$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa File: 5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa (raw, json) Hash identifier: /38N/WOIv5koN6tj4YYwOtaffJfMc+Y/mDW3Rv4MYDo= Subject key identifier: 91:01:7C:69:42:A6:02:EE:94:FB:76:51:93:0A:09:66:AF:85:48:10 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40CF5793376E49FFBB46E9EC554DCB1BFF3A654F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa Signing time: Sat 02 Aug 2025 00:20:15 +0000 ROA not before: Sat 02 Aug 2025 00:20:15 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.20.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:cf:57:93:37:6e:49:ff:bb:46:e9:ec:55:4d:cb:1b:ff:3a:65:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:20:15 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=926398b5d3d5c0297cfdbe1158e8488b960c7b7c2423d312839b989bff8b3bd6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:7f:5e:4b:68:1d:79:e4:15:71:d3:a1:41: 75:4b:00:ac:a6:06:70:98:67:b8:aa:db:d9:ec:90: 75:39:8f:a3:1b:4c:55:92:6e:42:11:b5:ec:ac:76: 93:82:08:be:b7:68:08:93:2c:80:3e:1e:56:0f:22: 01:3e:85:20:c1:8c:76:8e:0c:34:4e:9a:32:52:b0: b6:48:a5:37:51:6b:b2:eb:72:6b:f6:14:4a:b5:8b: cb:ab:78:ae:78:3f:9c:b0:5b:13:33:99:b2:3a:33: 51:18:d9:b5:94:88:ca:36:cb:6f:33:11:27:82:45: b2:77:9e:c5:b6:ee:d7:00:60:b7:f4:97:8d:af:bf: 32:8f:05:0e:0f:f9:4d:f0:28:bd:f3:cc:22:0e:66: 91:a3:b3:71:51:14:f5:06:d7:bf:23:f0:5f:cb:d1: c1:c4:1d:c2:71:17:2f:4c:09:17:29:cd:a0:01:dc: f9:ab:c0:3b:ff:06:c6:e4:2f:f5:5d:72:7f:a4:63: ff:57:c6:cc:12:4f:a7:49:42:f2:33:27:6c:63:42: 9f:15:dd:ce:e0:94:1b:87:65:68:ce:9b:e5:13:4a: d6:4e:91:e0:b6:8d:b6:b2:f5:7b:1b:e7:d2:38:09: 40:80:29:3a:50:b6:a6:77:3b:b9:ba:f8:b1:00:ed: c7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:01:7C:69:42:A6:02:EE:94:FB:76:51:93:0A:09:66:AF:85:48:10 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.136.0/21 Signature Algorithm: sha256WithRSAEncryption ba:b5:88:ca:95:9e:d9:9f:3f:c5:04:cc:e0:80:6b:a8:16:15: 6e:7c:56:db:34:4c:4d:1a:a6:7b:ff:e5:f9:f4:f6:b0:1d:74: 3c:b3:c8:d7:09:b3:6f:cf:a0:48:10:8b:2b:32:86:4f:47:47: 1f:61:a1:cc:15:e4:0a:50:49:cf:ef:7f:20:f8:0c:5c:a6:0e: 9b:85:af:23:19:d4:8a:e0:ac:2b:55:b3:6d:e1:7c:98:8a:83: 3c:4e:86:cf:ac:74:c0:74:ae:55:9e:d4:35:3a:b4:ed:24:db: d4:68:42:c4:b0:24:1d:6f:57:26:b2:a3:8c:07:a2:6a:05:63: 1c:35:ca:5c:67:1c:cb:7c:94:d4:5b:ec:fc:15:61:70:d1:90: 4e:b5:65:78:a6:01:b5:69:ce:43:84:19:0f:53:c5:6b:3e:c4: f4:4d:7e:54:de:a3:50:cb:b9:6a:d4:f6:05:13:5c:b5:4d:f2: 3d:68:8e:31:e6:99:62:1a:61:10:aa:ce:9e:a1:2c:54:05:d6: fd:ef:50:39:08:9d:e3:a0:06:be:cd:92:2b:5b:8b:f6:c2:9c: 30:f0:25:8d:5d:10:89:c5:67:8a:37:fe:cb:41:90:77:ab:7a: a4:cc:da:a6:9b:43:a7:b6:b5:a6:bf:87:7e:23:fc:7e:af:d8: b5:af:22:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQM9XkzduSf+7RunsVU3LG/86ZU8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDAyMDE1WhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjYzOThiNWQzZDVjMDI5N2NmZGJlMTE1OGU4NDg4Yjk2 MGM3YjdjMjQyM2QzMTI4MzliOTg5YmZmOGIzYmQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN539eS2gdeeQVcdOhQXVLAKymBnCYZ7iq29nskHU5j6Mb TFWSbkIRteysdpOCCL63aAiTLIA+HlYPIgE+hSDBjHaODDROmjJSsLZIpTdRa7Lr cmv2FEq1i8ureK54P5ywWxMzmbI6M1EY2bWUiMo2y28zESeCRbJ3nsW27tcAYLf0 l42vvzKPBQ4P+U3wKL3zzCIOZpGjs3FRFPUG178j8F/L0cHEHcJxFy9MCRcpzaAB 3PmrwDv/BsbkL/Vdcn+kY/9XxswST6dJQvIzJ2xjQp8V3c7glBuHZWjOm+UTStZO keC2jbay9Xsb59I4CUCAKTpQtqZ3O7m6+LEA7cdDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkQF8aUKmAu6U+3ZRkwoJZq+FSBAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlYTdiYjk4LWZjN2ItNDU0NC1hODhjLTJhNmQyMmY5MmZkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANrFIgwDQYJKoZIhvcNAQELBQADggEBALq1iMqVntmfP8UEzOCAa6gWFW58 Vts0TE0apnv/5fn09rAddDyzyNcJs2/PoEgQiysyhk9HRx9hocwV5ApQSc/vfyD4 DFymDpuFryMZ1IrgrCtVs23hfJiKgzxOhs+sdMB0rlWe1DU6tO0k29RoQsSwJB1v Vyayo4wHomoFYxw1ylxnHMt8lNRb7PwVYXDRkE61ZXimAbVpzkOEGQ9TxWs+xPRN flTeo1DLuWrU9gUTXLVN8j1ojjHmmWIaYRCqzp6hLFQF1v3vUDkIneOgBr7Nkitb i/bCnDDwJY1dEInFZ4o3/stBkHereqTM2qabQ6e2taa/h34j/H6v2LWvIig= -----END CERTIFICATE-----Generated at Wed Aug 6 11:18:25 2025 by rpki-client