$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa File: fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa (raw, json) Hash identifier: piLHqAy0XDSNJDd5ygPG7M+iFWslEO+weqQwRLiMwjE= Subject key identifier: 99:25:D8:01:97:C1:E9:2E:12:C8:FC:BD:CF:14:88:CC:94:76:3F:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 386AEED191E6CF6445B59ABEA27B7126194A540D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa Signing time: Fri 22 Aug 2025 00:20:17 +0000 ROA not before: Fri 22 Aug 2025 00:20:17 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 115.177.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6a:ee:d1:91:e6:cf:64:45:b5:9a:be:a2:7b:71:26:19:4a:54:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 22 00:20:17 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=bf6d54488d54b92457ab3c6fa02a23da42667fb42a94cc5fced0b1e254de97b1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6e:53:27:ab:3a:9f:dd:92:a0:87:6f:6f:c6: 79:75:81:15:e5:52:49:8b:16:d3:41:b5:89:9b:2a: 47:a7:c6:8b:66:1b:0d:04:72:2d:38:a9:b2:f4:c6: eb:a9:38:21:db:a4:e1:ff:b5:92:02:67:5b:ba:27: 3d:b1:4d:a9:a2:95:a3:37:93:d7:ce:a3:60:51:40: a0:e0:dc:40:41:87:2c:54:85:2e:45:0b:c0:19:86: 73:7a:3f:b6:8b:67:fc:59:08:35:4d:7b:79:47:43: 9b:22:dc:b0:2c:55:d4:98:9e:0b:29:96:fe:4e:ba: 42:72:15:9c:a1:68:b2:f0:cc:3a:27:0e:e5:0d:2d: ff:81:f4:a7:8b:a1:97:d1:fc:02:a5:b5:da:ac:86: 6f:16:8c:a9:e2:14:51:f9:0c:40:c7:3a:7b:8d:ba: 0c:21:51:0c:49:70:4b:f7:af:b3:39:49:2c:ef:f4: 85:90:ed:2b:48:4a:cb:d2:4d:a8:02:91:64:b8:99: ff:2d:ec:7c:29:08:e7:d9:3e:cb:b1:33:fb:ff:4a: 42:85:db:56:5d:ad:b7:bf:74:7e:05:b5:db:4e:0d: 04:27:e2:9c:77:a9:51:2f:c8:f2:be:72:2c:94:90: 53:05:8f:f1:41:00:64:53:63:7b:79:43:6d:93:57: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:25:D8:01:97:C1:E9:2E:12:C8:FC:BD:CF:14:88:CC:94:76:3F:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.177.128.0/18 Signature Algorithm: sha256WithRSAEncryption 94:be:32:63:71:73:00:b5:80:f6:02:7e:72:77:cf:0f:16:05: ae:63:b3:74:76:f8:75:58:37:47:ec:25:9f:cd:29:ab:a3:3f: 2f:7c:45:5f:3b:a1:7d:47:bb:3a:91:b3:2d:56:4c:9d:f0:c9: 30:44:0d:f7:33:d1:4c:37:37:c4:41:79:66:2f:da:ad:e9:38: bf:31:43:36:ef:23:56:a8:78:95:23:cc:6b:67:24:02:ff:bd: 50:b1:29:f6:b0:40:d9:14:e9:ba:fa:bd:90:11:2b:fb:7d:eb: fc:e9:f7:6f:48:82:d0:2e:ac:45:be:74:a5:ec:6b:6b:55:dd: 67:b8:b9:1c:8f:0e:5d:d3:08:e2:7d:5e:7c:3e:f5:17:9c:72: 16:d4:d4:2a:e2:90:ba:6e:31:e9:16:86:54:57:57:23:52:76: 21:35:28:de:2c:05:83:2d:72:8a:80:44:fe:0c:d6:3d:b2:05: 80:55:49:62:5a:ea:56:fe:97:a5:5a:6e:17:9f:66:db:7e:96: 74:5a:85:cb:0d:72:4b:cd:4e:2f:4b:bb:f0:fb:05:9e:25:4b: 73:8d:b6:b8:4b:6b:73:76:f0:65:8e:d3:2f:09:d5:3a:3a:82: 32:99:88:83:d6:0a:1f:ee:7e:13:44:f3:e6:f0:69:b0:e1:19: 59:9d:ea:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOGru0ZHmz2RFtZq+ontxJhlKVA0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIyMDAyMDE3WhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjZkNTQ0ODhkNTRiOTI0NTdhYjNjNmZhMDJhMjNkYTQy NjY3ZmI0MmE5NGNjNWZjZWQwYjFlMjU0ZGU5N2IxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdblMnqzqf3ZKgh29vxnl1gRXlUkmLFtNBtYmbKkenxotm Gw0Eci04qbL0xuupOCHbpOH/tZICZ1u6Jz2xTamilaM3k9fOo2BRQKDg3EBBhyxU hS5FC8AZhnN6P7aLZ/xZCDVNe3lHQ5si3LAsVdSYngsplv5OukJyFZyhaLLwzDon DuUNLf+B9KeLoZfR/AKltdqshm8WjKniFFH5DEDHOnuNugwhUQxJcEv3r7M5SSzv 9IWQ7StISsvSTagCkWS4mf8t7HwpCOfZPsuxM/v/SkKF21Zdrbe/dH4FtdtODQQn 4px3qVEvyPK+ciyUkFMFj/FBAGRTY3t5Q22TVyaLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmSXYAZfB6S4SyPy9zxSIzJR2P4swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZjZjNhZDQ4LTBkMWYtNGJhNC04N2QzLWM0MDg2ZGY5MmU2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZzsYAwDQYJKoZIhvcNAQELBQADggEBAJS+MmNxcwC1gPYCfnJ3zw8WBa5j s3R2+HVYN0fsJZ/NKaujPy98RV87oX1HuzqRsy1WTJ3wyTBEDfcz0Uw3N8RBeWYv 2q3pOL8xQzbvI1aoeJUjzGtnJAL/vVCxKfawQNkU6br6vZARK/t96/zp929IgtAu rEW+dKXsa2tV3We4uRyPDl3TCOJ9Xnw+9RecchbU1CrikLpuMekWhlRXVyNSdiE1 KN4sBYMtcoqARP4M1j2yBYBVSWJa6lb+l6VabhefZtt+lnRahcsNckvNTi9Lu/D7 BZ4lS3ONtrhLa3N28GWO0y8J1To6gjKZiIPWCh/ufhNE8+bwabDhGVmd6iM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:19:38 2025 by rpki-client