$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edb34067-a075-4098-a710-1f3f447b7926.roa File: edb34067-a075-4098-a710-1f3f447b7926.roa (raw, json) Hash identifier: FECy4ygqeqo7eOBqPRr2XkWS3GEEFcZrw9O6/GsSE+w= Subject key identifier: AC:23:B7:7C:F3:A4:EC:F5:12:2C:5F:5E:E1:F2:EC:20:B7:A6:44:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0913C7D68A7626EE40847F2987C4F4F8F6601098 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edb34067-a075-4098-a710-1f3f447b7926.roa Signing time: Fri 29 Aug 2025 11:07:11 +0000 ROA not before: Fri 29 Aug 2025 11:07:11 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 114.56.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:13:c7:d6:8a:76:26:ee:40:84:7f:29:87:c4:f4:f8:f6:60:10:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 11:07:11 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=125b15bae4474ada1bee3e58b5aa34544f506d086c40c11c9cdd69068770cc4c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:ce:cb:dc:1b:92:c8:e2:4d:bc:2f:85:46: c1:46:c0:d9:95:ab:01:9d:31:db:5b:71:70:c9:d6: 57:0a:90:87:ac:ca:cf:4b:cc:84:cf:97:a4:a5:9c: ef:ff:50:5f:5e:94:2b:8d:53:30:19:83:8c:a6:d1: bf:d1:98:37:1e:5c:24:89:1b:34:42:55:fc:d4:6e: 14:87:75:bd:d3:04:aa:b5:10:55:f5:2f:88:59:c0: d7:58:3d:07:ef:07:5c:71:d8:97:27:3a:74:99:41: 32:68:6d:a1:42:44:da:01:34:1f:bb:7e:6c:6d:37: c6:75:14:37:ba:1d:3c:9c:19:5d:36:8f:07:82:02: 38:43:52:10:1e:35:c1:30:85:8d:c1:b3:bd:91:b4: 04:ba:91:22:1c:46:73:f3:22:5c:eb:97:6e:10:82: 2d:6e:63:54:45:2d:51:3e:77:20:76:78:29:98:79: ad:51:8f:2b:db:44:57:66:ea:de:48:b7:9a:7b:04: 66:85:f9:04:05:ce:8a:54:fe:f7:9d:2d:34:9e:32: 0b:8b:5b:b5:2f:0c:57:26:11:4f:0b:0b:04:a7:a8: d4:de:b7:23:d2:a7:ca:28:eb:1b:bd:fc:ed:7a:12: 8c:66:ad:a8:5a:8c:a3:67:cf:af:23:9a:c7:44:7e: 8b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:23:B7:7C:F3:A4:EC:F5:12:2C:5F:5E:E1:F2:EC:20:B7:A6:44:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edb34067-a075-4098-a710-1f3f447b7926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.56.36.0/24 Signature Algorithm: sha256WithRSAEncryption 91:a4:81:86:67:cf:59:34:71:b6:19:fd:ed:b6:d4:4e:a9:6d: aa:b7:c8:c1:91:f0:a5:8f:7b:46:6b:ea:26:c7:96:15:5d:2d: 03:a8:bc:94:75:b6:cc:86:f5:4d:1e:86:2a:b2:9c:af:17:c8: ac:72:8d:2d:8c:da:8e:0c:d6:25:a4:28:da:02:fa:71:82:e7: 95:66:18:43:53:cc:3a:66:f4:b1:86:88:e5:0e:19:5c:0b:5b: f1:d0:59:59:f4:21:98:c5:4a:9c:1f:57:38:80:2d:2e:55:3c: dd:95:f9:b0:85:b0:34:18:81:39:27:39:f3:ce:31:1e:0b:26: 02:2f:32:15:d6:01:23:9a:e1:62:dd:5f:8b:03:b1:a5:41:56: ab:d8:65:ef:7e:92:0e:9a:e4:11:db:aa:b0:a7:0f:14:36:71: 44:82:9f:a6:c9:ac:40:f9:84:6b:76:34:54:1c:c4:f6:2b:e8: 4b:f7:8d:3f:7c:83:bc:70:72:1e:fb:3f:58:2e:9e:86:89:e6: 9a:b5:bc:69:3a:c8:f8:d3:1a:64:1b:15:06:af:c7:7f:24:f2: c6:50:3b:01:d2:de:89:c9:ae:80:aa:7b:b5:1e:cb:5b:ba:e7: ea:7c:00:4e:8e:f7:16:60:92:d9:6e:5a:c0:c2:b7:6d:98:99: bf:76:c0:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCRPH1op2Ju5AhH8ph8T0+PZgEJgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTEwNzExWhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjViMTViYWU0NDc0YWRhMWJlZTNlNThiNWFhMzQ1NDRm NTA2ZDA4NmM0MGMxMWM5Y2RkNjkwNjg3NzBjYzRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC55s7L3BuSyOJNvC+FRsFGwNmVqwGdMdtbcXDJ1lcKkIes ys9LzITPl6SlnO//UF9elCuNUzAZg4ym0b/RmDceXCSJGzRCVfzUbhSHdb3TBKq1 EFX1L4hZwNdYPQfvB1xx2JcnOnSZQTJobaFCRNoBNB+7fmxtN8Z1FDe6HTycGV02 jweCAjhDUhAeNcEwhY3Bs72RtAS6kSIcRnPzIlzrl24Qgi1uY1RFLVE+dyB2eCmY ea1RjyvbRFdm6t5It5p7BGaF+QQFzopU/vedLTSeMguLW7UvDFcmEU8LCwSnqNTe tyPSp8oo6xu9/O16EoxmrahajKNnz68jmsdEfosBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrCO3fPOk7PUSLF9e4fLsILemRBMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkYjM0MDY3LWEwNzUtNDA5OC1hNzEwLTFmM2Y0NDdiNzkyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAByOCQwDQYJKoZIhvcNAQELBQADggEBAJGkgYZnz1k0cbYZ/e221E6pbaq3 yMGR8KWPe0Zr6ibHlhVdLQOovJR1tsyG9U0ehiqynK8XyKxyjS2M2o4M1iWkKNoC +nGC55VmGENTzDpm9LGGiOUOGVwLW/HQWVn0IZjFSpwfVziALS5VPN2V+bCFsDQY gTknOfPOMR4LJgIvMhXWASOa4WLdX4sDsaVBVqvYZe9+kg6a5BHbqrCnDxQ2cUSC n6bJrED5hGt2NFQcxPYr6Ev3jT98g7xwch77P1gunoaJ5pq1vGk6yPjTGmQbFQav x38k8sZQOwHS3onJroCqe7Uey1u65+p8AE6O9xZgktluWsDCt22Ymb92wLQ= -----END CERTIFICATE-----Generated at Sat Sep 6 14:12:20 2025 by rpki-client