$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e92352d2-6b0e-45e3-83ad-b6711b720950.roa File: e92352d2-6b0e-45e3-83ad-b6711b720950.roa (raw, json) Hash identifier: 4BGDrMgyhSy1cZEJwJ/amL8O6h9QHod0VZn8SAVfBdA= Subject key identifier: 92:7A:7E:2E:03:70:58:D6:B2:14:B8:3C:E0:69:41:57:66:68:B9:4E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CA8F4357F50FE0A4867AA1D97E5CBEF05B98511 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e92352d2-6b0e-45e3-83ad-b6711b720950.roa Signing time: Tue 26 Aug 2025 15:02:07 +0000 ROA not before: Tue 26 Aug 2025 15:02:07 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.238.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a8:f4:35:7f:50:fe:0a:48:67:aa:1d:97:e5:cb:ef:05:b9:85:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:02:07 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=b39e8d35bd0a5cbf725e794fcd52ceeefb5889768edd02ee04fd3b2ba72f0a69, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:7d:0c:4f:62:24:81:2e:bd:1d:ce:ca:4a: ac:57:fe:c3:2e:51:b3:55:72:4c:dd:57:0b:03:19: 28:85:f8:63:ef:17:11:21:e5:09:c5:d4:a1:a5:70: 8a:f3:8d:7f:b0:6f:12:73:33:35:cc:78:ef:ad:99: f9:d4:6f:e8:47:2a:0b:21:5d:70:a8:4f:b8:9c:99: 52:0b:25:d8:78:79:5d:ba:c0:3b:ee:88:63:70:77: 88:37:9c:2c:85:45:5c:68:7d:19:a4:7f:0a:63:3e: d6:99:02:59:a4:60:21:63:4b:fe:2d:49:47:09:51: ad:7d:62:1d:58:a3:83:59:fc:d7:9d:05:50:6a:2f: 8e:60:ee:a0:a7:7f:c9:85:6f:4d:b0:8b:5a:1e:61: 55:42:73:28:e5:1d:9d:d8:09:53:d7:fb:ae:e6:ce: c5:cf:72:9d:00:12:16:f6:d1:57:e7:e1:7d:5e:49: cb:97:1e:f7:5f:1e:a5:59:1b:9e:5b:c2:ba:ae:ae: bc:c5:ee:a9:11:36:9d:0e:00:ff:c0:c4:7e:fb:ea: 10:f7:9a:b8:f1:51:6a:05:a8:95:d9:9a:11:5a:b2: b2:75:fa:14:94:f2:c1:15:71:d2:85:46:97:65:d0: 74:c5:94:21:b8:3c:c0:86:4b:e8:d5:27:f1:67:e3: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7A:7E:2E:03:70:58:D6:B2:14:B8:3C:E0:69:41:57:66:68:B9:4E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e92352d2-6b0e-45e3-83ad-b6711b720950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.238.16.0/22 Signature Algorithm: sha256WithRSAEncryption b6:c2:14:55:0e:42:7e:33:8b:7c:63:81:9f:66:2d:41:e9:84: 2f:1c:d1:e0:c7:3c:6f:02:dc:e9:46:c9:78:79:6f:06:4f:1b: cf:0d:ab:e7:31:31:ce:e7:8c:ff:6c:a7:98:55:09:4b:82:65: 6d:24:11:d6:d2:50:db:f9:fd:a6:45:df:cd:29:c9:eb:04:e3: 36:a0:fe:a4:b0:b2:1a:55:65:2b:eb:7a:d1:b3:d3:04:6a:e6: bc:49:a0:72:eb:8a:b5:ab:51:c0:38:5f:f0:89:da:a2:df:2e: ba:2f:cf:6a:c1:f7:30:0e:39:eb:87:ec:d7:cc:4c:21:37:21: bf:4c:64:ee:a9:27:1b:cb:25:5c:8f:dd:19:e2:56:7e:f0:1c: 3a:83:d2:8e:9b:04:14:c3:81:8d:cb:97:a1:ab:81:10:24:80: dd:7e:44:b4:cd:88:f2:46:3e:23:97:34:62:b9:20:27:42:33: eb:11:02:aa:9d:c8:ee:5c:d2:60:0d:08:3f:51:5d:59:e0:4e: 2d:60:9f:2c:8b:1c:5a:b1:c1:a2:84:d8:83:7f:02:01:3f:05: 0f:49:b9:41:58:7f:ee:90:d0:ce:45:fe:45:f9:9f:92:18:73: 3d:ba:5e:59:3b:1d:e2:42:db:b7:a7:1e:8d:03:d9:df:f5:25: 7f:e2:06:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPKj0NX9Q/gpIZ6odl+XL7wW5hREwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUwMjA3WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzllOGQzNWJkMGE1Y2JmNzI1ZTc5NGZjZDUyY2VlZWZi NTg4OTc2OGVkZDAyZWUwNGZkM2IyYmE3MmYwYTY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCri30MT2IkgS69Hc7KSqxX/sMuUbNVckzdVwsDGSiF+GPv FxEh5QnF1KGlcIrzjX+wbxJzMzXMeO+tmfnUb+hHKgshXXCoT7icmVILJdh4eV26 wDvuiGNwd4g3nCyFRVxofRmkfwpjPtaZAlmkYCFjS/4tSUcJUa19Yh1Yo4NZ/Ned BVBqL45g7qCnf8mFb02wi1oeYVVCcyjlHZ3YCVPX+67mzsXPcp0AEhb20Vfn4X1e ScuXHvdfHqVZG55bwrqurrzF7qkRNp0OAP/AxH776hD3mrjxUWoFqJXZmhFasrJ1 +hSU8sEVcdKFRpdl0HTFlCG4PMCGS+jVJ/Fn463zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUknp+LgNwWNayFLg84GlBV2ZouU4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U5MjM1MmQyLTZiMGUtNDVlMy04M2FkLWI2NzExYjcyMDk1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJu7hAwDQYJKoZIhvcNAQELBQADggEBALbCFFUOQn4zi3xjgZ9mLUHphC8c 0eDHPG8C3OlGyXh5bwZPG88Nq+cxMc7njP9sp5hVCUuCZW0kEdbSUNv5/aZF380p yesE4zag/qSwshpVZSvretGz0wRq5rxJoHLrirWrUcA4X/CJ2qLfLrovz2rB9zAO OeuH7NfMTCE3Ib9MZO6pJxvLJVyP3RniVn7wHDqD0o6bBBTDgY3Ll6GrgRAkgN1+ RLTNiPJGPiOXNGK5ICdCM+sRAqqdyO5c0mANCD9RXVngTi1gnyyLHFqxwaKE2IN/ AgE/BQ9JuUFYf+6Q0M5F/kX5n5IYcz26Xlk7HeJC27enHo0D2d/1JX/iBqM= -----END CERTIFICATE-----Generated at Sat Sep 6 14:14:08 2025 by rpki-client