$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb7c0f11-c131-4260-9a19-7cd284e4cb97.roa File: cb7c0f11-c131-4260-9a19-7cd284e4cb97.roa (raw, json) Hash identifier: Ah9I+5QIkieCgkxwcps3M7Irr75AZIBryjKp2IL/9Ys= Subject key identifier: 6B:6A:2F:25:DB:6A:C9:E3:EC:5D:71:99:66:93:0B:17:84:BE:66:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 356D4CFF8357C297CA8D8B2EFDB72DE77A35FF4C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb7c0f11-c131-4260-9a19-7cd284e4cb97.roa Signing time: Sat 12 Jul 2025 00:00:32 +0000 ROA not before: Sat 12 Jul 2025 00:00:32 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 122.200.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6d:4c:ff:83:57:c2:97:ca:8d:8b:2e:fd:b7:2d:e7:7a:35:ff:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 12 00:00:32 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=f0dfb2a4eedf2f67099fde302dbc6d4b04eebe0cb58b85b6d665c87132d5f659, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:83:df:c2:4e:49:a8:a2:d9:e8:bb:44:86: a7:ee:0a:ed:cb:c4:23:be:b3:9c:54:3d:b1:06:4e: 5f:89:60:95:07:20:b8:cd:2e:3c:42:74:89:64:3f: 3e:3e:cd:7d:19:d1:3e:1d:e9:41:7c:68:99:82:e6: ec:73:a5:92:ff:39:53:6a:b0:9a:18:df:7d:9f:36: 3c:89:cb:97:18:dc:9b:6f:1c:53:79:58:7c:4e:42: 7d:65:9c:b7:bd:b0:81:e5:91:15:4a:77:4c:6a:cc: 5c:d3:dc:e6:bb:8c:a0:c4:4d:a7:7c:1f:3f:30:44: 1d:c7:48:cc:ca:8c:a0:f2:71:15:13:70:53:85:92: 4d:83:7f:80:bd:9c:ce:ac:23:ef:33:d3:09:6b:83: 89:d6:e9:08:36:35:fa:9e:81:5b:fc:ab:3d:26:84: c8:83:16:ef:f1:4a:c0:31:2c:e2:02:a4:9f:88:1b: 3a:96:48:62:f3:63:ac:64:6f:1f:a4:0a:bd:1e:a0: 0a:a6:e1:2e:fb:dd:db:70:7c:53:13:c9:86:5f:29: f1:02:e6:47:da:d4:b6:29:95:d6:a9:14:bb:4c:0c: b4:48:a3:cf:36:23:e3:53:a3:65:f1:ac:ed:5e:00: 53:a8:7f:bb:db:72:c1:1d:ec:03:17:e2:5d:1c:1d: ac:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6A:2F:25:DB:6A:C9:E3:EC:5D:71:99:66:93:0B:17:84:BE:66:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb7c0f11-c131-4260-9a19-7cd284e4cb97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.200.61.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:79:2b:4b:dc:56:b2:3b:ca:3a:e5:cc:02:9e:b7:98:55:0c: 7e:11:c4:74:06:d0:fc:54:a5:a3:02:f8:60:bf:2c:6a:83:63: 28:e2:54:94:bb:04:0e:1a:c2:ba:e3:a0:05:69:0e:ee:35:0a: 24:0a:e1:9a:c3:1a:0d:86:e6:38:c6:dd:a5:c2:bb:0c:eb:0d: 0f:61:f2:0e:3f:25:58:f8:bc:26:34:70:3e:7e:3e:83:d8:25: 37:6a:42:99:41:d8:df:9e:07:19:f7:9f:6c:49:e7:28:43:4b: 8d:d6:59:cb:ea:2a:b9:19:47:ec:d9:18:c2:8c:60:6b:af:74: b6:ff:cf:b7:5f:30:3b:43:a8:3b:94:47:fc:85:3b:69:33:bb: 7d:c4:d6:d3:4d:76:2c:e3:81:26:b3:05:ce:02:c7:11:5e:dd: b4:90:dd:63:b8:40:af:ef:7b:6c:0a:50:c7:73:27:57:4b:12: af:74:99:49:55:fa:a4:08:85:e8:71:4a:e3:9e:67:35:c2:60: 76:a2:31:d7:72:7e:ed:97:9b:e8:3d:85:6b:7c:9c:41:e8:c9: 72:ec:23:89:da:54:78:30:9a:68:5b:c2:2c:09:31:99:ff:cd: 2f:ad:8f:87:2c:4b:21:1a:bc:58:d7:5e:05:2a:15:4f:ab:ec: e9:29:9e:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNW1M/4NXwpfKjYsu/bct53o1/0wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzEyMDAwMDMyWhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMGRmYjJhNGVlZGYyZjY3MDk5ZmRlMzAyZGJjNmQ0YjA0 ZWViZTBjYjU4Yjg1YjZkNjY1Yzg3MTMyZDVmNjU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/dYPfwk5JqKLZ6LtEhqfuCu3LxCO+s5xUPbEGTl+JYJUH ILjNLjxCdIlkPz4+zX0Z0T4d6UF8aJmC5uxzpZL/OVNqsJoY332fNjyJy5cY3Jtv HFN5WHxOQn1lnLe9sIHlkRVKd0xqzFzT3Oa7jKDETad8Hz8wRB3HSMzKjKDycRUT cFOFkk2Df4C9nM6sI+8z0wlrg4nW6Qg2NfqegVv8qz0mhMiDFu/xSsAxLOICpJ+I GzqWSGLzY6xkbx+kCr0eoAqm4S773dtwfFMTyYZfKfEC5kfa1LYpldapFLtMDLRI o882I+NTo2XxrO1eAFOof7vbcsEd7AMX4l0cHazTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUa2ovJdtqyePsXXGZZpMLF4S+ZjgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiN2MwZjExLWMxMzEtNDI2MC05YTE5LTdjZDI4NGU0Y2I5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAB6yD0wDQYJKoZIhvcNAQELBQADggEBAB15K0vcVrI7yjrlzAKet5hVDH4R xHQG0PxUpaMC+GC/LGqDYyjiVJS7BA4awrrjoAVpDu41CiQK4ZrDGg2G5jjG3aXC uwzrDQ9h8g4/JVj4vCY0cD5+PoPYJTdqQplB2N+eBxn3n2xJ5yhDS43WWcvqKrkZ R+zZGMKMYGuvdLb/z7dfMDtDqDuUR/yFO2kzu33E1tNNdizjgSazBc4CxxFe3bSQ 3WO4QK/ve2wKUMdzJ1dLEq90mUlV+qQIhehxSuOeZzXCYHaiMddyfu2Xm+g9hWt8 nEHoyXLsI4naVHgwmmhbwiwJMZn/zS+tj4csSyEavFjXXgUqFU+r7OkpntE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:51 2025 by rpki-client