$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a14f544-138e-411e-91fb-8d41e76bd0dc.roa File: 2a14f544-138e-411e-91fb-8d41e76bd0dc.roa (raw, json) Hash identifier: JPl1/V9YIO7NtRbxbvXV8YezVqyaiJRHSm+Bntjf8eg= Subject key identifier: 79:A5:8D:A4:07:6B:03:19:5F:36:37:A2:47:64:84:D6:81:3F:BD:B1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25BA245888F3DB65F93DC917902F92452B494F2D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a14f544-138e-411e-91fb-8d41e76bd0dc.roa Signing time: Tue 08 Jul 2025 16:20:18 +0000 ROA not before: Tue 08 Jul 2025 16:20:18 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff5:7400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ba:24:58:88:f3:db:65:f9:3d:c9:17:90:2f:92:45:2b:49:4f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:20:18 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=9f171c29d2d62df2074cdf738707a0ff9ddcc8f94ff1021cbba8d31ab9eb6b96, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:de:9a:f7:76:32:25:3d:eb:a7:06:4a:97:a0: 1d:de:e4:23:c6:35:f5:87:89:c9:be:9a:cf:af:e6: f3:e6:3c:e8:dd:ef:49:1e:82:27:61:79:41:6e:c2: b5:24:f9:21:97:a2:94:c6:f5:16:50:32:5c:8a:f1: b8:24:8f:54:90:91:b8:d7:f3:69:7e:91:75:3b:ed: 37:75:f1:d7:bf:f9:90:de:62:7e:df:86:ca:5d:4c: 86:38:08:e7:44:7b:84:ce:69:25:55:05:f1:83:93: ba:c3:27:3f:49:3a:7f:83:14:bd:03:a0:cc:8e:09: d1:ee:1f:0a:bc:2b:20:9b:76:9f:0c:a7:33:2b:b1: 48:25:73:61:54:3a:ce:3c:45:3e:6d:dc:ec:ba:c1: 52:80:ee:96:a6:f3:e5:b7:80:f6:4a:38:c0:61:0d: 9e:29:00:97:bf:61:45:ce:40:fd:6a:64:52:56:b2: 40:68:80:23:bf:3f:0a:d5:1a:6b:5f:cf:42:94:7c: 5e:76:39:54:9b:08:c7:28:5d:f7:5f:32:a5:b8:cc: 62:10:2a:39:86:9a:9f:e2:83:46:83:32:4f:73:a7: f9:95:b0:18:43:09:c8:f3:87:c1:21:3a:3f:60:3d: cb:d5:91:ae:5a:c4:77:16:5d:3c:cf:56:55:98:a3: 4c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A5:8D:A4:07:6B:03:19:5F:36:37:A2:47:64:84:D6:81:3F:BD:B1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a14f544-138e-411e-91fb-8d41e76bd0dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff5:7400::/40 Signature Algorithm: sha256WithRSAEncryption 3a:03:28:06:24:16:33:58:7e:3e:0a:04:0b:59:94:e3:4a:9b: ac:fb:b9:db:fb:fe:23:d8:6f:ce:2d:30:24:86:cc:c8:8b:e5: 96:22:af:91:44:f9:d9:bb:c0:18:73:21:05:4f:bf:c9:08:80: 04:d8:45:8e:6e:eb:b8:8b:b2:11:78:ec:69:e4:bf:f5:13:13: 33:82:2b:51:9e:fa:c4:55:62:bd:c5:85:91:46:9b:12:2b:49: 4f:f0:08:b6:e0:55:29:bf:31:f8:ca:f8:b3:67:29:4d:37:d6: b7:39:c1:02:8d:d7:ef:f1:15:9e:70:a4:bf:a0:ab:81:44:a2: bc:b4:0b:4c:4c:0a:73:b2:95:23:4b:e8:7d:59:98:5f:5c:3d: 9b:83:ee:71:cf:7e:78:0b:ee:d1:f9:34:46:62:e9:c0:0b:d6: ec:06:1d:7b:53:8e:2e:dd:19:64:f2:c4:49:79:96:ad:8f:b8: 96:f8:d9:39:0a:69:0c:1b:76:3b:61:2a:22:b7:07:b5:5a:0b: 47:b4:70:86:33:ea:b4:52:1a:82:da:16:8d:06:ee:47:0d:98: 13:a3:3b:be:2c:dc:b7:9d:8f:ce:28:f2:72:cc:27:31:a1:6e: d4:4b:fc:6b:f2:ff:1f:33:de:13:71:3f:8a:f6:56:1e:9b:e5: 19:6f:70:af -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJbokWIjz22X5PckXkC+SRStJTy0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYyMDE4WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjE3MWMyOWQyZDYyZGYyMDc0Y2RmNzM4NzA3YTBmZjlk ZGNjOGY5NGZmMTAyMWNiYmE4ZDMxYWI5ZWI2Yjk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC93pr3djIlPeunBkqXoB3e5CPGNfWHicm+ms+v5vPmPOjd 70kegidheUFuwrUk+SGXopTG9RZQMlyK8bgkj1SQkbjX82l+kXU77Td18de/+ZDe Yn7fhspdTIY4COdEe4TOaSVVBfGDk7rDJz9JOn+DFL0DoMyOCdHuHwq8KyCbdp8M pzMrsUglc2FUOs48RT5t3Oy6wVKA7pam8+W3gPZKOMBhDZ4pAJe/YUXOQP1qZFJW skBogCO/PwrVGmtfz0KUfF52OVSbCMcoXfdfMqW4zGIQKjmGmp/ig0aDMk9zp/mV sBhDCcjzh8EhOj9gPcvVka5axHcWXTzPVlWYo0zvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUeaWNpAdrAxlfNjeiR2SE1oE/vbEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhMTRmNTQ0LTEzOGUtNDExZS05MWZiLThkNDFlNzZiZDBkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/1dDANBgkqhkiG9w0BAQsFAAOCAQEAOgMoBiQWM1h+PgoEC1mU40qb rPu52/v+I9hvzi0wJIbMyIvlliKvkUT52bvAGHMhBU+/yQiABNhFjm7ruIuyEXjs aeS/9RMTM4IrUZ76xFVivcWFkUabEitJT/AItuBVKb8x+Mr4s2cpTTfWtznBAo3X 7/EVnnCkv6CrgUSivLQLTEwKc7KVI0vofVmYX1w9m4Pucc9+eAvu0fk0RmLpwAvW 7AYde1OOLt0ZZPLESXmWrY+4lvjZOQppDBt2O2EqIrcHtVoLR7RwhjPqtFIagtoW jQbuRw2YE6M7vizct52PzijycswnMaFu1Ev8a/L/HzPeE3E/ivZWHpvlGW9wrw== -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:12 2025 by rpki-client