$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39987a4f-c632-4bdd-8f12-5e92d4db3be2.roa File: 39987a4f-c632-4bdd-8f12-5e92d4db3be2.roa (raw, json) Hash identifier: n0l1BYnWDKNoVaD4gVBednWhHzgpI9O7SXY6geZlh/E= Subject key identifier: CB:10:76:C7:5F:C9:5E:CD:69:92:D5:E5:22:83:3D:1A:0E:01:CC:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 073B49149BB385A08F7DC5EEBE61ACC87A7E57CD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39987a4f-c632-4bdd-8f12-5e92d4db3be2.roa Signing time: Tue 08 Jul 2025 00:11:09 +0000 ROA not before: Tue 08 Jul 2025 00:11:09 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 107.21.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:3b:49:14:9b:b3:85:a0:8f:7d:c5:ee:be:61:ac:c8:7a:7e:57:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 00:11:09 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=86398cc862e802cfd0b90b85eb291e048b53fb0ca07d666797fc57320ae30813, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:91:06:08:f8:8c:9f:4a:06:7a:e9:e1:c2: cb:6a:ad:84:d2:da:0f:c7:7e:e1:35:74:05:8c:82: ac:4d:e8:66:75:93:79:20:b1:e6:d7:cc:72:af:27: c3:14:6b:af:93:b3:37:93:f1:3e:78:8b:d4:e7:7d: ca:3c:02:00:8f:88:92:d2:e7:04:c9:73:15:db:06: 16:20:78:84:2f:82:48:c8:e6:3f:7d:5e:8b:d3:cb: 28:ca:78:71:3d:71:6d:84:a1:e1:4f:56:20:1e:2c: 2a:dd:2a:9f:dc:12:f9:fe:c7:a5:03:2a:40:61:a8: 48:0f:6d:b0:b9:6c:d4:2c:b0:45:ed:4b:0b:1e:c5: 6d:46:14:f0:cc:3e:c0:f4:2e:cf:84:f2:e1:f3:43: c0:65:8c:7e:7b:b5:0c:09:ba:a1:a5:f0:32:b3:41: 50:78:ca:80:5d:54:75:5d:eb:f2:b4:2f:c1:b7:24: 86:84:36:be:31:f7:3a:4d:14:cb:4b:a7:97:bf:52: 0a:05:95:d6:3d:5a:73:3a:ab:36:e4:3e:ce:85:01: 15:38:63:30:d6:88:4a:35:95:0c:f2:cf:61:12:48: 13:4a:b2:e0:7a:53:e7:9f:1a:e8:5c:29:ef:af:63: 38:cc:50:0c:86:55:a8:67:0b:aa:18:77:20:79:75: d1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:10:76:C7:5F:C9:5E:CD:69:92:D5:E5:22:83:3D:1A:0E:01:CC:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39987a4f-c632-4bdd-8f12-5e92d4db3be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.200.0/21 Signature Algorithm: sha256WithRSAEncryption 5e:c1:77:61:12:b5:27:61:9f:56:4a:e6:08:41:80:1e:11:49: ff:81:15:eb:7f:db:77:e5:49:3b:36:4a:2e:a1:d8:18:4c:5c: bd:09:1e:11:d3:b1:b1:76:f3:25:c5:49:1f:34:b3:e9:cb:15: ab:dd:08:d1:cb:87:be:92:04:7a:ee:f0:9f:ff:d5:b7:42:3b: c4:1d:5a:01:3a:02:62:ce:9b:c5:a1:ac:ef:a1:e3:27:46:84: 71:44:12:d0:9f:16:45:65:d4:b0:0f:14:28:3e:21:d4:69:bf: 4f:74:7f:e8:8b:03:ef:73:40:28:cf:d4:5d:05:19:57:c4:eb: 0c:dc:0f:b7:2f:89:d6:eb:be:41:1d:55:74:4c:2b:16:47:f8: 45:14:db:38:c7:ed:00:90:11:18:4b:3d:06:fc:23:72:67:20: 99:8a:64:4d:55:67:39:77:11:6f:99:3c:62:ed:ac:74:05:72: bf:ae:fc:ed:ef:6d:56:ee:25:f4:c6:23:af:8c:5e:0a:09:99: 1a:ce:6a:a1:83:56:df:a9:b4:7b:f9:98:7a:10:33:34:8d:93: d0:49:a9:bb:eb:99:b3:54:b7:94:c4:06:17:18:86:16:79:6b: 50:8b:15:ab:1e:7e:e1:b6:3a:1d:1e:7c:d1:d1:01:ce:24:a5: 0d:67:76:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBztJFJuzhaCPfcXuvmGsyHp+V80wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDAxMTA5WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjM5OGNjODYyZTgwMmNmZDBiOTBiODVlYjI5MWUwNDhi NTNmYjBjYTA3ZDY2Njc5N2ZjNTczMjBhZTMwODEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrx5EGCPiMn0oGeunhwstqrYTS2g/HfuE1dAWMgqxN6GZ1 k3kgsebXzHKvJ8MUa6+TszeT8T54i9Tnfco8AgCPiJLS5wTJcxXbBhYgeIQvgkjI 5j99XovTyyjKeHE9cW2EoeFPViAeLCrdKp/cEvn+x6UDKkBhqEgPbbC5bNQssEXt SwsexW1GFPDMPsD0Ls+E8uHzQ8BljH57tQwJuqGl8DKzQVB4yoBdVHVd6/K0L8G3 JIaENr4x9zpNFMtLp5e/UgoFldY9WnM6qzbkPs6FARU4YzDWiEo1lQzyz2ESSBNK suB6U+efGuhcKe+vYzjMUAyGVahnC6oYdyB5ddFRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyxB2x1/JXs1pktXlIoM9Gg4BzA0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM5OTg3YTRmLWM2MzItNGJkZC04ZjEyLTVlOTJkNGRiM2JlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANrFcgwDQYJKoZIhvcNAQELBQADggEBAF7Bd2EStSdhn1ZK5ghBgB4RSf+B Fet/23flSTs2Si6h2BhMXL0JHhHTsbF28yXFSR80s+nLFavdCNHLh76SBHru8J// 1bdCO8QdWgE6AmLOm8WhrO+h4ydGhHFEEtCfFkVl1LAPFCg+IdRpv090f+iLA+9z QCjP1F0FGVfE6wzcD7cvidbrvkEdVXRMKxZH+EUU2zjH7QCQERhLPQb8I3JnIJmK ZE1VZzl3EW+ZPGLtrHQFcr+u/O3vbVbuJfTGI6+MXgoJmRrOaqGDVt+ptHv5mHoQ MzSNk9BJqbvrmbNUt5TEBhcYhhZ5a1CLFasefuG2Oh0efNHRAc4kpQ1ndlc= -----END CERTIFICATE-----Generated at Mon Jul 21 23:26:19 2025 by rpki-client