$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0cdb99c-80ae-4cab-9dda-4da4b37568c7.roa File: b0cdb99c-80ae-4cab-9dda-4da4b37568c7.roa (raw, json) Hash identifier: soDj1Fxfs3paBmJ4iUiuOgHmcEqgALmTMaexw2xTpGM= Subject key identifier: 72:FC:18:72:23:F0:FF:FA:07:90:D2:48:AC:5E:DB:8A:D3:16:56:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 60A3E23A7EA753058D143D03807AE9B621D9A7EF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0cdb99c-80ae-4cab-9dda-4da4b37568c7.roa Signing time: Fri 13 Jun 2025 15:30:16 +0000 ROA not before: Fri 13 Jun 2025 15:30:16 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.20.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a3:e2:3a:7e:a7:53:05:8d:14:3d:03:80:7a:e9:b6:21:d9:a7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 15:30:16 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=4dce50240c466897a225bd8d60354f800c227543c6bac1f1ece87cf10a581473, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:19:1f:9e:65:00:32:29:77:37:f3:72:92: e4:cf:1c:de:ba:e0:97:80:f6:7e:bb:5d:0e:20:cc: f4:29:2d:69:41:75:31:44:16:52:74:3d:55:7d:dc: 9b:46:97:f0:fa:64:00:5b:de:0f:c6:54:4c:2b:11: 9a:0d:ef:e5:ef:47:0e:4f:4a:c0:99:06:4c:3d:2d: eb:f0:b9:1d:30:91:9c:71:63:1f:68:f6:c2:14:7d: 38:e4:bf:a6:cb:1a:ee:00:30:3a:60:6a:31:7b:59: e1:df:91:7e:de:c4:2e:ea:39:33:da:59:df:6a:c6: f0:c0:82:01:8c:3c:86:89:f0:39:32:fd:9f:9c:03: 98:57:55:bf:af:23:21:17:82:4a:d1:40:ec:de:98: 93:6f:c0:85:86:97:43:72:0d:8c:a4:d7:59:c3:82: 0c:fc:18:c3:b9:67:4a:28:b4:ed:38:ed:c6:97:4c: 70:96:a4:69:59:e7:33:56:47:d0:75:90:7a:49:e9: 24:e6:f1:be:c4:e2:7e:06:c4:a4:69:92:12:56:fa: 29:29:ea:37:51:e6:40:f3:2e:64:2a:28:19:e3:14: 88:62:fd:e3:d8:88:42:3a:39:0f:23:dd:3a:3c:c1: 31:98:b9:20:bb:cb:52:52:b5:4e:72:7c:cb:d1:30: 34:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FC:18:72:23:F0:FF:FA:07:90:D2:48:AC:5E:DB:8A:D3:16:56:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0cdb99c-80ae-4cab-9dda-4da4b37568c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.0.0/14 Signature Algorithm: sha256WithRSAEncryption c1:98:44:cf:d6:af:0b:3d:0e:6e:25:8a:fd:4d:52:b8:67:ba: 80:74:8e:a8:5d:d6:35:17:e5:b8:51:b6:5c:81:bb:54:a8:22: 6c:54:fb:d8:3f:4d:0f:75:e0:eb:c2:6c:af:0c:04:de:f1:08: 0f:a8:06:26:9f:ac:9c:49:ee:d3:2d:29:3c:ae:a1:9f:a4:f2: 0d:9b:12:60:47:48:0d:49:5b:00:7f:39:80:cd:97:28:38:87: 04:f1:f5:d6:80:3b:98:70:06:e5:b2:d7:96:28:d5:14:4b:4c: eb:f2:3a:06:a1:c5:74:e0:a4:21:95:f6:3e:2e:aa:f0:d9:cf: 23:5f:b3:77:11:ae:bb:23:02:07:6a:96:4c:99:0b:cf:dd:e7: 61:c3:34:22:26:d0:6b:84:a6:f4:7d:2b:61:1c:b7:21:52:48: c1:f1:c2:55:ee:dc:69:a6:a2:0b:02:3e:b4:8d:53:00:fa:f8: 8c:09:9b:5e:0d:7f:b7:3e:d7:6c:c6:1a:d5:b4:17:9f:ae:2b: 0c:e3:02:30:db:8f:1d:24:a2:b2:5b:92:bd:78:b9:d8:4b:48: 5a:f4:cb:d0:31:8f:5a:11:bc:db:b9:96:e8:0e:be:d4:9a:74: 0e:d1:d7:54:5d:86:4b:ff:77:d0:96:fe:10:65:96:3c:9f:6a: 9d:ce:d9:ff -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYKPiOn6nUwWNFD0DgHrptiHZp+8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTUzMDE2WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZGNlNTAyNDBjNDY2ODk3YTIyNWJkOGQ2MDM1NGY4MDBj MjI3NTQzYzZiYWMxZjFlY2U4N2NmMTBhNTgxNDczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl8xkfnmUAMil3N/NykuTPHN664JeA9n67XQ4gzPQpLWlB dTFEFlJ0PVV93JtGl/D6ZABb3g/GVEwrEZoN7+XvRw5PSsCZBkw9LevwuR0wkZxx Yx9o9sIUfTjkv6bLGu4AMDpgajF7WeHfkX7exC7qOTPaWd9qxvDAggGMPIaJ8Dky /Z+cA5hXVb+vIyEXgkrRQOzemJNvwIWGl0NyDYyk11nDggz8GMO5Z0ootO047caX THCWpGlZ5zNWR9B1kHpJ6STm8b7E4n4GxKRpkhJW+ikp6jdR5kDzLmQqKBnjFIhi /ePYiEI6OQ8j3To8wTGYuSC7y1JStU5yfMvRMDRHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUcvwYciPw//oHkNJIrF7bitMWVkYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwY2RiOTljLTgwYWUtNGNhYi05ZGRhLTRkYTRiMzc1NjhjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwJrFDANBgkqhkiG9w0BAQsFAAOCAQEAwZhEz9avCz0ObiWK/U1SuGe6gHSO qF3WNRfluFG2XIG7VKgibFT72D9ND3Xg68JsrwwE3vEID6gGJp+snEnu0y0pPK6h n6TyDZsSYEdIDUlbAH85gM2XKDiHBPH11oA7mHAG5bLXlijVFEtM6/I6BqHFdOCk IZX2Pi6q8NnPI1+zdxGuuyMCB2qWTJkLz93nYcM0IibQa4Sm9H0rYRy3IVJIwfHC Ve7caaaiCwI+tI1TAPr4jAmbXg1/tz7XbMYa1bQXn64rDOMCMNuPHSSisluSvXi5 2EtIWvTL0DGPWhG827mW6A6+1Jp0DtHXVF2GS/930Jb+EGWWPJ9qnc7Z/w== -----END CERTIFICATE-----Generated at Sun Jun 15 20:05:29 2025 by rpki-client