$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87aae395-beb6-4158-898d-1b8343392bd1.roa File: 87aae395-beb6-4158-898d-1b8343392bd1.roa (raw, json) Hash identifier: YkkRgAdjInD8u0MMuqKxyARAVp2e2ZZRczrUF6b+v/4= Subject key identifier: E1:64:D3:D4:A1:E6:B8:5C:A6:6D:EF:BE:EA:3F:72:13:45:87:DF:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 14A0BF9EE67FC8F888A2B40D5FA55912C55E98DF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87aae395-beb6-4158-898d-1b8343392bd1.roa Signing time: Fri 13 Jun 2025 15:01:08 +0000 ROA not before: Fri 13 Jun 2025 15:01:08 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.22.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a0:bf:9e:e6:7f:c8:f8:88:a2:b4:0d:5f:a5:59:12:c5:5e:98:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 15:01:08 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=be5ea3a2432cf83d1a1adcf70c9e60d900adc75a6b5b456219be86cca3ee0f62, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3c:4a:d4:0a:75:3b:03:64:e3:7f:ed:d6:7c: d5:f3:2c:f5:36:98:c3:37:78:45:36:99:47:d0:ff: 82:e7:84:e9:80:47:af:b7:f6:32:8e:3b:d9:66:6b: 1a:b3:3a:dc:bb:9e:6c:a1:39:15:2b:88:34:2f:9b: 06:c8:fb:e2:b3:c0:89:00:9e:70:86:c2:85:38:37: b1:f7:f4:2e:df:8f:1e:8b:4c:57:37:42:5a:66:fc: 01:24:87:82:5a:78:cb:d7:11:76:ed:e0:40:00:d5: d4:8f:d4:76:14:ff:16:75:cb:ee:c5:98:75:97:13: 70:ca:fd:9d:0a:52:65:07:48:aa:52:94:66:3b:ce: 2e:bd:d3:d7:70:b1:0d:58:5f:44:40:37:9e:f0:34: 76:70:80:d4:b6:05:4b:a5:9e:73:ea:30:77:d2:4c: 88:a4:09:e7:f5:9f:8c:62:cc:03:e0:fe:38:34:98: fa:ab:63:e3:2e:6e:6d:07:ae:29:2d:4b:b4:48:2c: f6:cb:54:93:50:e7:da:55:3e:2c:21:63:0d:39:4a: 8e:60:8b:c4:9c:fd:64:fb:77:22:95:b2:ef:41:d7: e3:70:c3:48:ea:48:2d:0f:19:80:92:0b:2d:31:1f: 3f:8c:0a:97:9d:7f:de:84:f1:eb:89:96:d3:4c:15: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:64:D3:D4:A1:E6:B8:5C:A6:6D:EF:BE:EA:3F:72:13:45:87:DF:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87aae395-beb6-4158-898d-1b8343392bd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.22.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0e:9d:ff:c1:63:b8:f2:ea:80:e6:4b:97:02:36:42:02:d9:ee: 45:e6:7d:3c:80:13:5b:a8:83:98:74:7a:de:51:d8:0d:50:96: 99:0e:22:57:2e:e0:d9:4a:cb:e9:b2:05:50:9c:42:6f:96:91: e5:9a:a1:a4:82:1c:a2:f8:48:81:b6:a6:e6:65:dd:10:e9:48: 15:af:ea:af:b5:09:d7:3d:8b:0a:00:0e:51:88:3c:7f:68:27: fe:9f:95:db:87:c5:15:b9:e0:e6:de:f8:70:30:5b:83:28:e3: 9c:eb:d7:f5:e1:ad:85:a2:94:ab:77:31:8f:72:36:29:2d:07: 9b:d0:26:30:c6:1b:e2:f2:1d:5b:c9:39:25:4c:81:b8:4d:cd: 94:66:c9:a6:a0:04:82:a1:8e:8b:82:b0:cc:05:05:e1:2f:17: f2:a0:22:6a:6a:59:de:39:41:b5:b7:fc:1c:e7:f8:86:fd:48: 2a:60:5c:78:8a:e7:4f:97:d2:2c:cc:0f:15:c5:26:e2:59:db: c5:14:2e:43:4d:af:af:84:56:6c:b0:fb:61:4d:9e:26:1c:af: 83:ae:57:3b:4f:c6:15:a8:e4:7c:47:4f:77:26:00:7e:e4:83: 93:86:98:3e:47:18:f4:d3:f6:b7:61:cb:8f:3c:0e:ba:e4:35: 4a:dd:17:ed -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFKC/nuZ/yPiIorQNX6VZEsVemN8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTUwMTA4WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTVlYTNhMjQzMmNmODNkMWExYWRjZjcwYzllNjBkOTAw YWRjNzVhNmI1YjQ1NjIxOWJlODZjY2EzZWUwZjYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbPErUCnU7A2Tjf+3WfNXzLPU2mMM3eEU2mUfQ/4LnhOmA R6+39jKOO9lmaxqzOty7nmyhORUriDQvmwbI++KzwIkAnnCGwoU4N7H39C7fjx6L TFc3Qlpm/AEkh4JaeMvXEXbt4EAA1dSP1HYU/xZ1y+7FmHWXE3DK/Z0KUmUHSKpS lGY7zi6909dwsQ1YX0RAN57wNHZwgNS2BUulnnPqMHfSTIikCef1n4xizAPg/jg0 mPqrY+Mubm0HriktS7RILPbLVJNQ59pVPiwhYw05So5gi8Sc/WT7dyKVsu9B1+Nw w0jqSC0PGYCSCy0xHz+MCpedf96E8euJltNMFRSFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU4WTT1KHmuFymbe++6j9yE0WH35EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg3YWFlMzk1LWJlYjYtNDE1OC04OThkLTFiODM0MzM5MmJkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBrFjANBgkqhkiG9w0BAQsFAAOCAQEADp3/wWO48uqA5kuXAjZCAtnuReZ9 PIATW6iDmHR63lHYDVCWmQ4iVy7g2UrL6bIFUJxCb5aR5ZqhpIIcovhIgbam5mXd EOlIFa/qr7UJ1z2LCgAOUYg8f2gn/p+V24fFFbng5t74cDBbgyjjnOvX9eGthaKU q3cxj3I2KS0Hm9AmMMYb4vIdW8k5JUyBuE3NlGbJpqAEgqGOi4KwzAUF4S8X8qAi ampZ3jlBtbf8HOf4hv1IKmBceIrnT5fSLMwPFcUm4lnbxRQuQ02vr4RWbLD7YU2e Jhyvg65XO0/GFajkfEdPdyYAfuSDk4aYPkcY9NP2t2HLjzwOuuQ1St0X7Q== -----END CERTIFICATE-----Generated at Thu Jun 19 09:53:58 2025 by rpki-client