$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca987030-44c3-48e3-b5be-ea5021f48461.roa File: ca987030-44c3-48e3-b5be-ea5021f48461.roa (raw, json) Hash identifier: C2OmjbnDQSNVs0TUvfL0OiM8BbZjjT603pLauvy59q4= Subject key identifier: AF:80:02:4A:E7:85:E8:EC:EE:25:B1:20:D8:FD:A3:C1:81:92:5A:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03308855AD93FC6E044667827A8A900E11B77471 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca987030-44c3-48e3-b5be-ea5021f48461.roa Signing time: Fri 02 May 2025 00:01:06 +0000 ROA not before: Fri 02 May 2025 00:01:06 +0000 ROA not after: Fri 06 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 132.223.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:30:88:55:ad:93:fc:6e:04:46:67:82:7a:8a:90:0e:11:b7:74:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:01:06 2025 GMT Not After : Jun 6 23:59:59 2025 GMT Subject: serialNumber=a298a0f4f6c7a728d6cf1c65154b8d0c83fdcfd8ee589dd83251a73f43b1f755, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:0e:42:4a:ed:f8:6d:74:a7:1a:76:3f:c2: 05:2d:8b:0b:f6:e6:5a:88:d4:ba:71:a5:f7:69:18: 66:b5:b1:e9:ce:8a:79:45:5a:4a:42:8c:9a:a3:a5: 16:2d:b8:0f:44:a8:3c:1a:8a:f9:a3:f4:9f:a3:c6: 8c:d1:d4:f8:cb:cf:5e:89:2f:c4:ac:3e:fb:e0:8c: d3:74:7d:d2:96:73:16:50:5e:65:9e:05:07:90:a5: 74:16:31:16:03:cc:02:9e:dd:e1:8a:28:b6:c3:50: fd:e2:60:41:94:c3:61:e1:18:f6:ba:6b:c0:5c:e1: 89:57:c6:95:ff:eb:75:04:4a:eb:36:3c:08:66:3b: a8:f6:f9:e2:f0:15:b5:c6:00:04:27:8f:ec:03:a6: 97:24:79:dd:24:5c:43:c3:e7:7b:50:e0:8f:f7:47: 50:2c:11:8a:db:59:39:e2:91:cc:15:3a:69:15:cd: 93:bc:4d:be:ff:e3:e2:69:01:19:7a:28:05:b2:ec: 17:08:76:ac:63:90:d6:ce:63:23:02:2e:1a:88:89: 50:bb:c1:31:fc:85:d8:3d:c6:3f:6c:37:52:96:e4: b9:8c:35:25:32:c3:33:3b:da:67:ba:1e:0f:62:ec: d3:47:dd:10:2a:6e:81:50:bc:b1:b1:d0:7a:d4:86: 17:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:80:02:4A:E7:85:E8:EC:EE:25:B1:20:D8:FD:A3:C1:81:92:5A:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca987030-44c3-48e3-b5be-ea5021f48461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.223.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5e:a0:ef:7d:72:71:04:9f:0b:69:e6:2c:fd:e2:90:76:66:3b: fe:7f:b5:f7:02:0d:ef:70:36:be:22:e8:a9:3a:f4:39:07:e3: 9e:d3:f6:dd:d7:91:e2:f4:fc:d8:d4:aa:6d:3c:8b:f2:d9:81: d8:17:1b:df:93:d3:2e:38:85:01:f5:df:4f:dd:02:55:34:33: a5:4d:1b:e4:f4:c3:d6:a9:b3:91:62:d2:40:76:5b:43:79:de: 71:01:f4:b2:f3:11:2b:b9:69:6f:c3:da:a9:48:f1:10:40:4a: 04:6f:66:fd:d7:f3:d7:d0:f9:bc:76:5c:38:0a:ad:e6:be:ef: 6b:30:8f:bb:6f:32:4c:ac:8c:28:f4:ff:2f:87:72:48:43:db: ef:df:b6:9b:7a:36:e5:fa:a6:19:e7:ae:a5:aa:5d:f7:bc:c1: 53:91:73:16:01:83:6a:3d:51:04:2b:56:02:11:61:0f:55:5a: 47:98:b8:46:23:53:05:d6:9c:78:a0:fa:08:7a:7e:c9:3b:3d: 37:73:90:81:0f:bc:b2:77:7d:3d:27:e6:64:5d:21:f9:d7:2f: 01:92:c0:6d:a6:7b:da:6d:3c:cf:10:8f:1e:4a:fa:4b:ca:cf: de:a5:21:ab:59:84:8e:21:fc:a4:6a:38:f0:27:24:97:47:41: 5c:35:f7:66 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAzCIVa2T/G4ERmeCeoqQDhG3dHEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAyMDAwMTA2WhcNMjUwNjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjk4YTBmNGY2YzdhNzI4ZDZjZjFjNjUxNTRiOGQwYzgz ZmRjZmQ4ZWU1ODlkZDgzMjUxYTczZjQzYjFmNzU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu7w5CSu34bXSnGnY/wgUtiwv25lqI1LpxpfdpGGa1senO inlFWkpCjJqjpRYtuA9EqDwaivmj9J+jxozR1PjLz16JL8SsPvvgjNN0fdKWcxZQ XmWeBQeQpXQWMRYDzAKe3eGKKLbDUP3iYEGUw2HhGPa6a8Bc4YlXxpX/63UESus2 PAhmO6j2+eLwFbXGAAQnj+wDppcked0kXEPD53tQ4I/3R1AsEYrbWTnikcwVOmkV zZO8Tb7/4+JpARl6KAWy7BcIdqxjkNbOYyMCLhqIiVC7wTH8hdg9xj9sN1KW5LmM NSUywzM72me6Hg9i7NNH3RAqboFQvLGx0HrUhhdFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUr4ACSueF6OzuJbEg2P2jwYGSWnQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhOTg3MDMwLTQ0YzMtNDhlMy1iNWJlLWVhNTAyMWY0ODQ2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCE3zANBgkqhkiG9w0BAQsFAAOCAQEAXqDvfXJxBJ8LaeYs/eKQdmY7/n+1 9wIN73A2viLoqTr0OQfjntP23deR4vT82NSqbTyL8tmB2Bcb35PTLjiFAfXfT90C VTQzpU0b5PTD1qmzkWLSQHZbQ3necQH0svMRK7lpb8PaqUjxEEBKBG9m/dfz19D5 vHZcOAqt5r7vazCPu28yTKyMKPT/L4dySEPb79+2m3o25fqmGeeupapd97zBU5Fz FgGDaj1RBCtWAhFhD1VaR5i4RiNTBdaceKD6CHp+yTs9N3OQgQ+8snd9PSfmZF0h +dcvAZLAbaZ72m08zxCPHkr6S8rP3qUhq1mEjiH8pGo48Cckl0dBXDX3Zg== -----END CERTIFICATE-----Generated at Sun May 11 01:56:17 2025 by rpki-client