$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72219ba2-8eee-4c34-8224-a8f5ccc253fc.roa File: 72219ba2-8eee-4c34-8224-a8f5ccc253fc.roa (raw, json) Hash identifier: xQVjMn6Ig1JvJCP2N95l0dZw0exIBrvuvRCC7qu7CI0= Subject key identifier: FB:76:BB:6A:9B:E9:A7:56:37:80:73:52:FB:6E:F7:87:B0:F6:A0:5B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 542315B33034C8CE0734E8164300C8C774DEE1EC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72219ba2-8eee-4c34-8224-a8f5ccc253fc.roa Signing time: Fri 13 Jun 2025 00:41:11 +0000 ROA not before: Fri 13 Jun 2025 00:41:11 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 107.20.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:23:15:b3:30:34:c8:ce:07:34:e8:16:43:00:c8:c7:74:de:e1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 00:41:11 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=bec85006cdaf7cd3eca011de2e66dc00cbef3e5d63797adac69eb27fe366de55, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:74:5f:b0:ce:75:31:53:2c:51:3b:e8:fa: c2:4e:17:75:44:bb:bf:28:2b:6d:c5:c9:7b:bb:35: f1:82:b4:03:eb:94:3b:7e:c4:11:db:9d:af:c3:b8: 84:58:40:7b:39:86:10:ea:4c:bd:05:79:e8:4d:22: 91:3a:17:fc:56:cd:6c:4e:aa:be:04:87:28:52:67: 64:df:43:4a:ef:52:6c:f9:74:a1:a0:53:9e:33:64: bf:52:98:00:32:fa:37:5f:1c:33:9e:89:4b:ce:2b: 08:2b:b1:40:44:9b:d8:2f:b6:a0:bd:e7:35:f8:33: 40:12:38:cd:7b:bd:50:12:77:12:d7:3a:2d:f1:a5: bb:41:09:ea:88:13:13:76:c6:b8:59:5c:56:a8:87: 01:78:73:aa:4d:bd:d6:e0:26:37:54:a7:54:f0:44: 56:34:98:09:4d:94:c5:80:92:04:1f:10:02:ea:54: 63:49:e4:9f:ac:ab:7c:81:18:a9:32:69:ff:33:50: 8b:15:26:5c:40:a1:b3:e5:86:d9:8a:cd:f5:fa:96: eb:e0:60:a6:bd:61:d0:91:d7:2d:93:f4:38:c4:fd: aa:79:94:68:b8:16:90:6e:40:d6:57:18:92:60:b4: 48:b2:77:90:a9:9d:ad:9d:69:75:56:65:1b:14:44: 71:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:76:BB:6A:9B:E9:A7:56:37:80:73:52:FB:6E:F7:87:B0:F6:A0:5B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72219ba2-8eee-4c34-8224-a8f5ccc253fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.132.0/22 Signature Algorithm: sha256WithRSAEncryption be:20:98:1c:d3:8b:93:9b:bc:c9:5f:ff:7d:4b:37:72:f4:26: 6f:a1:92:d6:31:24:36:d3:61:65:3c:c6:17:2a:1c:c0:58:20: ee:65:8c:9c:43:f1:af:2a:14:d5:d9:dc:47:24:6d:80:21:03: a9:a2:ca:ea:34:5e:ff:76:c4:46:f4:27:c1:13:e0:28:3d:ec: 18:ea:6b:fd:85:73:c0:4c:e9:24:76:fa:8b:0d:f5:37:fe:3d: f2:13:88:97:93:08:66:90:76:6f:99:d3:c4:6b:00:97:98:59: 5d:b7:5d:73:8b:e3:a9:16:96:8d:53:94:fe:8d:66:ce:9a:86: 7e:ea:75:ea:81:05:42:a4:93:ab:13:ea:95:12:2e:5a:ae:26: 43:c4:f9:dd:68:9e:9f:e2:26:45:ec:13:f1:2a:0d:f5:86:a1: 5e:74:7a:a6:e6:05:35:ea:a2:c3:b1:c6:2a:8a:c7:7c:3b:ad: 74:16:e5:d4:da:06:2a:90:93:ec:d0:57:15:47:36:57:91:ac: a7:ad:a0:20:e5:bf:f6:54:73:43:d1:79:5f:1a:1c:19:d3:e2: 2a:f1:b9:5b:4b:b1:35:59:ae:de:17:98:ce:88:ac:11:9a:18: 79:0c:59:8f:72:1e:8b:ed:36:a1:bc:5d:d2:f1:8c:4b:07:30: b6:5f:04:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVCMVszA0yM4HNOgWQwDIx3Te4ewwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMDA0MTExWhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZWM4NTAwNmNkYWY3Y2QzZWNhMDExZGUyZTY2ZGMwMGNi ZWYzZTVkNjM3OTdhZGFjNjllYjI3ZmUzNjZkZTU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDanRfsM51MVMsUTvo+sJOF3VEu78oK23FyXu7NfGCtAPr lDt+xBHbna/DuIRYQHs5hhDqTL0FeehNIpE6F/xWzWxOqr4EhyhSZ2TfQ0rvUmz5 dKGgU54zZL9SmAAy+jdfHDOeiUvOKwgrsUBEm9gvtqC95zX4M0ASOM17vVASdxLX Oi3xpbtBCeqIExN2xrhZXFaohwF4c6pNvdbgJjdUp1TwRFY0mAlNlMWAkgQfEALq VGNJ5J+sq3yBGKkyaf8zUIsVJlxAobPlhtmKzfX6luvgYKa9YdCR1y2T9DjE/ap5 lGi4FpBuQNZXGJJgtEiyd5Cpna2daXVWZRsURHGbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+3a7apvpp1Y3gHNS+273h7D2oFswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcyMjE5YmEyLThlZWUtNGMzNC04MjI0LWE4ZjVjY2MyNTNmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJrFIQwDQYJKoZIhvcNAQELBQADggEBAL4gmBzTi5ObvMlf/31LN3L0Jm+h ktYxJDbTYWU8xhcqHMBYIO5ljJxD8a8qFNXZ3EckbYAhA6miyuo0Xv92xEb0J8ET 4Cg97Bjqa/2Fc8BM6SR2+osN9Tf+PfITiJeTCGaQdm+Z08RrAJeYWV23XXOL46kW lo1TlP6NZs6ahn7qdeqBBUKkk6sT6pUSLlquJkPE+d1onp/iJkXsE/EqDfWGoV50 eqbmBTXqosOxxiqKx3w7rXQW5dTaBiqQk+zQVxVHNleRrKetoCDlv/ZUc0PReV8a HBnT4irxuVtLsTVZrt4XmM6IrBGaGHkMWY9yHovtNqG8XdLxjEsHMLZfBCs= -----END CERTIFICATE-----Generated at Sat Jun 14 07:11:48 2025 by rpki-client