$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90845d55-fd61-4bff-9b0c-ad0d1046127f.roa File: 90845d55-fd61-4bff-9b0c-ad0d1046127f.roa (raw, json) Hash identifier: +h82GsqjusPnvaZzCVp+K1yyuZGq3Ztvjl8qaVdPR3U= Subject key identifier: C5:93:B1:B2:B0:3C:11:91:0F:A1:C3:0A:F7:BF:FB:55:B9:51:65:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 02A723A6E04AA33F6F372552A701E6103FE4C5D8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90845d55-fd61-4bff-9b0c-ad0d1046127f.roa Signing time: Tue 08 Jul 2025 17:12:20 +0000 ROA not before: Tue 08 Jul 2025 17:12:20 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f15:4800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a7:23:a6:e0:4a:a3:3f:6f:37:25:52:a7:01:e6:10:3f:e4:c5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:12:20 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=4730214c27c84946b11f04d472516f9f2f0b02e4119573970fb81b45fff8a385, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8e:4d:65:0f:88:df:07:3b:1c:46:cd:be:65: 09:22:43:5e:16:d0:76:19:d6:af:5c:c2:99:cf:47: dd:b2:6c:54:34:da:dc:b2:04:37:3c:55:b7:49:bb: ab:65:d8:bb:83:6c:57:97:38:e0:65:44:a1:36:e5: 4e:65:26:95:65:81:c8:c8:fd:1e:ee:58:23:16:38: 90:c7:59:a7:a6:58:39:5e:95:e5:7f:2d:05:46:f2: e0:3e:14:1b:9f:f2:e5:87:1a:6e:0e:56:3a:fb:4b: 56:27:77:9b:87:e4:74:69:d6:74:b9:27:36:ae:78: 4a:e8:c8:a4:4f:27:7b:4f:ee:a0:48:48:92:02:b6: 75:56:de:fd:f1:91:70:58:ca:0f:7e:24:c4:d0:91: b2:11:dc:65:70:c1:aa:f3:bc:cf:ce:d2:55:00:84: e4:b0:3f:4c:f1:fb:20:13:20:88:16:1d:19:e6:ee: 85:c3:95:72:10:a7:70:73:fe:22:35:63:96:15:92: 80:83:6e:94:09:6b:f2:d5:ca:b2:2a:87:40:96:e0: 4e:84:9e:2a:55:a3:4d:6e:b1:04:f4:81:68:55:ce: fc:b2:51:75:1c:55:7b:67:bb:0b:11:0a:3a:3a:77: 1f:4c:24:3e:d5:09:d3:8b:47:ec:fb:7f:91:25:cb: b2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:93:B1:B2:B0:3C:11:91:0F:A1:C3:0A:F7:BF:FB:55:B9:51:65:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90845d55-fd61-4bff-9b0c-ad0d1046127f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f15:4800::/37 Signature Algorithm: sha256WithRSAEncryption 6a:4c:d4:98:0d:e0:2d:d2:fc:bf:23:68:9a:b8:e0:3f:b0:fa: b4:f5:98:28:a7:a3:3c:6f:b4:45:7c:d8:8b:6c:48:d1:c9:bd: 47:20:9f:06:c0:4a:87:b2:d5:5b:f3:97:e4:50:e2:f3:25:66: aa:df:b0:eb:4a:ff:83:f9:b9:86:92:d6:11:7b:99:d0:5d:69: a3:71:a3:20:80:2d:39:71:ad:db:97:8e:f3:4b:b8:fe:bc:ea: b4:f9:d9:30:d1:0d:0a:88:8a:03:e0:6d:3d:6b:bc:5b:87:e1: ae:23:00:78:ee:76:1b:94:d8:d3:ad:23:76:5b:e2:0d:01:ff: ef:cc:8f:27:55:0a:72:4e:ba:5d:b1:e1:7c:61:7e:40:34:5d: ae:db:d6:92:aa:96:12:d5:ec:cc:c8:23:b6:c9:6d:77:11:37: f8:4e:3e:16:fd:bc:f3:c4:11:55:40:75:b9:b7:5d:b9:2a:27: 87:91:2b:f9:f9:ab:25:27:28:be:7f:b1:f2:27:de:4b:c2:0b: 59:51:cb:41:3f:e0:4e:cc:f9:8c:41:b0:73:b0:24:a5:69:24: 0e:26:05:8c:a2:ea:9d:19:36:15:df:5b:b5:e2:72:95:46:6b: d3:12:c8:75:ac:4c:a7:75:99:ea:3f:02:c8:0b:81:b2:67:85: ed:1a:38:3b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUAqcjpuBKoz9vNyVSpwHmED/kxdgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTcxMjIwWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzMwMjE0YzI3Yzg0OTQ2YjExZjA0ZDQ3MjUxNmY5ZjJm MGIwMmU0MTE5NTczOTcwZmI4MWI0NWZmZjhhMzg1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCijk1lD4jfBzscRs2+ZQkiQ14W0HYZ1q9cwpnPR92ybFQ0 2tyyBDc8VbdJu6tl2LuDbFeXOOBlRKE25U5lJpVlgcjI/R7uWCMWOJDHWaemWDle leV/LQVG8uA+FBuf8uWHGm4OVjr7S1Ynd5uH5HRp1nS5JzaueEroyKRPJ3tP7qBI SJICtnVW3v3xkXBYyg9+JMTQkbIR3GVwwarzvM/O0lUAhOSwP0zx+yATIIgWHRnm 7oXDlXIQp3Bz/iI1Y5YVkoCDbpQJa/LVyrIqh0CW4E6EnipVo01usQT0gWhVzvyy UXUcVXtnuwsRCjo6dx9MJD7VCdOLR+z7f5Ely7JPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUxZOxsrA8EZEPocMK97/7VblRZRkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkwODQ1ZDU1LWZkNjEtNGJmZi05YjBjLWFkMGQxMDQ2MTI3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8VSDANBgkqhkiG9w0BAQsFAAOCAQEAakzUmA3gLdL8vyNomrjgP7D6 tPWYKKejPG+0RXzYi2xI0cm9RyCfBsBKh7LVW/OX5FDi8yVmqt+w60r/g/m5hpLW EXuZ0F1po3GjIIAtOXGt25eO80u4/rzqtPnZMNENCoiKA+BtPWu8W4fhriMAeO52 G5TY060jdlviDQH/78yPJ1UKck66XbHhfGF+QDRdrtvWkqqWEtXszMgjtsltdxE3 +E4+Fv2888QRVUB1ubdduSonh5Er+fmrJScovn+x8ifeS8ILWVHLQT/gTsz5jEGw c7AkpWkkDiYFjKLqnRk2Fd9bteJylUZr0xLIdaxMp3WZ6j8CyAuBsmeF7Ro4Ow== -----END CERTIFICATE-----Generated at Mon Jul 21 13:21:18 2025 by rpki-client