$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa File: 85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa (raw, json) Hash identifier: 4XxkUCjHDRRDH3O7K0bxNAgWhAiU6oSIAkRZBmIxnuE= Subject key identifier: 85:3B:AB:4A:EB:FC:42:34:09:A2:F2:6C:5A:86:3A:36:4C:13:25:8F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 63C288DEF8B9FAD4221B5D79D29FCE484FF695E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa Signing time: Wed 11 Jun 2025 00:01:07 +0000 ROA not before: Wed 11 Jun 2025 00:01:07 +0000 ROA not after: Wed 16 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.238.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c2:88:de:f8:b9:fa:d4:22:1b:5d:79:d2:9f:ce:48:4f:f6:95:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 11 00:01:07 2025 GMT Not After : Jul 16 23:59:59 2025 GMT Subject: serialNumber=65adba4d792de42500c1dc54b22e6ab1b0106347aeecd956810427f89a547c50, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:03:e3:e2:48:94:41:97:23:f7:09:c6:32: 69:a2:0c:71:64:6c:74:7d:b0:49:20:4f:ca:f5:4e: e9:26:28:50:fa:e7:88:71:88:ac:1f:b0:32:90:82: 65:28:b5:4a:e2:ff:8d:54:0f:e8:c8:8a:d9:96:0d: 3b:52:4a:1e:65:fb:ea:bd:9f:80:1d:e5:60:33:66: 85:d5:7e:a6:41:c4:22:26:12:3c:e7:6e:94:13:03: 81:f7:98:8b:da:eb:80:ac:ee:80:e9:8a:87:8b:4b: 65:10:f0:1f:1e:1e:4a:15:44:ee:a0:32:e4:1d:d0: a9:26:64:08:f7:ce:26:aa:ca:e5:ec:6d:a9:82:24: fe:46:42:ed:5d:41:38:35:b3:16:19:0c:82:1f:6d: 2a:91:92:a8:f8:c7:51:9c:86:69:7c:a3:cf:7c:73: bf:eb:5b:9e:46:2f:0d:24:90:2e:03:c3:83:37:51: 14:6a:48:6d:97:4c:cd:0b:12:88:94:11:01:12:d7: d4:ee:fa:20:be:83:00:d5:17:a5:4b:ef:20:da:6b: 39:39:13:c0:04:de:39:15:c7:5b:e3:da:fc:9f:b1: 98:51:de:ad:e8:cd:49:00:d9:f2:68:db:8f:4d:cf: 89:58:f0:45:49:7c:f5:39:9b:21:49:24:2f:5a:d7: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3B:AB:4A:EB:FC:42:34:09:A2:F2:6C:5A:86:3A:36:4C:13:25:8F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.238.8.0/21 Signature Algorithm: sha256WithRSAEncryption 36:ec:3a:38:ca:1a:98:61:06:94:6b:f7:84:72:5a:f1:aa:6a: b5:3a:aa:cd:97:cd:02:98:28:ad:c8:3d:57:21:97:64:ea:82: 79:bf:72:78:38:92:52:f3:70:d7:3d:9a:2b:df:35:a1:4d:2d: e9:32:a5:de:b3:87:45:f5:e1:9b:4e:42:ab:f2:90:97:10:7e: 46:8c:ef:0e:95:d0:3a:1a:34:37:da:06:6f:3a:3b:16:76:88: c0:71:a2:e4:cc:54:97:86:77:c0:9e:d2:6e:26:8a:ce:f6:fa: dc:7b:b1:2e:b3:d7:08:6d:f4:e1:e7:b8:97:54:4e:80:4d:05: 1e:f0:b5:ab:1f:2e:7b:e7:e2:ad:82:a0:24:03:89:c3:84:26: 2d:c3:96:a0:c0:59:69:11:8b:23:88:4e:10:d1:60:15:63:cd: 9b:93:d1:1b:db:f1:c1:04:98:dc:2d:12:6c:14:b8:8e:5a:cc: 58:ec:2e:63:94:fc:5c:be:00:b3:92:a7:a1:f5:38:7f:e1:eb: 35:87:7a:08:03:3e:30:25:2b:cf:1d:64:ba:65:a5:80:5d:25: b0:5f:bf:fe:97:df:36:46:eb:ca:8b:e1:8f:14:08:2b:5b:75: 3d:34:51:25:63:33:b0:62:85:c3:33:83:aa:90:b8:46:f5:21: 13:3a:57:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY8KI3vi5+tQiG1150p/OSE/2lekwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjExMDAwMTA3WhcNMjUwNzE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NWFkYmE0ZDc5MmRlNDI1MDBjMWRjNTRiMjJlNmFiMWIw MTA2MzQ3YWVlY2Q5NTY4MTA0MjdmODlhNTQ3YzUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHBAPj4kiUQZcj9wnGMmmiDHFkbHR9sEkgT8r1TukmKFD6 54hxiKwfsDKQgmUotUri/41UD+jIitmWDTtSSh5l++q9n4Ad5WAzZoXVfqZBxCIm EjznbpQTA4H3mIva64Cs7oDpioeLS2UQ8B8eHkoVRO6gMuQd0KkmZAj3ziaqyuXs bamCJP5GQu1dQTg1sxYZDIIfbSqRkqj4x1Gchml8o898c7/rW55GLw0kkC4Dw4M3 URRqSG2XTM0LEoiUEQES19Tu+iC+gwDVF6VL7yDaazk5E8AE3jkVx1vj2vyfsZhR 3q3ozUkA2fJo249Nz4lY8EVJfPU5myFJJC9a1zkDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhTurSuv8QjQJovJsWoY6NkwTJY8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg1YWEzNDhlLTdlNDctNDhmMy04NTZjLTE4OWNmOWQyYWI3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANu7ggwDQYJKoZIhvcNAQELBQADggEBADbsOjjKGphhBpRr94RyWvGqarU6 qs2XzQKYKK3IPVchl2Tqgnm/cng4klLzcNc9mivfNaFNLekypd6zh0X14ZtOQqvy kJcQfkaM7w6V0DoaNDfaBm86OxZ2iMBxouTMVJeGd8Ce0m4mis72+tx7sS6z1wht 9OHnuJdUToBNBR7wtasfLnvn4q2CoCQDicOEJi3DlqDAWWkRiyOIThDRYBVjzZuT 0Rvb8cEEmNwtEmwUuI5azFjsLmOU/Fy+ALOSp6H1OH/h6zWHeggDPjAlK88dZLpl pYBdJbBfv/6X3zZG68qL4Y8UCCtbdT00USVjM7BihcMzg6qQuEb1IRM6V0g= -----END CERTIFICATE-----Generated at Sat Jun 14 06:33:22 2025 by rpki-client