$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3de3c612-36d7-4d0e-8a61-dc9891466376.roa File: 3de3c612-36d7-4d0e-8a61-dc9891466376.roa (raw, json) Hash identifier: jXkWmXob/Hizlk+5pROQoQSCm0+NjqUKA4HFPi2+YF8= Subject key identifier: BA:E0:60:DC:F5:F6:24:A2:56:41:5E:25:E3:95:31:09:2C:EF:E0:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01F883C2C65E7BA1E227F4969DBF7E55F5388223 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3de3c612-36d7-4d0e-8a61-dc9891466376.roa Signing time: Sat 19 Jul 2025 00:30:55 +0000 ROA not before: Sat 19 Jul 2025 00:30:55 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 63.246.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f8:83:c2:c6:5e:7b:a1:e2:27:f4:96:9d:bf:7e:55:f5:38:82:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:30:55 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=0a1bc0d0f0ad1bd31e5889ef30e9a31f56aa6601060397c4765adc57ae9442b7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:86:9f:07:40:37:f1:2a:76:a1:68:7d:7d:54: 26:06:f8:e0:0f:0f:00:44:54:7e:b5:4d:e6:d2:a3: 4e:72:bf:39:8b:8b:f3:eb:01:19:fe:e7:58:99:d0: 53:bd:56:60:5a:b7:89:e8:1f:c9:62:d5:6c:ed:25: e2:55:6f:b5:e0:79:33:a6:dc:1c:85:67:63:e5:00: 4c:25:03:a3:77:f2:f5:ac:1b:6f:1a:73:3a:e6:18: 5e:ad:a9:c7:91:3a:5f:93:5a:df:92:41:dc:b9:c6: 64:cc:f0:2c:9b:35:fd:9f:23:e1:01:64:15:1a:d4: a2:fa:61:df:a2:31:ec:d4:33:2a:87:24:20:a4:91: 0b:7f:8a:f8:0d:49:4f:aa:11:d3:3d:83:be:e8:5b: da:33:f6:62:d3:5e:61:48:8e:00:73:e9:b6:24:6b: 36:9a:a8:ff:69:ef:ba:87:ef:7c:c2:29:48:c8:23: 1e:d8:f5:8c:41:05:1c:39:32:6a:30:b5:da:ad:4b: 14:38:00:81:9e:22:33:a5:89:60:93:e1:2e:58:c5: 76:45:cf:e6:89:81:a5:c2:80:c1:32:bd:7e:d8:ac: b7:3a:80:0c:fc:6a:0c:3b:9d:a1:8a:c9:fc:e9:72: 01:fc:d8:0f:c3:b3:a9:9e:98:64:33:13:ac:01:53: ec:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E0:60:DC:F5:F6:24:A2:56:41:5E:25:E3:95:31:09:2C:EF:E0:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3de3c612-36d7-4d0e-8a61-dc9891466376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.246.113.0/24 Signature Algorithm: sha256WithRSAEncryption bf:ae:de:d3:2d:3a:c0:eb:1b:a8:89:64:4a:77:f9:50:14:f6: 6e:fa:1a:14:17:f5:e1:21:df:96:98:b5:f5:39:db:40:94:90: 65:98:57:96:cb:72:d4:d0:41:0a:9b:e8:00:aa:d4:5b:8b:4f: 8e:d4:3d:91:7d:44:02:d6:1a:fe:93:20:fa:95:40:ba:4d:85: 6e:91:e2:fd:32:81:54:12:84:a0:3d:52:9b:88:1b:09:54:3c: ad:4a:28:96:d5:ef:a2:e8:0d:a2:46:57:9b:43:48:90:0b:8c: 16:c1:40:86:58:be:82:34:d1:99:2f:00:82:1e:e6:e7:36:f9: 46:1f:b3:14:80:59:48:f7:05:e2:76:32:5e:86:96:ca:83:a6: cd:1c:c8:99:3a:0b:90:f0:18:b2:cd:a4:28:af:90:6c:9e:d0: b6:e8:7f:e6:06:51:fa:b2:d3:46:26:ab:0a:14:e9:9c:87:71: ec:5f:f3:03:84:67:0e:2e:d3:5f:70:2a:1c:ce:a1:12:a9:f0: e3:f1:2b:ca:f3:89:e0:17:1d:31:6b:e6:6d:24:ab:c1:a6:46: 33:ce:1a:64:57:c2:03:e7:b2:05:23:c7:d6:d7:3a:9b:b5:0a: 28:f3:0f:18:13:a3:b7:5f:c3:b0:b1:49:0a:8b:3e:9e:07:3e: b6:b0:14:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAfiDwsZee6HiJ/SWnb9+VfU4giMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAzMDU1WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTFiYzBkMGYwYWQxYmQzMWU1ODg5ZWYzMGU5YTMxZjU2 YWE2NjAxMDYwMzk3YzQ3NjVhZGM1N2FlOTQ0MmI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHhp8HQDfxKnahaH19VCYG+OAPDwBEVH61TebSo05yvzmL i/PrARn+51iZ0FO9VmBat4noH8li1WztJeJVb7XgeTOm3ByFZ2PlAEwlA6N38vWs G28aczrmGF6tqceROl+TWt+SQdy5xmTM8CybNf2fI+EBZBUa1KL6Yd+iMezUMyqH JCCkkQt/ivgNSU+qEdM9g77oW9oz9mLTXmFIjgBz6bYkazaaqP9p77qH73zCKUjI Ix7Y9YxBBRw5MmowtdqtSxQ4AIGeIjOliWCT4S5YxXZFz+aJgaXCgMEyvX7YrLc6 gAz8agw7naGKyfzpcgH82A/Ds6memGQzE6wBU+wrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuuBg3PX2JKJWQV4l45UxCSzv4LcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkZTNjNjEyLTM2ZDctNGQwZS04YTYxLWRjOTg5MTQ2NjM3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA/9nEwDQYJKoZIhvcNAQELBQADggEBAL+u3tMtOsDrG6iJZEp3+VAU9m76 GhQX9eEh35aYtfU520CUkGWYV5bLctTQQQqb6ACq1FuLT47UPZF9RALWGv6TIPqV QLpNhW6R4v0ygVQShKA9UpuIGwlUPK1KKJbV76LoDaJGV5tDSJALjBbBQIZYvoI0 0ZkvAIIe5uc2+UYfsxSAWUj3BeJ2Ml6GlsqDps0cyJk6C5DwGLLNpCivkGye0Lbo f+YGUfqy00YmqwoU6ZyHcexf8wOEZw4u019wKhzOoRKp8OPxK8rzieAXHTFr5m0k q8GmRjPOGmRXwgPnsgUjx9bXOpu1CijzDxgTo7dfw7CxSQqLPp4HPrawFHc= -----END CERTIFICATE-----Generated at Sat Aug 9 03:04:35 2025 by rpki-client