$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907885ef-23b6-481b-92d5-50f24b91939a.roa File: 907885ef-23b6-481b-92d5-50f24b91939a.roa (raw, json) Hash identifier: SVw168qZn46s4M2od3xMyssvTpLJFntFKajtl3Sf8Ow= Subject key identifier: 43:0E:68:91:C9:54:01:8A:41:2A:7B:0B:D7:49:DA:05:6D:5F:24:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 14364DEE1136849181795F39FED24CD6E445AAA3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907885ef-23b6-481b-92d5-50f24b91939a.roa Signing time: Sat 19 Jul 2025 00:10:32 +0000 ROA not before: Sat 19 Jul 2025 00:10:32 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:8149::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:36:4d:ee:11:36:84:91:81:79:5f:39:fe:d2:4c:d6:e4:45:aa:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:10:32 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=f0f8de75616308eb2252ad63a398628caa08e2aecac356490049f65b949671c6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:b9:5a:7c:a5:40:d8:42:d3:f2:1c:4c:c8: 03:c3:15:46:d7:29:fb:d9:1c:80:15:a0:1d:43:d8: ca:50:f3:fb:ef:aa:a1:e5:b6:db:4d:d3:af:8e:ea: 70:37:2b:a6:72:ef:2d:ee:53:3c:85:78:62:c5:63: 42:85:6d:36:ab:07:9a:96:83:2e:a2:2e:90:bd:2c: 8c:fa:96:24:c7:66:63:18:8f:06:f3:2e:a9:2c:67: a6:35:f0:67:52:5d:09:fb:e9:0b:e3:a6:93:12:a4: 06:bd:48:0b:ab:3c:3a:5c:e9:a7:2b:e0:06:a5:c3: 0c:f1:7c:80:d7:c7:19:48:15:2c:a6:58:3f:06:84: 73:b5:e6:61:e4:42:95:f8:6b:cc:8b:44:df:e0:dd: bc:a0:c5:33:0d:f6:59:a6:92:52:37:72:f7:af:bc: 71:8d:9b:d8:2e:79:44:b6:3d:15:30:ce:2d:b3:39: a4:93:fc:9c:51:d7:25:5d:53:1a:45:11:fb:f0:fe: fd:d7:44:4a:45:6c:2a:41:80:03:f5:9e:34:e1:fe: 21:00:7e:51:39:56:d9:09:ca:72:c0:40:70:8c:cf: 8b:b6:e4:ab:7b:05:53:74:a1:86:d1:13:8b:14:83: 82:bb:7d:5a:24:ca:0f:bb:2d:5c:01:58:02:cd:5c: d1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0E:68:91:C9:54:01:8A:41:2A:7B:0B:D7:49:DA:05:6D:5F:24:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907885ef-23b6-481b-92d5-50f24b91939a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:8149::/48 Signature Algorithm: sha256WithRSAEncryption c8:68:76:89:2b:72:8f:e0:8a:3e:20:30:66:9c:e5:2e:a9:91: f1:c1:b9:8e:31:8f:55:02:11:28:63:3b:59:56:57:f7:c8:38: 10:18:ee:3e:c4:53:e0:0d:ec:12:5f:25:8e:82:2a:83:f1:6e: 10:72:32:a0:db:13:32:de:c7:b1:90:ee:09:2a:18:e7:87:e6: 8c:94:50:e9:4c:fc:ae:4d:f3:5a:3a:84:20:39:ff:7a:bd:81: f8:ae:9f:73:a5:d0:08:12:06:8a:ea:7f:7e:70:84:ce:06:fd: f1:22:b4:75:26:08:d5:34:93:32:7e:d8:e2:3a:9b:4f:b1:4e: dd:b6:6b:8b:4b:54:96:2f:98:fb:11:d2:2e:b4:f3:b6:46:71: 5b:66:da:42:c2:50:d3:7c:cc:96:fe:96:e4:5f:12:74:c3:53: 82:3e:a4:4f:0f:4c:b4:7a:70:6f:6a:a7:30:ae:77:95:cb:a3: 73:b8:4d:11:f9:36:64:73:07:f9:e7:9e:2e:32:f2:43:59:c3: dc:6f:ad:8d:71:9b:3e:20:f3:1d:ef:ee:cd:8f:f7:85:49:6e: e4:c3:9e:d4:22:3f:a8:36:be:9a:2d:87:ea:dc:7a:eb:df:ec: a9:29:2b:9c:0e:21:b1:68:b0:39:a3:b9:09:de:45:cf:e3:6e: 3f:d9:f3:93 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFDZN7hE2hJGBeV85/tJM1uRFqqMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAxMDMyWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMGY4ZGU3NTYxNjMwOGViMjI1MmFkNjNhMzk4NjI4Y2Fh MDhlMmFlY2FjMzU2NDkwMDQ5ZjY1Yjk0OTY3MWM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChcLlafKVA2ELT8hxMyAPDFUbXKfvZHIAVoB1D2MpQ8/vv qqHltttN06+O6nA3K6Zy7y3uUzyFeGLFY0KFbTarB5qWgy6iLpC9LIz6liTHZmMY jwbzLqksZ6Y18GdSXQn76QvjppMSpAa9SAurPDpc6acr4AalwwzxfIDXxxlIFSym WD8GhHO15mHkQpX4a8yLRN/g3bygxTMN9lmmklI3cvevvHGNm9gueUS2PRUwzi2z OaST/JxR1yVdUxpFEfvw/v3XREpFbCpBgAP1njTh/iEAflE5VtkJynLAQHCMz4u2 5Kt7BVN0oYbRE4sUg4K7fVokyg+7LVwBWALNXNHJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQw5okclUAYpBKnsL10naBW1fJAkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkwNzg4NWVmLTIzYjYtNDgxYi05MmQ1LTUwZjI0YjkxOTM5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gUkwDQYJKoZIhvcNAQELBQADggEBAMhodokrco/gij4gMGac5S6p kfHBuY4xj1UCEShjO1lWV/fIOBAY7j7EU+AN7BJfJY6CKoPxbhByMqDbEzLex7GQ 7gkqGOeH5oyUUOlM/K5N81o6hCA5/3q9gfiun3Ol0AgSBorqf35whM4G/fEitHUm CNU0kzJ+2OI6m0+xTt22a4tLVJYvmPsR0i6087ZGcVtm2kLCUNN8zJb+luRfEnTD U4I+pE8PTLR6cG9qpzCud5XLo3O4TRH5NmRzB/nnni4y8kNZw9xvrY1xmz4g8x3v 7s2P94VJbuTDntQiP6g2vpoth+rceuvf7KkpK5wOIbFosDmjuQneRc/jbj/Z85M= -----END CERTIFICATE-----Generated at Mon Jul 21 18:15:15 2025 by rpki-client