$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22c470d-8074-414a-ac14-cdafb7379aed.roa File: a22c470d-8074-414a-ac14-cdafb7379aed.roa (raw, json) Hash identifier: Nvgl3X1UuXaoHKTzkzwl6KvsErR8uPsV7lvTCOCxt5Y= Subject key identifier: 9E:43:88:54:1C:DF:5D:A3:F2:40:70:88:D1:51:7D:15:0D:51:27:05 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 113FD5384CFB5BA1D5FA9BF85371AC13D5941D7A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22c470d-8074-414a-ac14-cdafb7379aed.roa Signing time: Tue 24 Jun 2025 00:01:37 +0000 ROA not before: Tue 24 Jun 2025 00:01:37 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.250.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:3f:d5:38:4c:fb:5b:a1:d5:fa:9b:f8:53:71:ac:13:d5:94:1d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:01:37 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=690023665d2aa979c42e6862b789917dda523291332c2444697bcb6179906ba5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:58:5c:49:13:96:4d:9f:dd:a7:0c:7f:2f:5f: 1a:63:07:e8:2b:17:75:11:59:76:7b:62:8d:50:32: aa:2d:02:e4:3b:e9:cf:ae:64:3e:44:14:6b:b1:48: 0e:4e:be:e8:74:83:35:f2:2a:5c:6c:8c:b1:ba:92: b5:91:16:bc:6c:4e:44:48:f6:fe:cf:42:ef:0f:bc: 9a:87:2e:9b:b0:91:a4:dd:82:9b:dc:96:c6:9e:54: 2a:ba:73:44:d0:b2:c7:7a:d5:be:06:d7:25:fe:13: e8:43:e4:c7:36:52:ec:51:fa:33:7c:32:21:9b:c5: ef:3d:4d:2d:15:ef:1e:07:68:88:e2:5c:39:18:7f: 70:13:32:ee:fa:1a:b7:e9:fa:70:e0:32:52:02:91: 5a:af:12:f6:6b:a0:f5:84:62:ee:a7:10:b2:7e:bb: f2:c7:6e:df:30:b2:97:48:cf:b3:84:9f:6b:54:11: fd:74:5c:19:a8:91:8b:78:4e:4c:c9:e3:b0:ea:73: 45:47:60:73:b8:bc:5c:42:6e:c7:02:7f:5e:b3:b1: 10:f0:40:3e:2f:c8:c1:1a:ce:c8:c4:3c:05:78:84: 21:f8:bb:82:0b:a6:11:f4:17:84:4c:be:7d:3c:dd: 3a:05:5f:fc:e1:db:d9:fc:02:af:55:f2:7a:65:ee: 64:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:43:88:54:1C:DF:5D:A3:F2:40:70:88:D1:51:7D:15:0D:51:27:05 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22c470d-8074-414a-ac14-cdafb7379aed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.250.236.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:f3:14:b0:7b:0e:2b:37:f4:03:6b:35:ea:7e:ca:75:15:b7: e2:4c:bc:65:92:16:ab:05:28:b5:75:59:c4:1b:38:3a:a6:b0: 8b:0e:de:eb:5c:1b:92:04:54:6d:88:a4:f6:ff:9c:0a:6f:45: c4:63:41:86:b2:88:27:a6:19:3a:7a:85:5a:66:7f:6f:a9:fb: d7:3a:24:a9:ca:d2:06:cc:c7:e5:68:dd:05:d0:2a:2a:f4:56: 0e:af:a1:29:48:1b:d8:88:21:8e:d8:cb:92:ce:55:a2:1a:f6: 9f:25:65:e8:b1:fc:eb:89:91:99:04:72:a1:cf:80:8e:ab:0c: b0:63:d5:ba:51:a1:b4:3e:1d:7a:72:e2:6a:a0:6b:b6:4f:37: 73:b9:f6:9d:7b:c6:8d:d0:87:8f:c9:cd:5b:3f:5b:54:1f:a6: 20:3e:af:12:52:84:c4:30:cf:20:67:2b:a8:bb:1f:6d:fb:38: 8f:35:c1:eb:a4:d4:e3:08:7f:0e:1b:3d:7c:37:9a:4f:c8:8a: da:d5:2a:a1:16:ae:b2:a7:8e:10:50:b8:dc:9b:5c:fd:f6:f6: 47:5c:6d:3a:23:49:fb:e2:a8:59:3b:ff:85:83:ed:8c:1d:8f: 00:1e:47:08:1c:30:b1:b7:c1:a6:74:1a:39:4f:02:74:87:0e: d0:86:97:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUET/VOEz7W6HV+pv4U3GsE9WUHXowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDAwMTM3WhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTAwMjM2NjVkMmFhOTc5YzQyZTY4NjJiNzg5OTE3ZGRh NTIzMjkxMzMyYzI0NDQ2OTdiY2I2MTc5OTA2YmE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdWFxJE5ZNn92nDH8vXxpjB+grF3URWXZ7Yo1QMqotAuQ7 6c+uZD5EFGuxSA5Ovuh0gzXyKlxsjLG6krWRFrxsTkRI9v7PQu8PvJqHLpuwkaTd gpvclsaeVCq6c0TQssd61b4G1yX+E+hD5Mc2UuxR+jN8MiGbxe89TS0V7x4HaIji XDkYf3ATMu76Grfp+nDgMlICkVqvEvZroPWEYu6nELJ+u/LHbt8wspdIz7OEn2tU Ef10XBmokYt4TkzJ47Dqc0VHYHO4vFxCbscCf16zsRDwQD4vyMEazsjEPAV4hCH4 u4ILphH0F4RMvn083ToFX/zh29n8Aq9V8npl7mQPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnkOIVBzfXaPyQHCI0VF9FQ1RJwUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyMmM0NzBkLTgwNzQtNDE0YS1hYzE0LWNkYWZiNzM3OWFlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACi+uwwDQYJKoZIhvcNAQELBQADggEBAE/zFLB7Dis39ANrNep+ynUVt+JM vGWSFqsFKLV1WcQbODqmsIsO3utcG5IEVG2IpPb/nApvRcRjQYayiCemGTp6hVpm f2+p+9c6JKnK0gbMx+Vo3QXQKir0Vg6voSlIG9iIIY7Yy5LOVaIa9p8lZeix/OuJ kZkEcqHPgI6rDLBj1bpRobQ+HXpy4mqga7ZPN3O59p17xo3Qh4/JzVs/W1QfpiA+ rxJShMQwzyBnK6i7H237OI81weuk1OMIfw4bPXw3mk/IitrVKqEWrrKnjhBQuNyb XP329kdcbTojSfviqFk7/4WD7YwdjwAeRwgcMLG3waZ0GjlPAnSHDtCGl7s= -----END CERTIFICATE-----Generated at Wed Jul 2 00:51:45 2025 by rpki-client