$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e2f76c-d8dd-4c98-b6ff-c5e918c6e294.roa File: b0e2f76c-d8dd-4c98-b6ff-c5e918c6e294.roa (raw, json) Hash identifier: 7X3v6agmT0c9XLFYCQjm22KRZcxct8PfC/LQDUChll8= Subject key identifier: 76:8E:C1:52:E4:BA:12:57:91:01:58:47:F9:A2:AE:83:48:58:DB:C4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 740908FAA7DEE14E99A67C70588380E64AE7DC2C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e2f76c-d8dd-4c98-b6ff-c5e918c6e294.roa Signing time: Mon 07 Jul 2025 17:51:43 +0000 ROA not before: Mon 07 Jul 2025 17:51:43 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:c020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:09:08:fa:a7:de:e1:4e:99:a6:7c:70:58:83:80:e6:4a:e7:dc:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 17:51:43 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=1157f41422f2ba3dfcfcd32c4b34427946517d77ed9aa11a33bc1ab3789ea606, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9b:0b:15:0a:0d:e0:ef:0f:53:c6:12:7d:fa: 75:bf:62:ec:a4:3d:30:5d:07:04:ae:54:fa:68:3e: 64:c3:60:63:dd:91:7e:76:87:bb:27:2f:ee:31:14: 62:b7:e1:8d:aa:7f:ff:d2:a6:e9:76:fe:93:14:b2: e0:ec:50:ac:10:09:67:39:6f:70:71:b2:9e:e1:d6: c4:52:81:86:d2:46:65:83:da:ac:f5:1b:e4:6c:aa: 97:72:cc:21:ea:df:e4:6e:1a:fe:d9:05:51:c6:79: 09:a5:14:d0:d9:8c:25:f8:75:45:38:a3:c5:ce:c5: ae:23:48:28:da:b9:55:4e:09:40:c6:87:a2:fc:6d: df:e9:1a:c6:2c:f2:23:d2:6b:b3:5f:0d:8f:a8:33: 94:d5:a6:e4:a3:16:51:74:49:5c:50:a6:a6:cd:63: 3f:88:b5:b9:7a:e5:9a:e5:5b:99:04:51:d8:a3:68: 26:3c:c0:09:97:48:9e:67:e4:44:19:f1:d1:7f:08: 7b:6d:c7:2e:41:14:0f:ac:6d:83:fe:a8:d8:66:a4: fd:49:06:47:61:e0:e9:c0:5c:78:6e:d1:29:8e:82: 35:3e:4a:8c:ab:da:d5:c4:51:61:65:6b:78:2a:1e: d2:7b:5b:c9:23:8d:c6:53:d6:21:3d:b7:97:aa:c5: 61:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8E:C1:52:E4:BA:12:57:91:01:58:47:F9:A2:AE:83:48:58:DB:C4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e2f76c-d8dd-4c98-b6ff-c5e918c6e294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:c020::/48 Signature Algorithm: sha256WithRSAEncryption af:f7:69:7c:2b:23:73:6e:8e:1c:e6:06:30:7b:af:3a:88:3e: bf:9e:40:f7:49:ac:f9:32:0b:11:27:75:a7:4b:6b:b1:ca:ae: f2:e8:f0:dd:7b:bb:06:23:c4:6a:7b:3e:e7:da:86:d5:23:f2: 05:1b:ce:6e:f6:ad:c0:10:46:66:3e:f3:1b:95:a6:ac:bc:92: 9d:11:6e:55:81:fa:e8:fc:d6:75:48:d6:f8:03:04:e5:7e:f7: 6a:e8:b4:a4:37:31:43:57:89:ae:37:0a:f4:a8:fb:69:4f:59: 0e:3b:4f:22:d9:86:2a:37:4d:0a:82:64:57:8c:fc:17:5a:96: 47:1d:4f:46:61:da:ef:62:4b:0b:b4:ac:26:59:16:fd:35:ec: 35:19:7f:ce:ac:63:a4:3f:20:2f:56:bb:2b:83:1b:3c:b9:28: 55:9d:56:94:54:79:d2:d8:7f:8a:70:38:4a:ab:0c:a5:ef:59: a9:c3:62:6d:a7:8b:05:e7:f4:5d:6b:4d:b0:31:dc:4e:7f:75: 4d:cb:0e:7a:c8:5c:a1:b5:35:13:2d:03:b2:cb:ca:8c:3a:6e: df:5c:2f:4b:64:9f:56:39:a8:e0:fa:5b:3c:6d:9a:44:8c:1d: 04:0e:50:3b:49:8a:a3:fd:64:47:ba:58:95:0c:f0:36:f2:90: 92:2f:92:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdAkI+qfe4U6ZpnxwWIOA5krn3CwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTc1MTQzWhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTU3ZjQxNDIyZjJiYTNkZmNmY2QzMmM0YjM0NDI3OTQ2 NTE3ZDc3ZWQ5YWExMWEzM2JjMWFiMzc4OWVhNjA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQmwsVCg3g7w9TxhJ9+nW/YuykPTBdBwSuVPpoPmTDYGPd kX52h7snL+4xFGK34Y2qf//Spul2/pMUsuDsUKwQCWc5b3Bxsp7h1sRSgYbSRmWD 2qz1G+RsqpdyzCHq3+RuGv7ZBVHGeQmlFNDZjCX4dUU4o8XOxa4jSCjauVVOCUDG h6L8bd/pGsYs8iPSa7NfDY+oM5TVpuSjFlF0SVxQpqbNYz+Itbl65ZrlW5kEUdij aCY8wAmXSJ5n5EQZ8dF/CHttxy5BFA+sbYP+qNhmpP1JBkdh4OnAXHhu0SmOgjU+ Soyr2tXEUWFla3gqHtJ7W8kjjcZT1iE9t5eqxWFvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdo7BUuS6EleRAVhH+aKug0hY28QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwZTJmNzZjLWQ4ZGQtNGM5OC1iNmZmLWM1ZTkxOGM2ZTI5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AwCAwDQYJKoZIhvcNAQELBQADggEBAK/3aXwrI3NujhzmBjB7rzqI Pr+eQPdJrPkyCxEndadLa7HKrvLo8N17uwYjxGp7PufahtUj8gUbzm72rcAQRmY+ 8xuVpqy8kp0RblWB+uj81nVI1vgDBOV+92rotKQ3MUNXia43CvSo+2lPWQ47TyLZ hio3TQqCZFeM/BdalkcdT0Zh2u9iSwu0rCZZFv017DUZf86sY6Q/IC9WuyuDGzy5 KFWdVpRUedLYf4pwOEqrDKXvWanDYm2niwXn9F1rTbAx3E5/dU3LDnrIXKG1NRMt A7LLyow6bt9cL0tkn1Y5qOD6WzxtmkSMHQQOUDtJiqP9ZEe6WJUM8DbykJIvknk= -----END CERTIFICATE-----Generated at Mon Jul 21 12:59:14 2025 by rpki-client