$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aeaa84d-4555-408c-adfb-7243b9469a8d.roa File: 5aeaa84d-4555-408c-adfb-7243b9469a8d.roa (raw, json) Hash identifier: M39dxk5mdJzoPkdQj2yhMam9rdeiFIGHE0jLv9PrVUY= Subject key identifier: D1:BC:72:6A:2D:C2:3E:71:E0:60:8B:7E:21:E8:D1:6B:0A:38:EA:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6394B55A4254D4D76F70AF86897A26E21E321459 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aeaa84d-4555-408c-adfb-7243b9469a8d.roa Signing time: Mon 16 Jun 2025 15:10:23 +0000 ROA not before: Mon 16 Jun 2025 15:10:23 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 220.157.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:94:b5:5a:42:54:d4:d7:6f:70:af:86:89:7a:26:e2:1e:32:14:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:10:23 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=0908f0c02227e8bad8271a1e01f3b68a05f5972609c7b185124f6c8c24e8af41, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:1f:bf:57:93:5c:ee:90:3f:fc:25:e0:8c: 38:1e:03:b7:ba:76:4b:bd:55:89:16:41:9f:48:46: 65:f6:d6:61:3f:7c:9f:4a:5a:51:6c:df:6b:84:49: d2:c0:7c:5e:a2:40:38:89:f1:e3:91:65:ff:66:ed: 60:92:1d:bc:b5:c4:03:38:66:80:1f:86:13:c8:fd: 8e:20:60:2c:fe:89:e3:ce:29:96:57:a5:2e:bf:c8: ed:4f:50:e0:46:5a:85:7d:c1:6a:ff:8e:67:af:54: 5c:0b:79:82:f9:3f:74:06:f9:4e:20:20:06:12:05: 47:98:ea:58:80:9a:0e:78:1c:e8:5d:66:34:3f:ea: 9a:48:86:35:08:8c:82:0b:27:6a:8a:69:69:ce:1f: 55:9f:3f:52:0a:bc:bf:dd:68:49:c9:2c:c0:24:ee: 98:37:fe:c3:56:6f:58:bc:33:c8:25:d4:a5:00:d0: 92:38:0a:59:20:d5:55:fa:6c:93:8f:84:0f:1f:a5: a4:b7:ca:47:97:85:46:47:db:e2:aa:34:09:ee:9d: ac:94:12:3d:79:0c:59:d4:f0:29:f6:9b:6d:7c:f7: 07:df:9e:95:e6:58:61:c4:61:0b:20:b9:e3:7a:7e: 74:e0:1c:03:d5:93:b5:f1:2b:03:11:7f:77:55:fe: 80:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BC:72:6A:2D:C2:3E:71:E0:60:8B:7E:21:E8:D1:6B:0A:38:EA:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aeaa84d-4555-408c-adfb-7243b9469a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.157.78.0/24 Signature Algorithm: sha256WithRSAEncryption 20:88:fa:6b:d4:79:e7:bd:17:eb:97:d2:77:a6:b1:8a:28:5e: 0a:2d:b5:d9:50:0f:b8:8d:9d:bd:fb:35:05:d0:60:34:a4:32: 66:82:8d:98:c0:1f:0a:b3:4c:a3:db:96:43:97:9d:e2:48:76: b4:48:f8:be:11:63:c8:59:78:eb:e0:95:cb:1c:03:d4:b1:ab: e9:98:6d:8a:da:e8:99:fa:35:49:60:a4:06:9a:3c:dc:f1:3d: a7:1b:53:58:fa:75:6c:37:d2:3e:51:94:99:23:3a:e1:8c:b6: 67:16:d7:a8:78:f3:28:8e:8a:9b:58:b7:05:a6:52:65:7f:5a: 06:cb:9a:cf:dd:97:9e:19:04:ee:f5:b4:7c:18:9e:ab:34:ed: 4e:25:5e:de:5f:b6:03:bb:65:e5:d5:49:59:b3:5c:c7:fa:ad: 30:e5:05:08:ff:7a:2f:aa:25:bd:65:c6:09:76:e2:46:58:5e: 00:a7:c1:af:10:ef:47:02:18:aa:6e:33:c0:4d:69:a0:f8:f9: e0:f0:eb:29:33:c1:a0:8a:be:af:d2:18:fe:a5:9c:6f:7c:ed: 8a:bd:a2:81:03:25:8a:7c:52:63:ed:2c:35:5d:2d:fe:d0:06: 58:3b:34:5a:57:42:47:a0:69:61:aa:ed:36:0d:f2:a6:74:9a: 54:d3:2c:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY5S1WkJU1NdvcK+GiXom4h4yFFkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUxMDIzWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTA4ZjBjMDIyMjdlOGJhZDgyNzFhMWUwMWYzYjY4YTA1 ZjU5NzI2MDljN2IxODUxMjRmNmM4YzI0ZThhZjQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClzh+/V5Nc7pA//CXgjDgeA7e6dku9VYkWQZ9IRmX21mE/ fJ9KWlFs32uESdLAfF6iQDiJ8eORZf9m7WCSHby1xAM4ZoAfhhPI/Y4gYCz+iePO KZZXpS6/yO1PUOBGWoV9wWr/jmevVFwLeYL5P3QG+U4gIAYSBUeY6liAmg54HOhd ZjQ/6ppIhjUIjIILJ2qKaWnOH1WfP1IKvL/daEnJLMAk7pg3/sNWb1i8M8gl1KUA 0JI4Clkg1VX6bJOPhA8fpaS3ykeXhUZH2+KqNAnunayUEj15DFnU8Cn2m2189wff npXmWGHEYQsgueN6fnTgHAPVk7XxKwMRf3dV/oDZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0bxyai3CPnHgYIt+IejRawo46gQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVhZWFhODRkLTQ1NTUtNDA4Yy1hZGZiLTcyNDNiOTQ2OWE4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcnU4wDQYJKoZIhvcNAQELBQADggEBACCI+mvUeee9F+uX0nemsYooXgot tdlQD7iNnb37NQXQYDSkMmaCjZjAHwqzTKPblkOXneJIdrRI+L4RY8hZeOvglcsc A9Sxq+mYbYra6Jn6NUlgpAaaPNzxPacbU1j6dWw30j5RlJkjOuGMtmcW16h48yiO iptYtwWmUmV/WgbLms/dl54ZBO71tHwYnqs07U4lXt5ftgO7ZeXVSVmzXMf6rTDl BQj/ei+qJb1lxgl24kZYXgCnwa8Q70cCGKpuM8BNaaD4+eDw6ykzwaCKvq/SGP6l nG987Yq9ooEDJYp8UmPtLDVdLf7QBlg7NFpXQkegaWGq7TYN8qZ0mlTTLFY= -----END CERTIFICATE-----Generated at Sun Jun 29 04:43:17 2025 by rpki-client