$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ffed944-acab-4e46-8e6c-4d6f55f5c604.roa File: 0ffed944-acab-4e46-8e6c-4d6f55f5c604.roa (raw, json) Hash identifier: LkOab/gCGfoAuFmvWtvORMLwyQ4UyE0Y2cuTG7edubU= Subject key identifier: 56:56:C2:A9:26:95:C4:99:FB:FF:CA:DE:D6:B2:A2:8F:66:04:26:F7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48AACDADFE97EF41F86701EE0DA3659323F74660 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ffed944-acab-4e46-8e6c-4d6f55f5c604.roa Signing time: Tue 08 Jul 2025 15:41:57 +0000 ROA not before: Tue 08 Jul 2025 15:41:57 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff7:8040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:aa:cd:ad:fe:97:ef:41:f8:67:01:ee:0d:a3:65:93:23:f7:46:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:41:57 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=56c4bd6edec0c120a56a2244667b2615884d58c23b043fb2539860731f2f7b81, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:49:b9:92:e7:56:fa:3a:4c:ea:e6:56:6c:79: e4:4c:93:b3:1e:36:99:61:49:1f:e0:e6:5a:eb:12: 14:ad:10:b4:7a:0c:3e:c0:fe:26:a1:fc:f8:0f:69: 59:73:3e:01:b1:51:ac:92:df:0d:05:35:f9:9a:55: 47:e8:53:01:33:38:62:66:2b:ab:e6:f3:ef:a6:9a: 64:51:12:fc:b4:7d:75:ad:4a:b5:04:eb:dc:70:f2: 0e:ea:ef:f9:36:db:8f:f7:53:a7:b9:cf:1f:03:61: 6f:a7:c1:7b:71:5e:4a:d5:2d:03:f3:41:9b:23:a7: 09:c1:9e:79:66:b7:5f:d4:f8:7a:5f:78:fc:b7:01: 59:0f:6b:f2:23:03:cf:77:ef:db:06:10:d3:1a:99: 10:28:af:90:cc:78:67:bf:f6:43:b4:cc:63:0f:4a: 05:f9:77:14:5d:8a:21:84:09:3f:f6:a6:6f:05:c7: dd:50:0a:6f:fd:43:3d:7b:a6:ca:d6:12:e1:a2:ef: 98:2e:ee:02:9e:d1:0b:c7:a7:89:e7:a9:29:f3:bd: 20:8f:1d:ab:c5:3a:9b:80:65:e6:16:91:e2:c9:7d: e3:ba:53:02:75:1e:00:4e:5d:2c:e4:ed:0a:f1:fa: 71:a6:f6:b3:3c:12:77:d3:cb:00:31:f2:84:ee:33: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:56:C2:A9:26:95:C4:99:FB:FF:CA:DE:D6:B2:A2:8F:66:04:26:F7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ffed944-acab-4e46-8e6c-4d6f55f5c604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:8040::/46 Signature Algorithm: sha256WithRSAEncryption 89:a1:21:55:dc:39:5c:a7:c8:73:2b:d5:d2:f0:8d:70:0a:39: a8:b8:37:31:fc:24:99:98:ad:da:cd:b1:da:68:38:67:54:51: 9c:0f:88:62:d8:93:2f:1c:e9:36:84:96:7d:b1:20:58:e8:a5: 9c:78:c2:66:1b:77:c6:32:ee:f2:0b:a4:ba:6c:90:e3:09:ac: df:f6:81:65:24:0c:05:2f:21:66:95:f0:b9:a3:0d:76:65:2a: 39:ba:b2:12:cd:99:25:2e:70:af:9e:40:05:d7:2a:da:f8:6f: 4b:ea:77:cd:ab:2b:92:5f:52:dc:c4:ce:92:a8:f8:58:11:8a: ec:54:18:d2:51:ba:2a:9b:57:7e:54:48:9d:0c:b0:82:18:71: 1f:36:71:4c:e4:84:d1:dc:81:72:7e:d2:e2:6d:09:97:05:f7: 35:7a:07:9e:f3:5c:cb:52:d7:14:0a:3d:d8:93:63:0d:c9:48: 1e:b7:91:c0:e2:24:54:b8:f1:38:00:21:d7:6a:87:8a:96:20: 8a:22:5c:df:3e:c3:5e:dd:df:2d:f0:28:8a:5c:ce:05:73:0e: 24:15:c0:df:59:f6:85:e5:5a:9f:5c:65:f6:19:08:f3:c2:42: 85:2f:5e:2c:28:e2:fd:7c:29:b2:4c:aa:d0:d3:27:d8:36:9a: 50:f6:cc:a3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSKrNrf6X70H4ZwHuDaNlkyP3RmAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTU0MTU3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NmM0YmQ2ZWRlYzBjMTIwYTU2YTIyNDQ2NjdiMjYxNTg4 NGQ1OGMyM2IwNDNmYjI1Mzk4NjA3MzFmMmY3YjgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDSbmS51b6Okzq5lZseeRMk7MeNplhSR/g5lrrEhStELR6 DD7A/iah/PgPaVlzPgGxUayS3w0FNfmaVUfoUwEzOGJmK6vm8++mmmRREvy0fXWt SrUE69xw8g7q7/k224/3U6e5zx8DYW+nwXtxXkrVLQPzQZsjpwnBnnlmt1/U+Hpf ePy3AVkPa/IjA89379sGENMamRAor5DMeGe/9kO0zGMPSgX5dxRdiiGECT/2pm8F x91QCm/9Qz17psrWEuGi75gu7gKe0QvHp4nnqSnzvSCPHavFOpuAZeYWkeLJfeO6 UwJ1HgBOXSzk7Qrx+nGm9rM8EnfTywAx8oTuM6K1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVlbCqSaVxJn7/8re1rKij2YEJvcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmZmVkOTQ0LWFjYWItNGU0Ni04ZTZjLTRkNmY1NWY1YzYwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3gEAwDQYJKoZIhvcNAQELBQADggEBAImhIVXcOVynyHMr1dLwjXAK Oai4NzH8JJmYrdrNsdpoOGdUUZwPiGLYky8c6TaEln2xIFjopZx4wmYbd8Yy7vIL pLpskOMJrN/2gWUkDAUvIWaV8LmjDXZlKjm6shLNmSUucK+eQAXXKtr4b0vqd82r K5JfUtzEzpKo+FgRiuxUGNJRuiqbV35USJ0MsIIYcR82cUzkhNHcgXJ+0uJtCZcF 9zV6B57zXMtS1xQKPdiTYw3JSB63kcDiJFS48TgAIddqh4qWIIoiXN8+w17d3y3w KIpczgVzDiQVwN9Z9oXlWp9cZfYZCPPCQoUvXiwo4v18KbJMqtDTJ9g2mlD2zKM= -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:37 2025 by rpki-client