$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e6356c-d13c-480e-a973-81f7a991a615.roa File: 89e6356c-d13c-480e-a973-81f7a991a615.roa (raw, json) Hash identifier: +gD8PFLlGPCyFeGC2PouuTwEIGIfTa20Bbjf0QflSI0= Subject key identifier: 3E:D9:85:3F:30:D7:CB:AE:28:A7:8C:FE:35:B0:27:0D:18:5B:A7:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3676365CCE56079BB690D7A49702466A8C2358EE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e6356c-d13c-480e-a973-81f7a991a615.roa Signing time: Tue 08 Jul 2025 17:11:27 +0000 ROA not before: Tue 08 Jul 2025 17:11:27 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f2f:4000::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:76:36:5c:ce:56:07:9b:b6:90:d7:a4:97:02:46:6a:8c:23:58:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:11:27 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=c2cf890c88130aebc84a266c2b71c33b698f3899dc3adfa5aaac5134e1d55c0d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5f:5f:61:43:52:2b:f7:eb:12:bf:7d:bb:41: 43:ff:0e:bd:92:2d:b3:3c:c4:3a:e1:d8:36:41:0c: f0:db:b3:e7:90:26:2a:ea:1d:b9:86:d2:54:ef:e8: 0b:fa:66:47:5f:4d:e6:da:a5:d9:79:1a:07:f2:68: 91:7c:56:fb:5e:90:51:eb:33:61:91:55:ea:1e:82: 75:9b:45:e6:03:c5:f5:37:be:5b:17:b2:ff:e7:c9: 04:2e:32:b3:23:16:14:f1:aa:82:a3:4a:f9:04:2e: 8a:f8:40:e6:00:1d:cc:ec:05:eb:16:15:d6:88:2b: 36:39:c0:7d:b2:15:da:07:d2:4c:4f:3c:73:bb:9a: d9:d9:a4:34:c5:d2:9f:69:fb:03:e2:e3:7f:e5:6f: 67:f1:6e:f4:f8:63:d6:ae:fe:2e:af:0d:28:81:e6: ec:3d:9a:f3:c1:75:a4:03:15:06:9e:c2:a1:28:4c: 2b:ba:67:62:ad:13:8e:09:8b:ce:2c:a9:ce:7b:5d: 4d:57:65:fa:fc:1e:9e:22:96:d9:aa:8c:8f:b3:da: f5:3a:ab:3b:e0:ad:b7:33:b5:6b:8b:05:83:e4:a0: fd:0c:7c:79:c3:a6:dd:8b:08:f0:61:4b:e5:ac:ff: ea:3a:73:b0:f0:c1:1d:c3:ee:ac:bb:45:40:4f:ff: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D9:85:3F:30:D7:CB:AE:28:A7:8C:FE:35:B0:27:0D:18:5B:A7:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e6356c-d13c-480e-a973-81f7a991a615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2f:4000::/37 Signature Algorithm: sha256WithRSAEncryption 19:fd:4b:fc:45:9b:6b:ad:5f:d5:70:6e:49:da:11:d4:45:0a: b4:ae:14:0e:11:53:5c:7a:f3:12:fc:48:c5:25:a5:53:1a:f0: 67:11:8f:98:21:23:11:0c:29:b4:a2:86:f1:7c:ed:92:92:c4: f6:8e:f8:19:4c:03:c1:53:58:df:1a:d7:28:cd:e4:fe:ae:b0: 91:32:3e:b5:a8:f9:2a:80:f7:3e:99:d4:93:77:ea:43:13:7a: 9a:78:4e:45:1a:20:58:9f:6d:06:56:54:79:b6:af:1e:0d:0a: 2c:b9:55:10:30:c0:7a:aa:f2:04:5f:02:f9:e7:83:70:1c:53: 72:54:f4:35:5e:b7:88:94:50:33:1a:52:dd:0a:0f:1a:7c:c7: 9e:22:a8:33:d1:33:fc:da:69:fd:b6:11:2a:44:de:69:e8:4f: c6:5b:b5:3e:c6:e9:a3:82:06:04:65:1b:68:bb:75:3b:49:2e: fa:63:89:dc:15:4d:74:66:67:ea:23:7e:ab:6a:21:a8:3f:99: c9:36:e7:ef:ef:01:48:84:5b:f9:ec:f9:2d:3d:fe:3f:7e:53: 1d:15:ea:3e:37:3a:27:49:11:af:a7:84:84:e8:2d:d1:3f:c8: fe:cd:74:71:15:c0:9b:ed:66:62:81:22:24:0a:2e:74:cc:a1: da:68:a1:30 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNnY2XM5WB5u2kNeklwJGaowjWO4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTcxMTI3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMmNmODkwYzg4MTMwYWViYzg0YTI2NmMyYjcxYzMzYjY5 OGYzODk5ZGMzYWRmYTVhYWFjNTEzNGUxZDU1YzBkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZX19hQ1Ir9+sSv327QUP/Dr2SLbM8xDrh2DZBDPDbs+eQ JirqHbmG0lTv6Av6ZkdfTebapdl5GgfyaJF8VvtekFHrM2GRVeoegnWbReYDxfU3 vlsXsv/nyQQuMrMjFhTxqoKjSvkELor4QOYAHczsBesWFdaIKzY5wH2yFdoH0kxP PHO7mtnZpDTF0p9p+wPi43/lb2fxbvT4Y9au/i6vDSiB5uw9mvPBdaQDFQaewqEo TCu6Z2KtE44Ji84sqc57XU1XZfr8Hp4iltmqjI+z2vU6qzvgrbcztWuLBYPkoP0M fHnDpt2LCPBhS+Ws/+o6c7DwwR3D7qy7RUBP/1V7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUPtmFPzDXy64op4z+NbAnDRhbp9EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5ZTYzNTZjLWQxM2MtNDgwZS1hOTczLTgxZjdhOTkxYTYxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8vQDANBgkqhkiG9w0BAQsFAAOCAQEAGf1L/EWba61f1XBuSdoR1EUK tK4UDhFTXHrzEvxIxSWlUxrwZxGPmCEjEQwptKKG8XztkpLE9o74GUwDwVNY3xrX KM3k/q6wkTI+taj5KoD3PpnUk3fqQxN6mnhORRogWJ9tBlZUebavHg0KLLlVEDDA eqryBF8C+eeDcBxTclT0NV63iJRQMxpS3QoPGnzHniKoM9Ez/Npp/bYRKkTeaehP xlu1Psbpo4IGBGUbaLt1O0ku+mOJ3BVNdGZn6iN+q2ohqD+ZyTbn7+8BSIRb+ez5 LT3+P35THRXqPjc6J0kRr6eEhOgt0T/I/s10cRXAm+1mYoEiJAoudMyh2mihMA== -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:08 2025 by rpki-client