$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e234d89-e807-46b4-9533-ed057ead33aa.roa File: 6e234d89-e807-46b4-9533-ed057ead33aa.roa (raw, json) Hash identifier: JsIF0r2RoBBgNTkwV2GxnVXYcylIo/Pq3Ky3cKaqIqk= Subject key identifier: 70:E3:38:84:69:BA:95:DD:79:83:04:4A:8D:A9:85:77:8A:92:FA:30 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F0B12A9ADEB14A3AC72CCE3CA8C462943B78D69 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e234d89-e807-46b4-9533-ed057ead33aa.roa Signing time: Wed 02 Jul 2025 00:31:01 +0000 ROA not before: Wed 02 Jul 2025 00:31:01 +0000 ROA not after: Wed 06 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:0b:12:a9:ad:eb:14:a3:ac:72:cc:e3:ca:8c:46:29:43:b7:8d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 2 00:31:01 2025 GMT Not After : Aug 6 23:59:59 2025 GMT Subject: serialNumber=8552e0d6935e6564ff1019e939837d2dd39d46f22f1bca29c074c019f1ff3b00, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:3f:3d:c9:6b:87:74:9f:e7:08:47:7a:4f: d5:6e:4e:c9:8f:97:1f:3a:9b:1f:a7:54:b3:3f:3f: 99:6b:33:76:49:3f:0a:f4:d2:36:1f:f2:cb:ec:95: d4:8d:48:5a:46:72:a8:80:31:99:57:7a:2b:90:c8: 4d:7a:76:91:60:b6:e5:9a:07:e1:12:89:27:bf:03: f1:56:e3:c5:68:7b:3b:71:8c:b9:9c:b4:2e:de:de: bf:f2:d3:f9:5e:82:23:f8:ba:41:34:40:f3:9d:0d: 8c:90:e9:8a:f8:55:b6:2e:31:b8:3b:f2:a7:03:26: d3:64:0a:a7:18:17:5e:e2:6e:57:0c:87:ef:57:de: 47:fc:3f:f4:55:ae:e7:54:e2:09:9b:a4:47:99:d2: 09:39:14:5e:2a:0b:26:f2:26:f8:d3:01:43:cf:bb: be:23:a1:54:8f:32:e1:dd:e6:9f:ac:83:0c:20:5d: c2:4f:45:96:91:6e:d9:01:ee:07:f0:84:d9:ea:40: 1f:53:d2:f7:d7:ed:35:51:63:a6:4d:a3:fc:c1:ab: 95:a2:31:9b:9a:53:d0:a0:cc:42:48:c5:ca:2b:c2: a4:84:b9:fb:2d:2f:97:e8:16:60:dd:1a:85:c9:3c: 03:4a:fe:3d:90:7d:9a:f7:4d:d9:e4:cf:f8:ff:3e: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E3:38:84:69:BA:95:DD:79:83:04:4A:8D:A9:85:77:8A:92:FA:30 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e234d89-e807-46b4-9533-ed057ead33aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.200.0/22 Signature Algorithm: sha256WithRSAEncryption 36:aa:8c:d4:e7:88:66:c6:60:c1:0c:93:23:40:54:24:6a:4a: 6b:cf:1a:5b:cd:0b:68:6c:84:27:60:ef:a6:0a:58:4b:23:5b: 86:16:b3:d0:cf:2d:12:e7:78:e2:a6:d2:ee:f5:0d:3e:63:62: 97:6a:cd:75:81:d2:48:b4:cb:29:9f:7e:0a:b2:80:db:6a:2c: 84:90:d0:89:fa:74:8f:43:0e:87:d1:2d:4a:7c:df:ad:0f:3f: 32:e5:cd:2b:21:1b:44:57:84:1c:66:b3:9f:26:e1:c9:fb:13: f2:ee:7a:5c:1c:3b:01:e5:e5:5e:d5:31:c4:ee:b0:c2:7b:b4: 82:9b:dd:48:0b:27:ea:03:5f:80:1d:7f:96:d6:95:9e:d2:66: 15:05:eb:0e:aa:13:dd:72:fc:77:de:45:74:22:12:b1:26:c8: 6d:6c:36:f1:70:1c:e1:ec:6f:05:bf:c2:84:43:bd:69:dd:cf: 36:e2:49:6c:54:0f:63:bd:d6:e6:58:42:ff:41:fd:3b:53:a5: 8b:12:8c:34:9b:17:47:3c:03:d1:f4:4d:df:d4:3c:ef:86:ec: aa:32:98:5f:72:17:d1:d3:71:2f:80:e4:e9:61:aa:1d:05:90: 01:3d:7d:90:77:a3:7d:37:5d:02:79:ed:78:52:e2:43:c8:b7: 67:57:0d:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHwsSqa3rFKOscszjyoxGKUO3jWkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDAzMTAxWhcNMjUwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NTUyZTBkNjkzNWU2NTY0ZmYxMDE5ZTkzOTgzN2QyZGQz OWQ0NmYyMmYxYmNhMjljMDc0YzAxOWYxZmYzYjAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqjT89yWuHdJ/nCEd6T9VuTsmPlx86mx+nVLM/P5lrM3ZJ Pwr00jYf8svsldSNSFpGcqiAMZlXeiuQyE16dpFgtuWaB+ESiSe/A/FW48Voeztx jLmctC7e3r/y0/legiP4ukE0QPOdDYyQ6Yr4VbYuMbg78qcDJtNkCqcYF17iblcM h+9X3kf8P/RVrudU4gmbpEeZ0gk5FF4qCybyJvjTAUPPu74joVSPMuHd5p+sgwwg XcJPRZaRbtkB7gfwhNnqQB9T0vfX7TVRY6ZNo/zBq5WiMZuaU9CgzEJIxcorwqSE ufstL5foFmDdGoXJPANK/j2QfZr3Tdnkz/j/Pl9/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcOM4hGm6ld15gwRKjamFd4qS+jAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZlMjM0ZDg5LWU4MDctNDZiNC05NTMzLWVkMDU3ZWFkMzNhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALPFcgwDQYJKoZIhvcNAQELBQADggEBADaqjNTniGbGYMEMkyNAVCRqSmvP GlvNC2hshCdg76YKWEsjW4YWs9DPLRLneOKm0u71DT5jYpdqzXWB0ki0yymffgqy gNtqLISQ0In6dI9DDofRLUp8360PPzLlzSshG0RXhBxms58m4cn7E/LuelwcOwHl 5V7VMcTusMJ7tIKb3UgLJ+oDX4Adf5bWlZ7SZhUF6w6qE91y/HfeRXQiErEmyG1s NvFwHOHsbwW/woRDvWndzzbiSWxUD2O91uZYQv9B/TtTpYsSjDSbF0c8A9H0Td/U PO+G7KoymF9yF9HTcS+A5Olhqh0FkAE9fZB3o303XQJ57XhS4kPIt2dXDe4= -----END CERTIFICATE-----Generated at Thu Jul 3 00:13:28 2025 by rpki-client