$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0e3fb9a-1677-41cb-ad7a-b5231049acda.roa File: d0e3fb9a-1677-41cb-ad7a-b5231049acda.roa (raw, json) Hash identifier: yT36xv8iJdOCq669HXCe9d0OZ+eBlSleEeoVN31PFXM= Subject key identifier: D0:EE:FD:61:34:0B:23:DB:CC:05:BC:A1:60:42:FC:D8:04:04:F8:F9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 320645DC23F192261A67B01DE5D2FB11228AEB41 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0e3fb9a-1677-41cb-ad7a-b5231049acda.roa Signing time: Sat 12 Jul 2025 00:21:41 +0000 ROA not before: Sat 12 Jul 2025 00:21:41 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 202.5.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:06:45:dc:23:f1:92:26:1a:67:b0:1d:e5:d2:fb:11:22:8a:eb:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 12 00:21:41 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=4acc5edb39376909d6d56515fb3aaab95b94fbeb0e25a535b5defc32ef87a265, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:52:bf:13:b9:35:ea:16:c0:50:5f:6f:68: 5e:38:59:f2:f0:07:78:a1:ae:e6:6f:35:10:c2:ae: c0:c5:71:25:3c:3f:62:48:95:f2:b9:60:e9:16:22: 50:fe:13:d4:b1:2e:33:02:0f:bf:29:c7:08:a8:8e: 19:97:41:64:e5:a3:31:5a:fd:04:88:57:e0:2d:a2: b5:37:ae:a3:fb:16:dc:5e:7f:c5:8b:b3:4a:d1:a2: d1:a8:89:7e:6e:58:13:31:28:10:88:1e:a0:b5:be: 26:fb:63:13:04:84:6a:41:11:7d:08:3d:a3:75:21: 0e:51:9e:6b:e2:96:5f:ce:40:ac:c7:11:4a:a0:c2: 33:fc:72:3a:fa:61:05:87:02:73:9c:08:04:4c:cb: 9d:ec:e1:e1:cd:c6:17:93:39:0e:0f:51:58:f0:30: 78:b1:fd:6f:b1:3f:28:a4:02:62:7e:16:5e:39:dc: ea:9a:fb:08:56:7a:dd:ef:a1:d2:c4:29:81:33:59: ad:07:08:ef:69:2b:69:30:ea:95:9d:b0:b1:cc:42: 4a:a9:dd:d8:9c:09:e0:61:a8:ef:a1:5f:ff:6f:d1: 87:97:a1:9a:7d:04:bc:33:1a:8b:18:78:d5:13:ed: c5:93:d2:0d:71:8d:30:40:df:51:0d:1e:62:12:c0: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EE:FD:61:34:0B:23:DB:CC:05:BC:A1:60:42:FC:D8:04:04:F8:F9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0e3fb9a-1677-41cb-ad7a-b5231049acda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.5.191.0/24 Signature Algorithm: sha256WithRSAEncryption 07:2f:6e:85:e1:9b:21:74:8c:af:28:4c:56:03:69:b8:aa:29: f6:cb:22:04:43:1b:b0:01:e9:b2:b0:e6:a5:b6:96:d8:9b:a4: e2:0a:3b:91:be:9e:7f:66:8c:78:4d:c3:0a:7d:c3:53:2b:8c: f2:57:ba:16:13:08:53:8f:c4:bb:7d:11:9a:84:64:30:fd:f1: 9a:3f:76:80:56:10:05:c5:3b:bd:d3:ca:1c:19:a9:c5:e4:9c: b0:fd:b9:a0:9c:e2:3d:77:1f:1e:b9:27:49:69:9f:bc:f1:af: fd:f6:8b:55:b6:13:13:f2:29:50:5e:0a:ff:53:3c:76:60:2c: 61:c6:ea:ec:df:ab:66:60:7a:88:49:57:66:bd:9f:8c:45:f8: 91:4c:57:80:86:7c:f3:dd:27:29:27:1b:e2:81:31:57:97:e3: f5:a4:b5:02:9c:be:85:97:85:dc:8a:80:91:7a:a7:4f:d5:88: 6a:7e:b4:bb:19:c6:b0:ed:03:64:ff:59:2c:95:f7:fa:ed:1a: ae:f7:24:ac:d4:51:82:9a:bd:30:96:d5:3f:3f:ae:37:3e:ac: 84:4a:e2:15:f7:0d:07:e5:fe:02:24:0f:d5:2f:f2:ba:02:d9: 31:7b:48:f4:85:d6:3d:e8:40:a9:a2:8c:2e:3b:4b:62:f5:bc: cf:1f:f7:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMgZF3CPxkiYaZ7Ad5dL7ESKK60EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzEyMDAyMTQxWhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWNjNWVkYjM5Mzc2OTA5ZDZkNTY1MTVmYjNhYWFiOTVi OTRmYmViMGUyNWE1MzViNWRlZmMzMmVmODdhMjY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX4VK/E7k16hbAUF9vaF44WfLwB3ihruZvNRDCrsDFcSU8 P2JIlfK5YOkWIlD+E9SxLjMCD78pxwiojhmXQWTlozFa/QSIV+AtorU3rqP7Ftxe f8WLs0rRotGoiX5uWBMxKBCIHqC1vib7YxMEhGpBEX0IPaN1IQ5Rnmvill/OQKzH EUqgwjP8cjr6YQWHAnOcCARMy53s4eHNxheTOQ4PUVjwMHix/W+xPyikAmJ+Fl45 3Oqa+whWet3vodLEKYEzWa0HCO9pK2kw6pWdsLHMQkqp3dicCeBhqO+hX/9v0YeX oZp9BLwzGosYeNUT7cWT0g1xjTBA31ENHmISwFLRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0O79YTQLI9vMBbyhYEL82AQE+PkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QwZTNmYjlhLTE2NzctNDFjYi1hZDdhLWI1MjMxMDQ5YWNkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKBb8wDQYJKoZIhvcNAQELBQADggEBAAcvboXhmyF0jK8oTFYDabiqKfbL IgRDG7AB6bKw5qW2ltibpOIKO5G+nn9mjHhNwwp9w1MrjPJXuhYTCFOPxLt9EZqE ZDD98Zo/doBWEAXFO73TyhwZqcXknLD9uaCc4j13Hx65J0lpn7zxr/32i1W2ExPy KVBeCv9TPHZgLGHG6uzfq2ZgeohJV2a9n4xF+JFMV4CGfPPdJyknG+KBMVeX4/Wk tQKcvoWXhdyKgJF6p0/ViGp+tLsZxrDtA2T/WSyV9/rtGq73JKzUUYKavTCW1T8/ rjc+rIRK4hX3DQfl/gIkD9Uv8roC2TF7SPSF1j3oQKmijC47S2L1vM8f9zQ= -----END CERTIFICATE-----Generated at Thu Jul 24 04:57:45 2025 by rpki-client