$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee7e467f-8bfe-4d54-afbe-25646042edbf.roa File: ee7e467f-8bfe-4d54-afbe-25646042edbf.roa (raw, json) Hash identifier: cARZW/NlyJs+1TtK2ATF9kie73Uxv5bWCDLqzrzbeVc= Subject key identifier: 3F:E4:81:6E:56:6B:E2:6A:BF:05:AD:5B:21:BC:F6:DB:F5:58:25:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 8BB1B0A4653AA8E09C6333D2C562F17698FC77 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee7e467f-8bfe-4d54-afbe-25646042edbf.roa Signing time: Mon 19 May 2025 16:41:35 +0000 ROA not before: Mon 19 May 2025 16:41:35 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.22.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8b:b1:b0:a4:65:3a:a8:e0:9c:63:33:d2:c5:62:f1:76:98:fc:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:41:35 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=04034758ec2118970a31f2a63b8fe4c018bfb2b2b69d76af595c57cfdbd5f4a0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d1:1f:ac:de:52:90:1c:66:b4:13:8f:6e:26: 57:c2:b6:c6:0f:96:a1:8d:db:32:a0:7a:a9:c5:a7: d4:1b:89:67:50:72:d0:69:ca:7b:f9:b8:94:69:43: ce:d1:39:98:8e:ec:a0:03:a5:42:33:1c:b2:ed:77: 49:9e:3f:e7:d4:f5:aa:73:7c:7e:10:09:44:ee:2a: 5d:a5:3e:62:0a:0d:95:f7:28:15:d1:8f:00:e9:b1: 42:52:17:83:17:c6:bd:68:59:65:3a:90:2b:d1:92: c3:1e:e2:fd:a0:91:d9:05:0c:50:13:f7:36:2d:ca: 7f:35:9c:03:8d:1c:bd:05:ea:62:25:66:69:04:90: 3d:87:b4:a4:bf:9e:2b:96:3c:65:ed:3f:df:3c:c0: 86:50:ce:04:be:3f:a2:f0:bb:b7:e6:b0:58:7c:28: d0:4d:9a:e4:9e:ed:d1:6c:65:37:76:8b:c4:2b:72: da:02:95:b3:b4:30:6f:c8:d2:40:13:a7:a0:1c:3f: 04:9d:5c:7f:17:5d:7f:a4:ba:ba:9a:c7:c6:1c:77: 7f:e3:cd:a4:d8:a1:24:46:27:e2:a1:1d:ae:61:21: 1b:c0:6d:05:3c:8f:e2:71:75:93:8e:56:8b:42:50: 1d:b6:4a:b3:2f:81:2e:5f:56:8c:d2:27:fb:bb:3e: 1e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E4:81:6E:56:6B:E2:6A:BF:05:AD:5B:21:BC:F6:DB:F5:58:25:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee7e467f-8bfe-4d54-afbe-25646042edbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.22.128.0/20 Signature Algorithm: sha256WithRSAEncryption 75:e5:84:0c:95:db:1c:94:23:3a:de:c6:5c:39:a3:d0:13:9e: 5d:47:b7:81:6b:9f:73:b5:d9:48:05:bd:16:69:08:23:22:bc: b1:28:2c:78:c0:d2:63:54:4d:1a:8f:42:7b:b1:57:f5:02:b8: 79:18:6f:3a:98:87:c9:2b:c5:e9:dd:5c:54:53:96:b3:57:4d: a4:52:ef:1e:3c:d8:8d:fc:c8:46:32:1b:40:6d:82:e1:4d:54: 06:e0:57:6e:ff:9e:28:7b:0d:62:af:b7:d4:65:80:1c:f1:2b: 05:48:b9:25:b9:08:24:8e:ab:c0:ed:7a:c2:75:c4:01:96:3b: 02:29:b5:f2:7d:ed:d0:0d:bc:cf:d4:d2:a1:98:e3:75:3b:24: 6b:d6:f6:e4:f0:04:d4:e9:27:53:33:b2:f0:11:8d:56:72:d8: e3:83:4f:ba:dc:bb:8e:cf:53:92:30:85:3b:67:dd:dc:ac:12: 43:aa:61:de:c4:db:5c:49:2e:1c:97:e2:86:67:9c:aa:d1:ea: 7a:8b:91:3e:09:24:fa:a3:88:bd:3b:af:97:61:e0:29:18:af: 44:10:8e:a1:52:3e:99:a1:ee:07:3f:92:82:fd:14:97:c3:5f: 04:22:46:fd:dd:2b:a0:d5:60:32:a2:46:20:55:29:4b:66:86: ce:62:39:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAIuxsKRlOqjgnGMz0sVi8XaY/HcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTY0MTM1WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDAzNDc1OGVjMjExODk3MGEzMWYyYTYzYjhmZTRjMDE4 YmZiMmIyYjY5ZDc2YWY1OTVjNTdjZmRiZDVmNGEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX0R+s3lKQHGa0E49uJlfCtsYPlqGN2zKgeqnFp9QbiWdQ ctBpynv5uJRpQ87ROZiO7KADpUIzHLLtd0meP+fU9apzfH4QCUTuKl2lPmIKDZX3 KBXRjwDpsUJSF4MXxr1oWWU6kCvRksMe4v2gkdkFDFAT9zYtyn81nAONHL0F6mIl ZmkEkD2HtKS/niuWPGXtP988wIZQzgS+P6Lwu7fmsFh8KNBNmuSe7dFsZTd2i8Qr ctoClbO0MG/I0kATp6AcPwSdXH8XXX+kurqax8Ycd3/jzaTYoSRGJ+KhHa5hIRvA bQU8j+JxdZOOVotCUB22SrMvgS5fVozSJ/u7Ph7BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP+SBblZr4mq/Ba1bIbz22/VYJfgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VlN2U0NjdmLThiZmUtNGQ1NC1hZmJlLTI1NjQ2MDQyZWRiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARrFoAwDQYJKoZIhvcNAQELBQADggEBAHXlhAyV2xyUIzrexlw5o9ATnl1H t4Frn3O12UgFvRZpCCMivLEoLHjA0mNUTRqPQnuxV/UCuHkYbzqYh8krxendXFRT lrNXTaRS7x482I38yEYyG0BtguFNVAbgV27/nih7DWKvt9RlgBzxKwVIuSW5CCSO q8DtesJ1xAGWOwIptfJ97dANvM/U0qGY43U7JGvW9uTwBNTpJ1MzsvARjVZy2OOD T7rcu47PU5IwhTtn3dysEkOqYd7E21xJLhyX4oZnnKrR6nqLkT4JJPqjiL07r5dh 4CkYr0QQjqFSPpmh7gc/koL9FJfDXwQiRv3dK6DVYDKiRiBVKUtmhs5iOXM= -----END CERTIFICATE-----Generated at Sun Jun 1 04:44:55 2025 by rpki-client