$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dc73873-6324-4be9-a51f-873feddff257.roa File: 9dc73873-6324-4be9-a51f-873feddff257.roa (raw, json) Hash identifier: vCwgzrq9j6Bs8a4gHbrmPf0X5fzVa8ohe0ggnKdForQ= Subject key identifier: 5D:77:1B:17:99:C4:DB:25:51:E9:D4:AB:2C:D5:AA:C8:23:2E:32:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 570BCC628DCEA539DE848118F969DA20AD837A4C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dc73873-6324-4be9-a51f-873feddff257.roa Signing time: Fri 27 Jun 2025 00:21:11 +0000 ROA not before: Fri 27 Jun 2025 00:21:11 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 31.220.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0b:cc:62:8d:ce:a5:39:de:84:81:18:f9:69:da:20:ad:83:7a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 27 00:21:11 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=507e0e5e1d5a3e0c3438fdac816bda2dc1390218664bdfb82f4dfec0cb6efd5d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0e:56:c5:81:13:1c:fd:b9:d5:20:bc:e0:98: a4:e1:7b:84:39:31:22:f0:88:87:8b:22:ce:d2:d7: b7:86:ba:35:2d:18:d9:18:c2:cf:99:92:13:37:d9: f5:c3:fb:18:7a:ad:da:44:83:7a:c5:5a:36:8f:0a: de:49:1e:c1:e3:64:3e:71:06:b2:c6:68:36:85:fd: 01:01:56:50:9f:50:4a:4b:0a:dc:88:cf:fc:be:9f: 4a:28:7e:47:0e:79:05:0e:a5:e7:77:44:79:01:19: ac:99:09:e9:c2:9b:b9:a0:98:81:11:bc:62:d0:6b: 1c:bc:d0:00:27:b7:10:0b:08:c5:fc:60:cb:b1:1c: f6:80:67:80:4a:96:da:01:7d:be:39:62:af:b4:c3: 29:29:9c:2a:4a:ec:c4:d9:f6:5b:1d:bf:bd:d0:74: d2:81:a5:7a:6f:1c:3f:bf:63:fa:ee:17:6a:82:f6: 24:22:0e:1e:1b:27:f7:78:6f:bb:5c:a2:3b:29:9b: 25:df:a7:b0:c9:af:fd:25:27:b2:f0:2c:58:d8:d1: 57:c1:bc:b2:71:da:0e:e5:2a:1c:77:59:43:6d:7c: 10:df:73:c2:b4:49:29:9a:95:7b:ae:ce:a9:09:3f: e9:53:a0:c3:81:de:52:90:89:93:4c:cc:4d:61:ac: d7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:77:1B:17:99:C4:DB:25:51:E9:D4:AB:2C:D5:AA:C8:23:2E:32:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dc73873-6324-4be9-a51f-873feddff257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.236.0/24 Signature Algorithm: sha256WithRSAEncryption ba:fc:45:9d:e2:55:16:74:c0:4d:35:0a:10:15:f0:b3:17:99: 76:dc:e1:cf:2f:2b:8b:e3:d6:bc:f4:f4:16:69:df:3d:2f:12: 1f:57:d1:73:3b:26:d5:e2:f9:d7:06:d1:e5:64:9a:f3:d5:8b: ec:94:b5:3e:20:be:77:f6:b5:50:c8:b8:f5:0a:81:3b:a0:25: a2:e1:fc:e1:d5:63:f4:af:0d:3c:f9:56:7b:7a:63:66:80:49: 18:be:55:dd:b0:50:50:ad:56:18:62:1d:ce:f4:3a:3b:24:d6: 1f:77:39:0d:66:69:00:61:b5:31:60:71:9e:c6:82:9a:d0:8e: 52:fb:71:16:3f:2a:80:3a:96:90:fc:2d:ba:df:3e:d1:bf:b7: 3d:ec:dd:53:c0:b7:98:bc:9e:b8:11:59:7c:ab:27:b1:5b:6d: 39:db:d3:2c:d7:40:76:f5:2e:44:10:0f:c6:e4:a7:74:1d:a8: 49:94:0c:57:70:15:68:76:c4:d6:4f:33:12:93:43:2d:cb:04: 95:0c:c9:f1:75:ed:9b:79:3f:23:37:46:38:89:30:5b:89:42: 76:5b:dc:f2:07:1e:b7:db:ef:b9:8a:76:fa:85:b2:52:86:e8: 51:44:3e:87:e1:7b:f4:74:41:d8:51:d6:26:81:7b:a6:7d:e3: 2a:a4:ef:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVwvMYo3OpTnehIEY+WnaIK2DekwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI3MDAyMTExWhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDdlMGU1ZTFkNWEzZTBjMzQzOGZkYWM4MTZiZGEyZGMx MzkwMjE4NjY0YmRmYjgyZjRkZmVjMGNiNmVmZDVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuDlbFgRMc/bnVILzgmKThe4Q5MSLwiIeLIs7S17eGujUt GNkYws+ZkhM32fXD+xh6rdpEg3rFWjaPCt5JHsHjZD5xBrLGaDaF/QEBVlCfUEpL CtyIz/y+n0oofkcOeQUOped3RHkBGayZCenCm7mgmIERvGLQaxy80AAntxALCMX8 YMuxHPaAZ4BKltoBfb45Yq+0wykpnCpK7MTZ9lsdv73QdNKBpXpvHD+/Y/ruF2qC 9iQiDh4bJ/d4b7tcojspmyXfp7DJr/0lJ7LwLFjY0VfBvLJx2g7lKhx3WUNtfBDf c8K0SSmalXuuzqkJP+lToMOB3lKQiZNMzE1hrNedAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXXcbF5nE2yVR6dSrLNWqyCMuMmMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlkYzczODczLTYzMjQtNGJlOS1hNTFmLTg3M2ZlZGRmZjI1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAf3OwwDQYJKoZIhvcNAQELBQADggEBALr8RZ3iVRZ0wE01ChAV8LMXmXbc 4c8vK4vj1rz09BZp3z0vEh9X0XM7JtXi+dcG0eVkmvPVi+yUtT4gvnf2tVDIuPUK gTugJaLh/OHVY/SvDTz5Vnt6Y2aASRi+Vd2wUFCtVhhiHc70Ojsk1h93OQ1maQBh tTFgcZ7GgprQjlL7cRY/KoA6lpD8LbrfPtG/tz3s3VPAt5i8nrgRWXyrJ7FbbTnb 0yzXQHb1LkQQD8bkp3QdqEmUDFdwFWh2xNZPMxKTQy3LBJUMyfF17Zt5PyM3RjiJ MFuJQnZb3PIHHrfb77mKdvqFslKG6FFEPofhe/R0QdhR1iaBe6Z94yqk73s= -----END CERTIFICATE-----Generated at Sun Jun 29 08:57:32 2025 by rpki-client