$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a56c9356-f41a-4cdc-9b12-5bd63d1b7e0d.roa File: a56c9356-f41a-4cdc-9b12-5bd63d1b7e0d.roa (raw, json) Hash identifier: 0sbGUgmPMdlst7ize+TsgWlr6kIONrB7k83FBYafZGI= Subject key identifier: A2:84:3C:C4:70:92:46:38:D1:87:17:9E:DB:7C:2D:08:7D:EE:3C:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35B4652B625E6D2B307681E5A200332691E1BC87 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a56c9356-f41a-4cdc-9b12-5bd63d1b7e0d.roa Signing time: Fri 13 Jun 2025 00:21:14 +0000 ROA not before: Fri 13 Jun 2025 00:21:14 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 107.20.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b4:65:2b:62:5e:6d:2b:30:76:81:e5:a2:00:33:26:91:e1:bc:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 00:21:14 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=cd1303284a365771337b7cf50263fe3166ee9c61501f45acc163c8db0b5a6fa1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d6:60:fe:4a:ca:6f:2a:e3:88:11:5d:aa:79: 49:08:09:ce:56:53:b0:bd:a3:20:68:ad:e6:27:32: a5:78:3e:01:7f:75:5a:a6:49:25:27:bc:eb:a6:41: f6:c6:69:6c:e6:b8:e1:52:29:dd:e8:ce:67:66:81: 00:3b:03:7c:a9:b2:59:e1:67:2e:97:ac:f2:85:62: 08:5e:f6:8b:db:a5:ec:ad:3d:5b:d7:d0:3e:03:c4: 8c:ee:c3:5e:37:59:76:98:58:2b:c6:57:e3:c9:a2: 82:37:15:34:ea:c1:b8:d4:23:76:39:a9:8c:c4:01: 14:d8:15:6b:0d:d8:a2:dd:99:1d:07:63:0c:ee:fb: 7f:93:b4:f7:63:4c:0c:e7:39:cd:5c:57:b2:70:1c: 19:96:67:e2:ad:4b:13:f7:42:56:aa:8f:75:4d:99: d2:f1:97:9e:fb:e5:3a:9c:a9:7f:6d:fa:ea:ef:b7: a7:e5:cc:2d:71:7b:35:d4:b0:84:6c:62:5b:fe:3d: 9c:7b:62:c2:60:22:a2:97:ae:51:ca:36:71:a3:51: e1:30:30:f5:8a:9c:9c:df:36:0c:21:1a:39:aa:e5: fc:68:bb:00:d7:97:34:ae:12:da:8a:d1:bf:51:68: 7c:d5:e1:0e:14:76:61:8b:3f:cc:d0:03:23:7e:cb: 63:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:84:3C:C4:70:92:46:38:D1:87:17:9E:DB:7C:2D:08:7D:EE:3C:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a56c9356-f41a-4cdc-9b12-5bd63d1b7e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.0.0/17 Signature Algorithm: sha256WithRSAEncryption d2:1d:ff:0f:b9:9b:32:ae:c9:f2:ca:67:c0:53:29:34:5d:65: ce:4d:28:69:ba:17:1e:79:24:14:98:15:b9:1b:52:83:96:95: 37:8c:e7:cb:57:80:38:6d:e0:ce:c4:b4:56:8c:6e:1b:74:cb: ac:b2:87:f7:f9:d2:75:2c:5e:0b:a8:5c:2b:b7:2c:e6:15:31: 72:fc:2c:30:b3:62:42:3b:e2:ee:1f:5f:84:4c:5c:e4:4b:82: 4e:a7:ae:83:3c:69:21:30:91:42:7f:0d:3b:bd:cc:92:64:14: e6:ca:f1:eb:d1:6a:90:3e:93:d2:28:08:e1:04:7e:40:38:ba: 4f:b4:13:8f:ae:c9:c9:bd:75:6b:5d:bb:d5:68:3c:02:5d:72: fe:14:c6:70:3f:2f:1b:a0:ec:e2:0f:e0:3c:c9:f9:34:f9:7a: 73:11:59:ff:fd:f1:6a:b7:07:6c:b7:7c:ed:8d:25:4d:fa:19: dd:a0:58:a4:e0:ce:a0:63:01:d9:f6:11:c6:5a:c0:29:d1:ce: 0e:7a:22:68:1f:8a:9e:90:3b:e0:3d:a8:5e:8d:87:d8:05:ec: 09:b6:a7:0d:1e:6a:fe:5c:c3:a7:6e:ea:04:d9:b8:22:2f:e4: 0e:0b:dc:a5:ff:35:20:3f:d0:d9:02:db:a4:82:1d:a2:14:8a: f0:e9:5b:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNbRlK2JebSswdoHlogAzJpHhvIcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMDAyMTE0WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDEzMDMyODRhMzY1NzcxMzM3YjdjZjUwMjYzZmUzMTY2 ZWU5YzYxNTAxZjQ1YWNjMTYzYzhkYjBiNWE2ZmExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDm1mD+SspvKuOIEV2qeUkICc5WU7C9oyBoreYnMqV4PgF/ dVqmSSUnvOumQfbGaWzmuOFSKd3ozmdmgQA7A3ypslnhZy6XrPKFYghe9ovbpeyt PVvX0D4DxIzuw143WXaYWCvGV+PJooI3FTTqwbjUI3Y5qYzEARTYFWsN2KLdmR0H Ywzu+3+TtPdjTAznOc1cV7JwHBmWZ+KtSxP3Qlaqj3VNmdLxl5775TqcqX9t+urv t6flzC1xezXUsIRsYlv+PZx7YsJgIqKXrlHKNnGjUeEwMPWKnJzfNgwhGjmq5fxo uwDXlzSuEtqK0b9RaHzV4Q4UdmGLP8zQAyN+y2PlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUooQ8xHCSRjjRhxee23wtCH3uPOkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1NmM5MzU2LWY0MWEtNGNkYy05YjEyLTViZDYzZDFiN2UwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdrFAAwDQYJKoZIhvcNAQELBQADggEBANId/w+5mzKuyfLKZ8BTKTRdZc5N KGm6Fx55JBSYFbkbUoOWlTeM58tXgDht4M7EtFaMbht0y6yyh/f50nUsXguoXCu3 LOYVMXL8LDCzYkI74u4fX4RMXORLgk6nroM8aSEwkUJ/DTu9zJJkFObK8evRapA+ k9IoCOEEfkA4uk+0E4+uycm9dWtdu9VoPAJdcv4UxnA/Lxug7OIP4DzJ+TT5enMR Wf/98Wq3B2y3fO2NJU36Gd2gWKTgzqBjAdn2EcZawCnRzg56Imgfip6QO+A9qF6N h9gF7Am2pw0eav5cw6du6gTZuCIv5A4L3KX/NSA/0NkC26SCHaIUivDpW6M= -----END CERTIFICATE-----Generated at Sat Jun 14 06:30:32 2025 by rpki-client