$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0771010-91d2-4b1c-aa8a-ae0cfc86e21f.roa File: a0771010-91d2-4b1c-aa8a-ae0cfc86e21f.roa (raw, json) Hash identifier: 8saPQKjTFQnP2aA0eITqNBPlxWPQnQULocCMFjTK08g= Subject key identifier: B5:A2:9C:8A:19:A0:B0:E2:54:07:04:D7:12:C0:74:E9:AA:C5:2E:8E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6C1942FC888D99AE55B3E40CA17B9F40B13FA008 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0771010-91d2-4b1c-aa8a-ae0cfc86e21f.roa Signing time: Fri 25 Apr 2025 00:20:27 +0000 ROA not before: Fri 25 Apr 2025 00:20:27 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 210.56.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:19:42:fc:88:8d:99:ae:55:b3:e4:0c:a1:7b:9f:40:b1:3f:a0:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:20:27 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=e7c4f403d07ccdac35c7cc02f53b0789485b74c845c89129b82f9b12699777b0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:51:31:23:52:33:a3:10:c1:ab:ba:86:3b: 93:b3:13:61:ad:d3:d4:dd:cc:cf:b8:a2:68:8a:88: 0b:91:bd:ac:13:37:ad:04:25:47:6a:b4:fc:ec:c8: 29:64:8b:da:66:f6:1f:3e:7e:bc:7e:1d:b4:85:58: 83:7a:fd:86:9a:4c:73:46:ca:90:88:b4:2b:9f:ee: 52:42:2a:b6:a2:c0:cd:8f:41:02:8d:46:ae:02:d1: 97:d6:78:95:ef:e2:9e:5a:82:62:34:37:92:73:ed: df:af:60:8f:d1:63:85:5b:4d:a9:0b:f2:5c:a7:66: 39:24:3d:d9:11:c0:ec:7f:3d:51:9d:40:59:88:87: 71:12:8a:db:a6:b4:6b:90:1f:38:fb:a7:40:2b:b6: c8:08:a4:70:17:9b:d9:87:d7:81:3b:e4:c9:92:9e: e0:b6:45:ca:8a:34:32:4a:ab:7b:11:31:bf:e3:51: 02:7a:9f:0f:2f:05:05:2d:c2:2f:b8:31:ba:d1:5f: 70:27:5f:8f:b1:48:37:2a:ed:83:36:88:d6:06:7d: bc:83:ec:79:57:90:a3:fc:5e:6d:24:cd:d3:4c:2a: fb:1c:a6:f9:e6:94:b4:29:01:eb:9c:c1:43:8e:9b: 52:25:2c:b5:5b:eb:58:8c:bc:71:d4:f6:f3:20:80: d8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A2:9C:8A:19:A0:B0:E2:54:07:04:D7:12:C0:74:E9:AA:C5:2E:8E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0771010-91d2-4b1c-aa8a-ae0cfc86e21f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.56.65.0/24 Signature Algorithm: sha256WithRSAEncryption 41:4e:40:04:09:af:4d:6a:bf:cb:84:78:63:cb:aa:1d:94:73: eb:34:df:94:60:56:c4:be:a3:40:b8:b1:0a:20:bd:9b:db:c0: 2e:cd:e0:ef:08:8a:55:23:96:46:78:2c:81:fb:66:77:2a:b2: 1c:84:9a:90:9a:2b:75:d4:9c:d5:44:b6:b7:b3:dd:e9:b2:32: e7:08:72:25:4b:c1:60:67:d7:28:a7:d0:53:cb:6b:4e:bb:36: 99:1a:21:7c:38:ff:df:d7:5b:e8:42:91:51:84:2c:9b:7e:08: 21:54:3a:bf:b2:c9:a6:26:26:59:7d:6c:e7:f7:92:db:7d:a4: ec:16:5e:2a:40:b2:b5:51:ae:2a:f5:d7:10:c2:4c:8d:e1:45: 99:4f:e8:e5:56:34:55:98:dd:14:9a:29:01:8a:fd:87:b2:48: f6:ec:97:4f:da:50:58:39:47:e2:7c:52:41:0b:e1:2a:97:96: ab:30:dc:62:cf:ae:73:ff:19:b7:6a:f7:2b:a9:f1:34:a9:ac: ca:4f:ad:40:3e:f2:af:7d:ce:1b:84:f0:70:4b:80:dc:15:79: 5c:6f:35:a8:0f:b8:77:eb:a9:c1:ce:fa:96:30:b7:2c:04:89: 63:18:6e:d1:b3:d9:36:50:bf:55:75:0a:fb:45:28:f4:5b:e8: ae:e6:9b:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbBlC/IiNma5Vs+QMoXufQLE/oAgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDAyMDI3WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlN2M0ZjQwM2QwN2NjZGFjMzVjN2NjMDJmNTNiMDc4OTQ4 NWI3NGM4NDVjODkxMjliODJmOWIxMjY5OTc3N2IwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSN1ExI1IzoxDBq7qGO5OzE2Gt09TdzM+4omiKiAuRvawT N60EJUdqtPzsyClki9pm9h8+frx+HbSFWIN6/YaaTHNGypCItCuf7lJCKraiwM2P QQKNRq4C0ZfWeJXv4p5agmI0N5Jz7d+vYI/RY4VbTakL8lynZjkkPdkRwOx/PVGd QFmIh3ESitumtGuQHzj7p0ArtsgIpHAXm9mH14E75MmSnuC2RcqKNDJKq3sRMb/j UQJ6nw8vBQUtwi+4MbrRX3AnX4+xSDcq7YM2iNYGfbyD7HlXkKP8Xm0kzdNMKvsc pvnmlLQpAeucwUOOm1IlLLVb61iMvHHU9vMggNiDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtaKcihmgsOJUBwTXEsB06arFLo4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwNzcxMDEwLTkxZDItNGIxYy1hYThhLWFlMGNmYzg2ZTIxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADSOEEwDQYJKoZIhvcNAQELBQADggEBAEFOQAQJr01qv8uEeGPLqh2Uc+s0 35RgVsS+o0C4sQogvZvbwC7N4O8IilUjlkZ4LIH7ZncqshyEmpCaK3XUnNVEtrez 3emyMucIciVLwWBn1yin0FPLa067NpkaIXw4/9/XW+hCkVGELJt+CCFUOr+yyaYm Jll9bOf3ktt9pOwWXipAsrVRrir11xDCTI3hRZlP6OVWNFWY3RSaKQGK/YeySPbs l0/aUFg5R+J8UkEL4SqXlqsw3GLPrnP/Gbdq9yup8TSprMpPrUA+8q99zhuE8HBL gNwVeVxvNagPuHfrqcHO+pYwtywEiWMYbtGz2TZQv1V1CvtFKPRb6K7mm0k= -----END CERTIFICATE-----Generated at Mon May 5 10:13:39 2025 by rpki-client