$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87aae395-beb6-4158-898d-1b8343392bd1.roa File: 87aae395-beb6-4158-898d-1b8343392bd1.roa (raw, json) Hash identifier: rp+vvxBAP0p4URChLDITpxyhYzQaKIzy3wZwhPDJcvs= Subject key identifier: 2C:F2:0C:28:35:7E:7E:C7:AC:94:34:F6:88:0E:0E:D2:C7:9E:E7:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31152D3639E1E38A67DC7401AF353B283FB4ED04 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87aae395-beb6-4158-898d-1b8343392bd1.roa Signing time: Sat 02 Aug 2025 00:21:44 +0000 ROA not before: Sat 02 Aug 2025 00:21:44 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.22.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:15:2d:36:39:e1:e3:8a:67:dc:74:01:af:35:3b:28:3f:b4:ed:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:21:44 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=0fa2a6999c5b2d0fdd7c5c77873c185ebd14ac084e237dc1d634e6e7098edb22, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:26:4f:15:ab:27:bc:6d:16:22:5a:6a:8b: 87:4e:6d:16:f9:5e:ee:ff:b7:23:a5:65:db:62:cf: e8:64:6e:3e:0d:8b:af:6b:ac:f9:27:c2:d8:d5:ea: 29:42:3e:d0:6e:ef:d4:84:eb:ab:db:39:f2:bb:0b: 27:3b:65:05:83:a0:6a:ad:37:58:27:43:b8:30:00: 4b:f9:f5:fc:b0:83:d8:0c:2d:31:05:b6:4f:7f:9f: e0:16:88:84:21:1e:92:3e:61:8e:c9:66:f8:64:bf: ee:02:37:5b:0f:d5:10:94:d7:dd:25:0f:44:04:e8: 34:d8:34:96:95:32:fd:ac:9f:15:e7:2a:44:15:e6: e6:d9:2f:37:6c:5d:a5:02:6b:0a:c7:8b:40:f9:57: 0f:bc:ff:71:5d:08:58:ca:d2:17:26:d7:43:4b:05: b9:d2:83:22:8a:74:0d:10:c6:35:d3:20:a1:3a:01: 1e:95:af:7f:f4:34:c9:df:57:9c:f4:38:80:6a:65: 4e:46:0b:ac:1c:3e:8d:a5:98:0e:71:b6:2f:34:f1: 17:af:10:a3:e2:ca:04:be:d5:17:2b:01:34:0e:db: 28:cc:7e:a1:ca:ff:7a:e1:59:e4:b9:8d:c1:6d:20: 93:2a:6b:21:1e:f5:04:25:ff:d3:09:cc:b1:69:ef: d3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F2:0C:28:35:7E:7E:C7:AC:94:34:F6:88:0E:0E:D2:C7:9E:E7:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87aae395-beb6-4158-898d-1b8343392bd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.22.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0e:ba:f2:f4:7b:80:83:95:f9:0a:6f:da:bc:a0:b2:83:d3:ed: 87:26:7d:61:a7:a1:41:19:61:6c:dd:0f:0d:e0:cd:64:89:81: 4f:51:a7:3f:c5:73:fa:d9:68:9b:1a:34:fd:57:8b:66:1e:b0: 30:fc:5c:94:19:a3:66:a8:ea:d6:a1:78:4b:61:32:2e:2c:94: 96:e8:11:3f:07:cc:84:21:4f:7a:14:95:05:ec:1b:d6:23:45: ce:a1:fe:70:5d:1d:a2:15:1b:b2:d0:a0:43:f3:d5:cb:b9:b6: 83:e6:36:33:d0:b1:3c:4e:1c:23:e6:16:8e:2f:f5:6b:ed:16: a5:06:ac:bc:ca:5b:c5:ba:bd:3c:eb:46:8e:c5:34:43:ad:47: 36:70:ff:32:16:ea:57:77:c9:4b:2e:c5:da:18:49:d3:d3:70: 84:16:fe:b8:ec:9b:21:52:23:1a:f8:36:cf:a3:76:97:0b:9f: 68:f3:ef:c9:36:76:16:08:9e:c6:22:a0:91:8c:9b:38:ec:a9: eb:e1:50:b7:8f:53:43:de:05:3a:64:3e:48:51:d5:77:f7:7a: 4b:41:b4:bd:36:89:12:e6:48:ea:fe:b7:06:9a:81:cc:ff:f2: bd:42:cc:28:2e:b5:b1:6f:54:c5:6c:93:1a:25:ff:d4:bc:52: eb:40:73:d7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMRUtNjnh44pn3HQBrzU7KD+07QQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDAyMTQ0WhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmEyYTY5OTljNWIyZDBmZGQ3YzVjNzc4NzNjMTg1ZWJk MTRhYzA4NGUyMzdkYzFkNjM0ZTZlNzA5OGVkYjIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3ZyZPFasnvG0WIlpqi4dObRb5Xu7/tyOlZdtiz+hkbj4N i69rrPknwtjV6ilCPtBu79SE66vbOfK7Cyc7ZQWDoGqtN1gnQ7gwAEv59fywg9gM LTEFtk9/n+AWiIQhHpI+YY7JZvhkv+4CN1sP1RCU190lD0QE6DTYNJaVMv2snxXn KkQV5ubZLzdsXaUCawrHi0D5Vw+8/3FdCFjK0hcm10NLBbnSgyKKdA0QxjXTIKE6 AR6Vr3/0NMnfV5z0OIBqZU5GC6wcPo2lmA5xti808RevEKPiygS+1RcrATQO2yjM fqHK/3rhWeS5jcFtIJMqayEe9QQl/9MJzLFp79PhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQULPIMKDV+fseslDT2iA4O0see5zkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg3YWFlMzk1LWJlYjYtNDE1OC04OThkLTFiODM0MzM5MmJkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBrFjANBgkqhkiG9w0BAQsFAAOCAQEADrry9HuAg5X5Cm/avKCyg9PthyZ9 YaehQRlhbN0PDeDNZImBT1GnP8Vz+tlomxo0/VeLZh6wMPxclBmjZqjq1qF4S2Ey LiyUlugRPwfMhCFPehSVBewb1iNFzqH+cF0dohUbstCgQ/PVy7m2g+Y2M9CxPE4c I+YWji/1a+0WpQasvMpbxbq9POtGjsU0Q61HNnD/MhbqV3fJSy7F2hhJ09NwhBb+ uOybIVIjGvg2z6N2lwufaPPvyTZ2FgiexiKgkYybOOyp6+FQt49TQ94FOmQ+SFHV d/d6S0G0vTaJEuZI6v63BpqBzP/yvULMKC61sW9UxWyTGiX/1LxS60Bz1w== -----END CERTIFICATE-----Generated at Sat Aug 9 22:45:56 2025 by rpki-client