$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98b5bff1-41c4-4141-92fb-20e5d8600f7e.roa File: 98b5bff1-41c4-4141-92fb-20e5d8600f7e.roa (raw, json) Hash identifier: J4E68Q0ETnulkCoIAE4u9eDqnaGi2nNeySmHrHqFOzQ= Subject key identifier: 59:48:94:CE:E6:9B:7D:0C:81:96:83:7E:21:26:C0:CB:6E:9C:0B:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48149BB37A583FFD7394A2F1C2B2466056A55B23 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98b5bff1-41c4-4141-92fb-20e5d8600f7e.roa Signing time: Fri 22 Aug 2025 00:20:23 +0000 ROA not before: Fri 22 Aug 2025 00:20:23 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 124.24.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:14:9b:b3:7a:58:3f:fd:73:94:a2:f1:c2:b2:46:60:56:a5:5b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 22 00:20:23 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=44fc6cd097818e774a2aa8d9cfc6146b47786028340ef03cac4d5be54da703b2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:1e:41:36:71:67:74:62:be:0e:b4:4b:a3: 7a:69:70:6a:b7:ec:67:bc:b8:22:f3:98:e9:89:58: 7c:63:83:74:5e:52:9d:36:ea:bd:e4:db:39:1f:ad: 3f:c5:b5:14:7f:54:17:dd:77:6e:c8:3e:5e:d2:df: 6c:d5:6d:c7:58:c3:90:4f:fc:ee:87:01:c0:ce:07: a3:6c:09:79:be:c1:b7:75:7f:1f:c8:a0:1e:d9:6c: b8:3e:00:12:12:23:f5:25:b8:1b:19:45:bf:8f:49: 83:5e:78:29:50:a7:7a:f0:95:e3:97:0d:3b:92:15: 16:a2:83:4e:00:45:51:e9:a7:be:cd:63:85:b9:d1: 65:ea:e9:4d:a5:99:0a:4a:bb:11:21:e0:d7:ea:1b: c1:2c:0c:d6:92:d8:d1:0e:27:9e:c9:d1:88:ce:aa: 2b:13:3c:74:c9:03:6c:c8:a6:7a:39:af:f9:2b:46: cf:7c:ac:ab:aa:81:d0:97:a3:4f:32:8b:57:67:f5: 8d:71:2c:1a:19:cb:95:fd:ff:cc:cf:08:97:a5:23: ea:c9:ea:66:cb:dc:7c:24:9c:ff:8c:37:ae:3c:9c: 0b:da:bd:6d:0b:07:da:b3:79:07:34:10:f6:a8:e8: 73:37:09:9c:6f:63:88:68:dd:b0:66:15:89:41:d9: 9a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:48:94:CE:E6:9B:7D:0C:81:96:83:7E:21:26:C0:CB:6E:9C:0B:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98b5bff1-41c4-4141-92fb-20e5d8600f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.24.192.0/18 Signature Algorithm: sha256WithRSAEncryption 79:35:4a:01:30:2f:0a:7d:ea:09:6c:8e:70:2c:69:33:ac:32: e8:9b:52:5c:d5:ec:bf:ce:cc:9e:42:1b:25:fd:89:ea:b3:88: 04:31:0d:86:5c:7c:6a:c1:ed:3f:37:f3:a9:7c:02:cb:09:dd: 21:f1:2d:b9:c0:da:75:77:78:05:f5:be:8d:9c:a8:a6:48:8e: f6:af:ab:08:03:1d:ac:a8:4f:7d:28:78:be:2d:86:22:54:b0: db:7b:b9:b8:a3:92:2e:ef:7a:af:32:c8:09:6f:da:ac:3e:ce: 85:6f:14:36:07:ee:0a:cc:82:34:ff:c7:17:e2:b5:23:bc:82: d6:a0:97:3e:6c:7b:3c:12:34:95:d8:2b:50:13:d2:46:29:de: 62:ec:6a:6f:7a:c1:89:4e:ff:53:cf:05:65:93:42:c7:5f:d4: 35:b0:df:f5:44:35:f6:f5:37:aa:0b:73:4d:cf:f3:cd:30:52: 8c:ec:6f:9d:ce:a2:68:a6:5d:2e:e2:50:bf:3f:d2:36:57:9f: 29:c8:e8:ed:e0:27:87:63:ab:79:97:5b:2e:69:2b:1d:8d:1b: ac:5f:80:de:c6:e6:d2:74:51:24:b6:4b:79:cd:1f:fa:69:48: 79:e5:02:9a:9c:e4:ff:c3:19:44:97:8e:28:43:6e:5c:0d:53: ac:59:53:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSBSbs3pYP/1zlKLxwrJGYFalWyMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIyMDAyMDIzWhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGZjNmNkMDk3ODE4ZTc3NGEyYWE4ZDljZmM2MTQ2YjQ3 Nzg2MDI4MzQwZWYwM2NhYzRkNWJlNTRkYTcwM2IyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDT6h5BNnFndGK+DrRLo3ppcGq37Ge8uCLzmOmJWHxjg3Re Up026r3k2zkfrT/FtRR/VBfdd27IPl7S32zVbcdYw5BP/O6HAcDOB6NsCXm+wbd1 fx/IoB7ZbLg+ABISI/UluBsZRb+PSYNeeClQp3rwleOXDTuSFRaig04ARVHpp77N Y4W50WXq6U2lmQpKuxEh4NfqG8EsDNaS2NEOJ57J0YjOqisTPHTJA2zIpno5r/kr Rs98rKuqgdCXo08yi1dn9Y1xLBoZy5X9/8zPCJelI+rJ6mbL3HwknP+MN648nAva vW0LB9qzeQc0EPao6HM3CZxvY4ho3bBmFYlB2ZrRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWUiUzuabfQyBloN+ISbAy26cC2cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4YjViZmYxLTQxYzQtNDE0MS05MmZiLTIwZTVkODYwMGY3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ8GMAwDQYJKoZIhvcNAQELBQADggEBAHk1SgEwLwp96glsjnAsaTOsMuib UlzV7L/OzJ5CGyX9ieqziAQxDYZcfGrB7T8386l8AssJ3SHxLbnA2nV3eAX1vo2c qKZIjvavqwgDHayoT30oeL4thiJUsNt7ubijki7veq8yyAlv2qw+zoVvFDYH7grM gjT/xxfitSO8gtaglz5sezwSNJXYK1AT0kYp3mLsam96wYlO/1PPBWWTQsdf1DWw 3/VENfb1N6oLc03P880wUozsb53OomimXS7iUL8/0jZXnynI6O3gJ4djq3mXWy5p Kx2NG6xfgN7G5tJ0USS2S3nNH/ppSHnlApqc5P/DGUSXjihDblwNU6xZU3g= -----END CERTIFICATE-----Generated at Sat Aug 23 08:18:22 2025 by rpki-client