$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0624423f-0ae9-4701-8d7b-9f636c543aa3.roa File: 0624423f-0ae9-4701-8d7b-9f636c543aa3.roa (raw, json) Hash identifier: 2Jqu3V68YHW0+S9YGPYZycAdPoSl6MCPguL0sg7F8nc= Subject key identifier: FB:1F:BE:21:A6:FF:0D:02:C3:17:F7:F9:3F:A7:63:B0:4A:47:F3:9F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54AB19263F29B73E50EC6DD32C25F1EE14B79101 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0624423f-0ae9-4701-8d7b-9f636c543aa3.roa Signing time: Tue 08 Jul 2025 00:20:11 +0000 ROA not before: Tue 08 Jul 2025 00:20:11 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.23.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ab:19:26:3f:29:b7:3e:50:ec:6d:d3:2c:25:f1:ee:14:b7:91:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 00:20:11 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=17c929bdc0c5317a2af29788d8ef32e7f1467eda1806ef10402564b5df25dc12, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:a3:5e:32:0d:8c:cc:ff:b9:be:69:4a:5d: e6:9a:f4:81:ac:2b:28:87:13:49:69:ef:d3:f8:8a: 5a:a1:07:ab:03:d9:6d:1a:50:c5:68:ea:01:6a:76: d8:c4:11:4d:94:d9:6c:be:0e:5e:b8:22:ca:8d:ad: 24:6f:bb:e4:be:b0:78:43:cd:77:c5:d6:58:0e:f1: 4d:4c:2b:50:49:2f:d0:57:c4:37:f3:ed:45:e4:60: 71:72:6c:af:01:c3:41:15:31:e9:d0:ef:88:17:e2: 50:b8:af:b2:91:be:48:f2:8b:01:fa:2a:96:86:95: ef:3d:a6:e3:7e:12:14:3e:9d:29:ef:ac:a2:08:a1: 09:7b:b0:20:56:05:21:d1:36:21:ef:71:9c:52:e9: 66:28:fc:58:e7:b4:85:f5:be:90:13:12:3a:4a:78: a3:4c:b0:f7:6d:9b:38:53:e7:e0:ac:a8:c8:35:2a: 5a:55:da:79:19:e2:a6:40:92:8e:9e:bc:05:56:60: 07:28:a7:e3:85:72:a0:bc:d8:da:69:b5:39:0e:1e: 9d:4e:8d:d0:c6:04:f2:3f:ee:30:4a:80:38:ae:25: 0a:54:70:0d:65:97:38:8d:35:5a:70:89:25:f0:ad: 8c:95:f7:d5:ba:d2:7b:65:a0:5a:28:5f:51:f7:d4: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1F:BE:21:A6:FF:0D:02:C3:17:F7:F9:3F:A7:63:B0:4A:47:F3:9F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0624423f-0ae9-4701-8d7b-9f636c543aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.23.0.0/17 Signature Algorithm: sha256WithRSAEncryption ac:6c:0b:6b:73:5f:61:ca:06:a6:69:bb:a2:b4:09:d4:6d:94: 3f:b6:8c:3b:1c:16:78:8d:0e:2c:99:00:8c:6a:7b:6f:a0:75: 0f:a6:29:20:51:e6:ad:8c:9f:04:82:dd:d0:a9:0f:7a:7f:d6: 1d:ea:39:56:74:33:28:df:7c:13:ab:1d:b0:09:b6:ff:4b:6d: 1f:84:eb:77:ff:03:85:a2:08:f2:30:29:2d:44:38:2b:6c:4e: 65:e4:14:54:63:32:4a:d9:aa:11:00:36:d4:f0:e5:e2:4d:a9: 53:c6:1d:7f:67:65:bc:15:c7:3f:4a:ec:8e:8b:b0:de:44:0c: f7:d1:7c:e0:e5:5e:3e:da:1b:ba:a5:49:25:f2:7f:7f:37:a7: 03:67:3c:c6:f8:d1:6e:d6:63:65:cb:e6:9a:bd:95:a0:76:5b: 42:03:f9:a2:60:18:61:4b:fb:d0:83:74:be:0e:24:f6:b8:75: 78:69:9c:28:04:5e:5c:e1:6b:88:fe:bf:73:6f:bc:05:1b:68: c8:b6:00:54:91:ca:18:f9:cf:76:18:56:6a:04:09:30:63:cd: 63:31:71:5d:3d:15:9c:fe:66:31:04:e1:be:67:f8:c9:91:3c: 52:7a:b4:d6:20:b0:10:ea:eb:8b:24:4b:58:02:e0:12:a2:0e: 31:ca:2d:11 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVKsZJj8ptz5Q7G3TLCXx7hS3kQEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDAyMDExWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxN2M5MjliZGMwYzUzMTdhMmFmMjk3ODhkOGVmMzJlN2Yx NDY3ZWRhMTgwNmVmMTA0MDI1NjRiNWRmMjVkYzEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIn6NeMg2MzP+5vmlKXeaa9IGsKyiHE0lp79P4ilqhB6sD 2W0aUMVo6gFqdtjEEU2U2Wy+Dl64IsqNrSRvu+S+sHhDzXfF1lgO8U1MK1BJL9BX xDfz7UXkYHFybK8Bw0EVMenQ74gX4lC4r7KRvkjyiwH6KpaGle89puN+EhQ+nSnv rKIIoQl7sCBWBSHRNiHvcZxS6WYo/FjntIX1vpATEjpKeKNMsPdtmzhT5+CsqMg1 KlpV2nkZ4qZAko6evAVWYAcop+OFcqC82NpptTkOHp1OjdDGBPI/7jBKgDiuJQpU cA1llziNNVpwiSXwrYyV99W60ntloFooX1H31FaLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+x++Iab/DQLDF/f5P6djsEpH858wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2MjQ0MjNmLTBhZTktNDcwMS04ZDdiLTlmNjM2YzU0M2FhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdrFwAwDQYJKoZIhvcNAQELBQADggEBAKxsC2tzX2HKBqZpu6K0CdRtlD+2 jDscFniNDiyZAIxqe2+gdQ+mKSBR5q2MnwSC3dCpD3p/1h3qOVZ0MyjffBOrHbAJ tv9LbR+E63f/A4WiCPIwKS1EOCtsTmXkFFRjMkrZqhEANtTw5eJNqVPGHX9nZbwV xz9K7I6LsN5EDPfRfODlXj7aG7qlSSXyf383pwNnPMb40W7WY2XL5pq9laB2W0ID +aJgGGFL+9CDdL4OJPa4dXhpnCgEXlzha4j+v3NvvAUbaMi2AFSRyhj5z3YYVmoE CTBjzWMxcV09FZz+ZjEE4b5n+MmRPFJ6tNYgsBDq64skS1gC4BKiDjHKLRE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:53 2025 by rpki-client