$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ea4f0ec-c158-4950-9858-041d23e677f2.roa File: 9ea4f0ec-c158-4950-9858-041d23e677f2.roa (raw, json) Hash identifier: hWq4yEwV55Z/rcL/N/Yw/6C02nycZ+WDhsXJN8mXrtY= Subject key identifier: 31:E7:7D:54:13:A7:1E:55:8E:88:46:92:D5:6C:08:30:EB:E6:57:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6171328454B722DD9B75339080FFBC0CDD1489A7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ea4f0ec-c158-4950-9858-041d23e677f2.roa Signing time: Tue 29 Apr 2025 00:01:52 +0000 ROA not before: Tue 29 Apr 2025 00:01:52 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 203.88.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:71:32:84:54:b7:22:dd:9b:75:33:90:80:ff:bc:0c:dd:14:89:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:01:52 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=9dcaa921468a16d8de6ddcfd4777c5221389e8895ede213e1f47fab270036c7b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3e:9e:49:72:8e:b5:ed:b6:2f:06:de:33:e4: fe:23:31:39:07:5c:84:1f:54:aa:61:3c:61:35:6f: bb:40:0e:6a:ca:eb:36:73:2d:6d:70:82:07:78:84: 04:a1:ec:1b:62:df:bf:59:d9:64:36:87:4c:fd:75: 25:1a:ad:0e:bb:d6:0e:21:05:7c:51:93:81:c0:f8: 80:68:24:31:b7:2f:63:85:f7:64:85:17:00:b0:ca: 27:49:09:5b:15:fd:3d:53:07:11:fb:85:b9:56:97: ac:d6:fe:8b:2b:56:59:c4:e7:76:fe:33:7c:38:56: 66:2e:bd:5b:b0:f3:e3:2e:c8:a3:7e:e6:cb:dc:b9: ea:60:dc:2d:0e:4a:39:24:c1:ca:46:72:39:e1:77: f9:d9:28:1a:76:64:28:61:fe:ec:d7:f4:5a:96:36: 11:53:8b:6f:fa:de:ae:d0:be:9d:ad:c9:0c:d2:bb: c0:f2:31:67:81:69:38:74:d0:32:1e:ee:d7:9c:96: 4a:95:f3:dc:cf:1f:c5:ec:e8:7a:53:d9:ba:5b:0a: 8f:c5:48:d0:ad:6d:70:d8:19:48:50:4b:1c:cf:91: 2c:1d:38:2f:0a:cb:0e:16:29:45:66:9c:a5:c7:59: 94:c4:20:1b:ac:3f:9c:1f:60:41:d1:05:be:67:bb: 55:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E7:7D:54:13:A7:1E:55:8E:88:46:92:D5:6C:08:30:EB:E6:57:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ea4f0ec-c158-4950-9858-041d23e677f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.88.94.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:d5:19:ee:a0:60:b5:99:40:07:92:fc:8f:cc:cc:c2:aa:68: 21:63:2d:2b:94:b2:99:aa:12:42:26:39:b8:83:ac:aa:a4:09: 1c:bd:fd:9e:92:ea:b9:a5:2f:a1:7d:c7:b0:97:97:e6:80:a5: e4:41:ec:d8:ad:dc:1a:51:f0:29:d7:b6:99:63:3b:c0:fe:2c: 20:92:29:28:d2:32:d8:41:b1:16:0a:eb:01:4d:05:ce:bd:1d: ba:1a:39:e9:c2:e9:6e:8a:76:cf:56:f4:d8:7e:84:2e:53:e2: de:79:ed:b8:8b:ec:af:ab:16:d8:ef:09:5d:d3:cb:bf:7f:9d: 30:99:82:f0:95:d7:6f:b7:bc:5e:b3:b8:4d:9b:70:70:f3:b2: c1:63:02:54:1b:49:29:e5:2f:58:b7:38:52:04:8b:5d:7d:ed: 60:1a:4e:a1:27:00:bc:2e:54:1f:cb:94:51:87:77:c1:03:b9: f3:b6:ed:18:b9:22:aa:f9:c7:bc:07:cf:95:08:a6:76:37:f8: c4:4f:23:f3:27:59:8f:75:dc:46:64:75:38:5f:7c:b1:4f:7b: cf:a7:bf:fe:af:cb:20:b5:40:51:fc:74:80:7a:d9:00:b0:f4: ca:52:ed:b5:61:b8:61:cf:a8:f3:b3:ce:57:7c:96:22:7b:8e: 17:8e:5c:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYXEyhFS3It2bdTOQgP+8DN0UiacwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI5MDAwMTUyWhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGNhYTkyMTQ2OGExNmQ4ZGU2ZGRjZmQ0Nzc3YzUyMjEz ODllODg5NWVkZTIxM2UxZjQ3ZmFiMjcwMDM2YzdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvPp5Jco617bYvBt4z5P4jMTkHXIQfVKphPGE1b7tADmrK 6zZzLW1wggd4hASh7Bti379Z2WQ2h0z9dSUarQ671g4hBXxRk4HA+IBoJDG3L2OF 92SFFwCwyidJCVsV/T1TBxH7hblWl6zW/osrVlnE53b+M3w4VmYuvVuw8+MuyKN+ 5svcuepg3C0OSjkkwcpGcjnhd/nZKBp2ZChh/uzX9FqWNhFTi2/63q7Qvp2tyQzS u8DyMWeBaTh00DIe7teclkqV89zPH8Xs6HpT2bpbCo/FSNCtbXDYGUhQSxzPkSwd OC8Kyw4WKUVmnKXHWZTEIBusP5wfYEHRBb5nu1WLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMed9VBOnHlWOiEaS1WwIMOvmV9wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzllYTRmMGVjLWMxNTgtNDk1MC05ODU4LTA0MWQyM2U2NzdmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADLWF4wDQYJKoZIhvcNAQELBQADggEBACzVGe6gYLWZQAeS/I/MzMKqaCFj LSuUspmqEkImObiDrKqkCRy9/Z6S6rmlL6F9x7CXl+aApeRB7Nit3BpR8CnXtplj O8D+LCCSKSjSMthBsRYK6wFNBc69HboaOenC6W6Kds9W9Nh+hC5T4t557biL7K+r FtjvCV3Ty79/nTCZgvCV12+3vF6zuE2bcHDzssFjAlQbSSnlL1i3OFIEi1197WAa TqEnALwuVB/LlFGHd8EDufO27Ri5Iqr5x7wHz5UIpnY3+MRPI/MnWY913EZkdThf fLFPe8+nv/6vyyC1QFH8dIB62QCw9MpS7bVhuGHPqPOzzld8liJ7jheOXKU= -----END CERTIFICATE-----Generated at Tue May 13 08:34:49 2025 by rpki-client