$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bb24ed8-8eb1-40cc-b358-3930146ef88a.roa File: 7bb24ed8-8eb1-40cc-b358-3930146ef88a.roa (raw, json) Hash identifier: kcNDLghgGsoB3Io/0A4mmZ8X18rFkeRLkS5TeaazwfU= Subject key identifier: 9B:72:71:9E:6E:FF:06:76:38:9E:CB:8A:D2:4C:99:32:CA:59:F4:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 731413485AB42B459F0DB653463E934CEBAB4544 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bb24ed8-8eb1-40cc-b358-3930146ef88a.roa Signing time: Tue 08 Jul 2025 16:11:21 +0000 ROA not before: Tue 08 Jul 2025 16:11:21 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:7480::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:14:13:48:5a:b4:2b:45:9f:0d:b6:53:46:3e:93:4c:eb:ab:45:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:11:21 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=0980792a53b70c1d79828c276f683903609cef94a01fc963d4f670759c9f2250, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:23:4d:83:cb:ee:46:d0:f3:9c:ac:07:a7:25: bc:d5:8c:55:c8:f7:0a:58:6e:74:db:04:90:1f:b3: 92:80:86:c7:77:32:08:48:4b:5f:c7:11:84:32:7a: a5:4f:4c:49:84:56:e9:19:4e:d9:8e:98:31:e0:bc: 49:d5:b7:b9:b8:ca:05:8b:d0:97:a1:1c:34:4b:28: 96:6f:36:1b:f0:54:d1:5c:07:ef:b4:b6:4f:3f:cb: 8c:c7:d7:0c:da:f9:26:d1:50:d9:ec:21:12:08:97: 39:78:1e:e1:cb:6f:67:7b:04:de:81:4b:a5:fb:68: 4c:d1:80:fd:50:50:40:eb:cd:e7:72:5c:c3:9b:62: 89:d5:e3:63:94:1e:ec:98:23:26:fb:d1:39:2f:10: 53:f3:e0:5d:fa:be:7b:71:25:cd:f8:1d:c7:ac:53: e5:e7:38:67:3e:87:3a:5e:c5:04:e9:cb:01:a8:b3: d7:60:f6:f8:91:fc:87:30:f2:b3:3e:77:a1:ea:c1: 31:6c:56:9c:90:ce:ed:ed:4f:95:67:a4:d4:06:3d: 77:c1:6a:d6:42:e4:69:3c:b2:33:14:f2:bb:14:3f: ab:ef:4f:af:43:5b:b8:55:f7:41:e6:f8:c6:a3:c2: 46:4c:ac:ca:c3:a4:e4:57:08:b4:a5:c3:ac:05:9d: 53:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:72:71:9E:6E:FF:06:76:38:9E:CB:8A:D2:4C:99:32:CA:59:F4:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bb24ed8-8eb1-40cc-b358-3930146ef88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:7480::/46 Signature Algorithm: sha256WithRSAEncryption 99:7a:6a:96:73:f1:3e:2c:36:a5:fd:59:8f:42:32:b1:e7:cb: 65:25:7b:db:f6:80:84:7e:22:b7:41:fc:e7:f4:8f:17:b1:fc: 46:18:1a:55:d6:5c:c9:cc:ac:5b:fb:b6:f3:74:6d:c3:e8:95: fa:7f:d3:5b:95:b9:74:eb:82:25:1a:4c:93:3f:58:7b:86:34: 15:79:a3:58:c0:f9:cb:5f:55:89:07:34:8c:03:82:35:32:c7: 16:15:53:35:47:29:3a:47:44:39:85:b3:53:22:0f:5d:0b:87: 65:26:f4:d2:72:d5:cb:a5:07:90:c7:17:c2:f9:b2:e6:25:8e: fe:f5:a9:6d:10:cd:f8:26:2e:d4:a2:e0:e7:29:b9:5b:c1:98: c4:2c:3d:9c:07:d0:46:a2:ca:00:88:c1:0e:d8:98:cc:ef:88: c2:e7:20:1c:f2:e8:f2:09:ab:48:38:ec:51:7a:8a:b6:87:03: 0d:c2:75:56:b2:50:78:af:9e:2f:b5:b8:55:c2:e9:13:48:a1: 59:7e:2f:80:2f:fd:aa:f6:d7:62:cc:17:b1:71:32:73:ba:0d: a6:14:90:c3:81:a8:46:b8:27:68:4e:2c:27:e8:11:99:3a:e6: e9:99:8a:f0:08:4a:90:13:ea:03:d0:4a:d0:29:31:08:7c:44: dd:45:35:5a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcxQTSFq0K0WfDbZTRj6TTOurRUQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYxMTIxWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTgwNzkyYTUzYjcwYzFkNzk4MjhjMjc2ZjY4MzkwMzYw OWNlZjk0YTAxZmM5NjNkNGY2NzA3NTljOWYyMjUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsI02Dy+5G0POcrAenJbzVjFXI9wpYbnTbBJAfs5KAhsd3 MghIS1/HEYQyeqVPTEmEVukZTtmOmDHgvEnVt7m4ygWL0JehHDRLKJZvNhvwVNFc B++0tk8/y4zH1wza+SbRUNnsIRIIlzl4HuHLb2d7BN6BS6X7aEzRgP1QUEDrzedy XMObYonV42OUHuyYIyb70TkvEFPz4F36vntxJc34HcesU+XnOGc+hzpexQTpywGo s9dg9viR/Icw8rM+d6HqwTFsVpyQzu3tT5VnpNQGPXfBatZC5Gk8sjMU8rsUP6vv T69DW7hV90Hm+MajwkZMrMrDpORXCLSlw6wFnVP3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUm3Jxnm7/BnY4nsuK0kyZMspZ9C8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdiYjI0ZWQ4LThlYjEtNDBjYy1iMzU4LTM5MzAxNDZlZjg4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3dIAwDQYJKoZIhvcNAQELBQADggEBAJl6apZz8T4sNqX9WY9CMrHn y2Ule9v2gIR+IrdB/Of0jxex/EYYGlXWXMnMrFv7tvN0bcPolfp/01uVuXTrgiUa TJM/WHuGNBV5o1jA+ctfVYkHNIwDgjUyxxYVUzVHKTpHRDmFs1MiD10Lh2Um9NJy 1culB5DHF8L5suYljv71qW0QzfgmLtSi4OcpuVvBmMQsPZwH0EaiygCIwQ7YmMzv iMLnIBzy6PIJq0g47FF6iraHAw3CdVayUHivni+1uFXC6RNIoVl+L4Av/ar212LM F7FxMnO6DaYUkMOBqEa4J2hOLCfoEZk65umZivAISpAT6gPQStApMQh8RN1FNVo= -----END CERTIFICATE-----Generated at Mon Jul 21 23:40:53 2025 by rpki-client