$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f9c388c-8c1b-4211-a92d-f2e6e8c97b82.roa File: 3f9c388c-8c1b-4211-a92d-f2e6e8c97b82.roa (raw, json) Hash identifier: snBOPc2kKnJUo249qUluPYO4gyRcvTYOghxX0R8NDdI= Subject key identifier: 0A:D3:1B:BD:0D:E8:E8:1A:81:F8:EA:A4:A9:FF:A4:F8:D4:FD:2A:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 77F833232A4F1E7B481A00E1DC17E08A4C5BB16E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f9c388c-8c1b-4211-a92d-f2e6e8c97b82.roa Signing time: Tue 08 Jul 2025 17:12:25 +0000 ROA not before: Tue 08 Jul 2025 17:12:25 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f11:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f8:33:23:2a:4f:1e:7b:48:1a:00:e1:dc:17:e0:8a:4c:5b:b1:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:12:25 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=50262a3940b88fe81cdfd2ecab0f6f40e06dabc0917966d33b9955c5407cabbf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:a3:23:b4:c4:30:e9:18:fa:bb:a6:15:3a: 86:e2:74:b1:ce:9c:f0:98:d6:01:e9:57:61:34:a9: 34:e1:1c:c0:ea:5f:7b:40:b1:0b:70:94:3b:4d:76: 9d:5a:f2:6f:ce:1b:e0:51:bc:68:d3:1d:83:56:5e: 2a:26:e9:fe:fe:cb:a7:38:36:cb:f1:97:65:ff:b8: dd:bf:b2:63:02:2b:a8:ba:4f:c7:02:71:51:1f:d7: 1e:2a:1c:4f:43:20:37:16:c3:89:c4:43:ca:2f:f3: 78:b2:9d:61:d2:fe:89:41:ba:15:d6:8b:2d:8d:c1: 68:fd:58:18:f8:ac:b2:99:50:62:b6:e7:54:5e:cf: 80:e0:d8:cd:e5:c5:d7:93:5e:ff:ab:93:84:70:e2: 07:59:49:aa:1e:1f:d3:d6:89:24:c7:5f:42:52:95: 85:07:01:cb:bd:d0:71:05:12:93:8c:84:76:b0:25: 65:93:c2:97:56:ff:4d:d4:55:c5:84:67:8d:f8:4f: 67:e6:ac:03:54:d4:be:9c:e5:74:3f:3d:fa:18:7d: ce:e8:de:99:e9:ad:5f:9e:f9:3c:28:d4:27:2c:32: ea:4e:02:b8:af:d1:7c:c5:5a:ad:60:a5:f1:3b:e6: e9:52:1a:bb:31:41:e2:bd:18:72:29:a9:69:61:db: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D3:1B:BD:0D:E8:E8:1A:81:F8:EA:A4:A9:FF:A4:F8:D4:FD:2A:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f9c388c-8c1b-4211-a92d-f2e6e8c97b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f11:4000::/36 Signature Algorithm: sha256WithRSAEncryption 05:71:aa:45:29:9e:99:e3:fc:a8:f8:86:0e:07:a8:2f:b3:16: 24:33:7b:d3:1a:2d:fb:38:03:a9:05:c0:30:63:56:f8:77:7b: 4a:60:72:01:26:6d:4e:d9:bf:11:1b:23:49:12:42:05:ab:6a: 2c:ae:70:55:49:37:84:d4:84:f9:12:b9:23:48:e0:97:a7:14: 2a:cc:93:86:f1:63:f5:b0:04:e1:8f:ff:4d:c2:8c:c3:fd:90: fe:30:1e:12:b1:d5:a1:89:27:0a:f0:09:9d:54:57:b3:1c:84: 58:5d:a5:c9:55:38:7b:f8:c1:94:06:c5:d8:6d:57:44:e3:22: 13:e1:81:db:a7:82:75:3b:49:24:c4:03:09:f8:3f:ed:4a:3c: 65:81:37:c3:49:96:68:49:ac:00:3e:8b:e3:b9:04:39:5b:72: df:e6:dd:81:f2:9b:ab:ea:41:12:ad:a0:77:8a:f4:7a:ff:cd: b8:ef:ce:ab:4f:d9:ed:92:88:4e:3b:ed:ad:ca:38:2e:fd:c7: 52:9a:6b:95:64:b1:41:67:57:9b:56:74:ef:d1:cb:01:af:89: f9:81:49:27:89:72:04:a2:1a:a6:b0:cf:ec:3b:9e:fd:9a:cf: 51:c3:82:27:a4:bf:aa:3b:05:8b:30:1a:3f:e3:21:09:e4:9f: 53:40:0f:8e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUd/gzIypPHntIGgDh3BfgikxbsW4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTcxMjI1WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDI2MmEzOTQwYjg4ZmU4MWNkZmQyZWNhYjBmNmY0MGUw NmRhYmMwOTE3OTY2ZDMzYjk5NTVjNTQwN2NhYmJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRXqMjtMQw6Rj6u6YVOobidLHOnPCY1gHpV2E0qTThHMDq X3tAsQtwlDtNdp1a8m/OG+BRvGjTHYNWXiom6f7+y6c4Nsvxl2X/uN2/smMCK6i6 T8cCcVEf1x4qHE9DIDcWw4nEQ8ov83iynWHS/olBuhXWiy2NwWj9WBj4rLKZUGK2 51Rez4Dg2M3lxdeTXv+rk4Rw4gdZSaoeH9PWiSTHX0JSlYUHAcu90HEFEpOMhHaw JWWTwpdW/03UVcWEZ434T2fmrANU1L6c5XQ/PfoYfc7o3pnprV+e+Two1CcsMupO Ariv0XzFWq1gpfE75ulSGrsxQeK9GHIpqWlh29S9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUCtMbvQ3o6BqB+Oqkqf+k+NT9KmowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNmOWMzODhjLThjMWItNDIxMS1hOTJkLWYyZTZlOGM5N2I4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8RQDANBgkqhkiG9w0BAQsFAAOCAQEABXGqRSmemeP8qPiGDgeoL7MW JDN70xot+zgDqQXAMGNW+Hd7SmByASZtTtm/ERsjSRJCBatqLK5wVUk3hNSE+RK5 I0jgl6cUKsyThvFj9bAE4Y//TcKMw/2Q/jAeErHVoYknCvAJnVRXsxyEWF2lyVU4 e/jBlAbF2G1XROMiE+GB26eCdTtJJMQDCfg/7Uo8ZYE3w0mWaEmsAD6L47kEOVty 3+bdgfKbq+pBEq2gd4r0ev/NuO/Oq0/Z7ZKITjvtrco4Lv3HUpprlWSxQWdXm1Z0 79HLAa+J+YFJJ4lyBKIaprDP7Due/ZrPUcOCJ6S/qjsFizAaP+MhCeSfU0APjg== -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:03 2025 by rpki-client