$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/268e47e6-0e83-4333-8c14-c7c8d95614d8.roa File: 268e47e6-0e83-4333-8c14-c7c8d95614d8.roa (raw, json) Hash identifier: HGIMpzHaCLz5pMomOQ4AmogaFNc4TKcurUkhFNJxZ/g= Subject key identifier: B7:FE:8E:E6:CF:48:A0:24:8B:2B:04:44:5D:24:B6:3E:65:60:E8:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58523C35A07346F80BAA2B84BF5C26397BC9CB2A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/268e47e6-0e83-4333-8c14-c7c8d95614d8.roa Signing time: Mon 07 Jul 2025 16:00:39 +0000 ROA not before: Mon 07 Jul 2025 16:00:39 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 114.56.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:52:3c:35:a0:73:46:f8:0b:aa:2b:84:bf:5c:26:39:7b:c9:cb:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:00:39 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=e8f69a7609df6789b459466157d216bb5fc87a8948b2cc1cff014316312070af, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:95:7f:d6:ba:cb:e5:23:4d:19:dc:05:02:31: ca:78:52:c7:c5:59:85:99:f6:25:bf:9b:e5:6d:c9: b3:30:87:b1:b0:5e:ae:df:ae:f1:3c:00:16:71:e6: b4:a5:ce:0a:e9:37:2c:1b:c0:be:ce:c4:a1:ec:ed: e8:9d:11:57:6f:8c:be:83:3d:32:84:1b:37:6c:da: b3:d8:3f:70:bc:d9:83:1b:81:2c:fb:34:b4:56:1e: 53:4f:e1:8e:57:97:53:d0:f0:4c:4c:c3:ed:66:fb: 10:67:25:7b:dc:c9:4e:b3:b9:3e:58:f0:67:59:00: 00:be:ab:f2:ec:9d:97:4b:be:3b:cc:d1:e2:ca:80: af:c1:5b:1d:96:d2:fc:79:1e:7a:c9:40:f2:9b:6d: 9c:0f:71:ce:35:f8:41:17:13:90:73:f9:25:d5:8e: 88:39:11:28:aa:bc:04:79:4d:2c:6b:2a:e0:df:e6: a8:e7:09:75:0d:82:f5:53:44:66:db:ef:bc:cf:36: bf:09:12:e5:4a:e8:75:ba:7c:62:37:7f:74:98:0d: 1f:22:86:25:74:78:34:e9:8f:f9:a7:17:49:a9:58: cc:df:75:8d:e3:2a:bf:c2:b9:29:e5:ec:6c:6f:20: 28:42:cb:0f:37:dd:c7:48:0d:05:23:71:b5:56:2e: d6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FE:8E:E6:CF:48:A0:24:8B:2B:04:44:5D:24:B6:3E:65:60:E8:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/268e47e6-0e83-4333-8c14-c7c8d95614d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.56.189.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:87:43:02:dd:8a:33:da:74:9d:f5:93:62:cf:37:db:48:a6: b3:da:4f:a5:65:56:ab:d1:22:cf:06:92:31:79:7d:d9:87:25: ae:16:04:55:7b:4d:11:49:89:d0:ae:09:d2:d9:d1:a5:40:2b: 40:97:b6:89:33:e6:80:5b:a9:0c:99:ae:bd:74:08:24:ba:cb: 22:97:7e:eb:4f:0e:e9:95:79:2a:ae:14:29:fb:42:7f:52:3a: 83:7c:f1:85:f5:09:b6:d1:47:07:7a:46:89:95:20:2a:41:d2: 15:9f:21:0b:62:d0:e7:6e:8d:0e:2d:16:40:51:86:e5:fa:44: d7:54:55:a0:dd:f1:42:b2:6f:00:96:62:14:6c:97:ce:f1:76: 44:2c:44:84:80:b8:11:41:32:fd:6d:33:79:16:59:94:f7:3f: 4b:df:95:20:5b:13:fe:68:95:3d:e9:27:5b:c6:d4:50:4e:86: c5:35:53:ac:28:aa:c6:5f:fe:05:6e:58:26:83:d5:25:17:32: f6:3f:c3:4f:ee:e2:a2:a8:b9:af:86:91:62:74:f8:f8:17:7d: ca:de:eb:81:64:a5:59:b4:26:10:2b:e0:2f:39:0a:6c:aa:be: 1d:92:49:24:f9:40:fe:1b:2c:80:82:8b:67:bc:cf:f7:05:46: dc:63:7a:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWFI8NaBzRvgLqiuEv1wmOXvJyyowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYwMDM5WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOGY2OWE3NjA5ZGY2Nzg5YjQ1OTQ2NjE1N2QyMTZiYjVm Yzg3YTg5NDhiMmNjMWNmZjAxNDMxNjMxMjA3MGFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRlX/WusvlI00Z3AUCMcp4UsfFWYWZ9iW/m+VtybMwh7Gw Xq7frvE8ABZx5rSlzgrpNywbwL7OxKHs7eidEVdvjL6DPTKEGzds2rPYP3C82YMb gSz7NLRWHlNP4Y5Xl1PQ8ExMw+1m+xBnJXvcyU6zuT5Y8GdZAAC+q/LsnZdLvjvM 0eLKgK/BWx2W0vx5HnrJQPKbbZwPcc41+EEXE5Bz+SXVjog5ESiqvAR5TSxrKuDf 5qjnCXUNgvVTRGbb77zPNr8JEuVK6HW6fGI3f3SYDR8ihiV0eDTpj/mnF0mpWMzf dY3jKr/CuSnl7GxvIChCyw833cdIDQUjcbVWLtbBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUt/6O5s9IoCSLKwREXSS2PmVg6FowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI2OGU0N2U2LTBlODMtNDMzMy04YzE0LWM3YzhkOTU2MTRkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAByOL0wDQYJKoZIhvcNAQELBQADggEBAH6HQwLdijPadJ31k2LPN9tIprPa T6VlVqvRIs8GkjF5fdmHJa4WBFV7TRFJidCuCdLZ0aVAK0CXtokz5oBbqQyZrr10 CCS6yyKXfutPDumVeSquFCn7Qn9SOoN88YX1CbbRRwd6RomVICpB0hWfIQti0Odu jQ4tFkBRhuX6RNdUVaDd8UKybwCWYhRsl87xdkQsRISAuBFBMv1tM3kWWZT3P0vf lSBbE/5olT3pJ1vG1FBOhsU1U6woqsZf/gVuWCaD1SUXMvY/w0/u4qKoua+GkWJ0 +PgXfcre64FkpVm0JhAr4C85Cmyqvh2SSST5QP4bLICCi2e8z/cFRtxjeqg= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:48 2025 by rpki-client