$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5fabac-e9be-40aa-9799-176f85dddf91.roa File: fa5fabac-e9be-40aa-9799-176f85dddf91.roa (raw, json) Hash identifier: lGQgg8tW0bUysMgomjNxbf1mw9rvns3h271tRz2XCoU= Subject key identifier: E4:C2:A1:B5:89:78:70:C0:04:50:F3:8A:61:03:54:8F:33:3D:E6:34 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7EED1FA4BBE4E208BFAF0EEFBB70F6EBC1C18139 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5fabac-e9be-40aa-9799-176f85dddf91.roa Signing time: Wed 27 Aug 2025 00:32:09 +0000 ROA not before: Wed 27 Aug 2025 00:32:09 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 119.12.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ed:1f:a4:bb:e4:e2:08:bf:af:0e:ef:bb:70:f6:eb:c1:c1:81:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 27 00:32:09 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=7d755d3a97f42cb16bb48db889368ea8bbc14bfd748a228bd9e24f7fc3b2b2d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:75:6a:f3:b1:f6:d6:bf:c6:10:d0:83:d9: 81:48:c1:30:ee:e3:76:c3:bb:f2:7f:2e:df:33:75: 90:e0:80:09:65:07:30:e7:8c:7c:00:82:66:80:8a: 04:df:f0:7e:29:b9:ef:f7:24:9c:34:2a:5f:ca:52: 33:5a:fa:09:30:98:b8:e2:93:3e:77:82:a1:81:78: 6a:1b:eb:6e:17:62:8e:ff:d6:af:bf:bd:75:22:b8: 40:0d:03:0f:ab:76:1e:41:28:95:73:a4:27:5b:8c: ca:e9:86:1a:9c:a3:6b:ca:20:9b:6d:17:03:58:84: 2b:ae:24:b2:4b:ff:d8:7e:24:65:5e:51:6d:00:36: cd:e3:57:f3:45:5d:42:4f:da:07:e3:62:dd:66:88: fe:24:49:32:08:81:39:11:66:5f:cf:9f:79:23:ef: 5b:d1:61:91:ea:a7:d8:43:06:b7:30:49:52:15:5a: e6:8b:cf:d3:f6:36:3a:18:08:e2:da:9a:1f:c6:14: 09:6a:dd:b1:76:0f:02:7f:e1:06:ba:1e:48:f9:d7: f0:df:fb:26:c0:fb:28:72:53:b5:ec:fc:a2:3f:9f: 42:4f:3f:a0:f4:56:99:f4:73:91:2f:2f:3f:e9:68: e1:34:90:45:3f:94:04:fc:34:ee:a0:35:14:5e:0f: 61:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C2:A1:B5:89:78:70:C0:04:50:F3:8A:61:03:54:8F:33:3D:E6:34 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5fabac-e9be-40aa-9799-176f85dddf91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.12.144.0/21 Signature Algorithm: sha256WithRSAEncryption 07:5a:db:d0:1c:22:54:99:93:90:e1:27:cf:28:c3:04:02:61: e9:fb:94:54:11:c5:a8:3e:18:9f:e8:7c:70:9a:39:12:2b:8d: 02:7a:8b:2b:10:f0:e3:50:28:3b:f0:35:43:d3:05:0d:49:eb: c7:aa:2d:82:f0:91:56:90:dd:f7:fa:ea:b2:e9:3b:64:71:a6: 60:f5:22:8a:2c:56:20:ae:97:c2:d2:af:e7:6f:01:88:86:1a: 7e:64:34:ae:4b:d6:ab:75:6d:4e:e0:f3:b2:47:69:be:33:af: 6c:bf:ce:b1:dd:1b:d7:b6:ae:07:e8:13:0a:e5:46:b7:a5:b6: 98:4c:30:eb:f2:e4:23:92:a8:7a:ff:01:4d:6d:73:8d:0a:be: ca:2c:f8:ec:6c:5a:f7:0a:e8:0d:30:b9:9a:be:18:aa:9a:ff: f4:29:92:bd:6f:b9:4d:31:e1:7e:b2:54:4c:c2:04:d7:b5:85: 6e:e3:91:16:99:16:a0:75:eb:80:d4:a1:d5:4d:bd:be:3f:75: 4b:db:89:c7:ce:d4:5e:5c:84:bd:39:7c:f8:57:00:6b:7d:05: 2f:93:79:74:14:82:9c:e9:e3:39:6a:77:c8:57:0f:33:60:59: d6:47:a1:70:25:0e:6c:0b:82:12:4a:cb:64:cf:7a:2e:6c:33: 6b:1b:92:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfu0fpLvk4gi/rw7vu3D268HBgTkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI3MDAzMjA5WhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDc1NWQzYTk3ZjQyY2IxNmJiNDhkYjg4OTM2OGVhOGJi YzE0YmZkNzQ4YTIyOGJkOWUyNGY3ZmMzYjJiMmQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4l3Vq87H21r/GENCD2YFIwTDu43bDu/J/Lt8zdZDggAll BzDnjHwAgmaAigTf8H4pue/3JJw0Kl/KUjNa+gkwmLjikz53gqGBeGob624XYo7/ 1q+/vXUiuEANAw+rdh5BKJVzpCdbjMrphhqco2vKIJttFwNYhCuuJLJL/9h+JGVe UW0ANs3jV/NFXUJP2gfjYt1miP4kSTIIgTkRZl/Pn3kj71vRYZHqp9hDBrcwSVIV WuaLz9P2NjoYCOLamh/GFAlq3bF2DwJ/4Qa6Hkj51/Df+ybA+yhyU7Xs/KI/n0JP P6D0Vpn0c5EvLz/paOE0kEU/lAT8NO6gNRReD2HvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5MKhtYl4cMAEUPOKYQNUjzM95jQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhNWZhYmFjLWU5YmUtNDBhYS05Nzk5LTE3NmY4NWRkZGY5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN3DJAwDQYJKoZIhvcNAQELBQADggEBAAda29AcIlSZk5DhJ88owwQCYen7 lFQRxag+GJ/ofHCaORIrjQJ6iysQ8ONQKDvwNUPTBQ1J68eqLYLwkVaQ3ff66rLp O2RxpmD1IoosViCul8LSr+dvAYiGGn5kNK5L1qt1bU7g87JHab4zr2y/zrHdG9e2 rgfoEwrlRreltphMMOvy5COSqHr/AU1tc40Kvsos+OxsWvcK6A0wuZq+GKqa//Qp kr1vuU0x4X6yVEzCBNe1hW7jkRaZFqB164DUodVNvb4/dUvbicfO1F5chL05fPhX AGt9BS+TeXQUgpzp4zlqd8hXDzNgWdZHoXAlDmwLghJKy2TPei5sM2sbkuc= -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:31 2025 by rpki-client