$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a96b93c-5a4e-4a24-b2d1-b92663dfa3dc.roa File: 2a96b93c-5a4e-4a24-b2d1-b92663dfa3dc.roa (raw, json) Hash identifier: CgdB1JgXyEWZ2ywbggVICuqe3syJbLX6m91mZyER1/I= Subject key identifier: 8D:A2:11:F8:15:A7:58:58:AB:8E:AD:A3:6A:39:77:22:75:5E:F4:68 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DB015076DB486BC360545E00DA369002438F370 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a96b93c-5a4e-4a24-b2d1-b92663dfa3dc.roa Signing time: Tue 08 Jul 2025 15:30:29 +0000 ROA not before: Tue 08 Jul 2025 15:30:29 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:80c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b0:15:07:6d:b4:86:bc:36:05:45:e0:0d:a3:69:00:24:38:f3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:30:29 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=b53ef1365ac314f729b57e1a37628839a2bb70c66247bb08af15d06069a52ae7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9f:b6:23:17:40:a0:0d:c6:59:ed:ae:56:db: 76:2b:ae:66:ef:3b:2b:34:68:05:10:08:2a:ae:d6: 19:91:b2:95:bd:e8:f0:76:3b:16:08:9d:ef:6a:0b: 69:ba:d0:1a:b0:b7:7f:37:cd:12:d6:77:cd:c6:d0: 18:05:09:e0:6b:b2:67:f7:73:16:7d:76:f7:bc:28: 09:ae:ef:f0:ad:64:3b:dc:11:7b:10:82:32:49:7c: 14:37:a0:de:9b:c0:43:13:c9:ce:3e:75:01:d0:8d: fc:ca:07:0f:da:45:e9:c5:aa:e9:cc:9e:33:b5:64: b5:f8:53:72:3e:97:30:b0:41:0b:f0:3f:e7:90:c3: 0a:8d:45:2e:f3:e8:58:24:c0:37:e3:64:67:66:bc: e3:80:e1:2b:82:1e:e7:75:05:2c:15:a9:e3:56:d0: 24:62:6c:5b:2c:58:74:e9:be:d8:b4:07:a1:d7:c3: 6d:ec:c5:10:6e:59:72:3c:f0:b8:42:87:09:97:41: 6a:a3:52:08:a2:85:80:3f:91:14:d5:4b:70:45:44: 59:9c:36:f7:ba:0a:d7:e8:74:2f:4d:fc:37:41:76: e6:ad:81:52:bb:11:45:50:74:9e:1d:50:be:83:97: 28:1d:6c:0d:5a:be:91:20:d7:6a:2b:c0:4e:5d:70: cc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A2:11:F8:15:A7:58:58:AB:8E:AD:A3:6A:39:77:22:75:5E:F4:68 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a96b93c-5a4e-4a24-b2d1-b92663dfa3dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:80c0::/46 Signature Algorithm: sha256WithRSAEncryption 61:23:d9:d3:4a:bf:bf:10:dd:95:a5:1e:6d:d4:ac:58:8f:87: 5e:8b:94:f0:51:13:e5:60:c7:95:3b:39:ad:9f:26:0c:43:ba: ff:fa:ab:8d:06:3d:28:e2:44:c1:ab:e7:32:ac:9e:5c:56:94: f9:82:38:d4:3c:6d:2b:53:ca:be:b9:b4:dc:5c:45:52:69:9c: 66:79:2f:43:7b:36:7b:c2:ec:45:0d:db:08:8e:42:ac:f8:4e: 2d:50:9a:81:c1:24:3f:35:b5:10:c1:d4:f3:4d:16:43:e1:cd: 8c:aa:65:8f:5c:12:c1:69:08:cc:6e:b2:dc:28:5a:53:68:f1: e2:26:80:19:bd:41:05:3d:2c:89:f2:20:c3:cf:9d:fe:8a:d5: d8:b4:79:10:8c:58:dd:e0:3d:6a:a6:b7:ef:00:62:94:15:ed: 95:3d:dc:40:79:73:b0:4b:35:3a:31:09:e0:0f:73:10:0e:6c: 42:f6:c6:e8:83:88:8b:12:82:25:d6:ac:d8:b0:ee:f7:e0:aa: d5:f1:d3:ec:68:94:13:de:fc:e5:8f:58:31:21:33:b6:9f:c1: 84:05:c8:1a:6f:da:78:45:18:0c:bf:06:11:ae:e8:2c:a9:6e: 39:eb:fb:fb:4f:eb:51:a6:c8:de:bf:f5:50:57:a2:a4:23:05: c1:1b:19:62 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDbAVB220hrw2BUXgDaNpACQ483AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTUzMDI5WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTNlZjEzNjVhYzMxNGY3MjliNTdlMWEzNzYyODgzOWEy YmI3MGM2NjI0N2JiMDhhZjE1ZDA2MDY5YTUyYWU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1n7YjF0CgDcZZ7a5W23YrrmbvOys0aAUQCCqu1hmRspW9 6PB2OxYIne9qC2m60Bqwt383zRLWd83G0BgFCeBrsmf3cxZ9dve8KAmu7/CtZDvc EXsQgjJJfBQ3oN6bwEMTyc4+dQHQjfzKBw/aRenFqunMnjO1ZLX4U3I+lzCwQQvw P+eQwwqNRS7z6FgkwDfjZGdmvOOA4SuCHud1BSwVqeNW0CRibFssWHTpvti0B6HX w23sxRBuWXI88LhChwmXQWqjUgiihYA/kRTVS3BFRFmcNve6CtfodC9N/DdBduat gVK7EUVQdJ4dUL6DlygdbA1avpEg12orwE5dcMzPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjaIR+BWnWFirjq2jajl3InVe9GgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhOTZiOTNjLTVhNGUtNGEyNC1iMmQxLWI5MjY2M2RmYTNkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3gMAwDQYJKoZIhvcNAQELBQADggEBAGEj2dNKv78Q3ZWlHm3UrFiP h16LlPBRE+Vgx5U7Oa2fJgxDuv/6q40GPSjiRMGr5zKsnlxWlPmCONQ8bStTyr65 tNxcRVJpnGZ5L0N7NnvC7EUN2wiOQqz4Ti1QmoHBJD81tRDB1PNNFkPhzYyqZY9c EsFpCMxustwoWlNo8eImgBm9QQU9LInyIMPPnf6K1di0eRCMWN3gPWqmt+8AYpQV 7ZU93EB5c7BLNToxCeAPcxAObEL2xuiDiIsSgiXWrNiw7vfgqtXx0+xolBPe/OWP WDEhM7afwYQFyBpv2nhFGAy/BhGu6Cypbjnr+/tP61GmyN6/9VBXoqQjBcEbGWI= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:56 2025 by rpki-client