$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235c0063-092b-429b-a092-b2a72e7b993f.roa File: 235c0063-092b-429b-a092-b2a72e7b993f.roa (raw, json) Hash identifier: LpGzBWbhJU61X236LUhknJ5Os0zvuH4Mh29jHI75xGk= Subject key identifier: 81:9E:DF:F1:B0:81:84:B1:C7:D7:3C:FA:0D:52:73:66:3B:DD:D0:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3FDE5D438041767B79A7E424947FB6D336AE8625 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235c0063-092b-429b-a092-b2a72e7b993f.roa Signing time: Fri 08 Aug 2025 00:01:16 +0000 ROA not before: Fri 08 Aug 2025 00:01:16 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 203.86.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:de:5d:43:80:41:76:7b:79:a7:e4:24:94:7f:b6:d3:36:ae:86:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:01:16 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=12856983cd58694d8d47e5e6dadf6ddc9eb6539402f1b13694f7379b3dd81635, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:c4:63:7a:fc:74:fa:92:8e:1e:bd:84:cb: d1:49:c8:c4:a8:94:60:87:bf:44:f3:12:62:2d:af: 8d:28:5c:79:50:67:58:45:c0:61:43:d2:20:61:b4: c2:17:27:78:20:27:d2:84:87:e9:ea:2a:ef:c8:5b: 17:bf:3d:67:ef:e9:14:ed:09:4a:b2:15:88:2e:0a: 87:ad:a2:f3:01:44:78:4e:92:30:49:e1:f4:b6:6f: f6:9e:4a:79:e4:04:15:52:7a:f3:d9:2c:6d:b8:be: d8:37:4f:df:ea:c6:9b:22:85:a9:9d:13:e2:ba:d1: 59:a8:86:63:2c:75:f3:f1:3f:52:2e:06:27:cf:7e: 31:d6:e0:f4:cb:ab:9d:be:48:dc:ed:98:04:1d:85: 27:fb:d5:ee:b6:b5:24:db:4a:4c:67:b6:6f:2d:80: ad:d6:cc:23:52:38:5e:9a:82:b6:e2:08:96:5a:34: 94:a2:be:48:c0:48:75:0b:c0:1a:be:95:ca:e0:3f: 0e:df:5a:70:a5:e9:da:86:93:e5:62:1d:c1:ce:1a: bb:92:03:8a:fd:74:3a:6b:cd:a1:2f:f2:0a:90:78: c2:72:9d:a0:40:c6:9a:fe:40:9f:08:68:ca:1a:2e: cc:e3:91:71:b5:f6:6a:b0:be:44:57:49:d4:52:b6: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9E:DF:F1:B0:81:84:B1:C7:D7:3C:FA:0D:52:73:66:3B:DD:D0:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235c0063-092b-429b-a092-b2a72e7b993f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.86.216.0/23 Signature Algorithm: sha256WithRSAEncryption a5:ca:04:40:95:e2:26:c9:6b:f8:cb:fc:92:c2:ca:8a:98:25: 03:44:29:6a:c8:e2:b3:14:09:b7:c5:be:44:5d:81:f1:1d:a3: b9:a1:8f:40:fb:42:ff:8d:f4:73:47:33:8a:7e:aa:b2:90:49: 26:06:0b:57:cb:3f:da:63:ac:3a:9b:45:c8:b3:5f:31:12:a6: 7e:7a:fd:05:42:59:c1:a4:ad:9e:ef:4c:d7:8f:34:eb:9e:a2: a4:12:9f:1a:56:a8:68:94:ae:b5:ad:38:a5:da:a9:1f:74:7f: 5a:6d:4d:c2:fa:98:6d:29:91:ad:c4:1e:d4:c9:3c:47:fa:e6: 56:60:53:3c:12:59:26:81:be:53:85:5d:2b:b8:23:fa:eb:1d: 90:f7:ba:60:e3:d4:f4:36:40:1d:29:81:47:09:ab:6f:a5:4b: 5f:f7:7e:fc:b2:8e:3e:2f:44:69:6e:97:be:04:18:bd:4f:d5: 4c:4b:01:d4:b6:1f:76:d6:7f:40:e5:2b:7e:83:7d:32:30:4f: 36:b8:24:0f:98:e3:be:50:93:28:e9:ae:82:8a:60:11:29:68: b7:e9:ff:1b:01:a5:e7:53:89:d3:34:fb:0c:54:c8:76:b5:35: d3:d9:3d:eb:34:6d:aa:a4:50:15:49:8c:a6:01:be:42:f1:0b: 7a:fe:14:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP95dQ4BBdnt5p+QklH+20zauhiUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAwMTE2WhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjg1Njk4M2NkNTg2OTRkOGQ0N2U1ZTZkYWRmNmRkYzll YjY1Mzk0MDJmMWIxMzY5NGY3Mzc5YjNkZDgxNjM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1kMRjevx0+pKOHr2Ey9FJyMSolGCHv0TzEmItr40oXHlQ Z1hFwGFD0iBhtMIXJ3ggJ9KEh+nqKu/IWxe/PWfv6RTtCUqyFYguCoetovMBRHhO kjBJ4fS2b/aeSnnkBBVSevPZLG24vtg3T9/qxpsihamdE+K60VmohmMsdfPxP1Iu BifPfjHW4PTLq52+SNztmAQdhSf71e62tSTbSkxntm8tgK3WzCNSOF6agrbiCJZa NJSivkjASHULwBq+lcrgPw7fWnCl6dqGk+ViHcHOGruSA4r9dDprzaEv8gqQeMJy naBAxpr+QJ8IaMoaLszjkXG19mqwvkRXSdRSttD3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgZ7f8bCBhLHH1zz6DVJzZjvd0BYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzNWMwMDYzLTA5MmItNDI5Yi1hMDkyLWIyYTcyZTdiOTkzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHLVtgwDQYJKoZIhvcNAQELBQADggEBAKXKBECV4ibJa/jL/JLCyoqYJQNE KWrI4rMUCbfFvkRdgfEdo7mhj0D7Qv+N9HNHM4p+qrKQSSYGC1fLP9pjrDqbRciz XzESpn56/QVCWcGkrZ7vTNePNOueoqQSnxpWqGiUrrWtOKXaqR90f1ptTcL6mG0p ka3EHtTJPEf65lZgUzwSWSaBvlOFXSu4I/rrHZD3umDj1PQ2QB0pgUcJq2+lS1/3 fvyyjj4vRGlul74EGL1P1UxLAdS2H3bWf0DlK36DfTIwTza4JA+Y475QkyjproKK YBEpaLfp/xsBpedTidM0+wxUyHa1NdPZPes0baqkUBVJjKYBvkLxC3r+FOY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:05:02 2025 by rpki-client