$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e92352d2-6b0e-45e3-83ad-b6711b720950.roa File: e92352d2-6b0e-45e3-83ad-b6711b720950.roa (raw, json) Hash identifier: ow1NSwcuCssKsSuqjlGhR4wjmoTjDqjHXVtK51d0Gn0= Subject key identifier: 09:96:E9:23:24:8E:DB:EA:A8:B2:03:CC:56:61:16:37:BE:31:E9:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F56C9ADC2873FE887E2BD3591237329E6981694 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e92352d2-6b0e-45e3-83ad-b6711b720950.roa Signing time: Mon 07 Jul 2025 16:01:25 +0000 ROA not before: Mon 07 Jul 2025 16:01:25 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.238.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:56:c9:ad:c2:87:3f:e8:87:e2:bd:35:91:23:73:29:e6:98:16:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:01:25 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=91dc0e9a5183607a2c5313db199bafd4c3d9860f7634888eb65bac8e2b098cca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6c:5f:31:87:1d:55:42:67:94:c7:48:2c:b6: 06:df:54:41:3c:90:43:e3:01:4c:6c:82:3c:71:48: 7d:38:e9:ad:47:01:9b:77:05:db:54:91:a0:7e:98: 3c:2c:a8:fd:67:ed:a3:a3:59:2f:1d:85:93:aa:58: b8:10:2f:8c:68:16:ce:47:db:42:11:aa:16:91:3c: 1c:fe:40:59:35:c6:9f:30:fe:d1:38:c4:d7:c8:69: 56:62:92:8d:5b:b5:9f:53:34:dd:c3:b5:d1:ef:aa: 64:5c:5b:0f:f6:2b:7a:8d:8a:70:a4:47:85:3b:95: 5b:fe:74:f3:cd:4e:03:9e:cc:a9:ef:af:30:9c:65: db:00:7c:37:25:b0:7e:ca:22:b2:e3:86:ae:cc:3d: 90:8b:20:87:22:cc:fa:96:f8:40:80:5b:fb:fa:1e: 58:07:4e:e7:68:9b:b7:04:20:86:21:89:59:a1:d8: a4:a2:76:b8:c4:6d:96:b6:e4:f9:13:e6:52:b1:a7: c7:a8:cb:f4:c6:f9:47:bd:f0:ac:9a:f2:f7:73:e1: d5:4b:23:5e:44:f1:dd:29:c6:fa:60:4d:ca:1d:24: 8f:c5:e3:5c:33:5b:dd:25:b3:fb:27:5a:3c:24:fd: a9:80:4b:1a:f0:9c:f2:fe:47:ef:de:3d:6d:24:a0: 44:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:96:E9:23:24:8E:DB:EA:A8:B2:03:CC:56:61:16:37:BE:31:E9:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e92352d2-6b0e-45e3-83ad-b6711b720950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.238.16.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:2b:ff:06:13:34:52:45:38:f0:e9:dc:62:94:83:91:ca:da: 18:94:cf:52:17:a5:be:a9:51:0b:dc:da:b7:72:51:a9:e1:d8: ad:bf:44:a4:c5:e2:9c:03:31:40:a3:18:df:c4:4a:51:18:a0: 3d:6e:63:4c:d3:29:fd:54:1d:bd:e9:06:49:e5:bd:d7:e0:b8: 26:79:c2:9b:97:6c:14:35:46:5f:92:ed:06:ca:07:be:88:67: 86:19:3a:4a:b2:fb:87:c1:26:9d:31:88:0d:ac:a2:64:76:55: 3a:f5:81:b3:cc:0a:e3:62:ae:df:e6:5a:dc:32:20:05:f8:43: 55:71:06:6b:d7:10:85:5e:4b:0f:aa:5c:55:64:2f:5c:69:87: 82:de:20:7c:a7:d8:c2:1f:b7:7c:1e:e3:e6:b7:1e:23:79:81: 71:ec:12:4d:19:da:0c:b8:26:70:f2:21:05:94:93:13:8d:cf: ff:75:ef:5d:ee:01:f0:77:b9:b4:df:4d:1b:91:5a:df:d0:8f: 15:b5:a0:cf:f1:7e:90:59:e1:cd:93:b6:f4:c5:4c:ff:9f:bd: a2:a4:e8:a9:87:e3:7c:33:4c:52:d8:79:76:b2:96:71:2b:6f: 3c:bf:83:eb:4e:46:78:e7:1b:45:e1:4d:6b:91:d2:7d:bb:14: 24:bf:5f:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD1bJrcKHP+iH4r01kSNzKeaYFpQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYwMTI1WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MWRjMGU5YTUxODM2MDdhMmM1MzEzZGIxOTliYWZkNGMz ZDk4NjBmNzYzNDg4OGViNjViYWM4ZTJiMDk4Y2NhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnbF8xhx1VQmeUx0gstgbfVEE8kEPjAUxsgjxxSH046a1H AZt3BdtUkaB+mDwsqP1n7aOjWS8dhZOqWLgQL4xoFs5H20IRqhaRPBz+QFk1xp8w /tE4xNfIaVZiko1btZ9TNN3DtdHvqmRcWw/2K3qNinCkR4U7lVv+dPPNTgOezKnv rzCcZdsAfDclsH7KIrLjhq7MPZCLIIcizPqW+ECAW/v6HlgHTudom7cEIIYhiVmh 2KSidrjEbZa25PkT5lKxp8eoy/TG+Ue98Kya8vdz4dVLI15E8d0pxvpgTcodJI/F 41wzW90ls/snWjwk/amASxrwnPL+R+/ePW0koERvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCZbpIySO2+qosgPMVmEWN74x6fgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U5MjM1MmQyLTZiMGUtNDVlMy04M2FkLWI2NzExYjcyMDk1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJu7hAwDQYJKoZIhvcNAQELBQADggEBAAsr/wYTNFJFOPDp3GKUg5HK2hiU z1IXpb6pUQvc2rdyUanh2K2/RKTF4pwDMUCjGN/ESlEYoD1uY0zTKf1UHb3pBknl vdfguCZ5wpuXbBQ1Rl+S7QbKB76IZ4YZOkqy+4fBJp0xiA2somR2VTr1gbPMCuNi rt/mWtwyIAX4Q1VxBmvXEIVeSw+qXFVkL1xph4LeIHyn2MIft3we4+a3HiN5gXHs Ek0Z2gy4JnDyIQWUkxONz/91713uAfB3ubTfTRuRWt/QjxW1oM/xfpBZ4c2TtvTF TP+fvaKk6KmH43wzTFLYeXaylnErbzy/g+tORnjnG0XhTWuR0n27FCS/X8A= -----END CERTIFICATE-----Generated at Mon Jul 21 23:34:49 2025 by rpki-client