$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44ae4df4-2444-4129-9a47-aa0f78dec95e.roa File: 44ae4df4-2444-4129-9a47-aa0f78dec95e.roa (raw, json) Hash identifier: A1qGYVPjcwVamPK6RP5YN8b10QlXi5xFkEQQFp13pVc= Subject key identifier: 7B:1C:9D:62:01:E7:8E:94:DD:78:C3:A4:D2:E5:78:11:19:71:BE:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 722AC505B27BCF19BF2867CFD6A6626FD5370F7F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44ae4df4-2444-4129-9a47-aa0f78dec95e.roa Signing time: Wed 09 Jul 2025 00:10:15 +0000 ROA not before: Wed 09 Jul 2025 00:10:15 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.239.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:2a:c5:05:b2:7b:cf:19:bf:28:67:cf:d6:a6:62:6f:d5:37:0f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:10:15 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=e4e9366f58aaea655e803338ce67053935cf3d8d8ff65b33369ee373980ce91d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:f9:dd:b4:25:cc:ae:1a:2c:e3:36:11:9b: 86:ab:5c:6a:fe:0f:28:3f:0a:ec:d6:b8:df:2d:ef: 79:30:c8:ab:f4:77:79:d3:ea:5a:72:31:b3:ee:d5: 88:b0:dc:09:cf:50:70:c7:ed:62:6c:d9:af:25:6d: 71:9c:8c:5b:10:e9:0b:d0:5f:af:df:fc:00:c3:13: 34:63:ad:07:e0:33:de:56:b7:f9:95:11:ee:f2:fe: 37:31:11:0c:71:30:06:85:ce:e4:c8:63:1c:ba:2b: 55:89:38:3e:56:95:ac:97:ac:5d:76:c1:6d:d1:f4: 04:e5:fc:ce:1b:91:81:c4:6a:87:dd:71:3b:c9:cf: 4b:bd:33:1d:15:4d:1b:16:4d:2b:c8:af:eb:05:02: d6:4f:41:4c:6b:8b:ce:62:4e:7c:e0:07:e8:5f:ae: 1a:bb:a9:e4:24:af:2c:94:84:85:69:6c:69:2d:f9: 12:44:db:95:4c:55:24:45:09:16:7d:7b:cf:3c:ef: 4a:92:9f:30:99:fe:2b:86:c9:ae:0b:b9:88:88:7d: d8:70:ba:27:78:79:8e:5f:47:b0:e5:f1:a3:b4:81: a1:a0:71:c8:4f:7f:0e:de:29:c2:70:bf:24:1b:36: 1a:64:41:5e:b1:96:a5:a6:85:ef:7f:7c:33:fb:6e: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1C:9D:62:01:E7:8E:94:DD:78:C3:A4:D2:E5:78:11:19:71:BE:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44ae4df4-2444-4129-9a47-aa0f78dec95e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.239.18.0/23 Signature Algorithm: sha256WithRSAEncryption 16:2a:ca:f7:8f:35:04:df:3f:f5:b4:8b:18:a1:3c:cc:b5:6b: 20:a4:ad:06:d3:cb:a3:c0:0a:19:4e:07:c1:23:88:96:a0:2d: 11:46:37:29:c7:9a:d1:c1:ed:02:eb:1e:b9:b1:32:46:62:21: e3:6e:db:cc:d8:43:5a:b2:80:1f:12:cd:8a:de:86:91:43:b3: 0c:4a:09:02:0e:71:6f:6e:4f:dc:12:9e:01:3f:a2:1e:f5:ae: 03:8f:b1:8c:8f:10:10:18:87:70:45:e9:1f:eb:de:08:e2:e7: ba:c3:df:92:95:c0:06:80:a1:f4:b7:25:91:30:5d:d4:54:aa: 59:95:97:85:09:9c:14:85:75:bd:24:da:ce:d8:41:e6:88:6e: 35:f7:6b:29:94:5b:1a:99:55:34:f4:d0:6e:46:16:d0:ee:2e: 58:25:1d:f4:a0:44:cd:92:0d:e3:16:d3:b3:86:37:78:be:20: 96:ee:5d:c6:70:03:eb:1d:ca:25:b4:47:2d:cf:9f:cd:cc:07: 82:30:7e:1f:99:1a:43:1f:fc:74:66:5d:f2:3c:52:94:48:75: 44:a2:23:9f:8f:8f:74:84:51:65:9b:ad:cf:5f:2f:a7:91:2d: 88:8b:b8:f9:6c:c1:b0:e6:e6:c7:39:53:cc:2e:a7:ca:8e:52: d6:3f:4f:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcirFBbJ7zxm/KGfP1qZib9U3D38wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDAxMDE1WhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNGU5MzY2ZjU4YWFlYTY1NWU4MDMzMzhjZTY3MDUzOTM1 Y2YzZDhkOGZmNjViMzMzNjllZTM3Mzk4MGNlOTFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4LfndtCXMrhos4zYRm4arXGr+Dyg/CuzWuN8t73kwyKv0 d3nT6lpyMbPu1Yiw3AnPUHDH7WJs2a8lbXGcjFsQ6QvQX6/f/ADDEzRjrQfgM95W t/mVEe7y/jcxEQxxMAaFzuTIYxy6K1WJOD5WlayXrF12wW3R9ATl/M4bkYHEaofd cTvJz0u9Mx0VTRsWTSvIr+sFAtZPQUxri85iTnzgB+hfrhq7qeQkryyUhIVpbGkt +RJE25VMVSRFCRZ9e88870qSnzCZ/iuGya4LuYiIfdhwuid4eY5fR7Dl8aO0gaGg cchPfw7eKcJwvyQbNhpkQV6xlqWmhe9/fDP7buYHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUexydYgHnjpTdeMOk0uV4ERlxvnowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ0YWU0ZGY0LTI0NDQtNDEyOS05YTQ3LWFhMGY3OGRlYzk1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFu7xIwDQYJKoZIhvcNAQELBQADggEBABYqyvePNQTfP/W0ixihPMy1ayCk rQbTy6PAChlOB8EjiJagLRFGNynHmtHB7QLrHrmxMkZiIeNu28zYQ1qygB8SzYre hpFDswxKCQIOcW9uT9wSngE/oh71rgOPsYyPEBAYh3BF6R/r3gji57rD35KVwAaA ofS3JZEwXdRUqlmVl4UJnBSFdb0k2s7YQeaIbjX3aymUWxqZVTT00G5GFtDuLlgl HfSgRM2SDeMW07OGN3i+IJbuXcZwA+sdyiW0Ry3Pn83MB4Iwfh+ZGkMf/HRmXfI8 UpRIdUSiI5+Pj3SEUWWbrc9fL6eRLYiLuPlswbDm5sc5U8wup8qOUtY/T6k= -----END CERTIFICATE-----Generated at Mon Jul 21 23:40:22 2025 by rpki-client