$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738b308f-965a-4ab8-a5bc-e6af6f74131b.roa File: 738b308f-965a-4ab8-a5bc-e6af6f74131b.roa (raw, json) Hash identifier: USwCtHHMvg07qXqGZxey47biZdo5ljuoDV+/7ju/mwo= Subject key identifier: 8F:A4:09:3F:FE:CB:94:6C:4D:D4:9C:17:9A:C1:FB:E2:91:1F:0E:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7806ED673CCDF5D8E5355BDAA02270A54A90D1F0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738b308f-965a-4ab8-a5bc-e6af6f74131b.roa Signing time: Fri 13 Jun 2025 00:11:09 +0000 ROA not before: Fri 13 Jun 2025 00:11:09 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 107.21.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:06:ed:67:3c:cd:f5:d8:e5:35:5b:da:a0:22:70:a5:4a:90:d1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 00:11:09 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=149c318c4e50d810dccb7a4620db7847a102631230bcfe21e3be90a02f1c410c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:e0:f7:63:ff:db:e5:2b:3b:22:f2:27:77: 58:16:97:b8:71:a7:25:d8:c4:3d:92:5e:b6:2b:d3: 02:92:e0:ae:41:04:ce:6d:80:00:54:cf:01:55:eb: 44:c1:ca:ea:ac:93:1b:46:2b:0c:07:5b:cb:60:c5: 2c:45:59:b0:c5:a8:80:c9:f1:de:9d:7c:82:6d:ef: c7:4b:f1:53:e5:ac:de:2c:d7:3f:1f:83:20:8d:7b: eb:ff:71:b0:0a:d3:88:a1:e8:02:d9:16:bf:21:cd: 09:33:60:fb:38:8b:4b:e1:eb:5a:0e:55:55:84:1a: 55:7c:0e:e5:48:28:2f:84:e5:43:a2:28:5e:13:68: b0:d5:d4:3b:ff:e1:a7:3e:58:37:19:92:b4:22:ff: 26:e4:1f:d9:50:a2:fa:10:31:2a:88:be:18:f9:c4: ea:7c:1b:d6:b4:27:87:5c:f0:76:61:d1:c5:7a:a7: 38:44:74:10:52:66:7c:79:7d:f2:f5:9c:f0:9a:e0: 7a:bb:34:68:56:38:a4:3c:23:d0:fa:47:28:53:42: 9a:40:02:90:d6:e6:0f:5e:9c:7d:26:d6:56:1c:16: 95:fe:b4:7c:21:08:32:0a:12:7e:35:08:9a:69:70: 5d:33:23:43:8f:1c:0b:84:54:9e:6f:3b:98:ee:d9: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A4:09:3F:FE:CB:94:6C:4D:D4:9C:17:9A:C1:FB:E2:91:1F:0E:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738b308f-965a-4ab8-a5bc-e6af6f74131b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.92.0/22 Signature Algorithm: sha256WithRSAEncryption c3:d4:45:7d:07:9d:3e:dc:aa:23:7e:bf:dd:a8:4a:b5:85:d5: 19:a4:9c:6f:18:72:cb:58:47:a7:b5:a5:a1:42:4d:5a:dc:e3: 69:34:eb:dc:51:fc:01:fe:08:ff:70:41:f0:73:e7:18:6c:db: 17:26:45:cf:0c:29:c9:9a:b2:31:2b:b3:39:ff:71:17:f4:6a: e7:c1:f8:6f:83:a8:7a:62:f4:34:cb:72:1f:d6:9f:ae:34:5f: 05:4e:f4:df:70:47:00:c1:7e:3d:8f:27:ac:aa:ab:e6:76:69: 6f:33:ec:44:e6:43:91:cd:6c:6a:3d:ad:2d:ea:f6:67:60:78: 15:bf:d4:be:43:7f:8f:8e:90:71:45:98:59:f2:5c:38:02:ff: 32:d1:3c:5d:0c:06:cc:24:bf:b1:fd:d2:f1:1a:8c:c1:29:36: 16:73:d3:f7:7a:c4:33:56:02:0a:24:a4:64:0a:49:86:65:ef: ee:69:51:62:e4:2d:25:25:b1:5f:11:de:54:2e:b4:e7:9c:9b: da:7f:3d:a5:d5:77:8e:96:8d:6e:aa:c6:e0:8c:96:63:21:2e: e3:54:ee:a7:69:bf:b9:34:e5:5e:f5:f3:e5:e2:c9:f3:d2:c6: 12:ce:14:be:1e:20:b1:ad:22:30:b7:b5:70:76:ec:9e:56:cf: 35:9c:de:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeAbtZzzN9djlNVvaoCJwpUqQ0fAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMDAxMTA5WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDljMzE4YzRlNTBkODEwZGNjYjdhNDYyMGRiNzg0N2Ex MDI2MzEyMzBiY2ZlMjFlM2JlOTBhMDJmMWM0MTBjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqauD3Y//b5Ss7IvInd1gWl7hxpyXYxD2SXrYr0wKS4K5B BM5tgABUzwFV60TByuqskxtGKwwHW8tgxSxFWbDFqIDJ8d6dfIJt78dL8VPlrN4s 1z8fgyCNe+v/cbAK04ih6ALZFr8hzQkzYPs4i0vh61oOVVWEGlV8DuVIKC+E5UOi KF4TaLDV1Dv/4ac+WDcZkrQi/ybkH9lQovoQMSqIvhj5xOp8G9a0J4dc8HZh0cV6 pzhEdBBSZnx5ffL1nPCa4Hq7NGhWOKQ8I9D6RyhTQppAApDW5g9enH0m1lYcFpX+ tHwhCDIKEn41CJppcF0zI0OPHAuEVJ5vO5ju2amhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUj6QJP/7LlGxN1JwXmsH74pEfDhgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzczOGIzMDhmLTk2NWEtNGFiOC1hNWJjLWU2YWY2Zjc0MTMxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJrFVwwDQYJKoZIhvcNAQELBQADggEBAMPURX0HnT7cqiN+v92oSrWF1Rmk nG8YcstYR6e1paFCTVrc42k069xR/AH+CP9wQfBz5xhs2xcmRc8MKcmasjErszn/ cRf0aufB+G+DqHpi9DTLch/Wn640XwVO9N9wRwDBfj2PJ6yqq+Z2aW8z7ETmQ5HN bGo9rS3q9mdgeBW/1L5Df4+OkHFFmFnyXDgC/zLRPF0MBswkv7H90vEajMEpNhZz 0/d6xDNWAgokpGQKSYZl7+5pUWLkLSUlsV8R3lQutOecm9p/PaXVd46WjW6qxuCM lmMhLuNU7qdpv7k05V718+XiyfPSxhLOFL4eILGtIjC3tXB27J5WzzWc3lQ= -----END CERTIFICATE-----Generated at Sat Jun 14 06:21:07 2025 by rpki-client