$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6392e4ef-e271-45c8-867d-345229dc1cf6.roa File: 6392e4ef-e271-45c8-867d-345229dc1cf6.roa (raw, json) Hash identifier: BYEjMyVJ6g+S1KuBCVdHYJU6jQJguN/U6m6QIaPN8zw= Subject key identifier: 73:10:7D:45:B5:BF:2E:E9:65:A7:EA:82:0F:48:2F:71:F4:E1:88:8D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 349B6420393FE900EF4D494C51FD46BABB7A301E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6392e4ef-e271-45c8-867d-345229dc1cf6.roa Signing time: Sat 12 Jul 2025 00:21:37 +0000 ROA not before: Sat 12 Jul 2025 00:21:37 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 202.5.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:9b:64:20:39:3f:e9:00:ef:4d:49:4c:51:fd:46:ba:bb:7a:30:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 12 00:21:37 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=58602e40d75c93a5152ef7ac93a553c2a4cebde1f90a10644ad058e95f9f35ca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:6d:a0:76:d7:7e:90:85:0d:4a:57:c2:1b: bf:f8:c4:1c:d1:9b:62:9f:3a:be:ca:e1:7c:07:eb: f4:b3:0e:23:c2:c5:b8:ea:b9:de:61:0b:f6:9a:9c: d3:bf:1f:44:05:b9:24:a8:8b:a4:42:ca:4e:eb:2f: 76:4b:49:8e:4f:20:ff:03:ef:47:bf:57:38:91:a4: c4:05:22:da:3c:ff:8d:d4:2e:01:ca:dd:dc:95:e5: 2f:91:1a:7d:3c:b6:50:a5:82:30:25:e9:2f:4a:a4: 88:ff:26:dd:4a:41:1f:86:b0:51:e5:9e:42:00:78: 97:6b:f4:6e:4b:6b:40:82:95:77:5a:01:92:70:ef: a4:98:a9:38:22:ca:84:ce:b0:1a:e3:e2:cd:47:09: 54:c1:5d:d5:3f:9e:8f:21:c4:f1:ed:ed:5d:38:0b: c7:49:cd:75:67:48:58:ec:92:ea:18:04:31:59:f7: a3:78:bf:2e:3e:1f:73:79:19:5d:ad:3b:14:3c:03: 05:be:c8:e8:a4:01:ef:a0:47:93:d3:6c:b8:c5:18: ba:33:93:e2:cd:41:45:d9:a8:f4:4c:1f:77:1e:ad: d6:00:9c:08:7a:92:84:47:d2:c1:4e:21:73:a8:bf: e3:1c:17:9d:cd:aa:e2:34:ff:dd:10:07:19:24:81: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:10:7D:45:B5:BF:2E:E9:65:A7:EA:82:0F:48:2F:71:F4:E1:88:8D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6392e4ef-e271-45c8-867d-345229dc1cf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.5.176.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:f6:11:91:c2:4d:19:2b:a6:b5:cd:04:9f:3d:4e:c4:ff:1a: bb:85:0e:95:3f:e7:c7:93:bb:f2:39:05:25:7d:86:10:9d:ed: 2f:9b:83:67:17:b6:42:b4:93:a1:a8:de:6f:a2:0f:2b:1d:bb: 01:41:8e:48:6a:07:1d:61:0f:31:ce:10:14:8c:52:6b:8e:04: 9b:a7:74:9a:d3:c0:1a:16:02:49:7a:c4:20:6f:0c:aa:0c:8b: 1e:62:be:24:b2:d4:a7:e9:2a:14:55:d4:45:e9:4e:51:b5:22: bb:a1:a6:8a:72:71:ef:7d:fa:b3:d8:6d:ac:aa:2d:45:02:e9: 6d:34:63:35:a3:7d:3e:94:7b:f4:ff:73:06:6a:4f:14:4d:50: a6:34:25:e0:75:a7:d8:09:cb:88:fe:5f:81:f1:d9:5c:f9:98: 31:b1:b8:7f:cd:b6:5d:1b:79:35:b0:83:9c:2d:68:f2:14:2e: 18:ee:b4:c3:9c:96:7d:a2:68:48:76:a5:00:e9:ab:b3:83:b3: dd:0a:ba:b2:aa:5d:fe:ab:b5:ed:cb:fe:42:06:03:9c:55:91: 3d:69:f9:3f:c4:7c:03:c6:40:87:70:0b:da:3c:74:7a:70:6a: 58:0d:87:d6:40:6e:5b:ca:0b:0f:68:2a:5e:85:26:8a:79:69: 34:66:75:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNJtkIDk/6QDvTUlMUf1Gurt6MB4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzEyMDAyMTM3WhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODYwMmU0MGQ3NWM5M2E1MTUyZWY3YWM5M2E1NTNjMmE0 Y2ViZGUxZjkwYTEwNjQ0YWQwNThlOTVmOWYzNWNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVAW2gdtd+kIUNSlfCG7/4xBzRm2KfOr7K4XwH6/SzDiPC xbjqud5hC/aanNO/H0QFuSSoi6RCyk7rL3ZLSY5PIP8D70e/VziRpMQFIto8/43U LgHK3dyV5S+RGn08tlClgjAl6S9KpIj/Jt1KQR+GsFHlnkIAeJdr9G5La0CClXda AZJw76SYqTgiyoTOsBrj4s1HCVTBXdU/no8hxPHt7V04C8dJzXVnSFjskuoYBDFZ 96N4vy4+H3N5GV2tOxQ8AwW+yOikAe+gR5PTbLjFGLozk+LNQUXZqPRMH3cerdYA nAh6koRH0sFOIXOov+McF53NquI0/90QBxkkgenhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcxB9RbW/Lullp+qCD0gvcfThiI0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYzOTJlNGVmLWUyNzEtNDVjOC04NjdkLTM0NTIyOWRjMWNmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKBbAwDQYJKoZIhvcNAQELBQADggEBAJ72EZHCTRkrprXNBJ89TsT/GruF DpU/58eTu/I5BSV9hhCd7S+bg2cXtkK0k6Go3m+iDysduwFBjkhqBx1hDzHOEBSM UmuOBJundJrTwBoWAkl6xCBvDKoMix5iviSy1KfpKhRV1EXpTlG1Iruhpopyce99 +rPYbayqLUUC6W00YzWjfT6Ue/T/cwZqTxRNUKY0JeB1p9gJy4j+X4Hx2Vz5mDGx uH/Ntl0beTWwg5wtaPIULhjutMOcln2iaEh2pQDpq7ODs90KurKqXf6rte3L/kIG A5xVkT1p+T/EfAPGQIdwC9o8dHpwalgNh9ZAblvKCw9oKl6FJop5aTRmdcM= -----END CERTIFICATE-----Generated at Tue Jul 22 05:09:40 2025 by rpki-client