$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/218a520a-eb5d-45cb-ac7b-133e83914c16.roa File: 218a520a-eb5d-45cb-ac7b-133e83914c16.roa (raw, json) Hash identifier: 5T98SlqpSsMeeGHTGtRylREeMgq0Ov5htzLYddByY9s= Subject key identifier: 5C:D4:10:87:8A:C3:C6:F7:6D:90:ED:52:8E:2A:33:75:17:87:7B:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7BD038C6D8996726E846A735CF538FE3C303446E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/218a520a-eb5d-45cb-ac7b-133e83914c16.roa Signing time: Tue 08 Jul 2025 16:12:00 +0000 ROA not before: Tue 08 Jul 2025 16:12:00 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:c080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d0:38:c6:d8:99:67:26:e8:46:a7:35:cf:53:8f:e3:c3:03:44:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:12:00 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=d3b620bd3b425f507483cdc00a53c6a5327d3d4656024bfbf6c62fbe8cda751f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:58:9b:21:cd:d1:eb:01:17:5a:16:e0:a8: bb:b2:86:4a:cb:7f:86:d7:be:de:2c:cc:98:df:69: 1b:d0:da:4a:ba:01:36:fb:a1:9e:51:17:79:0d:fb: f0:0b:e5:43:31:59:fc:bf:d1:fe:62:2e:5f:19:d6: ca:01:28:7f:e8:a1:8b:c8:73:11:a7:04:c3:41:6e: 89:fd:e3:c9:65:31:c3:cf:c6:6b:33:ea:04:04:7b: b8:c7:13:23:65:84:d3:55:26:ee:eb:56:32:16:ea: 03:48:84:95:8b:e2:93:ac:9d:b7:ea:74:87:4a:d4: 2a:a3:57:02:bc:ba:a3:0a:43:d9:00:28:cc:07:4a: 44:6b:22:c8:0c:2e:2c:5b:ea:a5:cb:31:e0:e4:8f: d2:7f:47:b0:3c:16:60:b4:82:bc:24:5a:0c:7e:46: ec:41:6f:b1:7c:51:9d:79:7b:32:be:eb:e2:67:66: 7e:f0:cc:3d:96:2e:3b:6b:3b:75:fd:70:4f:44:ba: 51:2d:0c:76:da:6c:27:c9:45:c4:45:ba:ad:68:f7: 8e:95:2a:7f:ee:98:d3:0c:bb:60:e6:b3:70:d6:ba: 9a:0a:ce:72:e2:c8:7f:c3:53:cc:9c:f1:09:fa:cb: 27:23:be:94:19:4a:c7:54:42:18:84:9f:15:18:c4: eb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D4:10:87:8A:C3:C6:F7:6D:90:ED:52:8E:2A:33:75:17:87:7B:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/218a520a-eb5d-45cb-ac7b-133e83914c16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:c080::/46 Signature Algorithm: sha256WithRSAEncryption aa:c8:7c:96:9f:91:5f:73:38:57:52:a1:14:71:d6:d7:22:72: 93:e7:b7:7c:8a:65:92:7d:2e:b0:af:40:59:c7:5b:86:f8:4b: e8:1c:49:56:21:75:4e:89:3e:8b:06:2d:ba:82:93:5b:0a:51: 79:a5:5a:51:ec:b2:53:06:69:63:10:68:eb:50:2e:46:87:ca: 13:c6:c1:f8:ef:5d:fe:47:a2:50:1c:21:1d:ae:26:11:18:e5: 03:06:c7:ee:75:01:5e:1d:17:e4:6a:eb:8d:a8:e8:23:d5:2a: cd:7d:d0:db:a7:de:50:1b:ec:20:61:9a:72:48:4d:57:bd:13: db:85:04:e5:3b:b0:b3:c8:25:3f:90:0c:41:e2:e8:59:2a:f9: a9:87:50:9d:2b:14:65:81:c7:da:23:03:d0:81:f5:20:a6:05: ba:ef:6d:99:29:37:4e:1e:f8:fa:d4:f5:69:83:ba:5d:58:28: ea:eb:f0:cc:1f:d6:b7:08:20:44:e4:90:0e:19:0d:ed:e5:7e: 72:3b:2c:48:59:71:b7:de:34:e9:5a:44:92:ca:96:f8:ce:fb: 5c:87:70:53:aa:9c:fb:67:b8:ff:05:8d:b4:97:3d:c6:e5:c0: b4:6c:e5:15:53:65:d6:4d:cf:fb:a7:1b:22:51:83:ff:a0:02: 9f:a3:14:44 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUe9A4xtiZZyboRqc1z1OP48MDRG4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYxMjAwWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkM2I2MjBiZDNiNDI1ZjUwNzQ4M2NkYzAwYTUzYzZhNTMy N2QzZDQ2NTYwMjRiZmJmNmM2MmZiZThjZGE3NTFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMQFibIc3R6wEXWhbgqLuyhkrLf4bXvt4szJjfaRvQ2kq6 ATb7oZ5RF3kN+/AL5UMxWfy/0f5iLl8Z1soBKH/ooYvIcxGnBMNBbon948llMcPP xmsz6gQEe7jHEyNlhNNVJu7rVjIW6gNIhJWL4pOsnbfqdIdK1CqjVwK8uqMKQ9kA KMwHSkRrIsgMLixb6qXLMeDkj9J/R7A8FmC0grwkWgx+RuxBb7F8UZ15ezK+6+Jn Zn7wzD2WLjtrO3X9cE9EulEtDHbabCfJRcRFuq1o946VKn/umNMMu2Dms3DWupoK znLiyH/DU8yc8Qn6yycjvpQZSsdUQhiEnxUYxOtlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXNQQh4rDxvdtkO1SjiozdReHewQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIxOGE1MjBhLWViNWQtNDVjYi1hYzdiLTEzM2U4MzkxNGMxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pwIAwDQYJKoZIhvcNAQELBQADggEBAKrIfJafkV9zOFdSoRRx1tci cpPnt3yKZZJ9LrCvQFnHW4b4S+gcSVYhdU6JPosGLbqCk1sKUXmlWlHsslMGaWMQ aOtQLkaHyhPGwfjvXf5HolAcIR2uJhEY5QMGx+51AV4dF+Rq642o6CPVKs190Nun 3lAb7CBhmnJITVe9E9uFBOU7sLPIJT+QDEHi6Fkq+amHUJ0rFGWBx9ojA9CB9SCm BbrvbZkpN04e+PrU9WmDul1YKOrr8Mwf1rcIIETkkA4ZDe3lfnI7LEhZcbfeNOla RJLKlvjO+1yHcFOqnPtnuP8FjbSXPcblwLRs5RVTZdZNz/unGyJRg/+gAp+jFEQ= -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:53 2025 by rpki-client