$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375f8678-f36c-4b2b-b493-20f94a8a3444.roa File: 375f8678-f36c-4b2b-b493-20f94a8a3444.roa (raw, json) Hash identifier: HM5K9I9tT96QBbJIEMpIXdhrFEsuvQq+5H66eonj4UA= Subject key identifier: 0F:D8:B7:00:94:0B:6A:D1:97:E3:57:A5:6A:1F:66:62:EB:BD:23:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36030BDC72716E9D935C44F708B8CB360CB20A1C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375f8678-f36c-4b2b-b493-20f94a8a3444.roa Signing time: Tue 01 Jul 2025 00:00:22 +0000 ROA not before: Tue 01 Jul 2025 00:00:22 +0000 ROA not after: Tue 05 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 114.56.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:03:0b:dc:72:71:6e:9d:93:5c:44:f7:08:b8:cb:36:0c:b2:0a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 1 00:00:22 2025 GMT Not After : Aug 5 23:59:59 2025 GMT Subject: serialNumber=b22ee0672f91a0ae7e8f5d9dbd0d130829781c96df983923c1c4ef194cf78537, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:ed:04:17:08:ae:03:ee:81:cf:2a:34:47: 22:ce:ab:aa:a2:da:59:28:07:9a:cf:85:81:61:32: 81:68:45:aa:ea:af:ce:a0:6e:ac:d6:01:0f:51:e0: 42:2f:89:e3:c9:29:7f:f3:b6:c4:f6:63:0f:29:57: 69:a4:73:55:3a:5f:2f:aa:34:1e:06:a8:8c:cd:c3: 7d:57:d1:8b:14:1f:91:e0:e0:79:15:da:21:c3:e8: 72:77:38:23:ca:4b:6d:54:fa:54:e2:58:f7:e2:44: ac:f3:96:6d:df:fd:ae:01:a1:12:d7:b4:7f:3a:ac: 07:c4:96:4e:b4:e5:2e:85:1e:b2:05:0b:84:61:18: 46:a6:f8:1b:74:42:05:e0:64:ab:0e:42:e2:8f:83: bb:84:0c:cf:28:21:ff:6c:4f:65:e0:37:21:8c:a2: a8:c1:f4:89:65:af:87:9f:b7:88:37:6f:3b:0c:91: 1c:86:7d:88:47:40:d8:4f:9e:21:52:76:9b:f0:08: 49:3a:66:fa:3a:2d:79:b3:d6:cb:47:5d:76:f6:c0: 6e:8f:b4:68:09:6d:6a:9f:18:c6:a8:7f:f4:ff:0d: 53:f7:6e:8e:d8:08:37:42:87:2d:97:d3:61:b9:87: 7a:98:56:c5:f9:67:cf:85:cc:69:05:db:93:09:43: f9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D8:B7:00:94:0B:6A:D1:97:E3:57:A5:6A:1F:66:62:EB:BD:23:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375f8678-f36c-4b2b-b493-20f94a8a3444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.56.133.0/24 Signature Algorithm: sha256WithRSAEncryption a1:4e:0f:82:4e:46:32:97:4a:7a:50:c4:fe:2d:ea:82:5b:7a: a3:e6:6a:34:66:f9:24:1f:8e:51:70:0e:ff:87:6c:0a:55:b3: 81:78:f9:ca:52:4f:e7:95:61:e0:0c:0d:f0:d1:49:2d:f2:18: 99:e9:f3:36:33:58:77:e0:52:22:af:5e:f1:50:de:03:5d:69: 59:22:e9:63:fb:c1:99:64:96:7f:bd:37:ed:a9:cd:f7:0b:a0: 49:0d:c1:e3:1c:96:61:11:e4:e5:c8:6b:7a:89:43:c2:76:a6: 0a:b2:7e:f5:c8:15:1c:13:d9:b3:7f:ca:a7:13:b6:3f:44:8a: 0e:f2:f0:44:d3:61:c5:6c:31:f2:05:25:23:8b:9b:af:86:e9: 41:1c:5e:03:1b:8a:38:a7:a0:5b:8f:b0:bc:ab:55:9a:0a:5f: 66:34:d4:77:8b:ca:c7:f1:da:c4:eb:41:e3:90:15:ae:58:fe: 3e:37:fa:f9:70:20:a5:a5:07:d6:15:32:7d:58:37:d0:0c:e1: 58:e4:fa:11:56:d6:48:f5:c3:bf:8d:9b:72:51:89:c1:7e:52: e5:03:52:f4:69:fc:08:64:b8:8b:27:1d:c7:b7:24:1c:47:7d: 4b:6f:fd:5f:4e:bd:0d:ee:56:c7:8b:65:8a:c7:cd:fe:e0:cd: af:00:11:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNgML3HJxbp2TXET3CLjLNgyyChwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAxMDAwMDIyWhcNMjUwODA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjJlZTA2NzJmOTFhMGFlN2U4ZjVkOWRiZDBkMTMwODI5 NzgxYzk2ZGY5ODM5MjNjMWM0ZWYxOTRjZjc4NTM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6K+0EFwiuA+6Bzyo0RyLOq6qi2lkoB5rPhYFhMoFoRarq r86gbqzWAQ9R4EIviePJKX/ztsT2Yw8pV2mkc1U6Xy+qNB4GqIzNw31X0YsUH5Hg 4HkV2iHD6HJ3OCPKS21U+lTiWPfiRKzzlm3f/a4BoRLXtH86rAfElk605S6FHrIF C4RhGEam+Bt0QgXgZKsOQuKPg7uEDM8oIf9sT2XgNyGMoqjB9Illr4eft4g3bzsM kRyGfYhHQNhPniFSdpvwCEk6Zvo6LXmz1stHXXb2wG6PtGgJbWqfGMaof/T/DVP3 bo7YCDdChy2X02G5h3qYVsX5Z8+FzGkF25MJQ/kpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUD9i3AJQLatGX41elah9mYuu9I28wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM3NWY4Njc4LWYzNmMtNGIyYi1iNDkzLTIwZjk0YThhMzQ0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAByOIUwDQYJKoZIhvcNAQELBQADggEBAKFOD4JORjKXSnpQxP4t6oJbeqPm ajRm+SQfjlFwDv+HbApVs4F4+cpST+eVYeAMDfDRSS3yGJnp8zYzWHfgUiKvXvFQ 3gNdaVki6WP7wZlkln+9N+2pzfcLoEkNweMclmER5OXIa3qJQ8J2pgqyfvXIFRwT 2bN/yqcTtj9Eig7y8ETTYcVsMfIFJSOLm6+G6UEcXgMbijinoFuPsLyrVZoKX2Y0 1HeLysfx2sTrQeOQFa5Y/j43+vlwIKWlB9YVMn1YN9AM4Vjk+hFW1kj1w7+Nm3JR icF+UuUDUvRp/AhkuIsnHce3JBxHfUtv/V9OvQ3uVseLZYrHzf7gza8AEa4= -----END CERTIFICATE-----Generated at Wed Jul 2 05:23:39 2025 by rpki-client