$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02990819-f2e0-4de8-bb2a-00a87a7262dd.roa File: 02990819-f2e0-4de8-bb2a-00a87a7262dd.roa (raw, json) Hash identifier: gIZmGPVtyp19/YTmUtR0s1fW9+2SHhVSXCuhonXRNpo= Subject key identifier: 54:A0:1B:83:9E:0E:46:8A:2D:81:DE:A6:0E:6A:91:DA:A6:39:DD:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 385135F803D7CD1F869D4519351321015A988D83 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02990819-f2e0-4de8-bb2a-00a87a7262dd.roa Signing time: Fri 22 Aug 2025 00:20:21 +0000 ROA not before: Fri 22 Aug 2025 00:20:21 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 121.95.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:51:35:f8:03:d7:cd:1f:86:9d:45:19:35:13:21:01:5a:98:8d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 22 00:20:21 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=702be0459fbf0803a9e8a33bd7e50dd49305ae2802f3bda4437add04b00f8c54, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:99:9c:9b:7e:3a:f5:b1:19:d1:ca:ec:f1: f2:78:b8:13:6a:4f:4f:7c:e4:fd:c3:e2:e6:4e:bf: 11:92:34:67:92:67:61:d9:66:52:e8:43:7c:65:82: e0:78:48:54:ea:f1:d7:50:0b:e5:86:6c:f1:69:42: d1:1c:2c:cd:29:bb:53:53:07:19:45:72:df:25:99: d2:09:c0:98:2f:a8:4a:8b:e0:3f:b6:6b:24:7c:d1: 84:d9:d6:57:b6:fa:5e:5c:dd:42:48:ee:48:2a:31: 92:3e:c9:6c:33:7c:f1:72:33:76:3f:0e:c6:1d:84: 35:c4:70:67:a0:bd:fb:7a:ae:35:46:b0:8c:c5:16: da:f2:5f:5f:38:c1:53:88:bc:88:21:a5:e4:97:6c: 64:62:41:69:39:4c:cb:a1:bc:4a:c4:9c:0f:fd:f8: 72:29:13:2a:27:bf:15:fa:fc:07:84:90:f4:43:37: 2f:83:01:a0:11:27:b1:ab:ea:3f:45:4c:2b:8c:aa: 82:7b:40:1b:d9:88:61:15:9d:72:6e:cb:06:f7:78: 60:25:35:fe:91:cf:9b:03:c2:38:67:7b:aa:34:af: b2:1b:ab:3c:0e:b9:97:f3:5d:35:1f:64:03:a2:e4: e4:fb:c6:45:30:0e:e5:34:52:4a:cc:98:a0:9b:90: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A0:1B:83:9E:0E:46:8A:2D:81:DE:A6:0E:6A:91:DA:A6:39:DD:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02990819-f2e0-4de8-bb2a-00a87a7262dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.95.0.0/18 Signature Algorithm: sha256WithRSAEncryption a4:88:22:20:1d:64:3a:fa:74:37:3a:fa:ed:a3:46:bb:af:d5: 1e:f0:3c:57:27:35:73:14:7c:2e:a1:94:34:1b:10:39:cb:bd: 02:e1:bf:46:d3:ca:8c:de:80:f2:c4:2f:a5:3a:d0:e7:9b:8d: f2:ea:04:42:e4:3e:1f:86:e7:88:9b:33:8c:90:47:f5:b7:8b: 9d:58:c9:e9:77:b9:57:7b:fb:70:a6:f9:b7:47:e2:be:f3:48: 1d:40:1b:42:8c:23:ec:84:8a:82:7b:e9:4c:b0:e4:26:1c:80: 94:3c:55:60:f7:a4:71:f5:40:53:bd:4e:28:c7:87:ce:b5:fe: 96:b0:e8:11:9d:03:76:d7:96:37:5b:39:66:3b:1e:bc:f8:44: 01:8b:b4:b6:d1:fb:42:71:40:58:da:64:df:dc:f7:9e:a0:73: 87:4c:9c:2e:11:0c:fe:20:97:92:e1:af:fd:42:2d:64:a6:6d: c7:b3:ae:ab:27:3f:7c:cc:41:08:68:d1:e1:2a:6f:f6:fc:f6: ab:c9:34:28:eb:bd:7e:7a:4d:a0:f0:c4:80:09:64:d3:d6:dc: a4:d5:51:5e:5a:54:63:9d:1d:1a:1d:20:96:f3:93:cd:45:6f: e2:b9:2f:26:02:3d:be:06:08:75:7a:05:fe:a6:23:1f:bd:df: 75:30:ac:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOFE1+APXzR+GnUUZNRMhAVqYjYMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIyMDAyMDIxWhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDJiZTA0NTlmYmYwODAzYTllOGEzM2JkN2U1MGRkNDkz MDVhZTI4MDJmM2JkYTQ0MzdhZGQwNGIwMGY4YzU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGgZmcm3469bEZ0crs8fJ4uBNqT0985P3D4uZOvxGSNGeS Z2HZZlLoQ3xlguB4SFTq8ddQC+WGbPFpQtEcLM0pu1NTBxlFct8lmdIJwJgvqEqL 4D+2ayR80YTZ1le2+l5c3UJI7kgqMZI+yWwzfPFyM3Y/DsYdhDXEcGegvft6rjVG sIzFFtryX184wVOIvIghpeSXbGRiQWk5TMuhvErEnA/9+HIpEyonvxX6/AeEkPRD Ny+DAaARJ7Gr6j9FTCuMqoJ7QBvZiGEVnXJuywb3eGAlNf6Rz5sDwjhne6o0r7Ib qzwOuZfzXTUfZAOi5OT7xkUwDuU0UkrMmKCbkPipAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVKAbg54ORootgd6mDmqR2qY53V8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyOTkwODE5LWYyZTAtNGRlOC1iYjJhLTAwYTg3YTcyNjJkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ5XwAwDQYJKoZIhvcNAQELBQADggEBAKSIIiAdZDr6dDc6+u2jRruv1R7w PFcnNXMUfC6hlDQbEDnLvQLhv0bTyozegPLEL6U60OebjfLqBELkPh+G54ibM4yQ R/W3i51Yyel3uVd7+3Cm+bdH4r7zSB1AG0KMI+yEioJ76Uyw5CYcgJQ8VWD3pHH1 QFO9TijHh861/paw6BGdA3bXljdbOWY7Hrz4RAGLtLbR+0JxQFjaZN/c956gc4dM nC4RDP4gl5Lhr/1CLWSmbcezrqsnP3zMQQho0eEqb/b89qvJNCjrvX56TaDwxIAJ ZNPW3KTVUV5aVGOdHRodIJbzk81Fb+K5LyYCPb4GCHV6Bf6mIx+933UwrDY= -----END CERTIFICATE-----Generated at Sat Aug 23 07:01:16 2025 by rpki-client