$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca987030-44c3-48e3-b5be-ea5021f48461.roa File: ca987030-44c3-48e3-b5be-ea5021f48461.roa (raw, json) Hash identifier: n95BGnQdiuoJJz33VCECia33T+w2oYsNf3pgY58EkIE= Subject key identifier: 7D:3B:F7:4C:57:83:EE:49:CC:3E:FD:B7:1C:37:97:0C:BB:6A:E5:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24E0FF0979D8A88D7DF710E78F068B4554985FDC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca987030-44c3-48e3-b5be-ea5021f48461.roa Signing time: Mon 11 Aug 2025 15:00:33 +0000 ROA not before: Mon 11 Aug 2025 15:00:33 +0000 ROA not after: Mon 15 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 132.223.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e0:ff:09:79:d8:a8:8d:7d:f7:10:e7:8f:06:8b:45:54:98:5f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 11 15:00:33 2025 GMT Not After : Sep 15 23:59:59 2025 GMT Subject: serialNumber=08c9aa67d38021ff41c4baa9c7c48cd0347bfcdfe6c224f76eebae8617e6fb81, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:02:17:b8:63:8c:ed:d9:8b:eb:00:41:2a:6c: aa:38:fc:ae:75:5f:6c:16:62:75:7b:c1:32:61:1e: 5c:23:d3:7d:35:7d:90:52:09:20:42:65:4e:35:df: 69:24:96:69:a5:6c:20:26:d1:9a:56:fb:9e:f4:f1: 0b:9f:39:e6:bc:a1:ea:6b:1e:88:08:6a:86:f7:ef: 16:0e:66:bf:35:94:02:c1:02:88:48:e9:ab:56:4a: e1:be:ad:b1:9a:51:34:85:a6:08:1a:7c:c8:ca:3e: f9:c1:e9:d0:c8:3c:d3:6b:9c:89:4c:d1:c2:f3:9e: 61:13:73:7b:d2:1a:86:f0:7f:ae:f5:b3:77:f1:6d: b9:6e:72:c0:8a:7d:2f:7e:e2:54:ca:f3:b0:df:f7: e5:9c:6d:35:91:be:7d:e8:82:90:c6:bf:fc:fb:fb: 3e:f3:1a:a9:c3:c5:70:91:28:fb:5a:89:26:0a:0a: fd:39:89:65:3c:d9:b2:4e:32:3f:61:6c:fb:9e:34: ab:25:31:80:ee:2e:5f:a2:7a:f3:87:e8:dd:e9:c7: ff:e0:a4:2b:b5:e1:ed:eb:58:83:6f:80:fc:c5:e5: 27:4a:c1:32:11:d3:0b:31:9f:b8:54:79:bd:2f:77: 32:cc:b1:ea:61:cb:67:66:b9:18:1e:bf:65:b0:bf: e4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3B:F7:4C:57:83:EE:49:CC:3E:FD:B7:1C:37:97:0C:BB:6A:E5:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca987030-44c3-48e3-b5be-ea5021f48461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.223.0.0/16 Signature Algorithm: sha256WithRSAEncryption 15:0f:25:41:d5:f8:df:a4:55:94:ed:ba:c1:20:96:aa:3b:57: 29:a4:2a:61:dc:5f:94:b8:f2:d7:dc:d9:a0:49:bd:95:6e:0d: 3c:ef:1a:e0:6c:87:18:6d:37:9b:60:f2:22:4a:0c:2b:63:d7: 5e:7d:2d:05:3e:94:b9:e5:88:81:cb:35:99:94:12:e4:dd:85: 25:e3:a3:33:45:3e:64:1b:3c:6e:de:fc:5e:06:a8:af:0d:74: 7f:8f:48:37:ef:ca:71:1d:d3:bb:02:4f:ef:86:f6:1e:f4:05: c1:f8:a5:76:39:38:e6:da:b7:9f:d4:d5:a0:bd:dd:09:c5:b7: ab:c3:19:57:24:98:ab:fa:9b:01:3b:e5:3e:39:5f:d8:ea:d7: 73:3e:4c:fd:0f:d3:38:65:d0:85:7b:c9:dd:5b:99:c6:49:a3: ea:88:60:5f:99:43:26:87:95:ee:e2:a0:b0:59:ec:c5:62:a2: 34:d2:c1:d7:fe:d1:a1:0d:19:6e:52:4d:26:ac:17:da:7d:2c: d1:e6:7a:40:33:73:9f:6c:53:83:75:48:26:e0:78:48:c1:99: 72:dd:76:5b:d7:d5:7c:4a:82:ae:7c:2d:ff:46:6f:91:5b:45: bc:b3:e2:07:b6:80:5b:4e:99:f2:55:6b:14:52:ac:57:3d:5c: 74:34:a3:bc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJOD/CXnYqI199xDnjwaLRVSYX9wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODExMTUwMDMzWhcNMjUwOTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGM5YWE2N2QzODAyMWZmNDFjNGJhYTljN2M0OGNkMDM0 N2JmY2RmZTZjMjI0Zjc2ZWViYWU4NjE3ZTZmYjgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhAhe4Y4zt2YvrAEEqbKo4/K51X2wWYnV7wTJhHlwj0301 fZBSCSBCZU4132kklmmlbCAm0ZpW+5708QufOea8oeprHogIaob37xYOZr81lALB AohI6atWSuG+rbGaUTSFpggafMjKPvnB6dDIPNNrnIlM0cLznmETc3vSGobwf671 s3fxbblucsCKfS9+4lTK87Df9+WcbTWRvn3ogpDGv/z7+z7zGqnDxXCRKPtaiSYK Cv05iWU82bJOMj9hbPueNKslMYDuLl+ievOH6N3px//gpCu14e3rWINvgPzF5SdK wTIR0wsxn7hUeb0vdzLMsephy2dmuRgev2Wwv+TxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUfTv3TFeD7knMPv23HDeXDLtq5RgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhOTg3MDMwLTQ0YzMtNDhlMy1iNWJlLWVhNTAyMWY0ODQ2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCE3zANBgkqhkiG9w0BAQsFAAOCAQEAFQ8lQdX436RVlO26wSCWqjtXKaQq YdxflLjy19zZoEm9lW4NPO8a4GyHGG03m2DyIkoMK2PXXn0tBT6UueWIgcs1mZQS 5N2FJeOjM0U+ZBs8bt78Xgaorw10f49IN+/KcR3TuwJP74b2HvQFwfildjk45tq3 n9TVoL3dCcW3q8MZVySYq/qbATvlPjlf2OrXcz5M/Q/TOGXQhXvJ3VuZxkmj6ohg X5lDJoeV7uKgsFnsxWKiNNLB1/7RoQ0ZblJNJqwX2n0s0eZ6QDNzn2xTg3VIJuB4 SMGZct12W9fVfEqCrnwt/0ZvkVtFvLPiB7aAW06Z8lVrFFKsVz1cdDSjvA== -----END CERTIFICATE-----Generated at Sat Aug 23 06:52:05 2025 by rpki-client