$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/132f73c3-a546-4296-a702-8a3aab70f706.roa File: 132f73c3-a546-4296-a702-8a3aab70f706.roa (raw, json) Hash identifier: pEiZCSwFutvWeopeDi9AoA3o2P6NZAvvdSOowoadB+M= Subject key identifier: A5:87:A2:98:8B:0C:CD:D8:19:E9:74:F9:DD:77:9A:88:05:08:51:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0251B9CDCDB097D161AA8DDF046E0A27E1F55E1E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/132f73c3-a546-4296-a702-8a3aab70f706.roa Signing time: Wed 02 Jul 2025 00:20:24 +0000 ROA not before: Wed 02 Jul 2025 00:20:24 +0000 ROA not after: Wed 06 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 121.93.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:51:b9:cd:cd:b0:97:d1:61:aa:8d:df:04:6e:0a:27:e1:f5:5e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 2 00:20:24 2025 GMT Not After : Aug 6 23:59:59 2025 GMT Subject: serialNumber=5225f73d3ad1844ab16f4f36b67861f4e3a4e647617c81b7b19ad6aaa7ebbc89, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:15:ac:b8:25:a6:76:32:b7:b9:27:fc:2a: 3b:6b:e1:38:5b:ac:bb:63:1e:49:f9:e1:bc:5b:fe: 74:7b:c5:57:d0:1b:5f:86:45:96:7f:8f:0c:09:4f: 7e:ac:b2:ea:20:2a:28:38:59:dd:75:ec:b0:19:59: 92:2d:89:77:4f:e6:00:75:54:06:fe:5b:cc:1d:da: 7a:1a:26:59:3a:af:89:85:36:8f:11:55:da:ea:f6: 9f:49:73:2d:39:b6:73:b9:99:ef:69:ce:c9:32:f4: f3:ba:6a:38:b0:26:1e:a4:50:b4:d1:f9:ae:b8:5d: 90:c8:6c:af:71:9c:6c:3f:3b:1c:ca:8b:e2:0e:07: 54:36:2d:75:81:d0:e7:8d:5f:00:ed:0c:09:2f:16: 20:59:87:da:c1:7c:2c:1a:7c:56:42:8a:5f:db:33: 40:39:99:90:b5:a2:60:db:0c:d2:7f:ee:37:e4:bc: ce:de:4e:81:b4:75:2a:8c:a3:c4:e8:c6:68:2a:fc: 7c:3f:d1:66:cc:dd:f6:7e:85:1d:24:a2:65:16:64: 63:79:77:ea:0a:74:f8:e8:62:b0:21:f0:0a:22:32: 11:29:f3:c9:1f:2b:f4:18:f1:fc:a5:c3:37:35:8a: 38:6b:ff:bb:c0:4b:5d:8c:2b:f5:78:a2:11:8b:d5: a8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:87:A2:98:8B:0C:CD:D8:19:E9:74:F9:DD:77:9A:88:05:08:51:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/132f73c3-a546-4296-a702-8a3aab70f706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.93.0.0/17 Signature Algorithm: sha256WithRSAEncryption 03:fe:1a:22:11:bf:b3:90:d3:c0:f2:72:f3:0e:cb:d4:8a:f7: 9f:46:ca:1b:fa:0b:70:ec:9a:27:ad:c7:5d:ff:e5:63:a2:1f: 14:20:40:08:72:4d:7c:7d:54:39:3e:34:29:29:54:a6:dd:e4: c1:ac:d3:5a:3b:7d:49:c2:20:5a:1b:33:09:3e:12:fc:c8:95: 75:6a:cc:ea:98:0f:4b:ce:59:53:58:b3:e5:98:bf:f6:d4:93: 66:6c:41:6b:f3:ee:b2:46:98:1f:8d:86:e5:cc:f6:22:8f:d0: 7d:e6:dc:6c:23:70:85:d4:35:53:b1:0d:a0:82:1f:dd:4b:84: bc:7d:50:82:2c:53:ad:f6:ce:cd:40:e7:f3:96:72:f4:96:bc: 56:b7:e9:8a:8d:db:1a:29:a1:58:89:fa:d0:6c:3c:26:c5:7d: 3b:2a:22:15:a4:5b:5d:80:8a:25:2e:a3:88:c0:fd:16:00:a5: 38:da:34:2d:87:c7:56:50:1a:16:55:93:6d:28:96:94:5d:97: f4:e9:45:7b:b3:02:01:29:fe:06:ba:e5:1e:ef:8e:f2:71:66: 6c:e9:52:15:d0:10:5e:d8:40:4b:81:39:e2:48:1d:b9:e7:b1: 0b:a4:1e:05:93:b4:fc:c6:c0:69:49:2b:38:8b:ba:f7:4c:80: 51:c7:e2:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAlG5zc2wl9Fhqo3fBG4KJ+H1Xh4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDAyMDI0WhcNMjUwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjI1ZjczZDNhZDE4NDRhYjE2ZjRmMzZiNjc4NjFmNGUz YTRlNjQ3NjE3YzgxYjdiMTlhZDZhYWE3ZWJiYzg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC65BWsuCWmdjK3uSf8Kjtr4ThbrLtjHkn54bxb/nR7xVfQ G1+GRZZ/jwwJT36ssuogKig4Wd117LAZWZItiXdP5gB1VAb+W8wd2noaJlk6r4mF No8RVdrq9p9Jcy05tnO5me9pzsky9PO6ajiwJh6kULTR+a64XZDIbK9xnGw/OxzK i+IOB1Q2LXWB0OeNXwDtDAkvFiBZh9rBfCwafFZCil/bM0A5mZC1omDbDNJ/7jfk vM7eToG0dSqMo8Toxmgq/Hw/0WbM3fZ+hR0komUWZGN5d+oKdPjoYrAh8AoiMhEp 88kfK/QY8fylwzc1ijhr/7vAS12MK/V4ohGL1ahHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpYeimIsMzdgZ6XT53XeaiAUIUa4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEzMmY3M2MzLWE1NDYtNDI5Ni1hNzAyLThhM2FhYjcwZjcwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAd5XQAwDQYJKoZIhvcNAQELBQADggEBAAP+GiIRv7OQ08DycvMOy9SK959G yhv6C3Dsmietx13/5WOiHxQgQAhyTXx9VDk+NCkpVKbd5MGs01o7fUnCIFobMwk+ EvzIlXVqzOqYD0vOWVNYs+WYv/bUk2ZsQWvz7rJGmB+NhuXM9iKP0H3m3GwjcIXU NVOxDaCCH91LhLx9UIIsU632zs1A5/OWcvSWvFa36YqN2xopoViJ+tBsPCbFfTsq IhWkW12AiiUuo4jA/RYApTjaNC2Hx1ZQGhZVk20olpRdl/TpRXuzAgEp/ga65R7v jvJxZmzpUhXQEF7YQEuBOeJIHbnnsQukHgWTtPzGwGlJKziLuvdMgFHH4rA= -----END CERTIFICATE-----Generated at Mon Jul 21 23:40:12 2025 by rpki-client