$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d75cd08-0c7d-4f94-95c0-fecefa49530a.roa File: 0d75cd08-0c7d-4f94-95c0-fecefa49530a.roa (raw, json) Hash identifier: 7JhcGDN2GrgHQ9IUFVxEjhkGbkvnzk79rPluazWBk8Q= Subject key identifier: 8B:F5:1C:D2:07:FB:66:7D:B0:D7:F7:CF:D6:70:21:D5:B0:80:64:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 26A55970D4AAC0F3C639E915D44C2D0D8D59EAAF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d75cd08-0c7d-4f94-95c0-fecefa49530a.roa Signing time: Mon 14 Jul 2025 15:00:12 +0000 ROA not before: Mon 14 Jul 2025 15:00:12 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 203.88.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a5:59:70:d4:aa:c0:f3:c6:39:e9:15:d4:4c:2d:0d:8d:59:ea:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 14 15:00:12 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=ebbf4ba26fa2fb01cd356dc7950ad81ea8af2ae31e7e5c9c533a7c0d4d98dfa6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d2:30:3b:88:34:cf:4b:b5:a7:5e:be:e6:e3: e8:3d:0a:47:25:6c:33:74:dd:be:81:ee:ec:fb:f5: fd:28:aa:86:9f:78:22:93:ed:7e:b6:79:c3:cf:56: ce:24:ee:df:08:7a:39:a3:00:66:b0:b0:60:59:7f: f0:af:01:1e:f9:c0:1b:9c:64:b8:60:21:bc:e2:7b: bc:aa:b1:66:65:1d:d3:c2:54:15:08:9e:b7:96:14: 74:3a:58:a6:fe:1a:84:d0:cf:5f:d8:f5:68:00:65: d5:6a:f1:2f:2e:dd:8d:aa:91:05:30:ba:c0:8e:54: c9:8e:89:96:55:9a:27:a8:47:35:86:c9:08:cf:94: 7f:45:02:6e:c2:3d:d3:ef:57:5c:eb:93:14:85:8c: d6:d4:ae:b0:57:a5:6c:91:b9:48:0d:50:7a:67:bf: 31:47:e4:34:10:44:e1:d9:d8:40:7c:2c:24:f5:c5: 93:ff:6e:01:02:5b:ce:1d:f8:1d:4b:b8:37:1a:1f: c9:10:2f:05:6c:23:38:cb:f1:24:8b:da:a2:52:ef: 70:8f:ce:a6:99:e4:ac:98:06:97:5f:b6:13:b3:24: 11:17:01:2c:ac:5e:42:9e:7d:b6:5b:97:58:b7:72: 61:78:dd:04:dc:d4:72:dd:a9:f4:3c:8d:cd:41:45: 74:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F5:1C:D2:07:FB:66:7D:B0:D7:F7:CF:D6:70:21:D5:B0:80:64:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d75cd08-0c7d-4f94-95c0-fecefa49530a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.88.91.0/24 Signature Algorithm: sha256WithRSAEncryption a3:96:8f:9b:c3:86:01:8b:05:44:b3:36:22:f4:b3:10:9e:47: 7e:17:8b:19:1c:6a:0a:99:c7:32:4d:ea:06:5b:6d:14:f8:5e: 3f:07:81:59:62:74:f6:fe:9b:ee:b7:51:46:97:ea:17:7d:50: 36:f1:ef:8d:d4:7b:94:cd:00:ae:59:24:12:b9:84:8e:89:75: a0:5c:7a:64:6a:7e:09:cb:42:3d:75:ac:2b:86:10:08:11:ec: e8:40:4d:c1:5a:31:38:da:14:d2:9a:d7:e3:c5:15:8a:4f:2d: f9:42:70:95:ac:16:66:bb:af:8d:bb:f2:f7:d3:ce:57:fa:cf: 8b:12:d1:83:be:1f:63:bb:59:65:42:62:66:37:ae:8c:58:5f: ea:89:52:7b:35:fe:bb:ca:6d:28:e9:4f:b4:2b:5c:73:26:e1: 79:0d:3d:28:d8:87:2e:7d:6a:40:15:03:40:0d:86:2d:1a:35: 6f:01:19:59:fb:53:76:09:80:f9:ab:95:21:d4:58:30:ac:29: 1f:b5:27:dd:41:cd:9b:78:c5:97:24:ac:5b:6e:cd:e8:ec:48: 2a:ef:d6:a5:0d:29:c5:26:6a:58:54:24:a2:91:68:c3:38:70: c3:20:6b:37:1e:ba:51:30:6b:e0:01:20:aa:e8:5c:2c:93:f6: f2:d8:8c:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJqVZcNSqwPPGOekV1EwtDY1Z6q8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE0MTUwMDEyWhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYmJmNGJhMjZmYTJmYjAxY2QzNTZkYzc5NTBhZDgxZWE4 YWYyYWUzMWU3ZTVjOWM1MzNhN2MwZDRkOThkZmE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq0jA7iDTPS7WnXr7m4+g9CkclbDN03b6B7uz79f0oqoaf eCKT7X62ecPPVs4k7t8IejmjAGawsGBZf/CvAR75wBucZLhgIbzie7yqsWZlHdPC VBUInreWFHQ6WKb+GoTQz1/Y9WgAZdVq8S8u3Y2qkQUwusCOVMmOiZZVmieoRzWG yQjPlH9FAm7CPdPvV1zrkxSFjNbUrrBXpWyRuUgNUHpnvzFH5DQQROHZ2EB8LCT1 xZP/bgECW84d+B1LuDcaH8kQLwVsIzjL8SSL2qJS73CPzqaZ5KyYBpdfthOzJBEX ASysXkKefbZbl1i3cmF43QTc1HLdqfQ8jc1BRXQDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUi/Uc0gf7Zn2w1/fP1nAh1bCAZFkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBkNzVjZDA4LTBjN2QtNGY5NC05NWMwLWZlY2VmYTQ5NTMwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADLWFswDQYJKoZIhvcNAQELBQADggEBAKOWj5vDhgGLBUSzNiL0sxCeR34X ixkcagqZxzJN6gZbbRT4Xj8HgVlidPb+m+63UUaX6hd9UDbx743Ue5TNAK5ZJBK5 hI6JdaBcemRqfgnLQj11rCuGEAgR7OhATcFaMTjaFNKa1+PFFYpPLflCcJWsFma7 r4278vfTzlf6z4sS0YO+H2O7WWVCYmY3roxYX+qJUns1/rvKbSjpT7QrXHMm4XkN PSjYhy59akAVA0ANhi0aNW8BGVn7U3YJgPmrlSHUWDCsKR+1J91BzZt4xZckrFtu zejsSCrv1qUNKcUmalhUJKKRaMM4cMMgazceulEwa+ABIKroXCyT9vLYjAg= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:36 2025 by rpki-client