$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b077c7f9-666e-471a-9d7f-878e8767a601.roa File: b077c7f9-666e-471a-9d7f-878e8767a601.roa (raw, json) Hash identifier: gKt/Ud6EMStdWEB2a0BV34dksDVkBJU5bV8/yvemZKA= Subject key identifier: 21:EE:F6:62:CF:38:8A:BF:7D:BC:89:FA:DC:C7:93:A4:FF:50:0F:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 265976A435A4E9B3A4EA8D15F20B4A4F6BB06DCE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b077c7f9-666e-471a-9d7f-878e8767a601.roa Signing time: Fri 13 Jun 2025 15:01:05 +0000 ROA not before: Fri 13 Jun 2025 15:01:05 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.20.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:59:76:a4:35:a4:e9:b3:a4:ea:8d:15:f2:0b:4a:4f:6b:b0:6d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 15:01:05 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=951cc6353d1bb3aed4411d4c63c633b3a5183246dc804c0b30b4b254e5a9df1e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:83:eb:28:35:79:9a:dc:c7:a3:f9:96:de:e0: c4:1c:78:90:d5:b1:59:c0:a8:5f:ea:42:1b:91:5f: 69:2b:f1:f4:45:a8:10:3b:12:82:9c:af:a6:2f:60: 1e:0d:d2:0c:09:60:39:5d:0d:13:8e:a5:e3:58:cf: 43:42:0e:57:2a:46:cb:d7:e2:85:07:d9:bb:48:b9: ff:de:02:1c:09:4c:70:26:7b:f0:d1:f8:db:62:70: 29:ff:17:e2:d6:4b:92:1e:b3:f7:91:0d:a0:ba:4e: a0:a4:ac:57:7b:a6:a1:ff:0c:cb:c2:93:7e:e6:b8: a4:17:7f:b3:6b:2c:1c:af:b8:9b:84:98:57:dc:e1: 5d:1a:76:20:bd:30:cc:30:79:15:66:74:1c:8d:b6: 8b:ca:f0:db:c0:72:5e:79:a6:ce:5e:e1:d6:ec:42: e3:ca:d2:d3:27:77:6d:1e:44:54:bd:41:c2:72:e1: 4d:2a:e3:87:79:30:36:f2:b2:70:73:e1:32:63:64: f5:48:0b:89:33:46:5b:33:1b:1a:d9:74:f7:e6:fc: 3f:03:80:b5:83:35:4c:b3:c3:ab:84:bc:08:d5:7d: 7a:dd:e6:f3:75:3b:7d:22:c3:da:0c:52:8c:05:c9: 7a:fd:3a:47:22:0a:2a:0a:09:5f:44:9e:49:a1:c7: a9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EE:F6:62:CF:38:8A:BF:7D:BC:89:FA:DC:C7:93:A4:FF:50:0F:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b077c7f9-666e-471a-9d7f-878e8767a601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4d:d0:9c:c9:f6:29:f4:f0:b0:fb:0c:bc:29:47:57:ed:7d:da: 69:c7:48:e7:43:86:9c:eb:61:27:62:7a:e5:9b:10:ea:08:8a: c5:ce:bd:df:02:49:96:b2:55:cf:05:0e:30:5d:13:66:7a:98: 29:03:8c:97:ff:0e:5e:12:16:ef:3f:99:00:36:96:73:e2:7e: 48:32:2a:f8:f4:9d:5d:ff:9b:ee:76:af:71:b8:d5:4e:44:a9: 01:9f:5b:99:8d:63:79:7d:92:d8:63:4e:8e:ad:7b:55:81:16: 39:53:81:fc:01:cc:13:20:aa:85:a2:5d:58:11:51:12:1e:2c: fb:b6:0b:d1:30:c1:5e:1f:ae:7c:ca:55:30:bf:a8:d3:73:3a: 2a:e7:e6:14:51:94:fa:96:40:5f:fe:3c:c6:5d:e2:13:d3:82: b0:31:5b:79:82:fc:20:c7:cf:35:74:a3:99:7a:4e:92:5a:1c: 56:77:15:f4:f4:c5:32:e0:6e:54:37:eb:78:e7:44:ae:36:4a: 75:20:ca:cf:c6:82:f7:fe:d1:f2:c8:1f:9f:93:7d:99:58:d0: cf:5d:d5:bb:17:ac:15:4e:1b:0b:b7:e9:a0:df:c2:31:ea:a7: 2c:a2:fe:9e:9e:52:5e:a5:69:6b:de:76:65:73:25:4d:18:13: ea:39:09:08 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJll2pDWk6bOk6o0V8gtKT2uwbc4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTUwMTA1WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTFjYzYzNTNkMWJiM2FlZDQ0MTFkNGM2M2M2MzNiM2E1 MTgzMjQ2ZGM4MDRjMGIzMGI0YjI1NGU1YTlkZjFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCig+soNXma3Mej+Zbe4MQceJDVsVnAqF/qQhuRX2kr8fRF qBA7EoKcr6YvYB4N0gwJYDldDROOpeNYz0NCDlcqRsvX4oUH2btIuf/eAhwJTHAm e/DR+NticCn/F+LWS5Ies/eRDaC6TqCkrFd7pqH/DMvCk37muKQXf7NrLByvuJuE mFfc4V0adiC9MMwweRVmdByNtovK8NvAcl55ps5e4dbsQuPK0tMnd20eRFS9QcJy 4U0q44d5MDbysnBz4TJjZPVIC4kzRlszGxrZdPfm/D8DgLWDNUyzw6uEvAjVfXrd 5vN1O30iw9oMUowFyXr9OkciCioKCV9Enkmhx6lrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUIe72Ys84ir99vIn63MeTpP9QD1MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwNzdjN2Y5LTY2NmUtNDcxYS05ZDdmLTg3OGU4NzY3YTYwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBrFDANBgkqhkiG9w0BAQsFAAOCAQEATdCcyfYp9PCw+wy8KUdX7X3aacdI 50OGnOthJ2J65ZsQ6giKxc693wJJlrJVzwUOMF0TZnqYKQOMl/8OXhIW7z+ZADaW c+J+SDIq+PSdXf+b7navcbjVTkSpAZ9bmY1jeX2S2GNOjq17VYEWOVOB/AHMEyCq haJdWBFREh4s+7YL0TDBXh+ufMpVML+o03M6KufmFFGU+pZAX/48xl3iE9OCsDFb eYL8IMfPNXSjmXpOklocVncV9PTFMuBuVDfreOdErjZKdSDKz8aC9/7R8sgfn5N9 mVjQz13VuxesFU4bC7fpoN/CMeqnLKL+np5SXqVpa952ZXMlTRgT6jkJCA== -----END CERTIFICATE-----Generated at Sun Jun 15 12:26:03 2025 by rpki-client