$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1cd7554e-87ef-4ced-a355-6748bd1081ce.roa File: 1cd7554e-87ef-4ced-a355-6748bd1081ce.roa (raw, json) Hash identifier: aeyBzpjX/vy9NKPcRJ1/5PL2i5r0BICVR91hE3G83IQ= Subject key identifier: 46:FD:B3:B7:F8:3D:08:45:30:FA:EB:9F:DD:CA:22:2D:13:CD:95:06 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32CC2ACF890ECEE83CE3087EAEAE8864937D83FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1cd7554e-87ef-4ced-a355-6748bd1081ce.roa Signing time: Mon 14 Jul 2025 22:36:51 +0000 ROA not before: Mon 14 Jul 2025 22:36:51 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fec:b400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:cc:2a:cf:89:0e:ce:e8:3c:e3:08:7e:ae:ae:88:64:93:7d:83:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 14 22:36:51 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=9360b544fd7fde4a77c8baf1dacb64a012f95f255676dad1c67760821686c62a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:fd:7a:ed:11:4d:1e:d5:c4:3b:38:02:08:0e: 35:60:06:86:a2:fc:c9:3c:db:bc:14:c9:2d:69:6e: df:96:e7:9a:97:0f:01:0b:ff:9c:f8:58:ae:91:15: bd:af:7c:56:f7:83:69:71:14:e8:8f:42:9d:13:20: 3d:5c:39:d3:e1:dd:05:98:88:b4:05:a2:75:d3:e0: cf:3d:0a:8d:e7:82:d7:e7:be:0e:5c:f3:3e:8a:2d: 7c:4e:f0:85:7a:0f:29:d7:5c:4a:6e:0d:9d:aa:e2: 4e:70:58:a1:7a:5b:07:bd:57:01:86:fd:bf:07:cb: 16:c5:41:9a:ba:86:49:fa:ab:92:32:aa:0d:68:f5: 5e:c1:7c:14:e7:2d:3a:dd:26:d4:40:80:62:df:07: ea:39:78:c0:8c:e5:b8:38:13:a5:ea:53:62:fc:35: 34:43:48:f4:42:17:f1:9f:32:48:be:ee:d7:c2:f2: 42:aa:a0:f3:6e:d0:df:be:de:d0:18:12:23:67:a7: 87:b2:3a:28:c1:d9:f9:9c:80:06:3f:dc:5b:4f:81: 82:af:63:29:0d:b5:25:36:f0:05:b4:0f:56:26:4d: 44:d3:62:04:8a:e3:d9:be:ce:af:38:30:8e:0c:bd: 79:a8:56:b9:5d:56:50:33:1a:37:69:e3:89:c4:a1: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FD:B3:B7:F8:3D:08:45:30:FA:EB:9F:DD:CA:22:2D:13:CD:95:06 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1cd7554e-87ef-4ced-a355-6748bd1081ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:b400::/48 Signature Algorithm: sha256WithRSAEncryption a3:0a:51:16:6f:c4:3c:3b:e3:94:ed:c4:08:29:0d:ce:fe:09: c7:15:91:b4:8f:34:63:9f:28:e4:89:3b:58:09:be:f6:57:a3: a1:32:61:d9:77:24:25:c0:4a:6f:38:4d:70:76:12:72:81:07: fa:2b:4f:0d:16:12:43:5b:a7:2b:b0:6a:93:07:61:9c:5a:c9: 21:42:9e:c0:bf:d1:b0:1a:52:5d:d4:29:d3:34:28:96:a1:17: 76:8e:a5:1c:47:98:e2:db:4a:1d:98:7f:37:2a:68:94:c6:6f: 6f:60:02:14:7e:54:53:cd:d3:f9:34:dc:c0:fe:2a:25:b6:84: f5:51:c8:a4:2d:cc:ed:97:f2:5d:ba:0a:dd:93:16:56:eb:17: 17:0e:62:9d:98:d6:5d:cb:c1:b2:28:a8:fa:14:84:31:40:f7: b2:07:86:61:0a:37:97:1d:58:fc:35:a5:16:25:d0:23:7f:7d: dd:3c:f5:b2:ae:b2:c6:67:2e:22:37:15:c7:1f:c0:e7:ec:f7: 70:0b:cd:3e:5e:4d:1f:9b:47:a1:f3:de:3c:da:cd:8b:57:a4: 0a:f6:1c:ec:ec:cf:05:ad:e3:23:03:40:94:0b:2b:8d:db:b0: 5d:55:63:84:fb:4d:8b:d0:7d:f3:da:c4:51:d3:94:f4:96:91: 14:b7:b9:4f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMswqz4kOzug84wh+rq6IZJN9g/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE0MjIzNjUxWhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzYwYjU0NGZkN2ZkZTRhNzdjOGJhZjFkYWNiNjRhMDEy Zjk1ZjI1NTY3NmRhZDFjNjc3NjA4MjE2ODZjNjJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDv/XrtEU0e1cQ7OAIIDjVgBoai/Mk827wUyS1pbt+W55qX DwEL/5z4WK6RFb2vfFb3g2lxFOiPQp0TID1cOdPh3QWYiLQFonXT4M89Co3ngtfn vg5c8z6KLXxO8IV6DynXXEpuDZ2q4k5wWKF6Wwe9VwGG/b8HyxbFQZq6hkn6q5Iy qg1o9V7BfBTnLTrdJtRAgGLfB+o5eMCM5bg4E6XqU2L8NTRDSPRCF/GfMki+7tfC 8kKqoPNu0N++3tAYEiNnp4eyOijB2fmcgAY/3FtPgYKvYykNtSU28AW0D1YmTUTT YgSK49m+zq84MI4MvXmoVrldVlAzGjdp44nEofGJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURv2zt/g9CEUw+uuf3coiLRPNlQYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFjZDc1NTRlLTg3ZWYtNGNlZC1hMzU1LTY3NDhiZDEwODFjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/stAAwDQYJKoZIhvcNAQELBQADggEBAKMKURZvxDw745TtxAgpDc7+ CccVkbSPNGOfKOSJO1gJvvZXo6EyYdl3JCXASm84TXB2EnKBB/orTw0WEkNbpyuw apMHYZxaySFCnsC/0bAaUl3UKdM0KJahF3aOpRxHmOLbSh2YfzcqaJTGb29gAhR+ VFPN0/k03MD+KiW2hPVRyKQtzO2X8l26Ct2TFlbrFxcOYp2Y1l3LwbIoqPoUhDFA 97IHhmEKN5cdWPw1pRYl0CN/fd089bKussZnLiI3FccfwOfs93ALzT5eTR+bR6Hz 3jzazYtXpAr2HOzszwWt4yMDQJQLK43bsF1VY4T7TYvQffPaxFHTlPSWkRS3uU8= -----END CERTIFICATE-----Generated at Mon Jul 21 23:40:39 2025 by rpki-client