$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/535de5eb-7a03-4839-a5ea-cf50f810b149.roa File: 535de5eb-7a03-4839-a5ea-cf50f810b149.roa (raw, json) Hash identifier: kKOPbKa3gvQKtkDQ1Qh+9nzEH5JKbP67NDpKXmS6p3M= Subject key identifier: CE:8E:E1:4D:2E:CE:51:9A:36:4D:99:BA:A4:CF:B9:56:59:65:FF:4A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2F25400B6FC793FE1617F376085819B89835CE0A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/535de5eb-7a03-4839-a5ea-cf50f810b149.roa Signing time: Fri 08 Aug 2025 00:01:20 +0000 ROA not before: Fri 08 Aug 2025 00:01:20 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 203.88.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:25:40:0b:6f:c7:93:fe:16:17:f3:76:08:58:19:b8:98:35:ce:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:01:20 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=e4ec654871606b0d04654d8b43c166fa0dea1366b6d8daaf49fac43107bc2d80, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1a:db:94:ee:ac:0c:d4:20:3e:b6:36:03:47: 30:6d:38:bf:62:ee:11:cd:e8:c0:bd:35:ab:dd:a9: ae:ec:18:d1:4e:18:4f:1e:fd:89:f8:ed:ed:be:28: 7e:5b:92:83:2b:a1:60:f3:63:52:bf:db:01:38:61: 14:9e:e6:bc:0a:5b:80:e2:e5:ea:62:c2:93:7a:fa: b7:ce:1c:0d:bf:9f:55:21:2c:cd:e6:87:6b:21:f5: 33:59:c2:74:dc:58:3d:57:8a:a1:ec:3b:c1:2f:04: 31:66:97:e4:53:aa:26:79:6c:86:75:85:b6:29:d2: b3:a4:a1:09:8e:31:8a:9d:75:fb:0c:aa:28:be:dc: 0e:80:fd:38:fc:76:d3:d6:34:2f:19:af:47:69:90: 3f:08:d1:8a:c5:a7:c8:b4:74:d8:e0:e4:c7:60:26: b4:44:9d:c5:61:30:17:a4:d6:83:e9:d2:df:36:fd: 82:79:ab:62:5f:ae:e1:93:73:c2:ec:9b:16:65:51: b3:a5:be:29:ee:55:d4:54:6f:0c:94:04:c2:a0:13: 8d:35:e4:13:39:4a:88:e8:33:75:74:d6:45:a0:65: 27:f3:cf:5c:2c:0c:b4:de:94:9d:00:7b:16:36:ee: 23:d7:10:e3:d1:49:6e:44:5a:bb:ab:d5:58:9f:15: 11:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8E:E1:4D:2E:CE:51:9A:36:4D:99:BA:A4:CF:B9:56:59:65:FF:4A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/535de5eb-7a03-4839-a5ea-cf50f810b149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.88.83.0/24 Signature Algorithm: sha256WithRSAEncryption b1:d8:2e:3b:4a:6c:d8:46:f7:81:82:5a:3e:3e:4f:dd:c4:9f: 6c:14:69:36:37:db:f5:4c:a4:69:39:c1:7a:f8:6a:1d:02:b7: e5:80:b7:c8:9f:2a:56:46:7b:e0:68:44:51:11:00:3b:09:dd: 08:64:8c:ee:60:03:7c:27:68:11:69:63:32:8c:0f:8b:c4:64: a4:0f:20:ea:64:27:50:6b:9a:23:2e:1b:c4:18:ab:e8:eb:29: e8:36:54:f2:19:66:9c:4b:b4:83:22:2a:dc:ad:21:3d:00:c4: 78:c5:dd:3a:77:db:c4:81:d1:5d:7f:3c:76:77:52:28:1f:97: 54:bc:77:a9:fd:3b:41:f4:4a:f1:b5:8a:3d:44:db:fa:1e:ae: ff:c8:f0:bc:3c:8e:55:21:07:d0:e8:6d:6f:05:7d:57:70:3e: 92:a9:90:20:db:b2:b1:28:23:e6:21:fc:0b:6c:fb:cf:ef:11: 7c:8f:fc:95:8e:86:2c:c6:52:70:6b:62:1d:74:62:bf:bf:b7: f5:20:9e:30:ef:35:f6:06:5d:56:8b:2b:c1:74:73:ba:84:61: 59:e3:fb:a3:45:8c:a3:5a:0c:81:95:ae:bb:d7:02:91:ff:9a: a2:d8:d8:12:d8:ca:35:3c:11:10:d7:d8:9e:a0:37:48:58:d3: 11:80:2f:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULyVAC2/Hk/4WF/N2CFgZuJg1zgowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAwMTIwWhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNGVjNjU0ODcxNjA2YjBkMDQ2NTRkOGI0M2MxNjZmYTBk ZWExMzY2YjZkOGRhYWY0OWZhYzQzMTA3YmMyZDgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZGtuU7qwM1CA+tjYDRzBtOL9i7hHN6MC9Navdqa7sGNFO GE8e/Yn47e2+KH5bkoMroWDzY1K/2wE4YRSe5rwKW4Di5epiwpN6+rfOHA2/n1Uh LM3mh2sh9TNZwnTcWD1XiqHsO8EvBDFml+RTqiZ5bIZ1hbYp0rOkoQmOMYqddfsM qii+3A6A/Tj8dtPWNC8Zr0dpkD8I0YrFp8i0dNjg5MdgJrREncVhMBek1oPp0t82 /YJ5q2JfruGTc8LsmxZlUbOlvinuVdRUbwyUBMKgE4015BM5SojoM3V01kWgZSfz z1wsDLTelJ0AexY27iPXEOPRSW5EWrur1VifFRHVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzo7hTS7OUZo2TZm6pM+5Vlll/0owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzNWRlNWViLTdhMDMtNDgzOS1hNWVhLWNmNTBmODEwYjE0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADLWFMwDQYJKoZIhvcNAQELBQADggEBALHYLjtKbNhG94GCWj4+T93En2wU aTY32/VMpGk5wXr4ah0Ct+WAt8ifKlZGe+BoRFERADsJ3QhkjO5gA3wnaBFpYzKM D4vEZKQPIOpkJ1BrmiMuG8QYq+jrKeg2VPIZZpxLtIMiKtytIT0AxHjF3Tp328SB 0V1/PHZ3Uigfl1S8d6n9O0H0SvG1ij1E2/oerv/I8Lw8jlUhB9DobW8FfVdwPpKp kCDbsrEoI+Yh/Ats+8/vEXyP/JWOhizGUnBrYh10Yr+/t/UgnjDvNfYGXVaLK8F0 c7qEYVnj+6NFjKNaDIGVrrvXApH/mqLY2BLYyjU8ERDX2J6gN0hY0xGAL6o= -----END CERTIFICATE-----Generated at Sat Aug 23 14:12:34 2025 by rpki-client