$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9296230d-b510-447f-8d60-91a5403453bc.roa File: 9296230d-b510-447f-8d60-91a5403453bc.roa (raw, json) Hash identifier: aLswd2611Z7JizmYJoPHfgJqUzOIrceWav3Lhnx1KII= Subject key identifier: E8:36:15:4D:12:4D:B5:55:D0:87:01:DF:8E:13:DE:C7:F3:11:05:5B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 18472E9DCEF5A8CEC2CB3C6FDF16353DDE81AAE1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9296230d-b510-447f-8d60-91a5403453bc.roa Signing time: Tue 08 Jul 2025 00:21:02 +0000 ROA not before: Tue 08 Jul 2025 00:21:02 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.21.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:47:2e:9d:ce:f5:a8:ce:c2:cb:3c:6f:df:16:35:3d:de:81:aa:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 00:21:02 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=4f9760ce2c439c5446f2d1d28453a7e97685384f7455d918672df1835c5143b2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:5d:38:c3:bf:28:7f:83:8c:4f:f8:56:c7: 53:41:33:d3:83:b2:d0:fe:72:2b:b8:99:22:c7:43: b8:bc:61:5f:13:9d:76:05:68:19:5c:64:ff:27:cd: 76:a0:03:16:f8:17:40:28:50:69:af:7f:6d:ce:d9: 3d:2e:ea:43:c5:6e:62:bd:5e:3f:c1:9b:4a:f6:45: 2b:b6:ec:f5:76:30:20:4e:31:04:d6:16:00:a9:26: 65:c5:4a:1c:95:bf:8d:18:30:1f:de:4c:83:21:5b: cd:fc:79:1f:d1:3e:58:60:74:e2:c7:3c:90:8e:56: bb:0d:c4:5a:a1:0e:9c:ce:75:a3:94:ea:0c:0c:b3: 39:63:b7:4f:29:69:02:d4:01:11:62:a4:ad:31:b6: 7b:5d:a5:53:d1:2d:50:ee:fb:4b:b7:f2:07:3f:21: b8:e6:21:67:50:47:8a:b0:de:d5:1a:bb:66:c9:5e: e9:1b:47:b0:bb:ff:1a:ec:f5:1e:2d:e5:e0:8e:11: 03:72:33:08:e8:77:f4:02:72:e4:bc:71:20:aa:91: 71:11:76:ca:2f:ac:4d:5d:84:4e:21:c4:45:8a:4e: d5:24:74:68:5e:6c:c2:04:06:99:23:24:bb:c0:ae: aa:42:10:12:b2:fb:db:24:f4:1f:9d:e6:e0:f1:7e: ec:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:36:15:4D:12:4D:B5:55:D0:87:01:DF:8E:13:DE:C7:F3:11:05:5B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9296230d-b510-447f-8d60-91a5403453bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.64.0/20 Signature Algorithm: sha256WithRSAEncryption ac:cb:14:67:ec:77:c5:55:97:80:f7:96:13:46:b3:18:b8:be: 26:3f:ae:63:73:46:07:40:ad:56:94:fe:28:6a:dc:27:f5:79: 54:b0:6c:11:cb:26:bf:fd:3e:5b:e8:15:d9:eb:d3:a8:33:c3: 6c:55:ae:fb:25:b1:87:99:dc:1d:28:a9:a3:b4:54:45:e2:59: d3:3d:84:7d:ef:46:cf:c7:56:a3:10:83:17:01:de:27:36:d0: 30:57:d7:02:7e:8e:1f:77:30:79:e1:a3:84:8d:52:47:a2:05: 91:f7:ae:6a:bd:1b:f3:90:fb:81:32:c7:aa:01:b6:e8:0b:24: 4c:d5:bb:f3:c2:73:76:76:5b:88:c6:bd:b3:69:9c:c4:2c:e0: 2a:83:4f:fd:d6:09:01:7c:3c:d7:95:50:18:e1:c9:4e:b5:c7: 0d:89:61:8d:b6:e5:67:fc:d6:07:41:da:08:d7:b7:a0:00:af: d4:11:ba:5f:de:74:59:3a:22:85:67:4f:dc:77:70:fe:eb:ee: 8e:06:79:a1:d6:97:2d:86:28:07:d6:ea:06:ec:ae:9c:37:b1: ad:c9:d4:6a:62:1c:43:5b:1e:6b:4e:97:ad:82:b6:69:cf:46: bb:6b:5d:77:b8:7e:13:6b:d4:93:17:76:e2:c6:1b:7a:2b:4f: dc:be:91:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGEcunc71qM7Cyzxv3xY1Pd6BquEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDAyMTAyWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Zjk3NjBjZTJjNDM5YzU0NDZmMmQxZDI4NDUzYTdlOTc2 ODUzODRmNzQ1NWQ5MTg2NzJkZjE4MzVjNTE0M2IyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCZl04w78of4OMT/hWx1NBM9ODstD+ciu4mSLHQ7i8YV8T nXYFaBlcZP8nzXagAxb4F0AoUGmvf23O2T0u6kPFbmK9Xj/Bm0r2RSu27PV2MCBO MQTWFgCpJmXFShyVv40YMB/eTIMhW838eR/RPlhgdOLHPJCOVrsNxFqhDpzOdaOU 6gwMszljt08paQLUARFipK0xtntdpVPRLVDu+0u38gc/IbjmIWdQR4qw3tUau2bJ XukbR7C7/xrs9R4t5eCOEQNyMwjod/QCcuS8cSCqkXERdsovrE1dhE4hxEWKTtUk dGhebMIEBpkjJLvArqpCEBKy+9sk9B+d5uDxfuwNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6DYVTRJNtVXQhwHfjhPex/MRBVswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyOTYyMzBkLWI1MTAtNDQ3Zi04ZDYwLTkxYTU0MDM0NTNiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARrFUAwDQYJKoZIhvcNAQELBQADggEBAKzLFGfsd8VVl4D3lhNGsxi4viY/ rmNzRgdArVaU/ihq3Cf1eVSwbBHLJr/9PlvoFdnr06gzw2xVrvslsYeZ3B0oqaO0 VEXiWdM9hH3vRs/HVqMQgxcB3ic20DBX1wJ+jh93MHnho4SNUkeiBZH3rmq9G/OQ +4Eyx6oBtugLJEzVu/PCc3Z2W4jGvbNpnMQs4CqDT/3WCQF8PNeVUBjhyU61xw2J YY225Wf81gdB2gjXt6AAr9QRul/edFk6IoVnT9x3cP7r7o4GeaHWly2GKAfW6gbs rpw3sa3J1GpiHENbHmtOl62CtmnPRrtrXXe4fhNr1JMXduLGG3orT9y+kVw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:21:32 2025 by rpki-client