$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8bbe60-fea7-42d1-a045-90021977a902.roa File: ae8bbe60-fea7-42d1-a045-90021977a902.roa (raw, json) Hash identifier: yVMUiHJiZQk4dhiIRAUM0oLPVjNtMlAWhZuq04eRRrs= Subject key identifier: B2:F3:0E:40:62:11:FA:70:57:A6:8D:61:97:FD:EE:8F:33:2A:A7:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 10F7BBF1D180110823CDECA63F161CB86438B389 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8bbe60-fea7-42d1-a045-90021977a902.roa Signing time: Tue 08 Jul 2025 00:22:04 +0000 ROA not before: Tue 08 Jul 2025 00:22:04 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.21.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f7:bb:f1:d1:80:11:08:23:cd:ec:a6:3f:16:1c:b8:64:38:b3:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 00:22:04 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=95afd282a39d14807f89131c25a8b3f4680cedfc02bc2ce1043277e9bc0e8697, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:3c:a7:15:7b:cd:fa:43:88:17:57:74:2f: c3:0a:f9:a4:8a:aa:12:20:97:8b:27:e7:df:3e:87: 7c:fe:f6:9c:fa:eb:bf:9c:e5:e0:1b:35:14:c9:97: 11:4a:31:e9:91:75:3a:f5:d1:01:e4:30:9f:4d:44: a7:de:9d:3c:d1:99:b1:db:40:84:6c:6f:ef:bb:36: 97:4d:70:df:d3:e3:f8:d9:7c:43:0a:e3:28:3f:5c: 30:99:73:76:cc:18:70:bc:6c:4f:c3:c6:d3:f4:86: d6:8d:23:f1:ec:42:aa:a4:b4:c2:4c:05:29:1d:24: 14:07:c7:45:78:92:d2:d8:4d:3e:e3:3d:7c:54:48: c2:52:2b:07:b9:67:e7:36:b9:47:9e:1a:ce:68:33: 69:1e:80:f2:15:16:58:b1:98:61:6b:74:48:62:2c: 13:f3:57:43:03:f3:b9:64:f8:7f:94:10:a1:9e:25: a4:b2:88:cf:5a:7c:93:40:9d:04:5a:54:57:80:48: 92:63:88:97:e1:bc:8c:05:59:18:cd:c9:cc:ee:ac: c4:a2:bf:69:1d:3d:dd:df:76:dc:7a:fc:ad:2d:1f: 5d:bb:af:66:71:bd:80:9c:c1:9c:8f:29:df:95:75: d9:22:25:36:ad:fc:a7:d7:d8:aa:2b:8a:a7:84:37: d6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F3:0E:40:62:11:FA:70:57:A6:8D:61:97:FD:EE:8F:33:2A:A7:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8bbe60-fea7-42d1-a045-90021977a902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.0.0/18 Signature Algorithm: sha256WithRSAEncryption bc:6f:3c:4c:6e:97:39:d0:03:98:c7:ab:dc:2f:bd:da:cd:ea: c0:62:c8:1a:e0:ef:ec:c1:4f:fa:9c:d6:aa:8c:7f:12:40:69: 03:3a:c0:b3:90:82:ac:76:a1:00:2e:1f:2f:78:a4:41:65:fa: 41:2d:c4:11:71:ed:38:89:43:8f:f0:50:ac:8b:55:14:2e:29: ef:08:f2:4d:d1:75:7e:d7:9d:2d:c9:f3:96:33:b6:60:89:66: b5:f3:28:0d:3c:22:05:0c:0d:e6:41:66:7e:d5:30:6c:34:94: 03:0a:fd:53:05:9f:4a:bd:f1:e6:e7:9f:25:40:28:c9:85:36: 01:a9:c1:9a:e0:54:1d:48:05:ab:e2:d0:4a:e8:05:96:cc:1e: 92:f8:d4:4b:fc:62:33:e0:00:88:da:39:4f:26:ec:21:4e:b2: e1:62:ef:e7:b6:11:8f:db:2c:99:d8:28:2c:cb:8a:97:bc:84: cc:94:14:d6:78:13:bb:76:56:51:79:db:8b:01:79:86:38:03: ba:d7:09:ef:df:09:0f:e2:83:a0:e5:34:bc:8e:f2:94:66:64: 9f:5a:88:8a:20:8f:d3:6f:74:ed:ff:fa:12:9c:95:e6:54:4b: 7e:f5:b1:36:1f:1b:bf:d8:b2:f1:a1:4d:82:dd:70:8d:2f:cf: 6e:4b:67:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEPe78dGAEQgjzeymPxYcuGQ4s4kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDAyMjA0WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWFmZDI4MmEzOWQxNDgwN2Y4OTEzMWMyNWE4YjNmNDY4 MGNlZGZjMDJiYzJjZTEwNDMyNzdlOWJjMGU4Njk3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQGzynFXvN+kOIF1d0L8MK+aSKqhIgl4sn598+h3z+9pz6 67+c5eAbNRTJlxFKMemRdTr10QHkMJ9NRKfenTzRmbHbQIRsb++7NpdNcN/T4/jZ fEMK4yg/XDCZc3bMGHC8bE/DxtP0htaNI/HsQqqktMJMBSkdJBQHx0V4ktLYTT7j PXxUSMJSKwe5Z+c2uUeeGs5oM2kegPIVFlixmGFrdEhiLBPzV0MD87lk+H+UEKGe JaSyiM9afJNAnQRaVFeASJJjiJfhvIwFWRjNyczurMSiv2kdPd3fdtx6/K0tH127 r2ZxvYCcwZyPKd+VddkiJTat/KfX2KoriqeEN9YZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsvMOQGIR+nBXpo1hl/3ujzMqp80wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlOGJiZTYwLWZlYTctNDJkMS1hMDQ1LTkwMDIxOTc3YTkwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZrFQAwDQYJKoZIhvcNAQELBQADggEBALxvPExulznQA5jHq9wvvdrN6sBi yBrg7+zBT/qc1qqMfxJAaQM6wLOQgqx2oQAuHy94pEFl+kEtxBFx7TiJQ4/wUKyL VRQuKe8I8k3RdX7XnS3J85YztmCJZrXzKA08IgUMDeZBZn7VMGw0lAMK/VMFn0q9 8ebnnyVAKMmFNgGpwZrgVB1IBavi0EroBZbMHpL41Ev8YjPgAIjaOU8m7CFOsuFi 7+e2EY/bLJnYKCzLipe8hMyUFNZ4E7t2VlF524sBeYY4A7rXCe/fCQ/ig6DlNLyO 8pRmZJ9aiIogj9NvdO3/+hKcleZUS371sTYfG7/YsvGhTYLdcI0vz25LZ9w= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:07 2025 by rpki-client