$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/499a27f0-fb33-4e38-bcc8-b3e546ec3fdd.roa File: 499a27f0-fb33-4e38-bcc8-b3e546ec3fdd.roa (raw, json) Hash identifier: QavuHeQcBrlqq2lYCjJGPrvTwhH2wzfxXEbn67+xUQ0= Subject key identifier: 9B:02:22:8C:E9:E4:1A:21:CF:47:AD:D1:B7:3A:D7:FD:BE:83:E0:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4D7A217298093B0B4B7A43454C76412DFD44FB8B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/499a27f0-fb33-4e38-bcc8-b3e546ec3fdd.roa Signing time: Wed 06 Aug 2025 00:21:08 +0000 ROA not before: Wed 06 Aug 2025 00:21:08 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 202.5.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:7a:21:72:98:09:3b:0b:4b:7a:43:45:4c:76:41:2d:fd:44:fb:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 00:21:08 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=d5e863ef2e969bc670e15a9d542dd460b5d246a965dfea9424aaba05ce942f5b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4f:5f:eb:7f:20:fd:ff:c9:b5:e7:5c:58:2a: 68:16:96:d9:66:a9:8f:29:07:9a:7f:70:51:f6:8b: 63:ad:b6:a0:4e:a5:94:f8:06:94:2b:16:36:00:a4: f8:33:d4:a3:bd:f9:f6:fa:f1:71:0c:95:6d:43:cc: 0c:ce:70:09:bd:f4:15:dc:91:47:1b:cf:5f:df:6f: 7b:38:bc:82:20:72:ad:65:bc:5e:49:a3:e4:10:c1: 36:6a:77:ad:66:5f:bd:96:43:1e:0b:a0:e3:28:dd: 9d:15:eb:d3:d6:d8:3e:14:65:20:96:21:51:7b:b3: a7:73:35:0c:a0:ed:4f:da:47:a5:c4:83:a5:e5:40: 69:c3:3e:75:0d:b3:4e:27:3c:9d:5f:67:07:b1:ed: f4:cf:92:ba:c4:0a:a5:f4:5f:d8:56:7e:64:e9:6c: 51:89:33:76:bf:be:fc:a4:3b:eb:98:84:e6:dc:3c: 4c:83:77:2f:19:38:6d:e7:3a:1f:44:73:5e:10:f9: 81:91:df:39:3e:2b:65:1c:26:80:11:da:5e:f0:3c: 77:90:28:ce:97:73:2f:1a:be:7c:0f:0e:18:53:de: 11:de:98:b3:3c:3d:5a:b5:55:43:d2:ac:f3:c9:e9: 1e:28:8f:8e:b7:52:ad:5b:5c:f5:64:f8:91:16:fa: 25:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:02:22:8C:E9:E4:1A:21:CF:47:AD:D1:B7:3A:D7:FD:BE:83:E0:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/499a27f0-fb33-4e38-bcc8-b3e546ec3fdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.5.185.0/24 Signature Algorithm: sha256WithRSAEncryption 14:2c:b7:b1:48:32:66:31:bc:07:ba:fe:44:b1:c3:24:e1:4d: 7a:18:a0:fd:7e:bf:2a:84:52:a5:bc:35:26:11:ff:10:8a:c0: 18:d9:16:10:0e:67:f3:e2:f8:a4:ec:8e:64:f5:7e:6c:c4:5f: 5f:73:a2:1b:b8:42:ec:4c:33:5a:15:97:71:eb:26:c5:b0:07: a8:35:77:79:0a:44:77:ec:56:e7:d8:ab:b7:f1:8b:fb:37:d2: b1:8c:a0:cd:9d:a2:69:62:cb:dd:49:45:80:87:8d:3a:97:ed: b7:1e:aa:b6:e8:d5:54:89:f5:35:2d:b5:9f:77:d1:2d:35:ec: b1:f6:e9:28:46:09:95:20:c6:21:74:e1:17:97:63:53:85:15: 27:47:c8:2c:a4:8b:20:70:7f:89:f6:a7:2f:f7:8f:b6:2f:19: 35:bc:7b:9c:74:d9:65:fc:5b:ed:07:97:bf:37:30:35:e1:f5: 85:72:00:b9:bc:ee:38:53:cd:4e:1c:a3:0a:53:90:92:30:84: 79:a2:1e:37:64:6f:33:bd:3e:54:aa:d7:ca:5b:02:79:58:9b: 63:6c:2a:13:74:28:2e:33:43:4d:3b:74:32:62:02:6e:2f:d5: f1:57:e0:fd:da:c6:5f:0a:6f:40:4f:d5:b1:10:07:84:08:18: 69:fe:cf:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTXohcpgJOwtLekNFTHZBLf1E+4swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDAyMTA4WhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNWU4NjNlZjJlOTY5YmM2NzBlMTVhOWQ1NDJkZDQ2MGI1 ZDI0NmE5NjVkZmVhOTQyNGFhYmEwNWNlOTQyZjViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXT1/rfyD9/8m151xYKmgWltlmqY8pB5p/cFH2i2OttqBO pZT4BpQrFjYApPgz1KO9+fb68XEMlW1DzAzOcAm99BXckUcbz1/fb3s4vIIgcq1l vF5Jo+QQwTZqd61mX72WQx4LoOMo3Z0V69PW2D4UZSCWIVF7s6dzNQyg7U/aR6XE g6XlQGnDPnUNs04nPJ1fZwex7fTPkrrECqX0X9hWfmTpbFGJM3a/vvykO+uYhObc PEyDdy8ZOG3nOh9Ec14Q+YGR3zk+K2UcJoAR2l7wPHeQKM6Xcy8avnwPDhhT3hHe mLM8PVq1VUPSrPPJ6R4oj463Uq1bXPVk+JEW+iWlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmwIijOnkGiHPR63RtzrX/b6D4AEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ5OWEyN2YwLWZiMzMtNGUzOC1iY2M4LWIzZTU0NmVjM2ZkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKBbkwDQYJKoZIhvcNAQELBQADggEBABQst7FIMmYxvAe6/kSxwyThTXoY oP1+vyqEUqW8NSYR/xCKwBjZFhAOZ/Pi+KTsjmT1fmzEX19zohu4QuxMM1oVl3Hr JsWwB6g1d3kKRHfsVufYq7fxi/s30rGMoM2domliy91JRYCHjTqX7bceqrbo1VSJ 9TUttZ930S017LH26ShGCZUgxiF04ReXY1OFFSdHyCykiyBwf4n2py/3j7YvGTW8 e5x02WX8W+0Hl783MDXh9YVyALm87jhTzU4cowpTkJIwhHmiHjdkbzO9PlSq18pb AnlYm2NsKhN0KC4zQ007dDJiAm4v1fFX4P3axl8Kb0BP1bEQB4QIGGn+z5U= -----END CERTIFICATE-----Generated at Wed Aug 6 14:11:11 2025 by rpki-client