$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa File: 2507f91f-043a-4d23-8241-7fcd43474bb7.roa (raw, json) Hash identifier: F+kSRYLqVlWxfgcCrpcBUnMZGMD1egBV1AGMIA0KYz8= Subject key identifier: 08:C8:E2:B2:08:EE:B8:33:66:F1:29:E5:7B:DF:82:39:59:26:33:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E7154C20B31AF6DB37025DB85B9FB763FCC65E2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa Signing time: Fri 18 Jul 2025 00:20:33 +0000 ROA not before: Fri 18 Jul 2025 00:20:33 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1d:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:71:54:c2:0b:31:af:6d:b3:70:25:db:85:b9:fb:76:3f:cc:65:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:20:33 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=28fdc7526e0e4a131ba63ff52100391563b0ef1c9114240bb1a8c1055c581b72, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:e2:23:fe:b7:3c:a1:91:58:a2:11:3c:17: 71:d8:f0:91:51:a9:61:9e:aa:81:76:4c:2d:56:71: b4:a7:42:c5:57:a7:10:aa:94:cb:36:d4:1a:ac:7e: 1b:50:4d:27:91:f9:5c:ae:dc:eb:71:54:dc:ca:46: 88:28:de:ab:e5:82:ed:7f:f7:16:7a:28:ec:83:d0: 78:cd:89:a7:85:f3:af:fb:83:18:30:aa:e6:56:33: 89:9d:6f:fa:25:0b:a5:a4:0f:73:e9:22:79:1d:59: ea:a9:15:b6:08:fd:7e:bd:e8:f9:0e:f9:49:11:09: de:78:79:33:99:33:58:5f:02:9f:47:6f:72:a1:3c: d3:20:6b:1e:ce:8a:40:2b:3d:6e:e1:df:03:c9:c1: 4d:97:10:fb:54:a3:4b:72:9b:f6:09:72:8e:9f:0a: b3:9c:41:6f:af:49:8b:1f:3c:04:b7:0c:42:85:fa: b4:8c:82:0c:0f:88:26:2f:db:e8:6e:01:db:eb:ed: 64:8b:a8:f9:d4:6e:42:04:50:7b:d2:b9:18:69:97: 8c:92:e9:4f:99:86:83:b3:f7:e3:d8:f6:bd:e9:85: b3:11:57:6e:0c:8b:e0:43:a3:57:be:62:ff:09:5f: 58:0f:5e:bc:06:43:a2:b5:0b:64:12:7b:49:75:81: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C8:E2:B2:08:EE:B8:33:66:F1:29:E5:7B:DF:82:39:59:26:33:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1d:8000::/36 Signature Algorithm: sha256WithRSAEncryption cf:2e:d6:fe:f1:e0:6b:af:23:3b:06:87:50:dc:26:fc:6b:40: 92:07:2e:8a:c1:61:3b:3d:c0:b7:23:fa:7b:18:41:b8:75:5e: 3f:59:42:6b:d3:bd:62:d6:aa:5f:03:18:0b:86:3d:41:69:cb: b2:63:a5:84:e4:35:09:43:1b:22:da:72:c4:5f:6b:c7:61:45: d6:c7:ec:d6:2c:c6:a4:29:dc:52:b9:d2:7e:81:13:0f:e7:99: 3a:c1:0a:a4:44:47:ff:2c:ff:20:61:08:1c:c5:ff:21:72:a9: a6:78:e6:77:1d:a8:c3:e9:b6:48:af:a4:e7:f5:36:b4:79:10: e5:38:8f:a6:5a:07:24:21:f5:97:81:72:ae:b3:42:23:b7:c4: f5:3e:58:22:ad:3b:bd:dc:83:51:30:e3:6c:ba:65:d3:fd:65: 2b:ae:b3:d0:64:c5:93:d1:f1:2d:4a:8a:73:57:c7:a1:56:d6: e3:55:23:65:c1:6a:79:01:64:a6:fd:4a:db:3d:35:b9:a0:b4: 17:6f:b7:2c:89:e7:b3:d1:e7:f1:9d:ce:b9:1d:b8:cd:d1:99: 88:03:50:cb:0b:9c:29:eb:ae:22:e8:35:7e:e0:f6:50:76:84: 39:f7:2e:63:76:4a:5f:5c:15:c1:a5:8e:df:63:fe:3a:38:11: d6:43:8c:92 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDnFUwgsxr22zcCXbhbn7dj/MZeIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAyMDMzWhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOGZkYzc1MjZlMGU0YTEzMWJhNjNmZjUyMTAwMzkxNTYz YjBlZjFjOTExNDI0MGJiMWE4YzEwNTVjNTgxYjcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAWuIj/rc8oZFYohE8F3HY8JFRqWGeqoF2TC1WcbSnQsVX pxCqlMs21BqsfhtQTSeR+Vyu3OtxVNzKRogo3qvlgu1/9xZ6KOyD0HjNiaeF86/7 gxgwquZWM4mdb/olC6WkD3PpInkdWeqpFbYI/X696PkO+UkRCd54eTOZM1hfAp9H b3KhPNMgax7OikArPW7h3wPJwU2XEPtUo0tym/YJco6fCrOcQW+vSYsfPAS3DEKF +rSMggwPiCYv2+huAdvr7WSLqPnUbkIEUHvSuRhpl4yS6U+ZhoOz9+PY9r3phbMR V24Mi+BDo1e+Yv8JX1gPXrwGQ6K1C2QSe0l1gd8zAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUCMjisgjuuDNm8Snle9+COVkmM90wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1MDdmOTFmLTA0M2EtNGQyMy04MjQxLTdmY2Q0MzQ3NGJiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8dgDANBgkqhkiG9w0BAQsFAAOCAQEAzy7W/vHga68jOwaHUNwm/GtA kgcuisFhOz3AtyP6exhBuHVeP1lCa9O9YtaqXwMYC4Y9QWnLsmOlhOQ1CUMbItpy xF9rx2FF1sfs1izGpCncUrnSfoETD+eZOsEKpERH/yz/IGEIHMX/IXKppnjmdx2o w+m2SK+k5/U2tHkQ5TiPploHJCH1l4FyrrNCI7fE9T5YIq07vdyDUTDjbLpl0/1l K66z0GTFk9HxLUqKc1fHoVbW41UjZcFqeQFkpv1K2z01uaC0F2+3LInns9Hn8Z3O uR24zdGZiANQywucKeuuIug1fuD2UHaEOfcuY3ZKX1wVwaWO32P+OjgR1kOMkg== -----END CERTIFICATE-----Generated at Mon Jul 21 23:34:47 2025 by rpki-client