$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ec798da-a6c2-44be-afd4-f4a224668ad8.roa File: 7ec798da-a6c2-44be-afd4-f4a224668ad8.roa (raw, json) Hash identifier: BkAm+3ITJWawZGVcAiIjNG2SBhZhAA3Vl0fkf78ccW4= Subject key identifier: 9C:3B:03:3F:B7:46:96:CC:39:76:EE:8C:ED:4B:80:47:F0:F1:A3:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 75EA4DE00A51A064D7534C25E04AA499546CC288 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ec798da-a6c2-44be-afd4-f4a224668ad8.roa Signing time: Sat 14 Jun 2025 00:10:17 +0000 ROA not before: Sat 14 Jun 2025 00:10:17 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 119.13.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ea:4d:e0:0a:51:a0:64:d7:53:4c:25:e0:4a:a4:99:54:6c:c2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:10:17 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=b52e8863351e4f40d827d29bfa7385ff1a7bebfec894e81ee70b7e5ed5a0e402, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:ed:9f:5e:81:49:fc:70:1e:6b:e3:be:16: 74:bd:f0:82:eb:56:28:48:55:3a:05:28:34:30:8c: b7:44:bc:99:5f:d2:d3:a9:ac:6e:da:79:a5:9f:d6: 56:e6:1c:7a:26:6c:4e:32:f4:1e:67:fe:07:32:2c: 85:56:bf:10:9a:be:42:4a:bd:4d:25:e6:45:6b:de: 00:83:43:68:26:a5:6f:9f:70:2c:51:9c:36:e1:2f: 5e:0c:09:b9:68:36:9a:97:3b:c9:96:c8:f1:71:4d: b5:f1:1f:ed:87:cf:73:bc:41:c9:7f:96:bb:fe:95: 92:00:5f:76:77:a9:04:4a:66:03:01:dd:41:27:95: b4:f4:ed:e3:73:0a:93:cc:c0:9d:5d:86:1b:8c:8a: 54:53:d6:51:02:37:9c:ed:1e:ff:55:16:d2:68:2b: 84:20:7e:45:88:c8:ba:f0:42:a6:2d:2a:b2:b5:29: e6:17:8e:28:fc:3d:f7:14:34:5c:46:c2:d1:ce:a7: 33:df:17:99:5c:68:26:db:76:53:47:ee:6b:0a:6a: fd:a8:30:c1:38:39:56:de:04:a1:dd:ac:a0:c1:bb: c4:30:25:5d:09:26:15:a3:97:3e:c4:3d:6e:25:34: 1d:96:d2:49:88:29:70:40:85:cb:e2:c0:2d:38:52: d8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3B:03:3F:B7:46:96:CC:39:76:EE:8C:ED:4B:80:47:F0:F1:A3:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ec798da-a6c2-44be-afd4-f4a224668ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.13.52.0/22 Signature Algorithm: sha256WithRSAEncryption 94:a8:82:50:e6:29:68:d2:f4:ed:7a:06:95:d6:a0:c8:22:d1: 80:8f:9f:7a:66:4a:b6:39:ff:80:e0:84:1b:45:a6:c8:a2:d2: fc:1c:b6:f6:e0:c1:8c:8e:d7:81:e0:d5:af:bd:61:ca:a3:a4: 3c:3d:21:ad:6b:ac:b7:f5:c5:7a:ef:25:94:09:c8:83:87:cf: 52:3c:c0:03:19:cc:ca:6b:6c:5e:9c:c7:06:44:91:a9:90:28: 8e:8e:3c:f0:7e:3a:8a:c6:f9:a2:43:80:2e:55:a6:27:48:f7: cb:d7:6d:25:91:57:82:ab:b8:97:98:28:5f:00:cc:2b:e8:73: eb:6a:ab:67:f1:e3:70:67:48:41:f6:fc:c1:73:54:c0:89:64: 4e:ca:41:e6:a7:37:30:b4:ed:da:f3:e1:bb:ce:91:84:4d:de: 8a:5b:c7:32:14:07:9d:2b:5f:d7:ce:89:89:4b:10:48:a5:9d: ec:e5:53:77:69:f9:11:75:23:fd:60:32:94:d2:05:88:de:43: 87:f4:4a:d3:2d:88:11:59:f5:fd:8b:30:db:6e:34:47:14:1d: 8a:f2:15:a5:98:07:c4:be:b6:18:83:88:37:50:dc:e0:e9:a7: 03:8c:f1:a8:19:1b:d1:82:bc:f1:2b:c5:a9:66:73:d4:57:60: 17:ad:7b:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdepN4ApRoGTXU0wl4EqkmVRswogwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDAxMDE3WhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTJlODg2MzM1MWU0ZjQwZDgyN2QyOWJmYTczODVmZjFh N2JlYmZlYzg5NGU4MWVlNzBiN2U1ZWQ1YTBlNDAyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1be2fXoFJ/HAea+O+FnS98ILrVihIVToFKDQwjLdEvJlf 0tOprG7aeaWf1lbmHHombE4y9B5n/gcyLIVWvxCavkJKvU0l5kVr3gCDQ2gmpW+f cCxRnDbhL14MCbloNpqXO8mWyPFxTbXxH+2Hz3O8Qcl/lrv+lZIAX3Z3qQRKZgMB 3UEnlbT07eNzCpPMwJ1dhhuMilRT1lECN5ztHv9VFtJoK4QgfkWIyLrwQqYtKrK1 KeYXjij8PfcUNFxGwtHOpzPfF5lcaCbbdlNH7msKav2oMME4OVbeBKHdrKDBu8Qw JV0JJhWjlz7EPW4lNB2W0kmIKXBAhcviwC04UtjpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnDsDP7dGlsw5du6M7UuAR/Dxo0wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdlYzc5OGRhLWE2YzItNDRiZS1hZmQ0LWY0YTIyNDY2OGFkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJ3DTQwDQYJKoZIhvcNAQELBQADggEBAJSoglDmKWjS9O16BpXWoMgi0YCP n3pmSrY5/4DghBtFpsii0vwctvbgwYyO14Hg1a+9YcqjpDw9Ia1rrLf1xXrvJZQJ yIOHz1I8wAMZzMprbF6cxwZEkamQKI6OPPB+OorG+aJDgC5VpidI98vXbSWRV4Kr uJeYKF8AzCvoc+tqq2fx43BnSEH2/MFzVMCJZE7KQeanNzC07drz4bvOkYRN3opb xzIUB50rX9fOiYlLEEilnezlU3dp+RF1I/1gMpTSBYjeQ4f0StMtiBFZ9f2LMNtu NEcUHYryFaWYB8S+thiDiDdQ3ODppwOM8agZG9GCvPErxalmc9RXYBetexw= -----END CERTIFICATE-----Generated at Wed Jul 2 11:46:58 2025 by rpki-client