$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5526fc34-9bea-47e2-b707-0173d61f32b5.roa File: 5526fc34-9bea-47e2-b707-0173d61f32b5.roa (raw, json) Hash identifier: ftP3w9WRYArJ3HjRjjVYH29gN7XkbfExVcswL/Roya8= Subject key identifier: 94:E9:FF:18:B8:D6:15:3E:D2:7F:D7:62:E9:13:FA:22:0E:67:5B:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1106BE7087E954413C51F77090A13D63B7137AAD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5526fc34-9bea-47e2-b707-0173d61f32b5.roa Signing time: Wed 02 Jul 2025 00:41:53 +0000 ROA not before: Wed 02 Jul 2025 00:41:53 +0000 ROA not after: Wed 06 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 46.235.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:06:be:70:87:e9:54:41:3c:51:f7:70:90:a1:3d:63:b7:13:7a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 2 00:41:53 2025 GMT Not After : Aug 6 23:59:59 2025 GMT Subject: serialNumber=2e80e6b3a0dc37056a7644f154fa9b0677efac6f5dee8db950f802d83ae4b46b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:01:b6:61:26:49:10:28:4d:2b:24:37:9e:e9: ca:5d:e4:94:ce:45:9d:72:29:45:9a:71:a6:28:bc: e1:e1:27:18:5f:7e:7f:7a:f0:d8:9e:6c:4a:de:24: e3:f1:90:a3:d1:bc:4b:98:8b:7e:3f:bc:4d:30:d7: 9b:89:95:42:13:24:d6:4d:cb:f3:e9:2d:5d:d8:1d: a4:7a:b1:a0:7c:b7:7d:53:40:fb:94:d4:f7:4e:2b: 5e:fe:a0:fc:54:17:34:a0:93:95:d5:93:5f:d2:ea: ff:3a:d8:fc:fb:32:41:90:f0:f7:b6:e2:63:94:44: 95:56:30:09:66:4c:a2:74:7c:ac:b2:dd:b3:c0:19: 14:09:bd:da:27:f1:46:e6:2b:af:a6:51:7c:41:40: 51:b9:3e:74:08:f9:15:c7:7e:4a:1a:7f:39:e6:4c: 4e:a0:dd:63:96:09:03:35:65:f4:95:65:6b:9d:93: 94:71:8c:d1:87:30:2d:bf:87:70:a1:72:32:ee:72: 0c:55:41:15:ca:39:99:2d:d1:8f:c4:2c:ca:45:8a: a4:4f:a9:3d:d1:1d:44:af:5b:ef:ec:d0:32:1d:03: 06:20:f6:c8:83:6a:9a:57:49:e3:a5:50:c5:9e:68: 6d:d5:ad:40:75:bb:b7:db:9d:fb:3e:4e:5c:5d:49: ef:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E9:FF:18:B8:D6:15:3E:D2:7F:D7:62:E9:13:FA:22:0E:67:5B:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5526fc34-9bea-47e2-b707-0173d61f32b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.2.0/24 Signature Algorithm: sha256WithRSAEncryption 48:ea:0c:45:ba:70:aa:e3:42:65:86:97:dc:0b:52:b9:d6:68: 9a:c2:63:de:85:ac:c7:a2:e5:f5:77:d1:3d:61:cd:60:5d:f8: 20:7d:ad:e2:32:f1:98:1e:ef:15:83:45:e6:12:6c:1b:a6:a3: fb:33:83:01:97:03:9e:23:ec:fc:e5:52:8f:00:08:1f:5e:23: 22:9c:34:c2:7c:ca:ff:72:c8:9d:d6:6b:47:fc:e3:84:b6:59: 11:2e:53:7e:0a:72:c4:13:92:4b:eb:bb:11:b0:3c:c8:d3:ca: b0:bc:f0:f1:60:46:8c:51:f7:6d:51:a4:9e:a6:41:b4:b6:a9: bd:a6:4a:de:ce:08:09:25:98:62:b0:ab:70:78:56:e2:9a:2f: 10:22:d7:ef:ee:46:da:be:7c:5b:82:0a:52:92:1f:da:e4:53: ac:de:97:0b:a5:99:39:20:53:d3:99:93:1b:fa:60:30:a5:09: 9e:e2:fc:c9:23:3b:2a:76:ec:17:bb:1b:c8:e1:0d:fd:a0:c0: 41:be:87:d0:99:6b:04:bf:0d:42:fe:c6:ca:da:29:f4:ce:e1: 16:3d:6c:ec:6d:5c:c3:48:68:e3:ee:68:cb:f1:02:66:c1:1c: 62:a5:a1:d5:81:52:26:7d:2d:fe:ea:30:c4:b8:c1:a4:85:b5: 3f:9a:76:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEQa+cIfpVEE8UfdwkKE9Y7cTeq0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDA0MTUzWhcNMjUwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTgwZTZiM2EwZGMzNzA1NmE3NjQ0ZjE1NGZhOWIwNjc3 ZWZhYzZmNWRlZThkYjk1MGY4MDJkODNhZTRiNDZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcAbZhJkkQKE0rJDee6cpd5JTORZ1yKUWacaYovOHhJxhf fn968NiebEreJOPxkKPRvEuYi34/vE0w15uJlUITJNZNy/PpLV3YHaR6saB8t31T QPuU1PdOK17+oPxUFzSgk5XVk1/S6v862Pz7MkGQ8Pe24mOURJVWMAlmTKJ0fKyy 3bPAGRQJvdon8UbmK6+mUXxBQFG5PnQI+RXHfkoafznmTE6g3WOWCQM1ZfSVZWud k5RxjNGHMC2/h3ChcjLucgxVQRXKOZkt0Y/ELMpFiqRPqT3RHUSvW+/s0DIdAwYg 9siDappXSeOlUMWeaG3VrUB1u7fbnfs+TlxdSe9tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlOn/GLjWFT7Sf9di6RP6Ig5nW7IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU1MjZmYzM0LTliZWEtNDdlMi1iNzA3LTAxNzNkNjFmMzJiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAu6wIwDQYJKoZIhvcNAQELBQADggEBAEjqDEW6cKrjQmWGl9wLUrnWaJrC Y96FrMei5fV30T1hzWBd+CB9reIy8Zge7xWDReYSbBumo/szgwGXA54j7PzlUo8A CB9eIyKcNMJ8yv9yyJ3Wa0f844S2WREuU34KcsQTkkvruxGwPMjTyrC88PFgRoxR 921RpJ6mQbS2qb2mSt7OCAklmGKwq3B4VuKaLxAi1+/uRtq+fFuCClKSH9rkU6ze lwulmTkgU9OZkxv6YDClCZ7i/MkjOyp27Be7G8jhDf2gwEG+h9CZawS/DUL+xsra KfTO4RY9bOxtXMNIaOPuaMvxAmbBHGKlodWBUiZ9Lf7qMMS4waSFtT+adsk= -----END CERTIFICATE-----Generated at Thu Jul 24 04:55:24 2025 by rpki-client