:85:6f:f1:3c:db:98:d1:f2:ec:3b:b8: 8e:b4:7d:d8:ab:ef:59:74:6b:55:e9:74:58:a6:45:97:fe:fc: 2c:da:cb:1f:49:3d:a7:0b:c5:b7:c9:0e:32:e7:1a:33:8d:54: 63:0d:64:cb:09:b0:09:06:e3:e2:c7:ad:e5:f1:b4:1e:98:dd: f4:b3:38:60:89:5d:ff:e1:6d:0f:30:65:19:c8:23:db:19:77: 6a:77:50:9c:be:4e:fd:30:ee:3d:de:ba:78:52:21:f1:13:eb: 31:78:d9:77:f7:c4:32:c7:32:0b:25:f2:27:36:ea:d4:c0:3b: 73:ff:11:93:aa:9a:6a:f8:18:5c:96:8b:98:6e:09:6e:09:51: 8f:bf:ca:ed:81:3d:4c:c6:f1:b4:02:55:ad:4d:fa:eb:0e:d7: 02:ca:df:f0:65:66:96:ea:a8:a4:6c:33:07:51:53:dd:68:3f: 01:c3:1a:f5:69:76:7f:67:4f:7c:ac:80:82:e0:b5:7c:c4:b6: 2f:cd:ee:b8:32:ac:a3:18:d8:3e:c1:67:eb:70:da:82:27:76: d9:13:c7:47:69:b5:af:6c:a5:b7:ee:89:84:c3:9b:aa:31:fb: e2:71:9d:27:f3:1a:df:18:db:a2:60:e5:f8:4a:33:92:41:1f: 65:19:b2:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe1UT1/+z19xnVADMVlqrtTkTT5gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDAxMTQ1WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZGY5MTJkMjY0ZWE5NTIwMWI5YmU1ZjRlYTk2MDNjYTYz MGYxMzE4ZGYzMDkyZTM2ODIyNzBkMDY2ZGNiODhhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiOHonBV/854zvPCHxt8MD4YFSya+tyZ6N2bL7JYOUisrk 5CQnc0h2RQQNoeVaSRKKOe4mRMyMQj992dAZl5azSvKv2F3IS07SB0UeEigu/5ib WAqcMveHAaE5Nq7Elu1ZYdXjE1ziboHOgUW6INfutz1Yetq48h9CT+UYEsX/je/w I1fEAJ+M/QAFM877q9Ynz3H1MZG1pv5bwxD49knHvLgskiRYhvLpHJh/3GnW/ZVZ gelz/XAdCSqWPUHRvpOEaMBrc22VxsNthU6icOsEmseUaMLnMR1hCUE7rUc9J40G csOr6sXrQzd7ZHVtVRGiIrEt2UivKY6vbZAD7+FzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtuqPu3AAwi7B7VURftMu20CSuy0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhYmUwY2RhLWYxODktNDE0MS1hYjc0LTYyZGI2ZDhiNjgzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFu7hYwDQYJKoZIhvcNAQELBQADggEBAGvI/TyTg8SFb/E825jR8uw7uI60 fdir71l0a1XpdFimRZf+/Czayx9JPacLxbfJDjLnGjONVGMNZMsJsAkG4+LHreXx tB6Y3fSzOGCJXf/hbQ8wZRnII9sZd2p3UJy+Tv0w7j3eunhSIfET6zF42Xf3xDLH Mgsl8ic26tTAO3P/EZOqmmr4GFyWi5huCW4JUY+/yu2BPUzG8bQCVa1N+usO1wLK 3/BlZpbqqKRsMwdRU91oPwHDGvVpdn9nT3ysgILgtXzEti/N7rgyrKMY2D7BZ+tw 2oIndtkTx0dpta9spbfuiYTDm6ox++JxnSfzGt8Y26Jg5fhKM5JBH2UZsgc= -----END CERTIFICATE-----Generated at Wed May 14 20:59:40 2025 by rpki-client