$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4c448f-408f-4002-b06a-b0099e5c6ae9.roa File: 6a4c448f-408f-4002-b06a-b0099e5c6ae9.roa (raw, json) Hash identifier: 2G1O8RSwZ0X5X2L1VP8vLdthFSbBreJ2qi6ptF8bB54= Subject key identifier: 86:7C:08:22:EA:AD:B9:B2:27:3D:59:DB:58:7F:EC:FD:C3:94:D2:DE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 73AF13619E01880B1562A297EB35584D397832EC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4c448f-408f-4002-b06a-b0099e5c6ae9.roa Signing time: Tue 08 Jul 2025 00:10:29 +0000 ROA not before: Tue 08 Jul 2025 00:10:29 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.21.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:af:13:61:9e:01:88:0b:15:62:a2:97:eb:35:58:4d:39:78:32:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 00:10:29 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=c9ee453fc2abaab5a3e3f4ec67d951acb308c3315296114a08a7f962a9edd925, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:2a:a2:98:bb:af:3b:51:62:fa:65:9e:23: 3d:5c:6e:3d:38:8e:f0:13:f7:fc:35:2d:81:ed:f7: f0:27:90:bf:44:66:a2:fc:19:b2:c0:14:d5:0c:7a: e5:ca:60:07:f0:ff:c0:b9:6c:33:4e:ee:10:c2:eb: 05:c4:f0:84:14:91:21:a0:b8:e6:e6:2e:b3:ce:9b: 99:59:cd:ff:3c:46:6e:b8:a9:42:25:0a:7a:e6:b6: 15:43:54:ac:cd:0f:d4:65:f0:f1:e1:9d:ed:6c:ef: 76:66:57:d3:48:b0:b9:dd:d8:85:86:e3:2e:e3:7d: c1:2d:37:a0:48:61:78:6c:0f:15:d2:48:4d:9a:4a: c3:38:72:e7:0d:c4:b7:72:98:a2:30:78:ca:ea:63: 32:da:fc:3a:db:a5:2d:80:79:4a:5e:7d:f2:90:14: bf:6b:3b:c3:9a:f0:ae:71:80:48:2e:9c:57:07:5c: 64:fe:6c:5f:2e:14:e1:ec:cf:57:9d:19:4f:d2:43: 9c:5d:3b:7d:16:8c:77:cd:54:5f:85:d2:f2:36:90: 00:8b:b2:85:f7:ce:f9:65:2b:a0:69:31:55:8a:d6: db:5c:40:45:9e:55:78:bb:e3:91:c8:ad:b9:14:92: be:98:9b:27:96:8e:38:87:00:05:a1:bd:9f:45:e7: 78:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7C:08:22:EA:AD:B9:B2:27:3D:59:DB:58:7F:EC:FD:C3:94:D2:DE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a4c448f-408f-4002-b06a-b0099e5c6ae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.92.0/22 Signature Algorithm: sha256WithRSAEncryption cf:1e:0b:7f:e9:16:a6:e8:65:1d:3b:3f:0e:54:68:ce:73:15: 49:1e:92:d1:18:11:6b:d7:2d:ad:14:c9:9b:27:88:79:80:ca: 6b:7c:e1:55:bc:38:56:fa:c4:99:01:87:14:75:93:a3:08:86: e4:bd:e7:da:2e:05:46:5b:91:df:f5:e5:fa:4e:f4:58:43:cc: 68:06:d2:02:d2:72:ac:fd:da:69:93:cf:b0:7c:fe:19:5e:31: 74:9c:f5:a2:a1:8c:1f:d6:24:4d:05:b3:23:5c:7d:20:94:7f: c6:ca:c2:66:35:df:76:fe:80:7a:80:12:0c:21:01:99:75:4a: ba:39:23:ad:4d:29:5b:d4:6d:c2:cd:0c:27:70:b3:4c:a1:dd: 29:31:1d:98:fb:da:d5:e1:28:12:93:a6:39:0b:11:6b:c1:10: e0:e7:83:f2:a3:22:90:d3:6f:31:ff:cc:46:99:7c:18:82:e9: 0a:08:3d:09:23:33:bd:c2:17:a6:69:33:07:96:71:2a:96:be: 83:55:90:c9:50:c4:c5:14:dd:75:19:b7:c2:36:e3:19:d7:37: 96:8e:88:c0:9d:4d:d3:e0:b8:d9:09:88:30:2f:59:48:4f:2c: 9c:86:72:16:e0:38:5a:c2:4d:ce:8f:b3:3b:ca:e5:72:3b:27: 56:d1:d8:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc68TYZ4BiAsVYqKX6zVYTTl4MuwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDAxMDI5WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWVlNDUzZmMyYWJhYWI1YTNlM2Y0ZWM2N2Q5NTFhY2Iz MDhjMzMxNTI5NjExNGEwOGE3Zjk2MmE5ZWRkOTI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCGCqimLuvO1Fi+mWeIz1cbj04jvAT9/w1LYHt9/AnkL9E ZqL8GbLAFNUMeuXKYAfw/8C5bDNO7hDC6wXE8IQUkSGguObmLrPOm5lZzf88Rm64 qUIlCnrmthVDVKzND9Rl8PHhne1s73ZmV9NIsLnd2IWG4y7jfcEtN6BIYXhsDxXS SE2aSsM4cucNxLdymKIweMrqYzLa/DrbpS2AeUpeffKQFL9rO8Oa8K5xgEgunFcH XGT+bF8uFOHsz1edGU/SQ5xdO30WjHfNVF+F0vI2kACLsoX3zvllK6BpMVWK1ttc QEWeVXi745HIrbkUkr6YmyeWjjiHAAWhvZ9F53jdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhnwIIuqtubInPVnbWH/s/cOU0t4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZhNGM0NDhmLTQwOGYtNDAwMi1iMDZhLWIwMDk5ZTVjNmFlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJrFVwwDQYJKoZIhvcNAQELBQADggEBAM8eC3/pFqboZR07Pw5UaM5zFUke ktEYEWvXLa0UyZsniHmAymt84VW8OFb6xJkBhxR1k6MIhuS959ouBUZbkd/15fpO 9FhDzGgG0gLScqz92mmTz7B8/hleMXSc9aKhjB/WJE0FsyNcfSCUf8bKwmY133b+ gHqAEgwhAZl1Sro5I61NKVvUbcLNDCdws0yh3SkxHZj72tXhKBKTpjkLEWvBEODn g/KjIpDTbzH/zEaZfBiC6QoIPQkjM73CF6ZpMweWcSqWvoNVkMlQxMUU3XUZt8I2 4xnXN5aOiMCdTdPguNkJiDAvWUhPLJyGchbgOFrCTc6PszvK5XI7J1bR2FI= -----END CERTIFICATE-----Generated at Thu Jul 24 04:55:53 2025 by rpki-client