$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae07341a-9b16-4a51-8c28-769fa383023e.roa File: ae07341a-9b16-4a51-8c28-769fa383023e.roa (raw, json) Hash identifier: VDwnX6oX1HSycrvZUBx9vlxex0QTYCsdZ40jkHxh5sM= Subject key identifier: 2A:E5:A4:FE:7B:4F:77:F5:48:39:8A:BB:4E:40:BB:3E:7B:3F:7C:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4011E858E4A98F6652752B7997D9401CC6D5419C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae07341a-9b16-4a51-8c28-769fa383023e.roa Signing time: Tue 08 Jul 2025 00:20:15 +0000 ROA not before: Tue 08 Jul 2025 00:20:15 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.23.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:11:e8:58:e4:a9:8f:66:52:75:2b:79:97:d9:40:1c:c6:d5:41:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 00:20:15 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=e69a682701d4dbcb4f8a507ba9d5db3efd448d7fba1ccb12a0e7ffaa1f4d8b4b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b5:00:c8:2e:83:7a:2a:0d:40:e9:06:35:b4: 2e:3b:be:aa:37:b8:88:6e:f1:be:3f:b9:57:5c:fd: 2e:64:dd:bd:ac:cd:a5:94:03:45:63:e5:c1:b6:78: ee:07:07:0e:2f:1b:02:2b:f1:7d:4b:08:b7:27:f6: 29:b9:37:5a:90:ba:db:07:e9:ee:e5:f3:59:8e:a1: 8c:19:59:cb:12:fa:ce:57:13:fb:ef:48:c4:21:23: aa:f4:2f:e9:14:93:ec:8f:36:e2:5e:36:83:99:c1: 20:04:ca:d2:c2:43:64:88:f6:15:4c:46:b8:37:7b: 6f:b6:75:50:11:01:6c:05:67:21:2e:a2:ab:dd:b3: 78:3b:90:64:d0:4a:fd:76:fe:ba:60:96:26:96:18: da:0b:93:9e:97:0b:b9:46:e4:f1:dd:bb:85:63:1b: c0:fe:86:eb:ee:69:28:ee:62:4e:36:31:0d:33:09: a9:bf:2b:ea:f6:32:fc:30:65:e5:6e:81:96:93:e8: 1a:c1:fd:22:d7:b4:f4:8b:63:6d:99:41:30:cd:b0: f1:69:a3:a9:95:fc:1d:d7:23:1e:a8:ec:63:9f:14: d6:ac:a9:63:dd:0f:c6:46:88:4f:6b:e3:4e:b5:7c: 85:0b:10:e7:f1:eb:f0:9f:86:1f:08:40:14:7a:e8: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E5:A4:FE:7B:4F:77:F5:48:39:8A:BB:4E:40:BB:3E:7B:3F:7C:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae07341a-9b16-4a51-8c28-769fa383023e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.23.128.0/17 Signature Algorithm: sha256WithRSAEncryption 80:c2:0d:97:fb:9e:21:6e:cb:fb:cb:b5:3f:aa:10:1e:8d:08: 1d:d2:f9:8b:47:02:d3:3d:19:fa:b2:a6:c4:8b:7c:92:8d:16: e8:60:28:5e:5f:e4:f2:60:cb:0d:f5:64:ba:3a:92:5e:7a:8d: e3:fb:24:87:34:33:52:19:a8:ea:ff:e6:a8:3b:3b:83:23:40: 44:52:29:31:53:9e:87:52:42:cd:6b:08:7f:69:cb:85:1f:dc: b2:d6:b4:86:26:6b:03:80:b2:da:51:37:cf:dd:42:24:ad:51: 7f:02:dd:e9:4d:5e:f7:f3:f9:8e:02:67:2f:01:d1:e4:c8:5b: f8:08:f5:ac:8f:c9:60:6d:19:04:0d:91:37:20:b7:02:55:f8: 5b:be:e8:2a:f0:c6:09:d4:2d:b5:b9:1e:77:8d:70:33:93:3c: bc:d6:34:68:41:c5:20:93:94:4e:c7:a2:a5:fa:d0:64:c2:1f: 68:0c:72:13:dc:6f:e7:99:bd:a1:b0:66:e2:91:84:46:db:05: da:f6:77:0f:34:98:f2:1b:d3:3a:4a:d2:b2:64:4a:f8:1a:de: d9:93:1c:8f:c1:27:03:f5:6f:77:d0:14:1b:77:27:0a:4b:fb: c1:76:a4:b2:21:90:b5:6a:f0:57:33:22:ea:ea:85:2f:65:89: b3:59:34:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQBHoWOSpj2ZSdSt5l9lAHMbVQZwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDAyMDE1WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjlhNjgyNzAxZDRkYmNiNGY4YTUwN2JhOWQ1ZGIzZWZk NDQ4ZDdmYmExY2NiMTJhMGU3ZmZhYTFmNGQ4YjRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCftQDILoN6Kg1A6QY1tC47vqo3uIhu8b4/uVdc/S5k3b2s zaWUA0Vj5cG2eO4HBw4vGwIr8X1LCLcn9im5N1qQutsH6e7l81mOoYwZWcsS+s5X E/vvSMQhI6r0L+kUk+yPNuJeNoOZwSAEytLCQ2SI9hVMRrg3e2+2dVARAWwFZyEu oqvds3g7kGTQSv12/rpgliaWGNoLk56XC7lG5PHdu4VjG8D+huvuaSjuYk42MQ0z Cam/K+r2MvwwZeVugZaT6BrB/SLXtPSLY22ZQTDNsPFpo6mV/B3XIx6o7GOfFNas qWPdD8ZGiE9r4061fIULEOfx6/Cfhh8IQBR66DKTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKuWk/ntPd/VIOYq7TkC7Pns/fA8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlMDczNDFhLTliMTYtNGE1MS04YzI4LTc2OWZhMzgzMDIzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdrF4AwDQYJKoZIhvcNAQELBQADggEBAIDCDZf7niFuy/vLtT+qEB6NCB3S +YtHAtM9GfqypsSLfJKNFuhgKF5f5PJgyw31ZLo6kl56jeP7JIc0M1IZqOr/5qg7 O4MjQERSKTFTnodSQs1rCH9py4Uf3LLWtIYmawOAstpRN8/dQiStUX8C3elNXvfz +Y4CZy8B0eTIW/gI9ayPyWBtGQQNkTcgtwJV+Fu+6CrwxgnULbW5HneNcDOTPLzW NGhBxSCTlE7HoqX60GTCH2gMchPcb+eZvaGwZuKRhEbbBdr2dw80mPIb0zpK0rJk Svga3tmTHI/BJwP1b3fQFBt3JwpL+8F2pLIhkLVq8FczIurqhS9libNZNCI= -----END CERTIFICATE-----Generated at Wed Jul 23 02:28:29 2025 by rpki-client