$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebad9c7-4c28-43db-800f-ce764e3211f4.roa File: 9ebad9c7-4c28-43db-800f-ce764e3211f4.roa (raw, json) Hash identifier: BLWvr7z8HnMAfAb6PWbBRe/T7RZriZclF6imLu49lMw= Subject key identifier: 0D:0E:7D:5F:C0:76:95:6E:A3:F4:3F:2E:C5:A9:92:9F:31:68:6E:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16DE3B844BCF23A07B8DE40BD126371B02681D22 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebad9c7-4c28-43db-800f-ce764e3211f4.roa Signing time: Tue 01 Jul 2025 00:00:20 +0000 ROA not before: Tue 01 Jul 2025 00:00:20 +0000 ROA not after: Tue 05 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 114.56.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:de:3b:84:4b:cf:23:a0:7b:8d:e4:0b:d1:26:37:1b:02:68:1d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 1 00:00:20 2025 GMT Not After : Aug 5 23:59:59 2025 GMT Subject: serialNumber=5bb783022cd731b68eb13333fa75678bad275e9e57387b4c4071e08dd498ad41, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:95:68:88:d5:b2:e3:5c:fb:ac:7c:72:73: d9:86:d0:47:77:50:4d:89:28:ef:8a:c6:fb:31:af: 99:e7:f0:ba:81:db:0c:9e:aa:2a:1f:1e:71:a3:c0: 67:dc:ff:82:2f:20:c9:0f:46:f6:69:ea:b4:56:3c: 15:5a:68:46:27:c3:6f:fc:9e:32:9c:07:d9:00:33: 8a:68:96:23:81:ba:bf:83:e5:2c:b2:7e:86:7d:59: d6:f3:79:46:8c:36:d7:37:3d:4d:29:b2:24:9c:6d: ef:27:22:4a:ca:3a:fb:cf:53:87:46:78:a8:74:79: bf:12:dd:97:b7:72:aa:4c:c5:fe:4b:a9:c0:6f:a3: c0:3f:9c:f7:c5:8b:e6:b9:e9:34:41:26:0c:2e:ce: 5c:1b:fa:32:71:52:59:03:83:63:e8:4a:e4:22:e9: 10:c2:ac:aa:16:3c:1c:5a:91:82:39:22:9b:b8:32: 57:2f:99:bd:e0:30:ab:5a:88:74:8e:f9:18:e8:85: e8:02:15:e7:72:61:35:2b:00:c1:29:87:d6:96:09: 86:68:61:c9:d9:a4:80:d2:ae:51:4a:f9:90:fa:cb: ca:28:26:1a:ff:82:3b:f7:8f:dd:a8:ae:28:29:0b: 2c:dc:ca:81:49:f7:a2:69:84:97:5a:48:83:e4:38: 1f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0E:7D:5F:C0:76:95:6E:A3:F4:3F:2E:C5:A9:92:9F:31:68:6E:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebad9c7-4c28-43db-800f-ce764e3211f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.56.131.0/24 Signature Algorithm: sha256WithRSAEncryption aa:27:cb:64:64:47:2a:18:8e:74:35:ab:18:04:b1:ec:52:2f: e2:bf:13:46:7b:52:10:7f:08:55:e8:1c:bb:e7:30:a4:8b:1d: 8d:23:52:46:f9:9f:bd:e4:89:2c:2d:18:eb:51:a2:f1:ad:1a: 94:2c:4b:d0:4a:1a:da:a5:50:b2:89:f0:c5:d9:9f:18:0c:d9: 39:1b:5c:e4:d6:09:be:27:14:f8:5a:65:88:98:0e:8c:24:3b: 8e:af:66:1a:d5:b5:1f:e4:da:b2:79:c8:95:b8:38:94:f7:0d: fa:58:1b:cb:0b:b2:21:9a:c3:4b:e8:72:74:26:72:82:63:eb: 0f:d6:47:5e:9e:f8:d0:1c:37:7b:07:e1:a8:fd:f6:db:35:32: 7c:19:47:2a:55:be:cb:bf:be:f3:f0:83:b6:08:4f:bc:90:ea: 07:f1:44:30:b0:98:65:c1:c7:de:3f:ce:fe:62:3c:f5:8e:5d: c0:13:8c:24:5f:9c:ec:0e:46:bb:a6:c6:60:57:20:bf:f7:67: b5:63:54:2c:a1:96:f0:bd:7b:6f:e3:19:99:d3:14:46:f2:f0: 94:7a:ba:ac:48:2a:0d:84:b1:f5:ea:24:5a:a7:54:b1:33:68: ff:5d:e8:d5:81:7d:f6:2a:b8:86:9d:b0:f1:b3:67:86:f0:fe: 1d:0c:0a:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFt47hEvPI6B7jeQL0SY3GwJoHSIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAxMDAwMDIwWhcNMjUwODA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YmI3ODMwMjJjZDczMWI2OGViMTMzMzNmYTc1Njc4YmFk Mjc1ZTllNTczODdiNGM0MDcxZTA4ZGQ0OThhZDQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5A5VoiNWy41z7rHxyc9mG0Ed3UE2JKO+Kxvsxr5nn8LqB 2wyeqiofHnGjwGfc/4IvIMkPRvZp6rRWPBVaaEYnw2/8njKcB9kAM4poliOBur+D 5SyyfoZ9WdbzeUaMNtc3PU0psiScbe8nIkrKOvvPU4dGeKh0eb8S3Ze3cqpMxf5L qcBvo8A/nPfFi+a56TRBJgwuzlwb+jJxUlkDg2PoSuQi6RDCrKoWPBxakYI5Ipu4 Mlcvmb3gMKtaiHSO+RjohegCFedyYTUrAMEph9aWCYZoYcnZpIDSrlFK+ZD6y8oo Jhr/gjv3j92origpCyzcyoFJ96JphJdaSIPkOB9bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDQ59X8B2lW6j9D8uxamSnzFoblQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzllYmFkOWM3LTRjMjgtNDNkYi04MDBmLWNlNzY0ZTMyMTFmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAByOIMwDQYJKoZIhvcNAQELBQADggEBAKony2RkRyoYjnQ1qxgEsexSL+K/ E0Z7UhB/CFXoHLvnMKSLHY0jUkb5n73kiSwtGOtRovGtGpQsS9BKGtqlULKJ8MXZ nxgM2TkbXOTWCb4nFPhaZYiYDowkO46vZhrVtR/k2rJ5yJW4OJT3DfpYG8sLsiGa w0vocnQmcoJj6w/WR16e+NAcN3sH4aj99ts1MnwZRypVvsu/vvPwg7YIT7yQ6gfx RDCwmGXBx94/zv5iPPWOXcATjCRfnOwORrumxmBXIL/3Z7VjVCyhlvC9e2/jGZnT FEby8JR6uqxIKg2EsfXqJFqnVLEzaP9d6NWBffYquIadsPGzZ4bw/h0MCsY= -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:00 2025 by rpki-client