$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9203741d-f57c-4cc6-ab8e-bbe85f4f794c.roa File: 9203741d-f57c-4cc6-ab8e-bbe85f4f794c.roa (raw, json) Hash identifier: xQMWfG9Qh5ObQtX1w0idFNdQdFLGhddId+bk+L/bL5o= Subject key identifier: D6:8F:1D:23:68:B2:11:F1:74:18:E1:55:67:29:41:B5:9E:A3:5F:BD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33DFAAF76B14D9E63CF13046AA4DA00920F79DB2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9203741d-f57c-4cc6-ab8e-bbe85f4f794c.roa Signing time: Tue 17 Jun 2025 00:00:29 +0000 ROA not before: Tue 17 Jun 2025 00:00:29 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.232.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:df:aa:f7:6b:14:d9:e6:3c:f1:30:46:aa:4d:a0:09:20:f7:9d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 00:00:29 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=f24a2de6dc72ca2f4cebeed87b3ced041588e3c6969ecc2a33bd4b45d3d4e65b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:66:eb:4c:24:f1:c4:7b:be:34:19:ab:93:be: 1b:50:14:2f:45:c1:a8:16:35:3c:0b:b8:34:66:7b: d8:9d:ed:ec:c5:62:24:42:58:39:bf:c4:55:f0:ab: 3f:2a:63:41:29:b6:e9:27:4e:44:3e:7f:b1:92:ef: 5b:26:86:d4:96:a0:b5:64:5c:e7:88:f1:47:ff:e7: ca:d4:ad:a0:af:81:6e:3a:0c:55:06:53:65:4a:76: 2f:df:de:9a:a2:37:3d:96:5c:6a:13:0d:87:66:a5: 83:c2:c3:a2:68:d9:fe:35:35:9a:3a:9a:b9:8d:85: d6:4a:01:44:54:63:12:5b:a0:63:7b:af:15:a0:e7: 82:e8:09:46:e9:28:00:0c:02:32:06:a3:44:b5:0a: 00:81:19:ae:d8:ce:a1:27:6e:66:4b:38:05:e0:33: 1d:2b:0b:ea:19:2d:95:12:86:d1:c5:f6:d5:65:7a: d2:3e:90:bf:51:c8:b7:d8:a3:1b:27:67:7b:a6:cb: af:90:07:30:ea:a5:6b:14:10:b8:6d:2c:65:6d:af: 1f:9f:bf:bc:c8:39:e4:b2:d6:0b:1d:ed:98:c8:21: 50:03:d0:a2:74:f6:0f:a0:31:89:92:10:c3:d0:2d: ae:21:6b:57:c9:7c:81:c5:f1:9f:52:14:cb:e7:bb: 00:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8F:1D:23:68:B2:11:F1:74:18:E1:55:67:29:41:B5:9E:A3:5F:BD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9203741d-f57c-4cc6-ab8e-bbe85f4f794c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.232.149.0/24 Signature Algorithm: sha256WithRSAEncryption 05:03:c4:ff:bf:c3:f0:6b:03:9d:f9:4c:7a:72:bd:d8:9f:68: 39:db:b4:14:c6:8a:8e:20:8b:23:7a:85:1f:19:81:51:6c:14: 77:10:ab:47:46:06:67:94:94:8c:a1:9b:0d:25:0e:c6:61:b6: 80:c3:60:94:1f:87:9b:57:a2:ed:03:b3:5e:f4:fd:c9:66:4e: 3e:bf:a4:f9:0a:89:17:82:97:10:f5:02:80:4f:86:56:0f:49: ef:76:34:dc:5a:5f:19:40:1a:a5:93:c5:0c:71:df:ee:ee:79: c3:65:80:9b:7b:73:e3:98:ac:76:a0:51:2f:f1:b9:80:5e:93: 81:81:5a:a0:34:ac:07:20:ed:6d:c2:8b:ba:6c:de:d3:6d:28: 10:cb:0e:79:03:d7:44:cd:c8:88:e4:81:88:38:d0:5d:a6:23: a6:02:04:94:f2:a1:77:ae:c6:f7:3b:e4:2b:b3:1f:1a:3d:2d: 58:01:c7:00:64:d0:3a:00:ae:c2:ec:11:bf:10:2d:83:c1:f8: 15:b9:82:32:e2:19:5b:36:2f:a6:b3:f4:c1:dd:0e:32:ee:0a: 0c:64:51:10:2c:d8:62:ab:4c:7b:16:46:8b:8c:55:a2:39:a5: 34:ab:ca:5e:aa:45:bc:83:89:18:75:f7:0a:fc:95:72:c6:69: c2:be:16:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM9+q92sU2eY88TBGqk2gCSD3nbIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MDAwMDI5WhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjRhMmRlNmRjNzJjYTJmNGNlYmVlZDg3YjNjZWQwNDE1 ODhlM2M2OTY5ZWNjMmEzM2JkNGI0NWQzZDRlNjViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKZutMJPHEe740GauTvhtQFC9FwagWNTwLuDRme9id7ezF YiRCWDm/xFXwqz8qY0EptuknTkQ+f7GS71smhtSWoLVkXOeI8Uf/58rUraCvgW46 DFUGU2VKdi/f3pqiNz2WXGoTDYdmpYPCw6Jo2f41NZo6mrmNhdZKAURUYxJboGN7 rxWg54LoCUbpKAAMAjIGo0S1CgCBGa7YzqEnbmZLOAXgMx0rC+oZLZUShtHF9tVl etI+kL9RyLfYoxsnZ3umy6+QBzDqpWsUELhtLGVtrx+fv7zIOeSy1gsd7ZjIIVAD 0KJ09g+gMYmSEMPQLa4ha1fJfIHF8Z9SFMvnuwAdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1o8dI2iyEfF0GOFVZylBtZ6jX70wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyMDM3NDFkLWY1N2MtNGNjNi1hYjhlLWJiZTg1ZjRmNzk0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABu6JUwDQYJKoZIhvcNAQELBQADggEBAAUDxP+/w/BrA535THpyvdifaDnb tBTGio4giyN6hR8ZgVFsFHcQq0dGBmeUlIyhmw0lDsZhtoDDYJQfh5tXou0Ds170 /clmTj6/pPkKiReClxD1AoBPhlYPSe92NNxaXxlAGqWTxQxx3+7uecNlgJt7c+OY rHagUS/xuYBek4GBWqA0rAcg7W3Ci7ps3tNtKBDLDnkD10TNyIjkgYg40F2mI6YC BJTyoXeuxvc75CuzHxo9LVgBxwBk0DoArsLsEb8QLYPB+BW5gjLiGVs2L6az9MHd DjLuCgxkURAs2GKrTHsWRouMVaI5pTSryl6qRbyDiRh19wr8lXLGacK+Frw= -----END CERTIFICATE-----Generated at Sun Jun 29 04:45:21 2025 by rpki-client