$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66e7983-4478-40fb-b430-f0e165cf59ac.roa File: c66e7983-4478-40fb-b430-f0e165cf59ac.roa (raw, json) Hash identifier: LT57k+zn4M5cwD26ogGt6lImSzC1BrRO/iV6m+mvKLE= Subject key identifier: 5F:A6:1B:62:F2:DD:7E:30:B1:09:58:05:83:E0:4E:F2:22:3F:57:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3F25BDD4BE5ADFCA905058A24D48DD0645C70E01 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66e7983-4478-40fb-b430-f0e165cf59ac.roa Signing time: Tue 08 Jul 2025 15:00:22 +0000 ROA not before: Tue 08 Jul 2025 15:00:22 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 107.22.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:25:bd:d4:be:5a:df:ca:90:50:58:a2:4d:48:dd:06:45:c7:0e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:00:22 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=d36ae1025adba39eb6d8846565f216ec87cfd93a6cd013d64b84a4f616490259, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:83:3f:00:ab:8d:2a:c2:0c:b2:bc:15:64:b1: 94:fe:32:00:78:ee:21:08:4f:c4:aa:6b:ae:89:c1: fe:44:f9:63:90:ad:7f:77:34:cc:38:62:63:a8:5d: 2d:84:bd:b0:8c:09:f2:5f:5a:08:88:75:ac:f3:d5: 85:29:54:fc:4f:13:e7:4c:3a:54:0e:cb:a6:77:93: e9:ad:29:23:ad:00:ac:77:bc:06:f9:5c:f6:65:cc: 0d:21:1b:d4:b9:0b:69:5b:1e:86:fc:e4:b8:1f:e8: 75:aa:19:0b:5e:1c:27:9b:55:11:4a:2f:59:a3:37: e3:95:b0:89:b2:72:74:32:ef:6d:44:28:2a:72:fc: 9a:bb:7b:7f:62:55:e7:70:d8:0a:55:51:fd:d3:e4: dc:c3:86:ee:b5:6d:b5:b2:47:88:0c:8d:5d:7a:d3: 0c:c9:3d:af:31:7e:9c:9c:27:cd:6c:c2:0b:30:f8: 52:2c:7a:eb:3b:83:37:4d:d9:87:34:47:9f:23:20: 7f:82:be:a0:00:6a:c7:fa:58:8b:a2:50:ea:43:00: e3:03:21:9a:d5:44:a3:83:86:2b:39:d3:bc:45:f5: b4:8a:37:88:70:c8:0a:8c:15:40:7d:6c:b6:11:0b: b3:32:20:01:02:e9:62:96:39:77:a4:d4:7a:22:2d: da:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A6:1B:62:F2:DD:7E:30:B1:09:58:05:83:E0:4E:F2:22:3F:57:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66e7983-4478-40fb-b430-f0e165cf59ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.22.0.0/16 Signature Algorithm: sha256WithRSAEncryption 83:17:62:c4:86:93:c8:2c:94:bb:49:66:a1:c7:60:84:58:6f: 81:5c:ff:6c:ad:c7:90:71:6a:e4:24:dd:f8:c3:c5:87:76:2a: e2:23:10:d6:5a:2f:79:a6:4d:b6:d2:fd:17:7c:e7:27:3b:50: 0f:b9:d3:97:d8:1c:26:27:8b:9c:7c:88:1b:85:94:99:c1:4a: 36:9f:c5:32:fe:43:3f:fd:c4:b6:56:23:b7:5f:24:03:17:f5: ef:5a:fa:74:13:6d:f3:8f:95:3c:51:85:57:b2:18:7e:2f:f7: 96:c4:4b:af:b8:32:23:68:c7:03:98:c9:41:73:84:fe:b9:00: 5f:87:27:fe:14:78:76:d6:f6:00:50:60:9d:ff:d5:34:7b:ab: e8:af:70:16:f4:4b:9f:de:7d:c4:3d:ec:96:ee:df:d4:5f:02: 92:3d:47:ed:fd:5d:7c:a3:e5:1e:65:a4:42:b0:f8:52:12:35: 3c:c5:40:d4:73:82:6a:44:b0:84:db:d6:1e:5e:52:fa:c6:3f: 3f:ad:f1:7d:09:04:3c:06:27:08:b8:6c:f4:ed:4f:cf:1b:0a: 5d:c2:a5:72:63:13:28:dc:32:23:e3:e3:81:53:51:fa:be:88: f6:f2:1a:b7:4a:37:fa:77:8e:97:a4:05:81:e0:b0:bd:d4:7b: 36:52:81:9f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPyW91L5a38qQUFiiTUjdBkXHDgEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTUwMDIyWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzZhZTEwMjVhZGJhMzllYjZkODg0NjU2NWYyMTZlYzg3 Y2ZkOTNhNmNkMDEzZDY0Yjg0YTRmNjE2NDkwMjU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClgz8Aq40qwgyyvBVksZT+MgB47iEIT8Sqa66Jwf5E+WOQ rX93NMw4YmOoXS2EvbCMCfJfWgiIdazz1YUpVPxPE+dMOlQOy6Z3k+mtKSOtAKx3 vAb5XPZlzA0hG9S5C2lbHob85Lgf6HWqGQteHCebVRFKL1mjN+OVsImycnQy721E KCpy/Jq7e39iVedw2ApVUf3T5NzDhu61bbWyR4gMjV160wzJPa8xfpycJ81swgsw +FIseus7gzdN2Yc0R58jIH+CvqAAasf6WIuiUOpDAOMDIZrVRKODhis507xF9bSK N4hwyAqMFUB9bLYRC7MyIAEC6WKWOXek1HoiLdrFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUX6YbYvLdfjCxCVgFg+BO8iI/V18wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M2NmU3OTgzLTQ0NzgtNDBmYi1iNDMwLWYwZTE2NWNmNTlhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBrFjANBgkqhkiG9w0BAQsFAAOCAQEAgxdixIaTyCyUu0lmocdghFhvgVz/ bK3HkHFq5CTd+MPFh3Yq4iMQ1loveaZNttL9F3znJztQD7nTl9gcJieLnHyIG4WU mcFKNp/FMv5DP/3EtlYjt18kAxf171r6dBNt84+VPFGFV7IYfi/3lsRLr7gyI2jH A5jJQXOE/rkAX4cn/hR4dtb2AFBgnf/VNHur6K9wFvRLn959xD3slu7f1F8Ckj1H 7f1dfKPlHmWkQrD4UhI1PMVA1HOCakSwhNvWHl5S+sY/P63xfQkEPAYnCLhs9O1P zxsKXcKlcmMTKNwyI+PjgVNR+r6I9vIat0o3+neOl6QFgeCwvdR7NlKBnw== -----END CERTIFICATE-----Generated at Mon Jul 21 18:13:48 2025 by rpki-client