$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4c1fcb0-2d51-499e-8638-473e8e04c8ae.roa File: a4c1fcb0-2d51-499e-8638-473e8e04c8ae.roa (raw, json) Hash identifier: BaCmgjujumLHHNuXVJ/SGwN8DlX1+s5Mjd1YboQfPl8= Subject key identifier: 92:42:F8:FE:05:79:50:F2:7C:75:3B:E3:2C:F4:9C:EA:BF:75:52:A6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7A790152D4E7AD830A9E6FF474780F2711EBAB64 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4c1fcb0-2d51-499e-8638-473e8e04c8ae.roa Signing time: Sat 12 Jul 2025 00:20:12 +0000 ROA not before: Sat 12 Jul 2025 00:20:12 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fef:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:79:01:52:d4:e7:ad:83:0a:9e:6f:f4:74:78:0f:27:11:eb:ab:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 12 00:20:12 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=73e4f506daab7872eb570209e36b636ec8c108d158fd199abcfd9db2f61c5f3c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:da:e3:bd:c9:72:fa:7a:1d:ab:8b:b6:49: e0:67:fb:56:b4:f3:1f:10:10:a4:c9:d7:04:80:38: 30:30:af:6f:82:fb:c4:fd:d7:5c:e6:11:f2:46:72: 54:79:6a:0a:f5:6e:00:6d:20:f9:e2:55:f5:06:98: f9:75:70:f9:08:fb:2a:9d:07:c5:06:e3:fa:be:42: 08:27:c9:a2:4d:97:bd:2f:0d:64:84:f7:a3:98:e7: b5:c0:57:3a:77:ac:6e:8b:ac:e4:31:eb:5a:42:14: 84:0e:4f:ba:7d:1c:ec:b3:b9:f1:84:cd:4a:da:91: 09:c4:22:56:94:3d:b7:42:df:d8:9e:3e:da:57:6e: c0:e7:62:64:eb:b8:6e:cf:ed:05:9d:95:f2:8e:7d: c5:de:2d:95:5e:dd:10:85:c4:99:0e:1c:a4:98:d1: 98:ce:20:5a:ad:20:d7:d9:6a:19:27:b3:2e:f6:b2: 18:b8:ac:8d:1d:5f:b7:d6:e3:fe:16:13:b6:fe:13: 37:a6:d4:08:cb:d9:a7:a2:00:71:5e:8b:7e:91:7d: 31:58:f5:1d:96:68:9b:45:55:7f:31:12:80:ee:99: d9:9e:84:d4:9c:df:01:44:ce:95:be:d6:3b:bb:b4: 60:93:41:c9:30:3d:fd:ac:a0:70:6c:b3:3f:f1:a2: 01:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:42:F8:FE:05:79:50:F2:7C:75:3B:E3:2C:F4:9C:EA:BF:75:52:A6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4c1fcb0-2d51-499e-8638-473e8e04c8ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:2000::/40 Signature Algorithm: sha256WithRSAEncryption 4c:0d:52:cf:77:3e:9a:f7:7d:14:ca:6c:10:8e:c1:08:82:ad: 11:ab:aa:73:e7:7f:af:7a:42:35:ca:ad:ca:b2:40:3f:c9:3b: f5:a2:42:90:ba:93:c7:0c:7e:ea:4a:25:61:e1:ce:4e:0d:47: 0a:ce:09:7b:16:32:f4:c7:dd:99:9e:28:32:92:0e:fb:49:5f: 37:5e:18:3d:53:68:3b:3b:bf:62:58:b1:a4:fb:67:b8:63:69: 2f:a8:70:ad:cd:ce:b0:7b:cc:c5:cf:b8:21:97:dd:aa:66:f1: a9:93:db:e6:c2:53:12:bc:fd:7d:e9:cf:91:73:f7:70:18:c8: dc:3b:0c:20:24:77:24:3b:02:42:03:84:89:98:96:cc:62:88: 67:25:fa:73:f8:04:f9:3d:7f:a4:6a:f7:b5:b2:46:dd:5b:9f: c0:22:cf:32:ab:1a:57:2b:aa:a8:c5:be:e8:77:22:b7:fc:35: 36:b9:67:2d:11:e9:cd:77:6a:7e:74:13:51:a8:3b:f1:b5:b1: 2a:06:63:e3:a8:19:9d:e0:6c:fb:b7:fc:4a:3f:6e:a7:93:92: 27:dc:8c:f3:1d:81:f8:f9:b5:d2:c0:75:47:3a:7f:4d:98:70: 8e:de:55:74:36:d1:76:cb:c5:1e:c3:c3:49:f9:51:4e:e7:92: 31:3c:d2:fc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUenkBUtTnrYMKnm/0dHgPJxHrq2QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzEyMDAyMDEyWhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3M2U0ZjUwNmRhYWI3ODcyZWI1NzAyMDllMzZiNjM2ZWM4 YzEwOGQxNThmZDE5OWFiY2ZkOWRiMmY2MWM1ZjNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAD9rjvcly+nodq4u2SeBn+1a08x8QEKTJ1wSAODAwr2+C +8T911zmEfJGclR5agr1bgBtIPniVfUGmPl1cPkI+yqdB8UG4/q+QggnyaJNl70v DWSE96OY57XAVzp3rG6LrOQx61pCFIQOT7p9HOyzufGEzUrakQnEIlaUPbdC39ie PtpXbsDnYmTruG7P7QWdlfKOfcXeLZVe3RCFxJkOHKSY0ZjOIFqtINfZahknsy72 shi4rI0dX7fW4/4WE7b+Ezem1AjL2aeiAHFei36RfTFY9R2WaJtFVX8xEoDumdme hNSc3wFEzpW+1ju7tGCTQckwPf2soHBssz/xogFJAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUkkL4/gV5UPJ8dTvjLPSc6r91UqYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0YzFmY2IwLTJkNTEtNDk5ZS04NjM4LTQ3M2U4ZTA0YzhhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vIDANBgkqhkiG9w0BAQsFAAOCAQEATA1Sz3c+mvd9FMpsEI7BCIKt Eauqc+d/r3pCNcqtyrJAP8k79aJCkLqTxwx+6kolYeHOTg1HCs4JexYy9MfdmZ4o MpIO+0lfN14YPVNoOzu/YlixpPtnuGNpL6hwrc3OsHvMxc+4IZfdqmbxqZPb5sJT Erz9fenPkXP3cBjI3DsMICR3JDsCQgOEiZiWzGKIZyX6c/gE+T1/pGr3tbJG3Vuf wCLPMqsaVyuqqMW+6Hcit/w1NrlnLRHpzXdqfnQTUag78bWxKgZj46gZneBs+7f8 Sj9up5OSJ9yM8x2B+Pm10sB1Rzp/TZhwjt5VdDbRdsvFHsPDSflRTueSMTzS/A== -----END CERTIFICATE-----Generated at Thu Jul 24 04:56:09 2025 by rpki-client