$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9fa3ad-ae62-4466-8860-3cdc913187d8.roa File: 4a9fa3ad-ae62-4466-8860-3cdc913187d8.roa (raw, json) Hash identifier: FkfZqKSG1xNXvNgCRYvQsT+L8Rj4LeO/aNU09c82QOw= Subject key identifier: 4E:1B:D6:E0:9F:C8:D9:0F:E2:97:FD:1C:4C:30:51:89:8D:2C:98:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 56D980BCB5B3308FF617D891DFA73D1D4D680ED8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9fa3ad-ae62-4466-8860-3cdc913187d8.roa Signing time: Wed 09 Jul 2025 00:10:20 +0000 ROA not before: Wed 09 Jul 2025 00:10:20 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.239.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d9:80:bc:b5:b3:30:8f:f6:17:d8:91:df:a7:3d:1d:4d:68:0e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:10:20 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=7fae8fc398fe2af1a1a03ed9a90ad6e21379862f1778e254f3f77c466f9f1fcc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:21:44:f9:1a:a9:ad:d4:16:80:50:73:df:de: cc:70:e3:9b:2b:9c:c0:d6:42:13:50:87:aa:2e:b1: 3d:c8:25:43:08:c9:01:d0:ec:3a:0a:4f:e5:06:24: 0a:dd:22:5f:a0:d2:33:fd:51:2f:d9:4a:c5:93:16: e9:2b:f4:1e:40:35:cd:3a:b8:84:49:dc:1a:04:bd: a1:0a:79:ff:af:d3:f9:7b:f2:fc:ed:31:aa:d0:46: 5d:b1:c5:d4:b7:e8:02:59:db:f9:30:20:cc:67:2d: 0a:c4:c5:73:fa:2b:65:03:a1:9f:d6:c1:b2:62:49: 81:b6:02:d6:e2:35:e6:a0:80:08:0f:ec:5b:21:1a: 1d:a7:b4:e0:c1:24:a7:f0:4d:48:c2:16:47:8c:0a: 0b:9e:1a:95:bd:50:24:c8:cb:da:78:11:0c:5b:48: e1:ad:dd:ea:13:4e:98:b2:70:1b:a7:5d:42:85:90: ee:04:61:13:80:53:0f:7d:6b:d6:7b:b0:aa:67:b4: 94:75:88:2a:4a:ca:86:8a:2b:b4:0f:24:a3:e0:bf: 0f:82:bf:1a:fb:e9:72:24:2d:63:39:5a:44:61:df: 3d:b0:89:b1:2d:af:ec:5e:41:66:c2:f5:ee:64:c5: d8:b2:fa:eb:38:2d:76:11:88:53:fe:f7:f3:7a:0f: 6f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1B:D6:E0:9F:C8:D9:0F:E2:97:FD:1C:4C:30:51:89:8D:2C:98:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a9fa3ad-ae62-4466-8860-3cdc913187d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.239.40.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:49:99:7b:64:9c:c2:5d:74:e9:c3:ef:db:96:5e:f9:f7:3f: b5:58:48:52:da:bb:34:2f:ae:15:e5:29:f1:06:9f:fe:44:db: 80:97:36:f9:26:8a:c6:41:85:43:39:c1:d9:d1:22:72:94:31: b5:31:8d:36:4a:ea:f9:91:3b:2b:ac:5d:01:05:ce:29:a3:d2: 93:48:17:e8:8e:ea:ca:41:9a:91:54:d6:fe:9c:5b:1b:a6:26: 6d:ed:77:08:f8:c6:78:af:22:7c:6b:5e:1c:ec:52:3d:d0:7f: 5c:f2:ec:15:72:ec:35:de:24:65:55:cc:7e:9d:e8:d4:d7:e2: 85:24:73:fb:08:e3:96:ed:ac:54:2a:9c:0e:88:47:16:13:d3: 32:16:7d:80:60:4a:50:b1:03:18:90:31:58:05:63:70:5e:7a: 54:81:46:4f:83:94:3f:5d:ff:89:a1:6c:9f:e6:1b:e3:d8:10: 56:98:79:21:80:44:db:49:3f:33:27:3a:d0:7a:8a:c1:0c:92: 18:4c:e3:c8:68:08:8e:0e:c0:73:e5:65:00:09:90:66:e3:68: 12:01:7b:24:ca:1d:c3:5c:fe:b9:0d:ba:29:60:a3:c6:16:bc: fa:0b:25:37:1e:95:e9:bb:f9:c3:87:83:cf:a4:d5:d4:e3:1d: ef:f2:72:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVtmAvLWzMI/2F9iR36c9HU1oDtgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDAxMDIwWhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZmFlOGZjMzk4ZmUyYWYxYTFhMDNlZDlhOTBhZDZlMjEz Nzk4NjJmMTc3OGUyNTRmM2Y3N2M0NjZmOWYxZmNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOIUT5Gqmt1BaAUHPf3sxw45srnMDWQhNQh6ousT3IJUMI yQHQ7DoKT+UGJArdIl+g0jP9US/ZSsWTFukr9B5ANc06uIRJ3BoEvaEKef+v0/l7 8vztMarQRl2xxdS36AJZ2/kwIMxnLQrExXP6K2UDoZ/WwbJiSYG2AtbiNeaggAgP 7FshGh2ntODBJKfwTUjCFkeMCgueGpW9UCTIy9p4EQxbSOGt3eoTTpiycBunXUKF kO4EYROAUw99a9Z7sKpntJR1iCpKyoaKK7QPJKPgvw+Cvxr76XIkLWM5WkRh3z2w ibEtr+xeQWbC9e5kxdiy+us4LXYRiFP+9/N6D2+vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUThvW4J/I2Q/il/0cTDBRiY0smK0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhOWZhM2FkLWFlNjItNDQ2Ni04ODYwLTNjZGM5MTMxODdkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANu7ygwDQYJKoZIhvcNAQELBQADggEBAIxJmXtknMJddOnD79uWXvn3P7VY SFLauzQvrhXlKfEGn/5E24CXNvkmisZBhUM5wdnRInKUMbUxjTZK6vmROyusXQEF zimj0pNIF+iO6spBmpFU1v6cWxumJm3tdwj4xnivInxrXhzsUj3Qf1zy7BVy7DXe JGVVzH6d6NTX4oUkc/sI45btrFQqnA6IRxYT0zIWfYBgSlCxAxiQMVgFY3BeelSB Rk+DlD9d/4mhbJ/mG+PYEFaYeSGARNtJPzMnOtB6isEMkhhM48hoCI4OwHPlZQAJ kGbjaBIBeyTKHcNc/rkNuilgo8YWvPoLJTcelem7+cOHg8+k1dTjHe/ycpc= -----END CERTIFICATE-----Generated at Wed Jul 23 02:23:46 2025 by rpki-client