$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24997b03-bf61-42a4-9eea-da8207a615b5.roa File: 24997b03-bf61-42a4-9eea-da8207a615b5.roa (raw, json) Hash identifier: QN7DoCNZjtbdlRrjnFMslF8hJApSb4v/OVF8VwQ1bC0= Subject key identifier: D6:B2:75:F4:75:F9:04:1D:93:D3:EE:84:56:07:2F:D4:73:B3:42:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 55CDF48F40FBF2BEE035D1BEB32C07A7DB79FEC6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24997b03-bf61-42a4-9eea-da8207a615b5.roa Signing time: Mon 04 Aug 2025 15:50:23 +0000 ROA not before: Mon 04 Aug 2025 15:50:23 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.238.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:cd:f4:8f:40:fb:f2:be:e0:35:d1:be:b3:2c:07:a7:db:79:fe:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 15:50:23 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=53ae403875ebb22d191975e5afab935c9b1779ab0217565d6a129bd3e7942fca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:f1:5c:65:d5:54:b3:32:79:04:73:d1:0a: cb:9c:fa:e5:b7:14:41:64:af:5b:10:0b:8e:cb:93: f7:46:1c:3b:cb:42:d2:45:10:c3:e9:61:6a:1d:e1: 3a:51:22:24:a9:36:2d:05:ca:88:73:6f:98:9e:ef: 15:18:8f:b8:14:67:43:65:52:d0:b3:01:47:54:46: 8c:2e:a4:8f:22:42:1c:af:02:30:4d:5e:37:e0:27: 20:02:d8:4b:4d:80:25:4a:00:27:ae:08:54:fc:03: e7:30:66:75:82:18:5a:ae:5d:a9:84:1c:46:03:c0: ed:2f:8f:8d:9a:93:e8:8a:c6:d3:e6:06:d5:5c:90: 51:79:c3:ec:c9:f2:a1:dc:db:00:05:a6:35:1d:c0: e6:ec:18:d5:3d:03:66:b5:29:05:cd:f9:e9:48:20: ae:12:3e:3f:bd:d8:40:85:9d:aa:7e:a0:e9:57:6f: ea:43:44:d9:cb:5a:2d:18:87:62:ca:ad:66:10:c2: ce:82:a8:ac:5e:f8:32:56:37:78:94:1c:4b:19:1b: 0c:b9:14:91:ac:ad:4a:0c:60:6d:be:c3:ad:22:17: a9:8e:3f:fb:54:ef:79:2d:8b:c9:a4:55:7a:a5:36: 36:57:95:51:02:fb:c7:24:9a:81:18:51:b3:7e:3b: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B2:75:F4:75:F9:04:1D:93:D3:EE:84:56:07:2F:D4:73:B3:42:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24997b03-bf61-42a4-9eea-da8207a615b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.238.26.0/23 Signature Algorithm: sha256WithRSAEncryption 02:4b:27:ce:f7:e3:0e:43:88:a4:ca:67:a6:e0:30:bf:02:49: e3:e2:6f:8d:9b:7b:9f:3c:84:7e:f4:1b:e8:b9:20:24:74:79: 86:01:e1:2e:49:71:2a:fb:c4:c8:ad:99:e3:61:e5:6c:da:79: 5a:9a:79:a8:96:83:ef:bb:b2:7d:a8:eb:79:ab:d1:9e:3e:6d: 0a:27:58:3f:c3:39:3c:70:45:8f:b2:41:96:f3:46:89:d2:56: 1d:20:e9:07:ab:9c:62:1f:2b:c0:e9:8b:6a:4d:99:91:c4:10: 84:21:e3:9f:38:d9:9a:ba:a3:63:2a:ae:23:77:47:95:03:72: 5f:e6:f4:7c:02:33:2f:2a:68:49:d7:61:29:20:aa:ab:41:18: 07:a3:bf:5f:22:87:d6:25:8c:e3:c4:46:67:b2:58:da:0e:d4: 0a:c0:e8:12:7f:b0:03:bb:fe:43:ad:60:d7:82:26:b9:11:5a: 3b:23:df:37:df:d9:e2:2c:fe:f3:6e:f5:f9:4c:e5:3e:a2:d1: c1:b7:4b:77:dd:e2:92:39:c4:62:6f:88:0e:9e:9b:96:e4:44: 07:17:c9:bb:c8:b0:df:3a:92:13:48:ed:93:f0:8a:12:97:bd: 14:9b:1c:b8:40:f6:85:93:44:0f:9c:a3:03:c1:9e:97:1c:1c: 9f:87:45:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVc30j0D78r7gNdG+sywHp9t5/sYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTU1MDIzWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1M2FlNDAzODc1ZWJiMjJkMTkxOTc1ZTVhZmFiOTM1Yzli MTc3OWFiMDIxNzU2NWQ2YTEyOWJkM2U3OTQyZmNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfkPFcZdVUszJ5BHPRCsuc+uW3FEFkr1sQC47Lk/dGHDvL QtJFEMPpYWod4TpRIiSpNi0Fyohzb5ie7xUYj7gUZ0NlUtCzAUdURowupI8iQhyv AjBNXjfgJyAC2EtNgCVKACeuCFT8A+cwZnWCGFquXamEHEYDwO0vj42ak+iKxtPm BtVckFF5w+zJ8qHc2wAFpjUdwObsGNU9A2a1KQXN+elIIK4SPj+92ECFnap+oOlX b+pDRNnLWi0Yh2LKrWYQws6CqKxe+DJWN3iUHEsZGwy5FJGsrUoMYG2+w60iF6mO P/tU73kti8mkVXqlNjZXlVEC+8ckmoEYUbN+O22LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1rJ19HX5BB2T0+6EVgcv1HOzQmEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0OTk3YjAzLWJmNjEtNDJhNC05ZWVhLWRhODIwN2E2MTViNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFu7howDQYJKoZIhvcNAQELBQADggEBAAJLJ8734w5DiKTKZ6bgML8CSePi b42be588hH70G+i5ICR0eYYB4S5JcSr7xMitmeNh5WzaeVqaeaiWg++7sn2o63mr 0Z4+bQonWD/DOTxwRY+yQZbzRonSVh0g6QernGIfK8Dpi2pNmZHEEIQh45842Zq6 o2MqriN3R5UDcl/m9HwCMy8qaEnXYSkgqqtBGAejv18ih9YljOPERmeyWNoO1ArA 6BJ/sAO7/kOtYNeCJrkRWjsj3zff2eIs/vNu9flM5T6i0cG3S3fd4pI5xGJviA6e m5bkRAcXybvIsN86khNI7ZPwihKXvRSbHLhA9oWTRA+cowPBnpccHJ+HRWM= -----END CERTIFICATE-----Generated at Wed Aug 6 06:06:29 2025 by rpki-client