$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd97473f-265a-4062-bab9-aefacb0e51a0.roa File: cd97473f-265a-4062-bab9-aefacb0e51a0.roa (raw, json) Hash identifier: 6zEVDZqY7C+z24zCQ9tOwlTab4UTYQ2ZKIPbMPnhd28= Subject key identifier: BC:56:09:56:C9:03:B1:58:A7:66:A0:72:76:E3:17:FC:2A:45:98:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A5405E7421C2800F5D1629C9CD8ED2FE8E62D33 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd97473f-265a-4062-bab9-aefacb0e51a0.roa Signing time: Fri 11 Jul 2025 00:10:24 +0000 ROA not before: Fri 11 Jul 2025 00:10:24 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:54:05:e7:42:1c:28:00:f5:d1:62:9c:9c:d8:ed:2f:e8:e6:2d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:10:24 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=78be21c248714a8bf9f6aeb86fe02162c12eccb273744619dff016cb174f33a4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:47:78:8e:a9:80:17:9c:21:66:c1:9c:e8:31: 54:fe:d4:30:3c:53:b2:cd:49:8f:a9:6b:a5:a3:62: c0:e8:1b:5a:22:ae:30:ec:be:0d:a1:93:5d:45:8e: f8:54:b7:16:a1:75:69:05:55:a7:95:6d:1e:b5:31: 4c:b6:04:4a:09:e7:40:aa:ee:9f:45:70:fe:6f:20: 04:22:c1:63:8d:9d:73:70:c3:18:7d:58:98:d3:2d: f1:05:f0:56:cb:62:c4:53:dc:e3:0b:b5:d3:fd:e6: f1:13:ce:9b:85:e5:eb:75:2f:74:c3:49:ee:d2:78: 07:b9:ce:21:ef:5d:da:ee:4e:93:75:c5:89:81:cf: e6:6f:af:2f:8f:5c:d2:c6:a1:4b:05:66:cf:3c:34: b3:54:a9:76:82:00:d1:db:95:a0:3a:67:1e:b7:de: 58:96:75:8e:0f:87:9e:9a:05:ba:83:7d:3d:4e:ea: 2e:5a:84:fc:a3:99:f5:31:a6:24:d2:e9:54:7a:c9: 0a:ea:17:70:c6:e6:61:be:bd:f0:ff:c3:b7:5b:5d: d9:7a:84:60:fb:20:66:72:4a:46:a1:d4:66:72:5a: b2:d5:e3:97:4d:61:51:3b:cc:40:0d:86:38:b6:21: 20:aa:0d:64:20:41:c8:f5:b0:89:a2:a6:aa:d2:c2: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:56:09:56:C9:03:B1:58:A7:66:A0:72:76:E3:17:FC:2A:45:98:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd97473f-265a-4062-bab9-aefacb0e51a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.209.0/24 Signature Algorithm: sha256WithRSAEncryption 12:eb:fa:04:ba:c3:06:76:8f:14:df:f6:8c:4c:f1:fd:d6:2b: 5a:77:af:f6:e6:b8:3f:eb:ad:c4:f3:85:c1:af:85:10:02:01: be:17:27:ec:e4:77:83:02:1a:37:7c:95:9e:18:9e:f1:20:5a: ec:96:14:a1:8a:96:48:a1:ef:cd:ca:52:c5:84:9d:7c:4a:d7: bb:ba:22:db:d7:5c:ab:cc:ab:03:57:01:2c:e9:96:58:fd:dd: 31:87:b2:3f:b6:73:7b:22:d3:eb:76:e5:e6:6c:cf:ec:f6:56: 67:4a:09:8c:2f:54:d5:7f:50:35:30:e1:4a:68:ab:20:b9:8b: 4f:f7:9c:f7:f0:d6:cb:e5:22:41:04:fb:93:47:81:3c:6d:97: 28:8d:52:c2:aa:de:42:a3:e3:d8:0a:10:6e:cd:64:77:65:9a: 57:eb:99:ae:2e:87:af:db:47:15:6a:6b:37:d3:33:c1:58:3c: 09:15:8c:af:84:04:98:f2:75:9e:a9:07:54:1d:a1:fa:13:37: ab:3f:36:19:3f:7f:62:62:23:5e:24:f9:3d:7b:3d:50:52:23: db:e1:e1:f4:ad:ee:e1:92:d7:12:90:0a:70:d2:38:58:ce:af: cc:06:a2:e3:e6:a5:63:e4:30:1a:dd:39:fc:bb:ee:e8:09:0f: d9:38:ae:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGlQF50IcKAD10WKcnNjtL+jmLTMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAxMDI0WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGJlMjFjMjQ4NzE0YThiZjlmNmFlYjg2ZmUwMjE2MmMx MmVjY2IyNzM3NDQ2MTlkZmYwMTZjYjE3NGYzM2E0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUR3iOqYAXnCFmwZzoMVT+1DA8U7LNSY+pa6WjYsDoG1oi rjDsvg2hk11FjvhUtxahdWkFVaeVbR61MUy2BEoJ50Cq7p9FcP5vIAQiwWONnXNw wxh9WJjTLfEF8FbLYsRT3OMLtdP95vETzpuF5et1L3TDSe7SeAe5ziHvXdruTpN1 xYmBz+Zvry+PXNLGoUsFZs88NLNUqXaCANHblaA6Zx633liWdY4Ph56aBbqDfT1O 6i5ahPyjmfUxpiTS6VR6yQrqF3DG5mG+vfD/w7dbXdl6hGD7IGZySkah1GZyWrLV 45dNYVE7zEANhji2ISCqDWQgQcj1sImipqrSwgNnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvFYJVskDsVinZqByduMX/CpFmA4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkOTc0NzNmLTI2NWEtNDA2Mi1iYWI5LWFlZmFjYjBlNTFhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADPFdEwDQYJKoZIhvcNAQELBQADggEBABLr+gS6wwZ2jxTf9oxM8f3WK1p3 r/bmuD/rrcTzhcGvhRACAb4XJ+zkd4MCGjd8lZ4YnvEgWuyWFKGKlkih783KUsWE nXxK17u6ItvXXKvMqwNXASzpllj93TGHsj+2c3si0+t25eZsz+z2VmdKCYwvVNV/ UDUw4UpoqyC5i0/3nPfw1svlIkEE+5NHgTxtlyiNUsKq3kKj49gKEG7NZHdlmlfr ma4uh6/bRxVqazfTM8FYPAkVjK+EBJjydZ6pB1QdofoTN6s/Nhk/f2JiI14k+T17 PVBSI9vh4fSt7uGS1xKQCnDSOFjOr8wGouPmpWPkMBrdOfy77ugJD9k4ruc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:24 2025 by rpki-client