$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7034d5d9-ee87-4cda-8cb2-ba825242f6a9.roa File: 7034d5d9-ee87-4cda-8cb2-ba825242f6a9.roa (raw, json) Hash identifier: /1bXHWl0BQjBBz8nOq6gvtz6+q6n4pQkXz8vewj59nI= Subject key identifier: 6E:30:FE:FB:6E:05:5B:00:42:3A:0E:AB:C0:38:FC:CE:48:A3:01:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2CDEB9F063307E823C46CC42A453E151CB5EDB4A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7034d5d9-ee87-4cda-8cb2-ba825242f6a9.roa Signing time: Mon 07 Jul 2025 17:31:06 +0000 ROA not before: Mon 07 Jul 2025 17:31:06 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:de:b9:f0:63:30:7e:82:3c:46:cc:42:a4:53:e1:51:cb:5e:db:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 17:31:06 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=ff6f6bcde1934560b54dbf55b235b6fbe3d240f5ce3a76b64e902f8dcd417c89, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:d5:74:05:51:a6:fa:a9:31:40:b7:a8:5d: d1:3c:a7:37:b6:21:eb:1b:2a:5c:52:47:72:14:19: 2d:c4:29:ec:b9:db:81:44:e0:64:4f:ae:d6:fe:08: b9:eb:a9:c1:6c:14:85:c3:d8:f6:7a:02:03:6c:84: bc:ca:53:6b:c0:1f:ee:f4:6b:54:92:93:be:02:1d: 2d:d3:a1:79:81:20:db:1b:63:13:69:33:df:ab:ab: 21:83:24:e3:d2:db:f5:f4:18:2e:fd:5f:af:8f:c1: f1:d3:c5:46:66:16:df:92:c6:33:c7:9b:81:9a:2e: 19:50:a7:d7:12:47:4a:54:f8:a9:14:3e:ab:0a:39: bd:d3:a5:0a:90:43:6c:f2:7d:92:28:9c:d1:2d:42: ec:71:af:9b:1b:8c:c1:25:9f:86:4a:d3:56:89:11: 46:b8:7d:88:af:78:75:a1:bd:a1:ea:af:2d:f0:b0: 57:1c:68:36:b5:67:03:dd:94:0e:ec:5d:73:6a:6e: c3:9c:12:0a:64:ef:f3:dc:4b:a2:74:d7:ce:dd:8e: a4:a4:fb:5f:e5:ae:c7:5b:af:25:df:4d:78:8c:cc: 85:c0:78:fa:96:e8:68:f8:94:72:6b:c5:6e:c1:2f: cc:4b:6d:c5:fd:5f:5d:4d:c5:21:2e:ba:51:bd:43: ed:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:30:FE:FB:6E:05:5B:00:42:3A:0E:AB:C0:38:FC:CE:48:A3:01:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7034d5d9-ee87-4cda-8cb2-ba825242f6a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:4080::/48 Signature Algorithm: sha256WithRSAEncryption bf:12:64:a0:58:02:06:f3:9b:14:52:3d:f9:d4:fa:9d:ae:c4: 73:2f:6e:7e:d3:98:37:f8:6f:e1:86:48:c8:58:09:98:f4:d0: 57:32:d0:d5:9a:14:4d:fc:02:55:a1:3b:c8:76:df:6a:b9:93: 7f:17:f5:ed:cc:55:ca:28:78:85:c7:6e:d1:28:ff:a0:3a:f7: 46:b8:68:b5:10:92:37:b4:94:05:cc:16:23:6d:8d:58:6b:f7: c8:eb:26:44:f4:bf:33:f9:9f:6e:9a:ba:0d:dd:5d:e3:4a:9e: e9:8c:3b:f8:e7:31:16:ca:68:7b:c8:5e:ab:4c:b6:ee:b0:eb: 94:9f:82:a0:2a:4c:fb:ef:f0:b7:7f:ef:ab:6c:74:c4:eb:44: 1a:82:31:d2:54:1c:3c:dd:9e:c8:5d:8d:02:87:32:23:cd:d7: 26:bf:01:55:c4:64:be:16:cc:d0:59:83:69:49:31:57:ce:fe: ef:78:b1:65:f3:16:f1:5f:fb:c8:8c:dd:96:2c:96:50:fe:d5: 76:fc:6f:12:82:fa:35:6e:85:dd:64:9f:10:92:1d:d4:db:25: 3a:d6:b4:24:1d:4e:62:89:ef:11:dd:df:83:4f:d4:51:6c:4c: 8b:db:30:5a:fc:9e:9e:42:0b:32:54:98:f3:10:86:bc:a1:20: e7:3f:dd:2a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULN658GMwfoI8RsxCpFPhUcte20owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTczMTA2WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjZmNmJjZGUxOTM0NTYwYjU0ZGJmNTViMjM1YjZmYmUz ZDI0MGY1Y2UzYTc2YjY0ZTkwMmY4ZGNkNDE3Yzg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/mdV0BVGm+qkxQLeoXdE8pze2IesbKlxSR3IUGS3EKey5 24FE4GRPrtb+CLnrqcFsFIXD2PZ6AgNshLzKU2vAH+70a1SSk74CHS3ToXmBINsb YxNpM9+rqyGDJOPS2/X0GC79X6+PwfHTxUZmFt+SxjPHm4GaLhlQp9cSR0pU+KkU PqsKOb3TpQqQQ2zyfZIonNEtQuxxr5sbjMEln4ZK01aJEUa4fYiveHWhvaHqry3w sFccaDa1ZwPdlA7sXXNqbsOcEgpk7/PcS6J0187djqSk+1/lrsdbryXfTXiMzIXA ePqW6Gj4lHJrxW7BL8xLbcX9X11NxSEuulG9Q+0fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbjD++24FWwBCOg6rwDj8zkijATgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwMzRkNWQ5LWVlODctNGNkYS04Y2IyLWJhODI1MjQyZjZhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//QIAwDQYJKoZIhvcNAQELBQADggEBAL8SZKBYAgbzmxRSPfnU+p2u xHMvbn7TmDf4b+GGSMhYCZj00Fcy0NWaFE38AlWhO8h232q5k38X9e3MVcooeIXH btEo/6A690a4aLUQkje0lAXMFiNtjVhr98jrJkT0vzP5n26aug3dXeNKnumMO/jn MRbKaHvIXqtMtu6w65SfgqAqTPvv8Ld/76tsdMTrRBqCMdJUHDzdnshdjQKHMiPN 1ya/AVXEZL4WzNBZg2lJMVfO/u94sWXzFvFf+8iM3ZYsllD+1Xb8bxKC+jVuhd1k nxCSHdTbJTrWtCQdTmKJ7xHd34NP1FFsTIvbMFr8np5CCzJUmPMQhryhIOc/3So= -----END CERTIFICATE-----Generated at Tue Jul 22 04:55:27 2025 by rpki-client