$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/711afc9c-219b-409d-9c7f-0d2fb54ac829.roa File: 711afc9c-219b-409d-9c7f-0d2fb54ac829.roa (raw, json) Hash identifier: 0QKYJiJKm7mmlmc4ITFMgIlRlyB0CUEWr6EQQJaWPUU= Subject key identifier: 27:0A:92:CF:31:67:F4:F0:39:6C:BD:B6:C4:85:29:C0:29:23:4C:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 548088E50A390002DF2903AFE4E6F114FA040443 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/711afc9c-219b-409d-9c7f-0d2fb54ac829.roa Signing time: Tue 26 Aug 2025 15:01:30 +0000 ROA not before: Tue 26 Aug 2025 15:01:30 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 119.13.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:80:88:e5:0a:39:00:02:df:29:03:af:e4:e6:f1:14:fa:04:04:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:01:30 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=a8dce4f0b3937bbf319bec2780b27f2d1697ce13a0deeee6d4a18dd9a29df819, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:73:70:8c:d5:5a:89:62:11:92:09:cc:76: aa:37:39:f2:e6:7b:d0:9a:18:46:a3:67:fa:be:c4: 20:02:7e:55:3a:a5:a2:d1:e6:6a:eb:c5:70:7c:47: 80:04:34:4e:a0:a4:58:4b:f4:9e:c0:0d:bb:01:d5: 06:17:83:7f:5d:96:31:14:b0:fb:bf:07:b6:a3:04: 5e:d2:b4:8f:30:80:89:a3:33:2e:5a:b9:20:ed:50: e2:a7:ea:31:b8:6e:18:d7:63:c1:6f:9c:67:b1:38: 79:84:50:87:2d:9f:f4:b6:a5:e7:64:86:0f:ad:28: 4c:04:89:ff:f7:e6:7b:9d:24:4f:0b:0a:d3:9d:e3: fc:d9:60:9f:71:7f:46:14:40:5f:d8:ee:ec:dd:fc: 52:0b:6a:a1:ec:45:0d:1d:56:72:67:71:16:ba:9f: 90:15:62:b6:fc:0c:d4:61:f6:35:d3:68:0d:ff:48: 84:26:33:f5:00:f9:ac:79:a4:21:a2:b6:3e:b5:4e: b5:aa:91:08:9f:06:1b:d2:8d:6b:30:75:58:3f:71: 11:0e:f6:2e:fb:be:26:09:13:07:29:5f:34:e1:7c: 35:33:b2:8b:c3:d3:b1:c1:3b:a2:0b:24:62:f4:72: 10:f9:f5:e2:b5:e9:a5:74:c8:54:f7:d1:61:3f:ff: 44:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0A:92:CF:31:67:F4:F0:39:6C:BD:B6:C4:85:29:C0:29:23:4C:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/711afc9c-219b-409d-9c7f-0d2fb54ac829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.13.128.0/20 Signature Algorithm: sha256WithRSAEncryption b0:6e:43:cf:c1:14:ee:34:d6:43:20:1c:59:d9:39:e7:b7:05: a5:6c:02:7a:66:f2:45:fb:26:2e:48:b1:50:70:d2:90:f0:b1: 6a:95:a6:75:a4:fd:4c:2c:61:61:c9:dc:95:ee:df:80:46:47: a4:8f:25:d7:6c:c3:c4:bd:3b:e0:bf:9e:77:62:e8:83:a7:3b: 8e:0a:62:ed:e8:3a:d2:da:ef:43:53:dc:a2:80:74:2f:1f:8b: 04:15:9a:d9:9f:4a:6a:f6:35:e2:84:62:89:76:27:92:bf:38: 2b:c4:c5:e2:3e:8a:ea:0e:a7:fe:19:a5:7b:85:29:31:d6:45: 76:92:09:f4:17:8d:7f:f9:1f:08:06:4b:bd:b4:19:fc:cf:ac: cd:4f:f0:5e:45:1d:53:44:1b:a6:10:d9:fd:69:62:50:28:2a: 1f:ba:51:76:0f:99:1c:3e:30:cc:28:ba:61:f7:e6:fa:a3:7a: 55:af:24:26:89:45:15:c8:6e:07:7a:e2:fd:97:bd:e7:c0:c8: c9:0e:ea:b2:de:41:11:f9:f4:98:7c:f3:82:86:fe:09:e1:2e: 64:a8:c9:0d:c5:f5:78:b2:80:b2:e2:4b:20:b8:95:a5:37:ac: 2d:a6:42:f9:7b:ed:62:ca:f2:39:c2:54:36:32:b8:23:67:84: 9b:ef:04:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVICI5Qo5AALfKQOv5ObxFPoEBEMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUwMTMwWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOGRjZTRmMGIzOTM3YmJmMzE5YmVjMjc4MGIyN2YyZDE2 OTdjZTEzYTBkZWVlZTZkNGExOGRkOWEyOWRmODE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHdnNwjNVaiWIRkgnMdqo3OfLme9CaGEajZ/q+xCACflU6 paLR5mrrxXB8R4AENE6gpFhL9J7ADbsB1QYXg39dljEUsPu/B7ajBF7StI8wgImj My5auSDtUOKn6jG4bhjXY8FvnGexOHmEUIctn/S2pedkhg+tKEwEif/35nudJE8L CtOd4/zZYJ9xf0YUQF/Y7uzd/FILaqHsRQ0dVnJncRa6n5AVYrb8DNRh9jXTaA3/ SIQmM/UA+ax5pCGitj61TrWqkQifBhvSjWswdVg/cREO9i77viYJEwcpXzThfDUz sovD07HBO6ILJGL0chD59eK16aV0yFT30WE//0TXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJwqSzzFn9PA5bL22xIUpwCkjTLowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxMWFmYzljLTIxOWItNDA5ZC05YzdmLTBkMmZiNTRhYzgyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAR3DYAwDQYJKoZIhvcNAQELBQADggEBALBuQ8/BFO401kMgHFnZOee3BaVs Anpm8kX7Ji5IsVBw0pDwsWqVpnWk/UwsYWHJ3JXu34BGR6SPJddsw8S9O+C/nndi 6IOnO44KYu3oOtLa70NT3KKAdC8fiwQVmtmfSmr2NeKEYol2J5K/OCvExeI+iuoO p/4ZpXuFKTHWRXaSCfQXjX/5HwgGS720GfzPrM1P8F5FHVNEG6YQ2f1pYlAoKh+6 UXYPmRw+MMwoumH35vqjelWvJCaJRRXIbgd64v2XvefAyMkO6rLeQRH59Jh884KG /gnhLmSoyQ3F9XiygLLiSyC4laU3rC2mQvl77WLK8jnCVDYyuCNnhJvvBNk= -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:31 2025 by rpki-client