$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b3424f-9bad-4599-a0a2-6507f7c70050.roa File: 24b3424f-9bad-4599-a0a2-6507f7c70050.roa (raw, json) Hash identifier: 4n93RTsV277c0kRdskRNReIQfq60fxvBParA/CBHs7M= Subject key identifier: 39:40:B4:8D:DB:3E:60:93:9E:3E:FA:1B:48:5C:D8:E4:9C:F7:4A:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1EDD58EFB8110F26A02490DD89AE8860DE0BF801 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b3424f-9bad-4599-a0a2-6507f7c70050.roa Signing time: Tue 08 Jul 2025 17:30:27 +0000 ROA not before: Tue 08 Jul 2025 17:30:27 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f11:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:dd:58:ef:b8:11:0f:26:a0:24:90:dd:89:ae:88:60:de:0b:f8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:30:27 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=e67fa26d3635bf5e0ddaa0bf15bb08bf235228e66c7bb845065dd7cce40f94b3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:15:92:a4:35:e5:66:2b:ed:ad:0e:41:05:8c: ac:7e:60:35:9b:19:14:14:7d:81:35:cb:28:77:9f: ec:ce:e2:64:71:93:76:94:bd:0c:2f:cd:f7:76:39: d9:d2:a5:5a:76:45:01:0b:83:37:2e:16:65:be:96: 24:8f:5c:9f:f8:e5:3a:d1:2d:38:22:fb:ba:29:81: 9e:d8:55:2b:13:2a:07:28:1a:73:26:ef:ff:31:75: 4d:ec:4d:48:a7:e9:49:9b:8b:2d:11:89:c7:e0:a5: 98:e2:81:f9:ae:9c:8b:04:0c:ec:d4:d3:2a:24:41: 95:8e:35:f8:b6:0e:b6:52:ff:3d:d5:d3:71:5e:62: 02:6a:e8:db:89:44:a6:69:4a:d6:0d:4c:b3:64:77: cf:06:1b:a3:ee:bf:de:b8:49:c6:b7:16:5b:1c:32: 7c:13:44:49:92:35:7b:b9:ba:e4:45:a2:d7:c5:ca: 39:67:5c:05:cc:cf:e5:d0:a7:2b:ce:fe:1f:50:92: 17:08:a5:b5:13:bd:b7:94:e4:66:46:95:48:ba:c2: 39:77:3c:58:0b:a1:3b:bc:13:8c:d4:33:f1:78:b7: 66:a4:fe:c5:4f:14:12:ba:1d:ca:0b:dc:0b:ed:43: 6d:fb:69:ab:30:e5:10:a8:b4:36:e4:15:4b:9e:ac: 64:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:40:B4:8D:DB:3E:60:93:9E:3E:FA:1B:48:5C:D8:E4:9C:F7:4A:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b3424f-9bad-4599-a0a2-6507f7c70050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f11:8000::/36 Signature Algorithm: sha256WithRSAEncryption 7e:83:30:b2:cf:e0:1a:04:d8:d9:5f:10:2d:44:b1:74:72:c2: 5b:5c:fb:9d:9d:0e:c7:d6:c6:8d:17:eb:aa:7e:33:10:c8:b6: dd:1b:a5:34:5b:de:ec:42:11:fc:ef:18:71:f5:bc:5d:c3:df: 16:59:e3:cf:96:98:80:8e:74:72:70:27:51:5c:78:53:81:78: 34:a4:b3:d1:e2:c3:04:d1:75:81:75:89:e6:e9:3e:c2:48:e2: 55:ee:34:a8:7b:07:d6:d2:e3:59:81:67:85:e9:1a:43:85:b8: d9:67:39:98:5b:b8:77:2b:8d:bf:10:65:3d:15:ac:c2:04:12: f0:1f:31:66:be:ba:9b:2d:7c:89:c8:12:18:35:bb:06:48:b1: 16:74:3a:73:1b:84:ae:ae:ac:f3:e9:2a:b5:7e:a2:69:af:ca: fa:51:c5:97:e3:94:74:ff:5b:e6:e1:20:80:f2:2c:bb:63:5e: 76:be:38:40:00:ce:d5:c8:1e:31:53:9f:7b:c9:db:59:d3:5d: c0:f8:69:3f:9d:f8:57:f4:b9:ab:71:87:3a:02:66:b4:c0:26: ad:23:ea:00:83:be:63:0e:d7:b7:67:7d:b4:77:1f:7b:b4:fe: cc:95:30:b4:b0:b2:63:23:b6:51:0a:98:92:69:ae:6e:1d:62: f7:3c:f3:9c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHt1Y77gRDyagJJDdia6IYN4L+AEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTczMDI3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjdmYTI2ZDM2MzViZjVlMGRkYWEwYmYxNWJiMDhiZjIz NTIyOGU2NmM3YmI4NDUwNjVkZDdjY2U0MGY5NGIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD6FZKkNeVmK+2tDkEFjKx+YDWbGRQUfYE1yyh3n+zO4mRx k3aUvQwvzfd2OdnSpVp2RQELgzcuFmW+liSPXJ/45TrRLTgi+7opgZ7YVSsTKgco GnMm7/8xdU3sTUin6Umbiy0RicfgpZjigfmunIsEDOzU0yokQZWONfi2DrZS/z3V 03FeYgJq6NuJRKZpStYNTLNkd88GG6Puv964Sca3FlscMnwTREmSNXu5uuRFotfF yjlnXAXMz+XQpyvO/h9QkhcIpbUTvbeU5GZGlUi6wjl3PFgLoTu8E4zUM/F4t2ak /sVPFBK6HcoL3AvtQ237aasw5RCotDbkFUuerGSDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUOUC0jds+YJOePvobSFzY5Jz3Sl4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0YjM0MjRmLTliYWQtNDU5OS1hMGEyLTY1MDdmN2M3MDA1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8RgDANBgkqhkiG9w0BAQsFAAOCAQEAfoMwss/gGgTY2V8QLUSxdHLC W1z7nZ0Ox9bGjRfrqn4zEMi23RulNFve7EIR/O8YcfW8XcPfFlnjz5aYgI50cnAn UVx4U4F4NKSz0eLDBNF1gXWJ5uk+wkjiVe40qHsH1tLjWYFnhekaQ4W42Wc5mFu4 dyuNvxBlPRWswgQS8B8xZr66my18icgSGDW7BkixFnQ6cxuErq6s8+kqtX6iaa/K +lHFl+OUdP9b5uEggPIsu2Nedr44QADO1cgeMVOfe8nbWdNdwPhpP534V/S5q3GH OgJmtMAmrSPqAIO+Yw7Xt2d9tHcfe7T+zJUwtLCyYyO2UQqYkmmubh1i9zzznA== -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:23 2025 by rpki-client