$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5fabac-e9be-40aa-9799-176f85dddf91.roa File: fa5fabac-e9be-40aa-9799-176f85dddf91.roa (raw, json) Hash identifier: Q6bo0NRUoyyyNnP7GvXxwtOtcHbubGKQWijQEQGffKI= Subject key identifier: 3B:A5:88:9A:32:D9:54:9D:ED:F4:63:37:79:97:A6:09:62:9A:61:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38EC2DE7BF69937CC8B3EA948DF44C07FC5DB9B4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5fabac-e9be-40aa-9799-176f85dddf91.roa Signing time: Tue 08 Jul 2025 15:12:18 +0000 ROA not before: Tue 08 Jul 2025 15:12:18 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 119.12.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ec:2d:e7:bf:69:93:7c:c8:b3:ea:94:8d:f4:4c:07:fc:5d:b9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:12:18 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=4a27e22c887554550b577d699d69ff8d6c90711b6c110eef3c287d57de7a53fc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d6:d9:ee:68:46:eb:92:fe:a4:f5:f2:9f:61: 53:0d:32:b3:67:c6:1d:43:ed:3b:72:88:7c:f9:11: 54:a0:09:10:f2:68:a5:17:cb:6e:e8:89:7c:5c:43: 6c:b3:ee:e6:c0:7e:09:67:dc:e8:93:a5:24:2a:1e: 8d:bf:6f:94:e1:1b:89:5d:6d:8b:ec:35:9f:e7:73: 77:83:36:e5:1a:ae:49:8e:c2:aa:eb:12:4d:a5:82: 8f:4a:e4:c2:22:ae:af:fb:fc:5d:3d:ad:24:1f:f4: 2f:40:ee:0a:18:c9:ff:9b:e0:55:b8:d8:48:ff:25: 01:e3:47:12:f0:88:90:c8:2d:ad:d7:e6:f0:13:da: db:97:ae:6d:8b:89:b5:ef:44:0c:3f:d5:78:e0:44: db:33:b0:94:07:15:ab:bf:52:46:3c:a3:7c:5c:8b: 90:95:28:13:31:c5:6f:e8:88:16:40:7e:90:48:ea: a0:fa:07:e1:2e:cd:fa:d2:4e:71:da:14:6c:bf:27: 64:3b:de:3f:c5:50:72:f6:0d:a0:7f:15:84:e3:44: a2:d6:c2:e4:1c:b8:f7:5e:84:4f:8e:8f:b9:57:e7: 40:ed:ab:53:1e:41:22:f6:65:1c:bb:f7:ab:cb:06: ab:76:ad:e1:ef:da:a6:88:57:35:c5:be:6a:0f:fe: 03:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A5:88:9A:32:D9:54:9D:ED:F4:63:37:79:97:A6:09:62:9A:61:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5fabac-e9be-40aa-9799-176f85dddf91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.12.144.0/21 Signature Algorithm: sha256WithRSAEncryption 70:bb:b4:4a:91:85:30:96:55:94:7e:45:75:3c:b3:1e:8c:07: 92:4d:af:20:77:e6:47:e9:52:0c:ea:6d:41:77:3c:e1:81:f3: fe:0e:5b:a2:68:63:ae:29:7d:36:19:ca:29:94:f8:57:8b:fe: ee:43:62:35:68:89:eb:67:83:e8:a1:43:90:3f:56:83:41:32: 93:26:6d:01:27:70:90:b6:25:8f:32:8d:75:3f:29:4e:e5:31: 3e:03:7c:a9:eb:77:27:99:d4:5a:4e:eb:42:48:3e:2a:a7:a5: aa:64:ed:44:a5:0f:d9:70:bb:77:ed:15:74:51:13:1e:f0:64: 00:2b:43:aa:36:a4:ab:ab:39:c2:06:dd:52:ac:02:da:95:d3: f8:83:83:88:34:8c:49:17:a1:54:93:f3:60:49:50:9e:8e:3a: 0b:bc:65:35:46:6c:b9:84:1f:d0:2b:ce:86:b8:07:f0:7b:c3: 2a:40:fc:ec:6b:f2:13:22:49:77:f8:08:d0:75:7b:41:7e:b9: 0d:fc:34:83:51:d6:52:23:f8:55:00:4f:a1:c1:a4:70:5a:00: 4c:ff:97:37:6c:59:4f:6c:56:e1:ac:a7:7b:b3:1e:a6:29:28: 71:e3:a8:50:01:c7:5e:90:d6:44:9e:3e:65:0b:4a:ab:5c:5f: 8e:eb:56:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOOwt579pk3zIs+qUjfRMB/xdubQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTUxMjE4WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTI3ZTIyYzg4NzU1NDU1MGI1NzdkNjk5ZDY5ZmY4ZDZj OTA3MTFiNmMxMTBlZWYzYzI4N2Q1N2RlN2E1M2ZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDp1tnuaEbrkv6k9fKfYVMNMrNnxh1D7TtyiHz5EVSgCRDy aKUXy27oiXxcQ2yz7ubAfgln3OiTpSQqHo2/b5ThG4ldbYvsNZ/nc3eDNuUarkmO wqrrEk2lgo9K5MIirq/7/F09rSQf9C9A7goYyf+b4FW42Ej/JQHjRxLwiJDILa3X 5vAT2tuXrm2LibXvRAw/1XjgRNszsJQHFau/UkY8o3xci5CVKBMxxW/oiBZAfpBI 6qD6B+EuzfrSTnHaFGy/J2Q73j/FUHL2DaB/FYTjRKLWwuQcuPdehE+Oj7lX50Dt q1MeQSL2ZRy796vLBqt2reHv2qaIVzXFvmoP/gNTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO6WImjLZVJ3t9GM3eZemCWKaYW8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhNWZhYmFjLWU5YmUtNDBhYS05Nzk5LTE3NmY4NWRkZGY5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN3DJAwDQYJKoZIhvcNAQELBQADggEBAHC7tEqRhTCWVZR+RXU8sx6MB5JN ryB35kfpUgzqbUF3POGB8/4OW6JoY64pfTYZyimU+FeL/u5DYjVoietng+ihQ5A/ VoNBMpMmbQEncJC2JY8yjXU/KU7lMT4DfKnrdyeZ1FpO60JIPiqnpapk7USlD9lw u3ftFXRREx7wZAArQ6o2pKurOcIG3VKsAtqV0/iDg4g0jEkXoVST82BJUJ6OOgu8 ZTVGbLmEH9Arzoa4B/B7wypA/Oxr8hMiSXf4CNB1e0F+uQ38NINR1lIj+FUAT6HB pHBaAEz/lzdsWU9sVuGsp3uzHqYpKHHjqFABx16Q1kSePmULSqtcX47rVm0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:51 2025 by rpki-client