$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0cdb99c-80ae-4cab-9dda-4da4b37568c7.roa File: b0cdb99c-80ae-4cab-9dda-4da4b37568c7.roa (raw, json) Hash identifier: W13zEZABsJLbF00ZNmyfnNX9kOtRAHYtZ58bibfgRWU= Subject key identifier: CC:73:2B:D7:4B:42:B7:C9:D1:A5:0C:6A:B7:7D:58:71:0F:4B:3A:02 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 587BB879B898CF2502520BC47ECA23490B44CE9D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0cdb99c-80ae-4cab-9dda-4da4b37568c7.roa Signing time: Sat 02 Aug 2025 00:50:56 +0000 ROA not before: Sat 02 Aug 2025 00:50:56 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.20.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7b:b8:79:b8:98:cf:25:02:52:0b:c4:7e:ca:23:49:0b:44:ce:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:50:56 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=76a26eca233747bae859a629de91913c3d9fe3b662096cf6f30b9d029326ed6e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:b9:bc:34:62:c3:4e:27:c1:39:11:54:19: c1:94:1e:b8:39:64:53:12:a4:a0:c0:ff:3d:61:99: 1a:fb:5c:96:79:d7:34:4e:3e:7a:65:80:c4:e8:0f: 31:1d:0d:b5:07:aa:b5:da:10:f0:59:30:b7:d2:f5: c5:73:0d:56:19:fe:84:62:d5:a2:9d:f7:91:da:1d: 2a:d1:92:e8:b1:3a:a0:0a:c9:6a:f4:ff:f5:6e:a9: fb:b3:05:11:cf:94:dc:ae:c4:66:8a:27:eb:aa:09: 76:7a:bd:06:48:48:31:dc:bb:bc:ab:c4:53:71:ce: 3e:ce:9d:1f:d5:af:6e:6f:2a:3d:c9:cf:b1:cd:ee: d8:6a:03:1d:1f:9c:c7:01:0e:43:2a:85:62:6f:7d: b7:40:44:f5:b0:6c:0f:9e:fc:da:79:fd:60:64:d6: e0:7a:19:f8:11:02:b6:a5:a7:08:ec:2a:d8:1b:a0: 6f:ba:ee:12:06:a7:33:f3:06:d2:e7:43:78:64:30: 15:44:30:c1:0e:73:67:69:6e:4f:c8:8f:b4:5d:1e: 68:fe:cf:7c:bd:12:5e:36:d3:11:57:88:ca:04:62: 1a:74:e8:74:a9:07:b2:5b:dc:e3:a5:bd:e9:30:68: 5d:b7:d8:a8:35:18:c7:af:56:bf:54:78:e4:54:0a: f6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:73:2B:D7:4B:42:B7:C9:D1:A5:0C:6A:B7:7D:58:71:0F:4B:3A:02 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0cdb99c-80ae-4cab-9dda-4da4b37568c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.0.0/14 Signature Algorithm: sha256WithRSAEncryption d1:28:fc:23:0e:d2:da:2f:c7:62:92:33:04:c8:05:c3:9c:3c: 97:a2:75:a7:0c:77:6f:c6:b5:44:eb:18:06:34:7c:b3:ef:fa: f3:22:0f:46:04:6a:0b:9d:ca:a1:be:0d:cc:22:aa:ae:db:fc: b9:ec:fe:3e:23:f6:f1:6d:49:a2:1c:36:84:4c:ec:51:ba:ee: 91:11:af:dd:df:3e:54:0a:7e:65:bd:85:0d:37:82:b5:50:bc: 62:5b:3c:83:fc:82:96:da:2a:84:23:1b:45:8d:ac:70:d9:cc: 87:6a:88:db:05:c1:e9:b9:d9:94:1c:44:0d:0d:38:36:51:53: 21:fe:3c:e4:06:1e:86:23:b4:d2:42:2b:50:58:84:a6:f6:bb: e2:89:cf:0a:07:78:12:de:16:86:82:eb:67:b7:fe:32:3d:58: 68:96:4d:43:08:60:aa:87:6c:19:b0:08:ae:b0:6e:15:d5:44: a7:5d:cd:e8:f9:1d:51:dc:6c:ea:17:cd:59:90:85:f3:f9:94: e2:1b:0c:75:b2:80:3e:ce:e5:fa:40:af:f5:07:17:96:d7:b8: af:49:de:9f:69:a1:bf:0f:07:d4:e3:c8:c5:05:c9:55:4b:17: eb:07:2e:12:03:f7:a1:0d:81:89:da:30:fc:cc:ba:1e:68:ee: d0:d2:38:9b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWHu4ebiYzyUCUgvEfsojSQtEzp0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDA1MDU2WhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmEyNmVjYTIzMzc0N2JhZTg1OWE2MjlkZTkxOTEzYzNk OWZlM2I2NjIwOTZjZjZmMzBiOWQwMjkzMjZlZDZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyVLm8NGLDTifBORFUGcGUHrg5ZFMSpKDA/z1hmRr7XJZ5 1zROPnplgMToDzEdDbUHqrXaEPBZMLfS9cVzDVYZ/oRi1aKd95HaHSrRkuixOqAK yWr0//VuqfuzBRHPlNyuxGaKJ+uqCXZ6vQZISDHcu7yrxFNxzj7OnR/Vr25vKj3J z7HN7thqAx0fnMcBDkMqhWJvfbdARPWwbA+e/Np5/WBk1uB6GfgRAralpwjsKtgb oG+67hIGpzPzBtLnQ3hkMBVEMMEOc2dpbk/Ij7RdHmj+z3y9El420xFXiMoEYhp0 6HSpB7Jb3OOlvekwaF232Kg1GMevVr9UeORUCvYzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUzHMr10tCt8nRpQxqt31YcQ9LOgIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwY2RiOTljLTgwYWUtNGNhYi05ZGRhLTRkYTRiMzc1NjhjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwJrFDANBgkqhkiG9w0BAQsFAAOCAQEA0Sj8Iw7S2i/HYpIzBMgFw5w8l6J1 pwx3b8a1ROsYBjR8s+/68yIPRgRqC53Kob4NzCKqrtv8uez+PiP28W1Johw2hEzs UbrukRGv3d8+VAp+Zb2FDTeCtVC8Yls8g/yCltoqhCMbRY2scNnMh2qI2wXB6bnZ lBxEDQ04NlFTIf485AYehiO00kIrUFiEpva74onPCgd4Et4WhoLrZ7f+Mj1YaJZN QwhgqodsGbAIrrBuFdVEp13N6PkdUdxs6hfNWZCF8/mU4hsMdbKAPs7l+kCv9QcX lte4r0nen2mhvw8H1OPIxQXJVUsX6wcuEgP3oQ2Bidow/My6Hmju0NI4mw== -----END CERTIFICATE-----Generated at Mon Aug 4 16:09:58 2025 by rpki-client