$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aeaa84d-4555-408c-adfb-7243b9469a8d.roa File: 5aeaa84d-4555-408c-adfb-7243b9469a8d.roa (raw, json) Hash identifier: QanLzjLampMykXzrWRvbuPiPpL0kMlt8B4V7NPiyXJ4= Subject key identifier: DF:41:5D:36:87:29:7C:05:50:6E:C5:A4:F6:FA:F7:A3:A7:18:15:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D6F7C26E25B3D4D6917DD86FB7069C064DCE7A7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aeaa84d-4555-408c-adfb-7243b9469a8d.roa Signing time: Sat 30 Aug 2025 00:10:27 +0000 ROA not before: Sat 30 Aug 2025 00:10:27 +0000 ROA not after: Sat 04 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 220.157.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6f:7c:26:e2:5b:3d:4d:69:17:dd:86:fb:70:69:c0:64:dc:e7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 30 00:10:27 2025 GMT Not After : Oct 4 23:59:59 2025 GMT Subject: serialNumber=5e994f57a7a8dbed26d0c13837d05ebb6fbab3889a5185dc5f533d4faa181a80, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f6:43:53:03:83:45:b4:73:a2:a8:01:8a:87: 0d:0f:26:df:68:00:39:3e:53:22:29:04:50:ff:7b: 07:a5:2d:4d:82:bf:38:84:72:3c:94:99:a7:64:04: f6:03:91:6c:34:8d:14:ac:7a:12:40:07:80:8d:87: 5e:86:1a:dd:7f:24:f7:fa:6f:14:93:9c:e8:89:db: 95:06:19:8e:27:c0:9d:a7:59:40:24:ba:df:33:3a: 1c:da:f0:92:97:71:48:e0:a9:7b:0e:e9:17:12:76: bc:ee:5d:b8:a9:b3:95:3f:8e:31:f9:24:12:51:83: 55:bb:5d:84:e7:3c:37:d0:f5:d7:d7:cc:78:e2:70: 55:18:12:2c:a3:92:5d:5f:a6:8c:4d:36:01:86:b0: 0f:f5:c8:08:52:48:fd:a1:3a:6e:ab:b7:99:ea:09: 51:4c:98:41:86:21:66:b3:94:e4:9f:2c:9b:d6:35: 1f:06:e6:45:7f:67:5c:79:f8:9a:ab:43:2a:38:dd: fd:c2:a3:ac:06:b5:e3:0d:a0:2b:97:96:82:4f:ce: ae:24:bc:ac:78:8d:da:1c:00:25:c3:fc:60:22:93: fe:83:7e:41:b7:3f:05:bb:25:97:0b:6b:a4:9f:47: 1a:fb:7e:44:63:7c:fa:07:75:f4:82:60:d4:b3:b1: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:41:5D:36:87:29:7C:05:50:6E:C5:A4:F6:FA:F7:A3:A7:18:15:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aeaa84d-4555-408c-adfb-7243b9469a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.157.78.0/24 Signature Algorithm: sha256WithRSAEncryption 89:33:54:9c:94:93:bf:19:4f:a1:89:ad:30:6b:f6:ba:39:3a: 08:ad:65:c6:f6:ac:c6:4a:16:b1:4d:07:b9:18:b0:74:ee:36: 76:59:0e:b7:fe:b9:12:95:c1:c1:0c:fb:a1:b3:cb:3a:4c:e5: 23:1c:92:79:d4:76:ac:9a:37:05:e4:8c:da:f2:59:6b:5b:e3: c7:4d:e1:86:49:ab:01:f8:c0:85:36:4f:7c:2d:66:59:e5:e6: 1a:3c:64:60:02:51:2d:d3:77:f0:eb:ef:26:fb:db:61:7a:f2: 53:db:23:3a:60:94:f5:60:4f:a1:d0:71:af:df:63:e8:6d:16: f1:8e:ea:99:e7:a8:c6:ae:03:5f:84:f5:e4:0e:5f:fa:19:6c: 61:ee:a6:f2:8d:50:45:25:7f:a0:d3:29:05:d3:5a:e2:67:7e: 96:c9:58:dc:9f:46:0a:c6:17:85:ff:86:e1:1f:de:32:3b:3b: d9:3a:61:63:6e:3d:1a:17:93:2f:ef:91:d4:a4:9e:19:76:ea: 8a:fb:55:47:db:1f:a5:05:8f:6a:04:ad:44:df:4d:4a:78:4d: 6c:84:75:2f:7a:26:98:78:8e:46:cb:3f:43:50:ea:63:f6:7e: a8:22:1a:85:35:1e:39:2f:9c:00:51:82:72:c0:b8:a7:3d:30: ee:b6:53:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbW98JuJbPU1pF92G+3BpwGTc56cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDAxMDI3WhcNMjUxMDA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTk5NGY1N2E3YThkYmVkMjZkMGMxMzgzN2QwNWViYjZm YmFiMzg4OWE1MTg1ZGM1ZjUzM2Q0ZmFhMTgxYTgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM9kNTA4NFtHOiqAGKhw0PJt9oADk+UyIpBFD/ewelLU2C vziEcjyUmadkBPYDkWw0jRSsehJAB4CNh16GGt1/JPf6bxSTnOiJ25UGGY4nwJ2n WUAkut8zOhza8JKXcUjgqXsO6RcSdrzuXbips5U/jjH5JBJRg1W7XYTnPDfQ9dfX zHjicFUYEiyjkl1fpoxNNgGGsA/1yAhSSP2hOm6rt5nqCVFMmEGGIWazlOSfLJvW NR8G5kV/Z1x5+JqrQyo43f3Co6wGteMNoCuXloJPzq4kvKx4jdocACXD/GAik/6D fkG3PwW7JZcLa6SfRxr7fkRjfPoHdfSCYNSzsTR9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU30FdNocpfAVQbsWk9vr3o6cYFSQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVhZWFhODRkLTQ1NTUtNDA4Yy1hZGZiLTcyNDNiOTQ2OWE4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcnU4wDQYJKoZIhvcNAQELBQADggEBAIkzVJyUk78ZT6GJrTBr9ro5Ogit Zcb2rMZKFrFNB7kYsHTuNnZZDrf+uRKVwcEM+6GzyzpM5SMcknnUdqyaNwXkjNry WWtb48dN4YZJqwH4wIU2T3wtZlnl5ho8ZGACUS3Td/Dr7yb722F68lPbIzpglPVg T6HQca/fY+htFvGO6pnnqMauA1+E9eQOX/oZbGHupvKNUEUlf6DTKQXTWuJnfpbJ WNyfRgrGF4X/huEf3jI7O9k6YWNuPRoXky/vkdSknhl26or7VUfbH6UFj2oErUTf TUp4TWyEdS96Jph4jkbLP0NQ6mP2fqgiGoU1HjkvnABRgnLAuKc9MO62U1Y= -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:57 2025 by rpki-client