$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64b6ed6e-45d7-49f7-be14-647f548f0c39.roa File: 64b6ed6e-45d7-49f7-be14-647f548f0c39.roa (raw, json) Hash identifier: KB8xhtOEASHROc7gp5uC2PYDDlqlMmeI8DsKdaRse9U= Subject key identifier: 7B:C4:B7:D6:60:F5:3A:91:E2:9B:F0:1B:A6:EC:9F:DF:03:EC:3A:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2DEECABA827B63B51A57C477F529BDDD0776AB51 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64b6ed6e-45d7-49f7-be14-647f548f0c39.roa Signing time: Tue 22 Jul 2025 00:20:56 +0000 ROA not before: Tue 22 Jul 2025 00:20:56 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 31.220.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ee:ca:ba:82:7b:63:b5:1a:57:c4:77:f5:29:bd:dd:07:76:ab:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:20:56 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=1d9cbf54fc4a9e709911f4d7fafe1647f84ef47120e894f81cb0b0ab6b0e3c06, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:f0:53:6d:e1:db:39:a9:3b:ea:35:15:2c: 40:dc:05:a7:8f:83:8b:82:9a:32:0f:52:79:e9:57: 0e:eb:b1:de:2c:7f:43:87:1e:ba:e9:9d:00:55:23: 54:68:77:d6:13:1f:97:e7:2d:47:de:57:a4:44:bb: 55:5f:91:6c:7d:de:6a:d1:3a:83:c4:5a:c2:da:44: 46:48:d8:4d:86:eb:46:25:a1:f2:03:85:65:fa:99: fb:bb:59:85:90:6e:e4:4b:1e:64:fa:1b:fe:04:71: 40:0b:4b:38:38:fe:61:8a:a2:5f:a4:00:37:67:09: 8d:7c:db:52:48:38:b2:03:25:ea:49:f8:f8:7d:1b: 16:49:98:28:ab:ac:f8:bd:6e:69:da:53:06:79:e5: ed:d7:06:b2:17:f3:37:df:59:9f:57:f5:24:24:4a: c2:98:8b:ff:f7:f2:00:99:b3:c8:a6:26:21:bd:53: 7a:63:e5:fc:48:2d:f5:ee:7b:56:4d:9a:c8:c8:ef: 0c:94:b0:03:7c:d3:0b:1e:5b:39:6f:4f:ad:49:fd: 4a:a6:79:b7:6a:c5:38:42:c2:f9:57:f8:fa:75:71: 4e:d0:3d:05:ca:d1:83:ea:0e:c8:44:76:b2:b6:22: 6d:81:69:3c:86:29:f5:67:4e:0c:7e:65:f9:8f:23: ef:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C4:B7:D6:60:F5:3A:91:E2:9B:F0:1B:A6:EC:9F:DF:03:EC:3A:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64b6ed6e-45d7-49f7-be14-647f548f0c39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.248.0/22 Signature Algorithm: sha256WithRSAEncryption 51:de:98:e2:a0:04:88:fd:6e:eb:48:5f:38:ac:90:b0:e4:d2: 2d:7b:2a:69:86:ca:2a:62:f9:02:dd:1c:11:b0:a3:c8:21:2a: ac:eb:b6:70:07:f3:0a:66:fd:81:82:bf:48:0a:74:ae:95:24: f2:48:f9:89:aa:b7:dd:a9:21:7f:6f:04:9b:3d:3c:15:d6:1a: c1:80:3c:99:ee:d1:88:83:77:4c:2a:71:21:49:9e:44:7a:b1: df:6b:48:74:f4:f2:11:de:7e:6f:2e:19:99:73:f7:ec:9e:b9: cb:c1:9f:42:7a:b7:28:f5:9e:2d:b1:ca:01:7f:dd:f7:0d:50: 51:8a:92:41:64:09:18:c4:b5:9e:9e:ca:c4:0f:be:bf:90:60: 6f:d1:eb:a9:4f:a6:65:67:d5:3f:d7:37:f0:b7:b9:f0:c7:f4: 9c:27:1a:12:5e:8a:dc:d5:7a:1e:28:6c:a8:59:45:2e:16:6f: c2:4f:48:f4:c7:3f:96:df:f7:e0:d0:79:e4:3d:d4:76:cc:ab: 21:8a:21:e7:7e:81:c9:2d:e9:56:17:89:10:28:f2:46:42:58: 47:1a:ae:a6:69:82:26:71:cd:22:94:fc:52:61:ac:87:fb:df: 2e:96:79:c3:07:49:b6:db:ea:78:fd:0c:4a:c8:05:25:de:ae: e2:64:c3:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULe7KuoJ7Y7UaV8R39Sm93Qd2q1EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAyMDU2WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDljYmY1NGZjNGE5ZTcwOTkxMWY0ZDdmYWZlMTY0N2Y4 NGVmNDcxMjBlODk0ZjgxY2IwYjBhYjZiMGUzYzA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0B/BTbeHbOak76jUVLEDcBaePg4uCmjIPUnnpVw7rsd4s f0OHHrrpnQBVI1Rod9YTH5fnLUfeV6REu1VfkWx93mrROoPEWsLaREZI2E2G60Yl ofIDhWX6mfu7WYWQbuRLHmT6G/4EcUALSzg4/mGKol+kADdnCY1821JIOLIDJepJ +Ph9GxZJmCirrPi9bmnaUwZ55e3XBrIX8zffWZ9X9SQkSsKYi//38gCZs8imJiG9 U3pj5fxILfXue1ZNmsjI7wyUsAN80wseWzlvT61J/UqmebdqxThCwvlX+Pp1cU7Q PQXK0YPqDshEdrK2Im2BaTyGKfVnTgx+ZfmPI+9JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUe8S31mD1OpHim/Abpuyf3wPsOjkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY0YjZlZDZlLTQ1ZDctNDlmNy1iZTE0LTY0N2Y1NDhmMGMzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIf3PgwDQYJKoZIhvcNAQELBQADggEBAFHemOKgBIj9butIXziskLDk0i17 KmmGyipi+QLdHBGwo8ghKqzrtnAH8wpm/YGCv0gKdK6VJPJI+Ymqt92pIX9vBJs9 PBXWGsGAPJnu0YiDd0wqcSFJnkR6sd9rSHT08hHefm8uGZlz9+yeucvBn0J6tyj1 ni2xygF/3fcNUFGKkkFkCRjEtZ6eysQPvr+QYG/R66lPpmVn1T/XN/C3ufDH9Jwn GhJeitzVeh4obKhZRS4Wb8JPSPTHP5bf9+DQeeQ91HbMqyGKIed+gckt6VYXiRAo 8kZCWEcarqZpgiZxzSKU/FJhrIf73y6WecMHSbbb6nj9DErIBSXeruJkw2U= -----END CERTIFICATE-----Generated at Wed Aug 6 05:17:09 2025 by rpki-client