$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62fcb166-75ce-4a8c-8b4b-dc23f2b4090a.roa File: 62fcb166-75ce-4a8c-8b4b-dc23f2b4090a.roa (raw, json) Hash identifier: +x1+Z8KuIYPo5VAwIa50bwtvYy/jFhQTPI1FyVIloYE= Subject key identifier: D3:65:8D:45:48:37:8F:19:3B:F5:8A:5B:40:2D:B5:D8:17:EF:3C:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7BC1F7C31974E81BE89CD05954F4DE94A56DB185 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62fcb166-75ce-4a8c-8b4b-dc23f2b4090a.roa Signing time: Fri 08 Aug 2025 00:01:15 +0000 ROA not before: Fri 08 Aug 2025 00:01:15 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 203.119.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c1:f7:c3:19:74:e8:1b:e8:9c:d0:59:54:f4:de:94:a5:6d:b1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:01:15 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=577e0724b605b21301a0a57119405d87e67273691254f4442a72c45927774674, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:b3:32:53:46:5a:4d:44:43:2f:61:eb:80: 02:b9:d0:a0:b3:7d:4e:f2:d0:9a:c6:42:d6:68:44: 69:e9:d7:37:9b:c7:95:4b:e6:75:ef:fb:ed:c0:a7: c7:aa:15:5f:08:40:a9:08:a7:05:09:bc:8e:91:30: 87:ed:13:3e:61:4b:65:4e:2b:48:a6:17:66:a6:64: 96:aa:12:89:57:68:fb:c7:35:a2:7f:51:4a:84:66: 7e:f7:56:55:04:47:58:b9:df:d8:de:07:84:38:51: 86:8f:af:de:b5:a9:2d:13:8a:5b:64:8c:7e:61:15: 41:eb:de:9f:99:52:bf:e4:31:45:75:ce:a1:60:7f: 21:b3:b6:55:d8:12:52:7a:06:7c:ee:5c:22:81:e3: 54:35:19:e8:f5:9d:ba:5a:05:56:6c:74:eb:f1:15: 7a:0c:44:8e:c7:90:3a:ef:7f:77:8a:94:e7:af:47: ec:be:51:f1:7b:eb:66:91:8a:e1:84:15:bc:92:cd: a6:cd:1c:7a:7e:a7:14:39:7f:c8:53:c5:5e:85:61: 50:1d:64:73:c0:ee:ce:04:a7:11:a2:f4:72:01:f2: 3f:71:ae:90:fb:49:c5:4d:ba:aa:e8:42:ac:71:26: 3f:8a:bc:af:93:87:b9:2e:b5:af:18:89:84:53:b1: 6a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:65:8D:45:48:37:8F:19:3B:F5:8A:5B:40:2D:B5:D8:17:EF:3C:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62fcb166-75ce-4a8c-8b4b-dc23f2b4090a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.119.84.0/24 Signature Algorithm: sha256WithRSAEncryption ac:9d:d6:30:93:c9:d0:7c:6e:e3:6f:c7:96:33:4b:90:b0:38: e9:73:97:5d:b1:0e:35:33:54:ac:98:13:4c:27:03:3d:96:12: fd:7c:53:25:2e:3c:2a:34:e4:bd:66:11:44:19:99:12:3a:84: 2f:fc:9a:e9:ff:0c:bf:d0:e5:0c:1c:1d:58:9b:e1:ef:97:b4: 14:6e:46:e8:c8:fd:f7:29:c4:fd:16:3a:e6:2c:ff:62:6a:93: 8f:68:5e:20:ed:5b:fe:90:b5:ae:f5:e0:50:f3:b7:ba:89:e1: e7:4a:9d:70:d9:7e:33:5f:b3:a3:0f:48:f1:8c:0a:88:1b:9b: fe:11:d4:ac:d1:31:9b:37:bc:53:5f:91:a8:c6:56:f5:30:51: be:99:cc:a2:a2:77:1f:76:e7:d9:64:c3:77:be:39:58:69:bf: 10:dd:13:a5:77:92:12:01:46:dc:3d:be:04:8d:d1:e0:af:35: 03:1c:e3:53:9a:c2:ae:9d:1d:b1:02:86:ee:0f:b6:d2:62:4f: 43:78:65:b3:8c:92:44:24:d5:2a:28:01:34:64:c2:38:ff:49: 7e:0e:65:3b:27:9f:96:40:b5:a3:de:56:96:3f:fa:bc:31:84: 38:78:83:c5:d1:97:44:31:5d:aa:88:c1:82:aa:07:1f:72:b9: 11:c9:47:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe8H3wxl06BvonNBZVPTelKVtsYUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAwMTE1WhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzdlMDcyNGI2MDViMjEzMDFhMGE1NzExOTQwNWQ4N2U2 NzI3MzY5MTI1NGY0NDQyYTcyYzQ1OTI3Nzc0Njc0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChfbMyU0ZaTURDL2HrgAK50KCzfU7y0JrGQtZoRGnp1zeb x5VL5nXv++3Ap8eqFV8IQKkIpwUJvI6RMIftEz5hS2VOK0imF2amZJaqEolXaPvH NaJ/UUqEZn73VlUER1i539jeB4Q4UYaPr961qS0TiltkjH5hFUHr3p+ZUr/kMUV1 zqFgfyGztlXYElJ6BnzuXCKB41Q1Gej1nbpaBVZsdOvxFXoMRI7HkDrvf3eKlOev R+y+UfF762aRiuGEFbySzabNHHp+pxQ5f8hTxV6FYVAdZHPA7s4EpxGi9HIB8j9x rpD7ScVNuqroQqxxJj+KvK+Th7kuta8YiYRTsWpfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU02WNRUg3jxk79YpbQC212BfvPHAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYyZmNiMTY2LTc1Y2UtNGE4Yy04YjRiLWRjMjNmMmI0MDkwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADLd1QwDQYJKoZIhvcNAQELBQADggEBAKyd1jCTydB8buNvx5YzS5CwOOlz l12xDjUzVKyYE0wnAz2WEv18UyUuPCo05L1mEUQZmRI6hC/8mun/DL/Q5QwcHVib 4e+XtBRuRujI/fcpxP0WOuYs/2Jqk49oXiDtW/6Qta714FDzt7qJ4edKnXDZfjNf s6MPSPGMCogbm/4R1KzRMZs3vFNfkajGVvUwUb6ZzKKidx9259lkw3e+OVhpvxDd E6V3khIBRtw9vgSN0eCvNQMc41Oawq6dHbEChu4PttJiT0N4ZbOMkkQk1SooATRk wjj/SX4OZTsnn5ZAtaPeVpY/+rwxhDh4g8XRl0QxXaqIwYKqBx9yuRHJRw8= -----END CERTIFICATE-----Generated at Sat Aug 23 06:52:02 2025 by rpki-client