$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e6fc649-df21-49e2-a93e-321e5fc8451b.roa File: 1e6fc649-df21-49e2-a93e-321e5fc8451b.roa (raw, json) Hash identifier: INw52wNPi0KzQ8fqN6fuFgign2DrhkW6J7lUHO+kmf0= Subject key identifier: DA:74:95:3F:C7:47:9B:A1:42:60:59:F0:3E:16:3D:79:CF:BF:B3:22 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4EF7CBE0805A9D7F08DC784528412C8948F05709 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e6fc649-df21-49e2-a93e-321e5fc8451b.roa Signing time: Fri 11 Jul 2025 00:11:46 +0000 ROA not before: Fri 11 Jul 2025 00:11:46 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 220.157.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f7:cb:e0:80:5a:9d:7f:08:dc:78:45:28:41:2c:89:48:f0:57:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:11:46 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=45409e643f2b9c2dc7f90651059c3b9e3876698a3c0e30e5d7ce710d929a9b8e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:77:3b:4c:36:e4:5e:e2:80:f8:21:95:90:0e: be:3c:44:f7:b2:7f:bd:cb:66:0b:ed:e4:b9:0c:19: 90:4f:4f:c8:62:eb:07:67:52:d3:6a:b1:83:18:ff: f3:44:61:a4:a6:60:30:3f:c3:d5:35:af:48:18:ec: 81:5e:07:f6:f1:7e:b9:07:46:39:0c:70:eb:ee:1a: ae:be:44:3f:96:4b:fb:99:f3:4d:e0:61:99:ba:bf: 5f:8b:f6:22:5c:ba:19:14:fa:bd:56:84:bd:ec:d8: 94:2b:7a:18:bf:95:18:45:58:86:76:13:04:af:8a: 4d:ce:ea:f2:d2:c2:d8:20:ba:69:25:cd:d3:d0:8e: 45:86:95:3b:52:b8:ed:3b:ec:d5:cc:6f:f9:27:1b: 03:fc:01:e5:c4:62:af:82:0b:ce:b6:ac:1b:65:aa: 64:5d:9c:65:b6:ad:d7:a8:e5:f6:09:35:3b:83:85: 34:52:45:6f:7d:84:00:c0:db:69:d9:ea:90:79:d5: 0c:07:e2:64:c4:09:92:83:1c:41:68:ed:3f:3d:01: 52:ac:b7:71:a7:c0:9d:fb:04:69:9e:37:23:44:a4: 72:e1:3e:d7:53:b1:aa:57:40:aa:aa:84:26:3f:ce: c5:b0:bf:96:6e:39:c9:48:9a:2f:47:38:41:6a:d1: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:74:95:3F:C7:47:9B:A1:42:60:59:F0:3E:16:3D:79:CF:BF:B3:22 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e6fc649-df21-49e2-a93e-321e5fc8451b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.157.76.0/23 Signature Algorithm: sha256WithRSAEncryption 46:76:54:a4:c7:7c:b0:06:a7:82:3c:7e:0d:a4:d2:64:8b:a0: 6a:b5:91:bf:41:51:42:79:a1:3a:7d:dc:40:ee:8a:b0:03:57: 48:96:cd:0b:df:81:16:e0:f4:c3:c8:5e:b7:97:c8:26:57:fe: f8:7e:ba:6f:3f:06:95:04:b3:a5:2f:61:80:0a:4b:d8:08:e2: 90:79:01:86:39:ad:93:c9:c6:90:43:b5:e5:dc:06:b1:ff:29: 52:16:b0:a5:77:ca:d3:36:a7:a7:c1:b7:f6:58:c7:4c:74:a4: ed:10:e4:c1:29:b9:44:72:52:f3:79:02:38:86:cb:b1:00:95: 37:23:fb:7a:31:e0:b8:a4:f1:4a:28:e3:65:ec:b2:1e:84:3d: 09:aa:57:91:51:45:a9:cb:19:78:60:00:35:48:9e:57:6b:db: d1:5f:d0:23:4c:3b:dc:f0:47:63:64:7e:85:0d:5d:60:a0:c9: aa:a6:92:29:77:51:f9:79:e7:3a:0a:15:38:fc:96:00:18:a4: 5c:4b:f0:8a:9e:03:cd:c7:9d:75:ea:da:4e:7f:4c:0c:7d:e0: f3:cf:f4:6e:fb:19:8d:fb:70:40:16:00:31:ba:5a:0f:fc:fc: 4d:da:cb:de:34:ff:a9:8c:a6:de:f0:0c:b3:cf:98:6d:18:47: 25:ba:b2:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTvfL4IBanX8I3HhFKEEsiUjwVwkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAxMTQ2WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NTQwOWU2NDNmMmI5YzJkYzdmOTA2NTEwNTljM2I5ZTM4 NzY2OThhM2MwZTMwZTVkN2NlNzEwZDkyOWE5YjhlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtdztMNuRe4oD4IZWQDr48RPeyf73LZgvt5LkMGZBPT8hi 6wdnUtNqsYMY//NEYaSmYDA/w9U1r0gY7IFeB/bxfrkHRjkMcOvuGq6+RD+WS/uZ 803gYZm6v1+L9iJcuhkU+r1WhL3s2JQrehi/lRhFWIZ2EwSvik3O6vLSwtggumkl zdPQjkWGlTtSuO077NXMb/knGwP8AeXEYq+CC862rBtlqmRdnGW2rdeo5fYJNTuD hTRSRW99hADA22nZ6pB51QwH4mTECZKDHEFo7T89AVKst3GnwJ37BGmeNyNEpHLh PtdTsapXQKqqhCY/zsWwv5ZuOclImi9HOEFq0UDHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2nSVP8dHm6FCYFnwPhY9ec+/syIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFlNmZjNjQ5LWRmMjEtNDllMi1hOTNlLTMyMWU1ZmM4NDUxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcnUwwDQYJKoZIhvcNAQELBQADggEBAEZ2VKTHfLAGp4I8fg2k0mSLoGq1 kb9BUUJ5oTp93EDuirADV0iWzQvfgRbg9MPIXreXyCZX/vh+um8/BpUEs6UvYYAK S9gI4pB5AYY5rZPJxpBDteXcBrH/KVIWsKV3ytM2p6fBt/ZYx0x0pO0Q5MEpuURy UvN5AjiGy7EAlTcj+3ox4Lik8Uoo42Xssh6EPQmqV5FRRanLGXhgADVInldr29Ff 0CNMO9zwR2NkfoUNXWCgyaqmkil3Ufl55zoKFTj8lgAYpFxL8IqeA83HnXXq2k5/ TAx94PPP9G77GY37cEAWADG6Wg/8/E3ay940/6mMpt7wDLPPmG0YRyW6spE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:28 2025 by rpki-client