$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25f2c0c2-b535-4699-9790-e41a1bf11d51.roa File: 25f2c0c2-b535-4699-9790-e41a1bf11d51.roa (raw, json) Hash identifier: 3yl33YxUSS2tXKcHYYx3Ot4x2vbBY8sOhYHeiKJW2lU= Subject key identifier: F1:86:12:F2:6C:18:3C:47:3F:D4:6D:73:B0:D7:EF:84:B8:16:F5:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48665478EC07CC32675AF0BF4EE4A0196CA3A444 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25f2c0c2-b535-4699-9790-e41a1bf11d51.roa Signing time: Fri 11 Jul 2025 00:11:43 +0000 ROA not before: Fri 11 Jul 2025 00:11:43 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 220.157.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:66:54:78:ec:07:cc:32:67:5a:f0:bf:4e:e4:a0:19:6c:a3:a4:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:11:43 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=16296265e82b4be8b0ac18a49159475688457ded0100fa5dea52f10136eadbb7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:90:66:63:b4:3f:4c:9c:b3:1a:67:3e:f6: 57:c5:f3:3b:38:3d:70:c8:6e:d8:0d:f5:c3:f6:bf: b3:18:a6:6d:ae:eb:44:39:1b:dd:b1:e3:13:7d:8f: 30:cf:01:c1:ab:cc:83:65:7c:14:33:d1:d5:66:e0: fe:36:cb:55:bf:77:83:dd:b5:6c:d7:cb:a6:19:74: cd:0c:5b:a1:ac:00:db:8d:4b:08:e3:5b:b8:ab:d7: 4d:6f:ce:08:ae:74:8a:5c:3b:cc:65:36:27:58:c4: b5:66:29:9d:06:09:96:45:33:58:97:16:dd:30:d1: b1:5a:33:51:fe:0d:50:9b:28:4b:8a:42:7a:07:56: 58:c8:ca:4b:bd:2c:76:19:6a:02:f6:93:17:9a:cd: ba:7d:ee:c0:32:bf:ee:52:41:4c:1f:58:c8:dd:8d: 1a:89:de:91:e1:cf:6b:2e:db:b7:ff:86:b5:ff:59: 40:9c:67:29:cb:ed:bf:f1:b5:67:e4:1e:0e:a9:33: 2c:ca:ec:da:b6:94:e9:9a:88:a6:01:15:71:92:4a: 4d:fd:2e:a1:6a:b2:e5:d4:51:1e:8b:eb:93:90:82: 91:43:4b:09:dd:d3:c9:c9:76:17:d4:30:f7:01:26: 9c:92:96:ed:93:e2:21:79:c8:06:18:3b:06:55:0f: ae:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:86:12:F2:6C:18:3C:47:3F:D4:6D:73:B0:D7:EF:84:B8:16:F5:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25f2c0c2-b535-4699-9790-e41a1bf11d51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.157.66.0/23 Signature Algorithm: sha256WithRSAEncryption c8:4e:a2:4e:12:19:f9:69:91:c4:f0:ea:96:01:28:be:db:15: e9:90:5a:33:38:07:18:f2:89:77:84:12:59:48:6e:af:6f:69: c9:fb:e2:da:0b:8a:ba:7d:ac:02:f8:f8:c7:ff:c2:67:35:14: d0:f2:59:ec:ba:00:b0:4b:61:03:85:f6:df:83:df:4b:86:14: aa:50:57:8d:f7:fb:90:6b:9d:5c:9f:79:1d:9d:28:74:83:65: 66:bd:1b:17:30:ab:d4:c7:b9:ad:ab:10:af:ce:a1:4e:cc:81: d5:ed:59:09:b5:0a:d4:e7:c9:0b:01:e7:1c:47:02:df:65:11: d5:49:e3:e1:95:17:10:00:c8:d8:d4:46:be:e2:0c:5c:df:89: 82:33:1e:65:cc:f0:e7:9d:a6:a3:ba:a3:5a:9d:b3:4b:22:59: f2:1d:ae:0f:35:05:52:57:78:45:88:cb:6b:4b:1b:69:ea:33: f5:7f:26:f3:dc:08:63:8a:de:c4:5c:5d:97:7f:9b:a4:47:63: 20:af:24:aa:43:4f:f0:ae:ae:d1:a4:f3:71:7e:0e:1f:d6:83: f3:35:e2:3b:4b:dc:59:b0:7f:51:0e:0d:dd:17:d7:3c:bc:dc: 91:41:56:ea:43:55:5f:9d:b1:6c:4b:2c:f6:af:e2:af:8f:78: a4:89:f1:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSGZUeOwHzDJnWvC/TuSgGWyjpEQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAxMTQzWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjI5NjI2NWU4MmI0YmU4YjBhYzE4YTQ5MTU5NDc1Njg4 NDU3ZGVkMDEwMGZhNWRlYTUyZjEwMTM2ZWFkYmI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvJpBmY7Q/TJyzGmc+9lfF8zs4PXDIbtgN9cP2v7MYpm2u 60Q5G92x4xN9jzDPAcGrzINlfBQz0dVm4P42y1W/d4PdtWzXy6YZdM0MW6GsANuN SwjjW7ir101vzgiudIpcO8xlNidYxLVmKZ0GCZZFM1iXFt0w0bFaM1H+DVCbKEuK QnoHVljIyku9LHYZagL2kxeazbp97sAyv+5SQUwfWMjdjRqJ3pHhz2su27f/hrX/ WUCcZynL7b/xtWfkHg6pMyzK7Nq2lOmaiKYBFXGSSk39LqFqsuXUUR6L65OQgpFD Swnd08nJdhfUMPcBJpySlu2T4iF5yAYYOwZVD65HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8YYS8mwYPEc/1G1zsNfvhLgW9XQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1ZjJjMGMyLWI1MzUtNDY5OS05NzkwLWU0MWExYmYxMWQ1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcnUIwDQYJKoZIhvcNAQELBQADggEBAMhOok4SGflpkcTw6pYBKL7bFemQ WjM4BxjyiXeEEllIbq9vacn74toLirp9rAL4+Mf/wmc1FNDyWey6ALBLYQOF9t+D 30uGFKpQV433+5BrnVyfeR2dKHSDZWa9Gxcwq9THua2rEK/OoU7MgdXtWQm1CtTn yQsB5xxHAt9lEdVJ4+GVFxAAyNjURr7iDFzfiYIzHmXM8OedpqO6o1qds0siWfId rg81BVJXeEWIy2tLG2nqM/V/JvPcCGOK3sRcXZd/m6RHYyCvJKpDT/CurtGk83F+ Dh/Wg/M14jtL3Fmwf1EODd0X1zy83JFBVupDVV+dsWxLLPav4q+PeKSJ8TM= -----END CERTIFICATE-----Generated at Thu Jul 24 12:09:50 2025 by rpki-client