$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57babf0d-7d6f-4016-a59e-e7825150c105.roa File: 57babf0d-7d6f-4016-a59e-e7825150c105.roa (raw, json) Hash identifier: c2Jda8q2vxwem6RGY3jj8XauATRmoociD4FwRXAIqss= Subject key identifier: 68:32:26:1F:03:05:5C:2A:87:7A:18:AA:97:CE:1E:4A:CC:7F:40:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52A0BBB9223E82A12547470FE9714606D5B4EB1F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57babf0d-7d6f-4016-a59e-e7825150c105.roa Signing time: Mon 04 Aug 2025 16:00:13 +0000 ROA not before: Mon 04 Aug 2025 16:00:13 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.238.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a0:bb:b9:22:3e:82:a1:25:47:47:0f:e9:71:46:06:d5:b4:eb:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:00:13 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=6c35165a32e0409022adaa1faf6864c7b8095e96ad2726c95f06932bfc14e6e3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:d3:be:09:5b:b3:79:5f:47:19:37:76:0e: c0:b6:bc:65:7f:f7:c5:17:30:43:0b:06:0d:63:b6: aa:0f:bd:eb:24:2c:f1:24:87:b0:d3:09:0e:8d:0c: 25:7d:74:c3:fe:df:7f:b6:fe:b7:6c:88:2e:fe:94: a3:37:17:9d:ce:87:ab:6b:07:fa:b7:36:14:27:96: 0e:cb:bc:32:51:a6:c1:c3:6c:ad:50:01:23:a5:63: 79:fc:05:62:7f:76:e7:29:c5:dd:47:9a:72:1b:bc: 28:c6:f4:5b:2b:5e:49:7c:11:c6:47:3e:1b:a4:a1: 23:1c:a1:ef:13:34:70:07:4b:81:58:86:a1:d5:af: 34:17:45:0f:b0:c7:96:99:32:33:ae:3b:72:04:05: 8c:67:c2:57:c4:fe:e2:14:2b:0c:c8:69:1c:66:d5: 55:80:c5:bb:bf:96:03:de:b9:c9:aa:87:13:9b:ca: 06:28:34:4f:fb:cc:8d:65:41:b9:99:0e:e8:b3:75: b1:93:e6:c9:16:92:d5:0a:fb:d9:00:24:de:13:de: fa:7c:72:1e:2c:8f:e4:14:cd:e2:cc:bf:e3:e8:07: ff:13:8c:ee:a8:ce:f6:76:05:8d:03:bd:80:87:57: 92:fd:cd:a8:72:67:59:57:75:4b:83:f4:e5:8a:dd: 76:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:32:26:1F:03:05:5C:2A:87:7A:18:AA:97:CE:1E:4A:CC:7F:40:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57babf0d-7d6f-4016-a59e-e7825150c105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.238.242.0/23 Signature Algorithm: sha256WithRSAEncryption aa:80:83:42:87:df:f3:8b:0f:77:14:90:36:59:e9:51:79:00: e0:90:b0:c8:df:b8:11:1b:cf:60:8a:24:96:51:9f:aa:29:24: d1:ef:25:b4:d6:14:c0:d3:c7:b0:dc:9e:be:5d:0d:50:76:be: 4f:40:5c:10:ea:15:f5:9f:0b:d7:31:22:dd:3e:e2:14:06:9a: 39:7a:d0:1d:10:eb:bc:da:eb:6d:d1:83:6a:4d:40:23:11:58: 48:f4:ce:a8:9c:ab:af:14:03:16:aa:ea:f3:d4:43:07:1a:bc: cd:8d:e8:d1:e3:fa:0f:b2:5b:bc:f3:40:d2:e6:55:ef:74:1f: 2f:fe:00:2e:14:68:13:71:cd:26:69:a7:ec:cb:6a:f7:2f:9b: 1b:9a:f2:bf:d9:87:36:ae:37:a3:e4:bf:e8:d1:dc:cf:ad:6f: d8:7b:11:dc:62:55:f4:b5:c4:28:32:88:91:3c:43:35:f4:93: 99:6b:39:52:8e:0b:d5:65:4b:82:f6:72:9b:6c:fc:f7:84:c3: 9b:87:15:ce:b2:94:a6:d7:b2:11:2c:06:ac:2d:4d:91:2f:41: dd:f4:a8:b7:f1:14:0b:22:ab:3a:6c:67:fe:6a:53:56:08:f0: c5:da:af:6c:e0:2d:1f:22:b5:fd:6c:bc:12:08:8d:23:2d:b6: 59:45:4a:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUqC7uSI+gqElR0cP6XFGBtW06x8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTYwMDEzWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzM1MTY1YTMyZTA0MDkwMjJhZGFhMWZhZjY4NjRjN2I4 MDk1ZTk2YWQyNzI2Yzk1ZjA2OTMyYmZjMTRlNmUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm3NO+CVuzeV9HGTd2DsC2vGV/98UXMEMLBg1jtqoPvesk LPEkh7DTCQ6NDCV9dMP+33+2/rdsiC7+lKM3F53Oh6trB/q3NhQnlg7LvDJRpsHD bK1QASOlY3n8BWJ/ducpxd1HmnIbvCjG9FsrXkl8EcZHPhukoSMcoe8TNHAHS4FY hqHVrzQXRQ+wx5aZMjOuO3IEBYxnwlfE/uIUKwzIaRxm1VWAxbu/lgPeucmqhxOb ygYoNE/7zI1lQbmZDuizdbGT5skWktUK+9kAJN4T3vp8ch4sj+QUzeLMv+PoB/8T jO6ozvZ2BY0DvYCHV5L9zahyZ1lXdUuD9OWK3XZdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaDImHwMFXCqHehiql84eSsx/QOEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU3YmFiZjBkLTdkNmYtNDAxNi1hNTllLWU3ODI1MTUwYzEwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFu7vIwDQYJKoZIhvcNAQELBQADggEBAKqAg0KH3/OLD3cUkDZZ6VF5AOCQ sMjfuBEbz2CKJJZRn6opJNHvJbTWFMDTx7Dcnr5dDVB2vk9AXBDqFfWfC9cxIt0+ 4hQGmjl60B0Q67za623Rg2pNQCMRWEj0zqicq68UAxaq6vPUQwcavM2N6NHj+g+y W7zzQNLmVe90Hy/+AC4UaBNxzSZpp+zLavcvmxua8r/ZhzauN6Pkv+jR3M+tb9h7 EdxiVfS1xCgyiJE8QzX0k5lrOVKOC9VlS4L2cpts/PeEw5uHFc6ylKbXshEsBqwt TZEvQd30qLfxFAsiqzpsZ/5qU1YI8MXar2zgLR8itf1svBIIjSMttllFSp8= -----END CERTIFICATE-----Generated at Sat Aug 23 18:25:12 2025 by rpki-client