$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eb7d6a7-f765-4169-a934-a96d9ca32a23.roa File: 6eb7d6a7-f765-4169-a934-a96d9ca32a23.roa (raw, json) Hash identifier: Bzj/Srl7R2DPq7oY5xWUtOWnuqMsvguLym662EcEP0U= Subject key identifier: D7:42:30:05:EA:0D:62:A8:3D:D2:3C:8E:80:BE:01:31:8A:FE:9C:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38B4E5811941B654012A121A75ED20CA877409 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eb7d6a7-f765-4169-a934-a96d9ca32a23.roa Signing time: Fri 29 Aug 2025 00:10:35 +0000 ROA not before: Fri 29 Aug 2025 00:10:35 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 119.13.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b4:e5:81:19:41:b6:54:01:2a:12:1a:75:ed:20:ca:87:74:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 00:10:35 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=5c21404e592c1e533129b7b2d6f761ea408006c7f1d44d11ca1eb3be0e5fa8ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c3:e9:28:61:78:ae:01:da:4f:60:29:07:05: 66:3d:60:a5:be:da:8a:dc:ac:5a:33:06:8c:72:a0: 17:66:3a:19:49:eb:ea:f6:f1:15:db:e6:5b:a0:d8: 02:8f:a2:54:bb:f9:4e:77:3e:58:c4:6a:1f:10:16: 29:3d:af:1f:3e:d6:16:6e:3d:41:70:a9:cc:70:82: c0:fa:fb:12:4a:97:35:99:0c:b0:9d:51:07:eb:46: 5d:a5:79:6c:fa:43:12:84:27:ac:de:70:e2:5e:8f: 86:e6:0d:d5:fd:be:22:d7:dd:0b:38:a2:56:48:7d: b7:03:3f:5a:28:28:a3:96:0a:05:07:5c:92:a0:af: 6e:70:73:61:9f:7a:a2:21:be:62:ba:3b:7d:38:45: cb:33:0f:02:0b:f4:cb:9a:76:66:f8:49:5e:67:27: 27:e5:4d:07:35:dd:e6:39:36:bb:42:2c:68:12:a5: 25:3c:63:af:e2:48:4c:50:4c:a5:15:d4:2b:48:90: 01:e9:81:65:a3:bc:2a:e1:fd:dc:a0:3b:42:40:99: 66:9d:a0:1c:df:40:58:ea:73:1b:c3:e7:e8:68:6a: 89:d8:d9:5b:4f:ef:02:26:e5:ad:f8:3b:59:42:49: ba:a2:a5:d1:e0:25:aa:88:01:a2:7e:8b:76:1d:cf: 56:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:42:30:05:EA:0D:62:A8:3D:D2:3C:8E:80:BE:01:31:8A:FE:9C:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eb7d6a7-f765-4169-a934-a96d9ca32a23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.13.244.0/22 Signature Algorithm: sha256WithRSAEncryption 85:0a:a4:aa:d8:42:a5:13:9a:54:b6:63:48:83:2f:4d:41:cd: 55:00:42:6e:a1:2d:0b:da:72:60:f6:f8:22:53:3e:47:42:22: d3:2e:bb:59:3d:32:6f:87:49:db:0d:cd:b7:34:df:34:40:6a: 60:62:a4:7d:d4:52:e7:90:9c:f4:83:3e:8b:94:89:0e:a4:e9: 39:fc:b7:55:00:13:0f:4a:4b:a8:99:9c:6f:dd:bb:52:40:08: b2:58:61:d0:0c:55:8e:e5:ea:23:fa:92:66:1c:12:83:c4:cc: cc:80:b2:ed:0f:72:30:9f:cc:33:05:23:01:13:ff:67:bf:09: d6:94:b0:af:a7:64:36:39:5a:da:3e:bf:91:ab:17:b1:d7:5c: 2a:26:65:f7:da:9a:95:9d:f4:b7:a5:2f:eb:02:f2:9d:49:60: 10:d7:d9:83:98:02:8d:ca:89:b2:65:39:80:45:d8:68:ce:bb: c4:62:a5:3c:98:23:15:19:1f:38:13:f0:09:a2:d5:3b:a2:fa: ab:e5:4b:2a:82:82:42:c8:bd:13:ee:a6:19:0e:b7:1f:b7:51: 56:c7:e7:00:ca:05:52:49:10:80:9d:4b:87:7a:d5:c4:ad:68: fd:69:d9:43:9c:ee:59:56:13:c1:37:70:0c:84:39:d1:b9:44: 1b:8b:36:7e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITOLTlgRlBtlQBKhIade0gyod0CTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA4MjkwMDEwMzVaFw0yNTEwMDMyMzU5NTla MHoxSTBHBgNVBAUTQDVjMjE0MDRlNTkyYzFlNTMzMTI5YjdiMmQ2Zjc2MWVhNDA4 MDA2YzdmMWQ0NGQxMWNhMWViM2JlMGU1ZmE4ZWYxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANTD6ShheK4B2k9gKQcFZj1gpb7aitysWjMGjHKgF2Y6GUnr 6vbxFdvmW6DYAo+iVLv5Tnc+WMRqHxAWKT2vHz7WFm49QXCpzHCCwPr7EkqXNZkM sJ1RB+tGXaV5bPpDEoQnrN5w4l6PhuYN1f2+ItfdCziiVkh9twM/Wigoo5YKBQdc kqCvbnBzYZ96oiG+Yro7fThFyzMPAgv0y5p2ZvhJXmcnJ+VNBzXd5jk2u0IsaBKl JTxjr+JITFBMpRXUK0iQAemBZaO8KuH93KA7QkCZZp2gHN9AWOpzG8Pn6GhqidjZ W0/vAiblrfg7WUJJuqKl0eAlqogBon6Ldh3PVo0CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTXQjAF6g1iqD3SPI6AvgExiv6c7jAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNmViN2Q2YTctZjc2NS00MTY5LWE5MzQtYTk2ZDljYTMyYTIzLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAncN9DANBgkqhkiG9w0BAQsFAAOCAQEAhQqkqthCpROaVLZjSIMvTUHNVQBC bqEtC9pyYPb4IlM+R0Ii0y67WT0yb4dJ2w3NtzTfNEBqYGKkfdRS55Cc9IM+i5SJ DqTpOfy3VQATD0pLqJmcb927UkAIslhh0AxVjuXqI/qSZhwSg8TMzICy7Q9yMJ/M MwUjARP/Z78J1pSwr6dkNjla2j6/kasXsddcKiZl99qalZ30t6Uv6wLynUlgENfZ g5gCjcqJsmU5gEXYaM67xGKlPJgjFRkfOBPwCaLVO6L6q+VLKoKCQsi9E+6mGQ63 H7dRVsfnAMoFUkkQgJ1Lh3rVxK1o/WnZQ5zuWVYTwTdwDIQ50blEG4s2fg== -----END CERTIFICATE-----Generated at Sat Sep 6 14:05:49 2025 by rpki-client