$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b24a4a34-e3aa-4279-ac4f-5a196bd431bd.roa File: b24a4a34-e3aa-4279-ac4f-5a196bd431bd.roa (raw, json) Hash identifier: VbFMx9VJy6ZdLmn0HUM0fSQIJEzDdjvblmZ/QgcN1sM= Subject key identifier: 92:53:23:EB:F0:7B:5D:77:1D:FE:A8:3F:DF:6F:C5:47:AB:21:36:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 764C323E6825E262BDEAA45F4768B66563DA83EE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b24a4a34-e3aa-4279-ac4f-5a196bd431bd.roa Signing time: Mon 07 Jul 2025 17:40:53 +0000 ROA not before: Mon 07 Jul 2025 17:40:53 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4c:32:3e:68:25:e2:62:bd:ea:a4:5f:47:68:b6:65:63:da:83:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 17:40:53 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=e2ecc8ed70000352549e6904c6de6a017a657673b153c9a155022ca671f9e55d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:12:d8:b4:a3:9a:4d:ec:0c:5a:1d:92:de:3b: d5:32:ab:54:cf:13:c1:f1:8f:db:4c:a2:ee:50:95: de:22:82:18:53:11:5c:97:68:21:2b:fc:d9:8b:00: 37:61:a5:86:61:23:b1:7e:fa:18:32:a3:c4:33:a1: 06:bc:71:b3:89:2c:eb:85:28:cb:d8:80:e0:9a:57: 64:69:64:d1:c1:b7:ef:d4:02:7d:b2:8e:0a:af:06: 98:4e:17:2e:28:e0:28:a7:05:e7:10:d6:0f:0e:a4: 7c:6b:86:85:b9:62:21:67:48:5a:7c:ee:d6:ab:f4: f9:ce:f9:b5:43:e3:14:01:e3:6e:20:7d:b5:79:f0: 9d:fd:12:63:9a:cb:cb:69:eb:62:53:85:3f:72:28: 63:20:69:f8:2b:fa:a4:49:78:ca:80:86:31:ca:ed: fd:49:d8:78:ce:fd:2d:04:36:61:1a:cd:ab:51:74: d3:47:ca:a3:e1:3b:0e:ab:d0:bf:81:f6:a8:95:6b: 38:c8:4c:78:0b:a7:5d:b4:fd:7d:4c:4f:b5:57:74: 46:d9:17:3d:50:68:b2:f1:43:55:e7:42:0e:2d:fd: ed:36:27:be:57:c5:21:ac:e6:3c:80:ca:00:fd:df: 6a:27:74:f5:69:48:59:14:97:5e:8c:c9:79:fd:d8: da:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:53:23:EB:F0:7B:5D:77:1D:FE:A8:3F:DF:6F:C5:47:AB:21:36:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b24a4a34-e3aa-4279-ac4f-5a196bd431bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 7c:ad:96:ce:69:0d:22:1a:61:7a:37:ce:47:f3:9b:0e:6a:19: e7:16:83:c6:42:ca:7e:1c:f5:b7:f4:37:3b:67:7f:b7:58:40: f5:4a:70:13:75:c8:8d:0a:e5:96:d9:11:b2:c3:86:f4:3c:d3: e8:3f:69:d0:e0:73:4f:ec:0f:e8:a0:92:da:31:62:81:09:28: 0e:0e:ad:b0:db:34:67:04:f2:a2:fa:91:16:f2:5b:be:b3:14: 4c:80:e9:2a:c2:52:9d:7d:60:7f:ca:c0:cd:54:89:77:c6:0f: 47:87:2e:a3:97:88:9d:e0:42:0b:1a:54:01:cb:69:4d:42:a0: eb:63:5b:7a:5e:2a:4f:33:ab:2f:43:48:ab:1b:4b:3e:8f:6e: 15:16:37:3b:59:4d:d2:4a:8b:be:59:f0:69:34:72:25:40:85: 64:bd:1a:cc:22:5c:be:b9:1d:5d:c2:bd:29:57:f8:55:36:43: 6a:28:d8:a9:a2:b4:ce:c5:c5:3b:e2:ff:b7:99:39:60:26:82: ec:bb:ed:db:56:7c:e7:20:38:91:0c:ca:27:e3:f1:c6:57:ee: c8:b7:f3:37:d7:10:98:c4:18:df:26:ed:8a:63:4b:6b:9e:28: 2f:d1:3b:9d:11:67:d6:b3:b7:27:45:af:39:81:f3:0e:9b:d5: 1a:c9:cb:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdkwyPmgl4mK96qRfR2i2ZWPag+4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTc0MDUzWhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMmVjYzhlZDcwMDAwMzUyNTQ5ZTY5MDRjNmRlNmEwMTdh NjU3NjczYjE1M2M5YTE1NTAyMmNhNjcxZjllNTVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQEti0o5pN7AxaHZLeO9Uyq1TPE8Hxj9tMou5Qld4ighhT EVyXaCEr/NmLADdhpYZhI7F++hgyo8QzoQa8cbOJLOuFKMvYgOCaV2RpZNHBt+/U An2yjgqvBphOFy4o4CinBecQ1g8OpHxrhoW5YiFnSFp87tar9PnO+bVD4xQB424g fbV58J39EmOay8tp62JThT9yKGMgafgr+qRJeMqAhjHK7f1J2HjO/S0ENmEazatR dNNHyqPhOw6r0L+B9qiVazjITHgLp120/X1MT7VXdEbZFz1QaLLxQ1XnQg4t/e02 J75XxSGs5jyAygD932ondPVpSFkUl16MyXn92NoRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUklMj6/B7XXcd/qg/32/FR6shNjYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyNGE0YTM0LWUzYWEtNDI3OS1hYzRmLTVhMTk2YmQ0MzFiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gMAwDQYJKoZIhvcNAQELBQADggEBAHytls5pDSIaYXo3zkfzmw5q GecWg8ZCyn4c9bf0Nztnf7dYQPVKcBN1yI0K5ZbZEbLDhvQ80+g/adDgc0/sD+ig ktoxYoEJKA4OrbDbNGcE8qL6kRbyW76zFEyA6SrCUp19YH/KwM1UiXfGD0eHLqOX iJ3gQgsaVAHLaU1CoOtjW3peKk8zqy9DSKsbSz6PbhUWNztZTdJKi75Z8Gk0ciVA hWS9GswiXL65HV3CvSlX+FU2Q2oo2KmitM7FxTvi/7eZOWAmguy77dtWfOcgOJEM yifj8cZX7si38zfXEJjEGN8m7YpjS2ueKC/RO50RZ9aztydFrzmB8w6b1RrJy+I= -----END CERTIFICATE-----Generated at Wed Jul 23 02:28:32 2025 by rpki-client