$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44ae4df4-2444-4129-9a47-aa0f78dec95e.roa File: 44ae4df4-2444-4129-9a47-aa0f78dec95e.roa (raw, json) Hash identifier: mchLhwCJF5X9k1i7LB/QkoMWtV6AD3NYHEa4J59SuTo= Subject key identifier: 91:F3:16:1A:3F:B0:E4:8C:ED:C8:07:AF:C9:7E:59:77:7C:43:44:BF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B2B88A4E2C962045F0E1AF796ED3A44CB3670C7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44ae4df4-2444-4129-9a47-aa0f78dec95e.roa Signing time: Mon 04 Aug 2025 15:50:24 +0000 ROA not before: Mon 04 Aug 2025 15:50:24 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.239.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2b:88:a4:e2:c9:62:04:5f:0e:1a:f7:96:ed:3a:44:cb:36:70:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 15:50:24 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=d0a265e91fe75e3a8e2b980c76a81be7ab3b57da6fd495662f6a3589bf4f7a00, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:40:39:3c:a5:ab:83:98:81:e9:5d:56:92: 38:4a:10:d7:e0:01:7d:5a:2c:74:61:de:57:fb:2e: a2:86:76:96:d7:8c:9d:ef:4d:40:ea:a4:8c:f9:4c: 7f:a7:f4:d5:63:e5:cf:a6:12:2a:9a:1e:e1:8c:31: e5:91:f3:40:d7:ca:02:0b:cd:9e:f5:3f:96:cf:74: d9:81:35:b2:ab:89:d1:b3:00:32:d9:98:0a:a3:fe: 79:7f:d3:f9:2f:66:bd:36:c3:c1:c4:c8:6a:12:2d: fd:a3:ef:5a:dd:ef:e0:3e:1a:df:9d:ff:4f:dc:1a: bf:db:51:d8:f3:ea:40:3f:34:4e:76:e6:e6:e0:2d: f5:4b:55:17:55:fb:9f:4c:08:2b:86:07:82:2f:de: fe:f0:b9:52:54:95:eb:d9:1c:e4:c8:68:b9:a9:e6: 3e:2d:8c:68:27:5a:92:82:06:6e:43:89:b1:7d:f0: 92:eb:45:fa:d9:6b:f2:7c:c2:ed:a7:0c:cb:38:bc: b0:57:72:24:19:e6:53:b2:98:ca:a6:95:d1:96:a5: 27:13:56:05:cd:3d:b6:b0:95:82:f6:e9:19:02:f3: 07:f0:33:0c:07:42:b3:c5:94:5f:f9:2d:74:a1:29: 8d:a6:38:71:b9:bf:6f:56:82:79:e4:b4:40:0c:85: 77:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F3:16:1A:3F:B0:E4:8C:ED:C8:07:AF:C9:7E:59:77:7C:43:44:BF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44ae4df4-2444-4129-9a47-aa0f78dec95e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.239.18.0/23 Signature Algorithm: sha256WithRSAEncryption af:20:5e:09:5f:88:3c:42:18:ff:fb:87:13:92:bb:d6:b9:bb: 9f:dc:df:1d:e2:ac:88:7d:79:af:99:7a:53:6b:53:0d:55:16: 3d:79:8e:60:80:6f:68:eb:d3:f4:fe:59:a6:1b:c6:9a:de:64: 8c:f8:6d:26:83:dc:af:a2:78:ca:36:93:e7:2e:92:e6:08:d0: 65:97:20:d7:41:01:ff:c7:d4:30:02:ec:24:50:fb:47:57:ed: ce:6a:ff:18:ed:1e:98:7e:24:13:a8:4b:18:15:63:82:a1:a1: 59:d7:a7:23:85:67:77:98:d9:e1:04:97:5c:86:aa:1f:af:8a: ee:5e:65:c1:64:83:73:90:f4:29:af:48:a1:cf:d9:0d:54:6e: 79:31:fa:c4:0a:cb:48:c2:47:4e:77:e8:f2:08:77:55:b7:88: 23:75:60:64:e7:55:4f:b8:2e:ea:d5:db:e9:f2:b7:59:71:03: 58:83:36:0c:01:ac:80:78:c1:da:a3:63:ee:dd:ee:54:b2:20: 41:cb:d0:76:6c:09:fa:88:89:f7:f0:f1:2e:fe:be:15:a6:0c: d7:f9:e2:08:b9:45:4c:f3:e3:68:d4:e3:4a:31:5f:3d:16:22: b2:9d:4a:30:d2:55:9e:34:32:58:e4:47:83:ad:2e:cd:74:63: 4b:17:2e:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWyuIpOLJYgRfDhr3lu06RMs2cMcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTU1MDI0WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMGEyNjVlOTFmZTc1ZTNhOGUyYjk4MGM3NmE4MWJlN2Fi M2I1N2RhNmZkNDk1NjYyZjZhMzU4OWJmNGY3YTAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvWUA5PKWrg5iB6V1WkjhKENfgAX1aLHRh3lf7LqKGdpbX jJ3vTUDqpIz5TH+n9NVj5c+mEiqaHuGMMeWR80DXygILzZ71P5bPdNmBNbKridGz ADLZmAqj/nl/0/kvZr02w8HEyGoSLf2j71rd7+A+Gt+d/0/cGr/bUdjz6kA/NE52 5ubgLfVLVRdV+59MCCuGB4Iv3v7wuVJUlevZHOTIaLmp5j4tjGgnWpKCBm5DibF9 8JLrRfrZa/J8wu2nDMs4vLBXciQZ5lOymMqmldGWpScTVgXNPbawlYL26RkC8wfw MwwHQrPFlF/5LXShKY2mOHG5v29WgnnktEAMhXeFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkfMWGj+w5IztyAevyX5Zd3xDRL8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ0YWU0ZGY0LTI0NDQtNDEyOS05YTQ3LWFhMGY3OGRlYzk1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFu7xIwDQYJKoZIhvcNAQELBQADggEBAK8gXglfiDxCGP/7hxOSu9a5u5/c 3x3irIh9ea+ZelNrUw1VFj15jmCAb2jr0/T+WaYbxpreZIz4bSaD3K+ieMo2k+cu kuYI0GWXINdBAf/H1DAC7CRQ+0dX7c5q/xjtHph+JBOoSxgVY4KhoVnXpyOFZ3eY 2eEEl1yGqh+viu5eZcFkg3OQ9CmvSKHP2Q1Ubnkx+sQKy0jCR0536PIId1W3iCN1 YGTnVU+4LurV2+nyt1lxA1iDNgwBrIB4wdqjY+7d7lSyIEHL0HZsCfqIiffw8S7+ vhWmDNf54gi5RUzz42jU40oxXz0WIrKdSjDSVZ40MljkR4OtLs10Y0sXLt4= -----END CERTIFICATE-----Generated at Sat Aug 9 02:51:50 2025 by rpki-client