$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c63e1f3c-46da-4d3b-9d1f-3bef8a6a10e0.roa File: c63e1f3c-46da-4d3b-9d1f-3bef8a6a10e0.roa (raw, json) Hash identifier: ZAK+/GfQVp2Zk2g2aC2/KAR36aeMghRu+9xfBKSuRpM= Subject key identifier: 6E:72:D9:9B:D8:2B:10:43:B0:DC:04:94:1A:FE:E3:2E:39:71:D3:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A01D4639D5C66473B8D1B3579000C335DFB9125 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c63e1f3c-46da-4d3b-9d1f-3bef8a6a10e0.roa Signing time: Mon 04 Aug 2025 15:50:26 +0000 ROA not before: Mon 04 Aug 2025 15:50:26 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 119.13.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:01:d4:63:9d:5c:66:47:3b:8d:1b:35:79:00:0c:33:5d:fb:91:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 15:50:26 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=3128fda7d8d0a8c8710658a25008d6de6a5c8e5b49ab89321c22a988c8ab6680, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4c:2a:bb:e8:77:f8:76:01:17:6e:3d:4f:f9: 49:ad:03:80:2d:35:9c:a8:23:94:24:ef:b5:bb:1c: 43:3f:fd:26:a0:30:3a:d7:a9:d7:d3:b7:b3:c9:99: 77:0f:30:bf:ae:32:db:ac:09:7c:d4:d0:68:47:18: a6:4f:a4:d3:88:42:17:db:68:f2:5a:7f:d2:6b:50: 43:4d:b6:57:56:19:34:43:d1:27:19:0b:43:ab:e1: a9:19:63:91:38:b6:80:9d:bc:0b:09:37:ae:0d:96: 5e:29:94:0b:4d:e5:b0:c3:11:b1:e7:42:d9:d4:5e: 27:91:f5:01:33:2e:16:2e:fd:1c:5c:97:8a:64:ea: 95:a9:cd:75:1b:4e:a3:dd:3c:8c:5e:4e:16:5c:26: 03:7b:2e:48:08:d3:05:eb:cf:6e:82:0f:65:6e:71: 45:ce:c6:bc:bd:98:14:2a:53:5d:28:05:78:7a:dc: 2f:1a:c7:83:e1:01:5a:2f:32:64:32:01:db:b0:21: 73:bd:86:7e:b5:9c:19:d5:e5:0b:33:16:e9:35:b2: 32:dc:2a:a0:6f:10:b4:a1:77:59:4a:d5:85:4f:3c: d0:a5:86:15:ba:27:a9:62:c6:65:02:77:49:d0:6f: 34:ab:a7:02:17:bb:9b:db:c1:07:40:9d:35:14:9a: 22:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:72:D9:9B:D8:2B:10:43:B0:DC:04:94:1A:FE:E3:2E:39:71:D3:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c63e1f3c-46da-4d3b-9d1f-3bef8a6a10e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.13.242.0/23 Signature Algorithm: sha256WithRSAEncryption 46:b7:8a:ec:19:1d:2c:c4:8e:fe:69:34:15:09:64:fb:d6:fd: 5c:7f:ac:f9:cf:50:77:4c:84:df:e9:21:0b:50:62:f7:3a:9f: b3:c4:99:63:bb:b1:04:51:ab:c4:63:bb:0f:b7:83:04:a0:a8: 46:ef:e9:65:6e:6e:8d:00:ae:31:29:93:5c:32:b7:c8:c7:0e: 57:51:c3:4c:14:f3:db:a8:f7:fd:4d:32:ed:6e:54:31:89:67: ec:0e:10:2d:0c:4a:51:41:2a:f5:3e:a2:81:77:f0:1b:84:a2: 80:31:1e:ae:38:a0:b9:c7:6b:32:20:f6:36:f9:fe:da:79:d5: 16:19:44:4a:d6:16:3a:f8:00:97:1d:42:7b:4c:d4:65:b2:15: 9a:a7:6a:33:d8:7e:a7:f7:5c:57:6a:84:29:22:43:b6:89:8f: 43:a2:4e:26:00:0c:f4:ea:5f:86:71:a6:e9:78:ea:da:ec:53: 12:f8:d1:bf:b5:99:1c:50:d0:16:10:14:25:65:9c:0b:ce:3a: 18:6e:78:49:85:81:02:32:b6:2a:73:74:85:93:f6:b0:87:9a: be:81:f9:c8:07:bb:58:25:9e:ef:30:2f:a0:c0:e6:cb:c9:8c: 4f:34:3a:b3:6e:32:ba:74:0d:7c:fd:31:e1:e5:af:7b:02:3b: c2:6e:2e:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGgHUY51cZkc7jRs1eQAMM137kSUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTU1MDI2WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTI4ZmRhN2Q4ZDBhOGM4NzEwNjU4YTI1MDA4ZDZkZTZh NWM4ZTViNDlhYjg5MzIxYzIyYTk4OGM4YWI2NjgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwTCq76Hf4dgEXbj1P+UmtA4AtNZyoI5Qk77W7HEM//Sag MDrXqdfTt7PJmXcPML+uMtusCXzU0GhHGKZPpNOIQhfbaPJaf9JrUENNtldWGTRD 0ScZC0Or4akZY5E4toCdvAsJN64Nll4plAtN5bDDEbHnQtnUXieR9QEzLhYu/Rxc l4pk6pWpzXUbTqPdPIxeThZcJgN7LkgI0wXrz26CD2VucUXOxry9mBQqU10oBXh6 3C8ax4PhAVovMmQyAduwIXO9hn61nBnV5QszFuk1sjLcKqBvELShd1lK1YVPPNCl hhW6J6lixmUCd0nQbzSrpwIXu5vbwQdAnTUUmiLlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbnLZm9grEEOw3ASUGv7jLjlx09EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M2M2UxZjNjLTQ2ZGEtNGQzYi05ZDFmLTNiZWY4YTZhMTBlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAF3DfIwDQYJKoZIhvcNAQELBQADggEBAEa3iuwZHSzEjv5pNBUJZPvW/Vx/ rPnPUHdMhN/pIQtQYvc6n7PEmWO7sQRRq8Rjuw+3gwSgqEbv6WVubo0ArjEpk1wy t8jHDldRw0wU89uo9/1NMu1uVDGJZ+wOEC0MSlFBKvU+ooF38BuEooAxHq44oLnH azIg9jb5/tp51RYZRErWFjr4AJcdQntM1GWyFZqnajPYfqf3XFdqhCkiQ7aJj0Oi TiYADPTqX4Zxpul46trsUxL40b+1mRxQ0BYQFCVlnAvOOhhueEmFgQIytipzdIWT 9rCHmr6B+cgHu1glnu8wL6DA5svJjE80OrNuMrp0DXz9MeHlr3sCO8JuLnY= -----END CERTIFICATE-----Generated at Mon Aug 4 22:12:33 2025 by rpki-client