$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ec798da-a6c2-44be-afd4-f4a224668ad8.roa File: 7ec798da-a6c2-44be-afd4-f4a224668ad8.roa (raw, json) Hash identifier: NpYul70+j7U3WtMjo8/OLo9zhgSDuP8plBGABffHeTE= Subject key identifier: 6E:77:EC:14:1F:FF:29:6F:0A:4A:2B:AE:EF:C7:60:BA:15:5C:29:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2555DA6B400734BF3C0F79805885C4BA3DA42884 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ec798da-a6c2-44be-afd4-f4a224668ad8.roa Signing time: Fri 29 Aug 2025 00:10:56 +0000 ROA not before: Fri 29 Aug 2025 00:10:56 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 119.13.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:55:da:6b:40:07:34:bf:3c:0f:79:80:58:85:c4:ba:3d:a4:28:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 00:10:56 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=2b16fd94e2ee76b8bdef1a47b1a0a5cc3d71f4fbd00b5e3611d9983681798584, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e3:0f:ff:b4:c9:b7:35:57:50:5e:6b:e1:8b: 47:52:83:48:8f:9a:20:91:85:24:12:cd:ea:01:7a: 60:34:c6:0e:c9:3d:60:b4:6c:4e:2a:f9:20:a3:8d: d7:fc:a2:af:df:42:99:63:e6:4b:0e:68:a8:c9:cf: 1f:6c:6f:7a:f5:88:b3:d3:0b:e2:0b:54:31:73:17: 82:46:93:45:5f:95:15:2b:8c:56:f7:31:45:55:89: 7f:1d:83:48:40:9e:65:41:51:a5:03:31:f2:9c:e9: 40:29:51:68:88:19:51:62:9a:5c:77:86:e8:97:f2: 06:39:7a:f3:54:3a:cb:b0:57:8e:f8:58:ad:58:2d: fe:af:e5:89:7c:af:54:b9:8a:12:4d:bb:91:e4:5e: f6:b6:05:71:ec:33:2e:ee:d2:c1:f5:bd:51:14:74: 75:57:33:50:02:51:ee:52:59:d7:c3:d4:0d:38:ec: 99:c7:04:78:d9:83:00:10:30:f5:22:f0:f2:d4:4b: 92:c9:ef:50:76:9d:e2:b6:8d:4f:9f:ca:dc:9f:b8: 7b:2f:9c:2b:5d:2f:94:42:25:66:83:22:99:d4:db: 74:73:ff:24:f4:ca:e7:de:5d:37:89:a0:35:57:b3: c3:e3:37:3a:b7:e8:1a:02:1d:7e:9a:bb:6e:45:7f: 79:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:77:EC:14:1F:FF:29:6F:0A:4A:2B:AE:EF:C7:60:BA:15:5C:29:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ec798da-a6c2-44be-afd4-f4a224668ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.13.52.0/22 Signature Algorithm: sha256WithRSAEncryption 14:c9:78:a7:4d:2c:37:30:11:46:65:bc:1d:09:64:26:60:42: db:8d:4e:d1:80:e8:0d:cc:5b:18:fd:e7:5d:d2:b0:e3:c0:d2: 00:7c:ca:25:94:db:19:82:ed:17:2b:e2:fe:7b:35:84:99:ec: 0e:67:58:23:1a:18:a8:64:1d:ba:c7:e2:ed:93:9b:1f:44:3d: 76:02:04:ab:c1:78:28:85:b7:5d:7e:d4:e4:b6:8a:42:11:9f: 20:d6:11:b0:95:e5:42:5d:97:8a:ee:d5:4f:93:3e:7e:d7:f2: 9a:ef:3f:62:12:2d:c5:5a:03:58:57:bf:ea:c7:48:bf:a0:15: af:03:59:e1:b7:3b:ee:19:39:17:ac:5f:8e:1d:3a:ba:a6:fa: fb:8e:09:2e:df:b7:b0:0b:fd:16:6d:fb:25:2c:60:64:e5:db: 41:c1:e4:2c:d4:c9:f5:e4:68:6d:b5:e1:84:12:30:cc:87:b4: f6:58:6f:7c:1a:ce:2b:bd:a4:04:84:ad:3f:a8:79:92:12:d3: c6:e5:88:85:12:13:8b:cf:11:d8:1a:77:f6:3b:31:e9:3c:5e: bb:95:5c:22:a3:4d:d7:ce:0e:61:ce:13:24:e9:07:41:85:f4: b7:59:45:d9:ba:dd:cd:d5:d1:99:c2:1c:5f:84:8b:ee:37:dc: 74:ec:84:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJVXaa0AHNL88D3mAWIXEuj2kKIQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MDAxMDU2WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjE2ZmQ5NGUyZWU3NmI4YmRlZjFhNDdiMWEwYTVjYzNk NzFmNGZiZDAwYjVlMzYxMWQ5OTgzNjgxNzk4NTg0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN4w//tMm3NVdQXmvhi0dSg0iPmiCRhSQSzeoBemA0xg7J PWC0bE4q+SCjjdf8oq/fQplj5ksOaKjJzx9sb3r1iLPTC+ILVDFzF4JGk0VflRUr jFb3MUVViX8dg0hAnmVBUaUDMfKc6UApUWiIGVFimlx3huiX8gY5evNUOsuwV474 WK1YLf6v5Yl8r1S5ihJNu5HkXva2BXHsMy7u0sH1vVEUdHVXM1ACUe5SWdfD1A04 7JnHBHjZgwAQMPUi8PLUS5LJ71B2neK2jU+fytyfuHsvnCtdL5RCJWaDIpnU23Rz /yT0yufeXTeJoDVXs8PjNzq36BoCHX6au25Ff3lRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbnfsFB//KW8KSiuu78dguhVcKa4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdlYzc5OGRhLWE2YzItNDRiZS1hZmQ0LWY0YTIyNDY2OGFkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJ3DTQwDQYJKoZIhvcNAQELBQADggEBABTJeKdNLDcwEUZlvB0JZCZgQtuN TtGA6A3MWxj9513SsOPA0gB8yiWU2xmC7Rcr4v57NYSZ7A5nWCMaGKhkHbrH4u2T mx9EPXYCBKvBeCiFt11+1OS2ikIRnyDWEbCV5UJdl4ru1U+TPn7X8prvP2ISLcVa A1hXv+rHSL+gFa8DWeG3O+4ZOResX44dOrqm+vuOCS7ft7AL/RZt+yUsYGTl20HB 5CzUyfXkaG214YQSMMyHtPZYb3waziu9pASErT+oeZIS08bliIUSE4vPEdgad/Y7 Mek8XruVXCKjTdfODmHOEyTpB0GF9LdZRdm63c3V0ZnCHF+Ei+433HTshKk= -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:52 2025 by rpki-client