$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375f8678-f36c-4b2b-b493-20f94a8a3444.roa File: 375f8678-f36c-4b2b-b493-20f94a8a3444.roa (raw, json) Hash identifier: KjRSLZohsM9qwn4GC4BIMLlRxtIjMjuEE67U2jNiCzM= Subject key identifier: 51:65:01:6A:B6:96:D0:44:97:EA:D4:89:B7:08:73:CA:EB:EE:31:BD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 64873E1231AA897772E08FF83A1AE4D63B0A9377 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375f8678-f36c-4b2b-b493-20f94a8a3444.roa Signing time: Wed 20 Aug 2025 00:00:23 +0000 ROA not before: Wed 20 Aug 2025 00:00:23 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 114.56.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:87:3e:12:31:aa:89:77:72:e0:8f:f8:3a:1a:e4:d6:3b:0a:93:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 20 00:00:23 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=44715fe49352dddaeddbd9aca9439fe315ef3cd7154350e8ccfec8458d3fcb24, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:85:60:39:d2:16:57:45:79:5c:a3:84:b1:58: bd:c4:9a:c0:98:94:24:7f:3e:17:99:28:95:74:1f: f6:9e:56:55:17:cb:34:88:3f:c6:a1:f0:64:ae:15: df:d8:fa:58:11:ca:8a:39:53:69:d9:0d:1c:13:f0: 29:1f:bb:13:3b:c1:08:2b:77:39:03:25:0a:59:cf: d6:5d:db:db:fd:42:3b:de:ad:58:b5:81:3d:6f:2a: 2a:ab:ed:fb:22:bc:ad:a9:d4:f2:92:03:8c:a0:7a: 9d:7f:89:e5:b5:e4:e8:3b:39:08:de:11:12:2f:8f: af:9a:fe:3c:1d:6e:21:29:1c:76:05:fe:cf:cf:f4: 09:d5:66:f5:c4:c4:e8:a7:86:ae:0b:ab:ff:3a:ca: 27:2e:78:21:1c:af:57:c3:f0:91:31:fd:d8:05:a8: f0:64:e1:6f:2a:08:e9:eb:73:ba:2b:f5:1f:3c:40: a8:54:f3:cb:8a:b8:64:6b:5c:49:aa:97:33:e8:7c: 59:a3:e2:0f:b8:c7:d7:3d:b7:1a:e8:3d:8d:8a:ba: e2:a1:c2:fb:27:0f:b0:62:89:db:5b:84:6e:71:c7: d2:f8:80:06:60:4a:22:ff:8e:ca:72:fd:5a:49:a1: 6f:d8:60:41:e5:7d:3c:6c:9f:1a:57:7b:07:8a:ad: cc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:65:01:6A:B6:96:D0:44:97:EA:D4:89:B7:08:73:CA:EB:EE:31:BD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375f8678-f36c-4b2b-b493-20f94a8a3444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.56.133.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:ec:0d:4c:30:34:b2:ca:a8:0c:0e:66:52:f2:10:76:12:d9: e0:53:81:97:18:e9:6d:3d:5c:fa:f7:cc:7d:63:27:de:c9:af: 9a:d8:74:24:16:5b:27:88:1d:ee:d9:4b:fd:9f:dc:72:53:c9: 5d:37:51:8d:56:18:b0:e5:24:9b:ea:9f:35:6a:ab:c8:1e:7c: 10:ca:da:d0:bc:47:aa:65:ee:8f:06:26:1e:ab:19:4e:c6:97: 56:69:da:dd:00:4f:79:32:b6:40:ec:18:78:1b:0d:ea:fc:6a: 4d:10:c8:ef:d3:da:c7:ec:14:1e:3b:45:6e:a9:76:a8:bb:60: b2:da:9f:a7:95:ac:cb:76:c9:f3:cf:81:c6:33:8b:3d:90:e8: 47:c7:59:a6:f8:b9:0e:12:c0:d7:b8:aa:d7:bb:ae:54:b8:94: 37:f5:a9:1c:f6:f4:02:6e:59:32:96:7d:5b:b2:e1:4b:3e:32: 49:a6:ee:49:2a:90:e0:41:4f:ea:7d:4b:1d:cb:e2:ca:fa:7b: aa:55:61:de:f4:67:11:96:a2:f6:ff:26:bf:c8:2a:2c:ae:c7: b1:8d:ab:4f:46:2d:ea:2f:2b:74:df:24:df:0d:cd:da:94:c9: f2:03:2d:27:43:32:f6:9b:ea:b4:8e:45:99:d8:3c:13:c1:5a: 8d:f8:3c:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZIc+EjGqiXdy4I/4Ohrk1jsKk3cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIwMDAwMDIzWhcNMjUwOTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDcxNWZlNDkzNTJkZGRhZWRkYmQ5YWNhOTQzOWZlMzE1 ZWYzY2Q3MTU0MzUwZThjY2ZlYzg0NThkM2ZjYjI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClhWA50hZXRXlco4SxWL3EmsCYlCR/PheZKJV0H/aeVlUX yzSIP8ah8GSuFd/Y+lgRyoo5U2nZDRwT8CkfuxM7wQgrdzkDJQpZz9Zd29v9Qjve rVi1gT1vKiqr7fsivK2p1PKSA4ygep1/ieW15Og7OQjeERIvj6+a/jwdbiEpHHYF /s/P9AnVZvXExOinhq4Lq/86yicueCEcr1fD8JEx/dgFqPBk4W8qCOnrc7or9R88 QKhU88uKuGRrXEmqlzPofFmj4g+4x9c9txroPY2KuuKhwvsnD7BiidtbhG5xx9L4 gAZgSiL/jspy/VpJoW/YYEHlfTxsnxpXeweKrcwtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUWUBaraW0ESX6tSJtwhzyuvuMb0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM3NWY4Njc4LWYzNmMtNGIyYi1iNDkzLTIwZjk0YThhMzQ0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAByOIUwDQYJKoZIhvcNAQELBQADggEBAHrsDUwwNLLKqAwOZlLyEHYS2eBT gZcY6W09XPr3zH1jJ97Jr5rYdCQWWyeIHe7ZS/2f3HJTyV03UY1WGLDlJJvqnzVq q8gefBDK2tC8R6pl7o8GJh6rGU7Gl1Zp2t0AT3kytkDsGHgbDer8ak0QyO/T2sfs FB47RW6pdqi7YLLan6eVrMt2yfPPgcYziz2Q6EfHWab4uQ4SwNe4qte7rlS4lDf1 qRz29AJuWTKWfVuy4Us+Mkmm7kkqkOBBT+p9Sx3L4sr6e6pVYd70ZxGWovb/Jr/I Kiyux7GNq09GLeovK3TfJN8NzdqUyfIDLSdDMvab6rSORZnYPBPBWo34PFk= -----END CERTIFICATE-----Generated at Sat Aug 23 08:33:23 2025 by rpki-client