$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf7f3c9b-89c0-4589-b30d-a3112c021c5b.roa File: bf7f3c9b-89c0-4589-b30d-a3112c021c5b.roa (raw, json) Hash identifier: mRs9bsf8mx2niLBCq/h5FYofDO+yIhtMpTB8Z5TZDA0= Subject key identifier: 80:FE:96:15:5B:AB:A0:01:14:4F:87:9F:1B:B9:FC:15:20:1E:BC:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4291AAFDE7CBB42DD102087C657527948B692D39 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf7f3c9b-89c0-4589-b30d-a3112c021c5b.roa Signing time: Tue 08 Jul 2025 17:30:20 +0000 ROA not before: Tue 08 Jul 2025 17:30:20 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f22:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:91:aa:fd:e7:cb:b4:2d:d1:02:08:7c:65:75:27:94:8b:69:2d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:30:20 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=fe5092b8cc60a3cd3011aed05986cf01d3d315ca66cf29ac568036175b07f609, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:ce:70:fb:c2:26:ae:eb:f8:96:dd:32:47: 5c:20:4c:ab:80:3e:42:e8:1f:b0:30:34:a4:4c:45: 01:1f:6f:d4:a2:09:ea:74:b5:63:54:24:23:8f:6f: 17:a1:53:00:53:99:ff:af:5c:a5:f8:25:9a:59:58: f1:a8:c6:ae:2d:77:9c:07:33:9c:17:02:91:01:d1: fa:e6:49:8b:ee:4d:b6:71:af:ea:95:19:39:01:5e: b7:93:09:5a:ee:3c:50:9c:b2:b1:73:fd:c2:53:ba: 20:aa:a1:db:2e:e5:a9:05:8e:a4:f5:cf:9f:76:e2: a5:50:4d:64:6b:59:fb:2d:1d:8e:a2:ff:ef:b3:1e: 90:04:58:28:ed:9c:6a:ff:a9:29:0c:be:0e:e9:69: 0a:4b:b8:e6:53:a9:35:38:af:a3:00:9e:92:5c:eb: e1:79:34:c1:db:4e:dc:80:4a:3f:76:d9:b0:eb:5f: d3:90:ac:ac:cd:55:8a:57:8c:3c:8b:ae:a6:12:85: 1d:d9:b1:8a:a3:58:5c:f8:cb:98:fe:b9:73:a0:97: 8b:22:34:2c:0b:8d:e5:32:f6:7d:47:08:9d:8e:89: 60:46:7c:00:14:06:d8:d8:95:08:21:90:e5:41:d5: ef:1e:3b:47:e0:02:de:56:2c:3e:71:9c:0d:4a:72: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FE:96:15:5B:AB:A0:01:14:4F:87:9F:1B:B9:FC:15:20:1E:BC:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf7f3c9b-89c0-4589-b30d-a3112c021c5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f22:4000::/36 Signature Algorithm: sha256WithRSAEncryption 14:b9:ab:60:29:c0:3b:27:26:c4:56:f3:ec:ae:af:17:1f:86: 4f:24:12:5f:06:83:96:0c:4a:32:26:81:93:4b:f8:4c:be:67: 91:fa:f8:36:2d:b8:12:1b:82:74:9b:20:02:fa:0e:f5:33:d3: dd:b5:0b:b8:58:68:12:6a:ce:ad:7f:f6:f8:68:b6:01:d3:57: ac:11:d6:c4:8a:32:04:6f:0f:94:e9:6d:16:5e:55:64:02:82: b0:a3:e2:b0:29:86:44:27:f9:ad:2e:4c:42:89:ac:cf:0b:4b: 0b:db:1f:53:c7:1c:89:5a:d9:68:4b:02:02:70:ee:5a:f0:1e: 5e:b4:5a:e5:ad:00:a8:a2:02:df:b7:f3:74:a3:25:0f:06:ad: 72:2d:51:0b:e1:cc:c5:e0:f4:28:96:cc:96:e1:45:dd:97:f6: 20:8c:50:b4:77:55:b6:0f:67:92:83:6f:6a:4a:51:8e:be:6e: 37:1c:cb:98:fe:2b:99:75:4e:af:a5:64:5d:ee:1d:80:b3:2f: 78:38:23:62:4e:58:af:c3:16:4b:6e:24:20:cf:6d:21:28:5a: 51:76:ba:38:7c:fc:6f:62:3b:6a:e3:e7:7b:48:ee:23:99:b6: fc:b7:14:dc:51:07:b9:d2:c2:0e:9b:18:c1:52:db:42:f7:a1: f0:b6:8e:77 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQpGq/efLtC3RAgh8ZXUnlItpLTkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTczMDIwWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTUwOTJiOGNjNjBhM2NkMzAxMWFlZDA1OTg2Y2YwMWQz ZDMxNWNhNjZjZjI5YWM1NjgwMzYxNzViMDdmNjA5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRc85w+8Imruv4lt0yR1wgTKuAPkLoH7AwNKRMRQEfb9Si Cep0tWNUJCOPbxehUwBTmf+vXKX4JZpZWPGoxq4td5wHM5wXApEB0frmSYvuTbZx r+qVGTkBXreTCVruPFCcsrFz/cJTuiCqodsu5akFjqT1z5924qVQTWRrWfstHY6i /++zHpAEWCjtnGr/qSkMvg7paQpLuOZTqTU4r6MAnpJc6+F5NMHbTtyASj922bDr X9OQrKzNVYpXjDyLrqYShR3ZsYqjWFz4y5j+uXOgl4siNCwLjeUy9n1HCJ2OiWBG fAAUBtjYlQghkOVB1e8eO0fgAt5WLD5xnA1KcvovAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUgP6WFVuroAEUT4efG7n8FSAevAowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmN2YzYzliLTg5YzAtNDU4OS1iMzBkLWEzMTEyYzAyMWM1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8iQDANBgkqhkiG9w0BAQsFAAOCAQEAFLmrYCnAOycmxFbz7K6vFx+G TyQSXwaDlgxKMiaBk0v4TL5nkfr4Ni24EhuCdJsgAvoO9TPT3bULuFhoEmrOrX/2 +Gi2AdNXrBHWxIoyBG8PlOltFl5VZAKCsKPisCmGRCf5rS5MQomszwtLC9sfU8cc iVrZaEsCAnDuWvAeXrRa5a0AqKIC37fzdKMlDwatci1RC+HMxeD0KJbMluFF3Zf2 IIxQtHdVtg9nkoNvakpRjr5uNxzLmP4rmXVOr6VkXe4dgLMveDgjYk5Yr8MWS24k IM9tIShaUXa6OHz8b2I7auPne0juI5m2/LcU3FEHudLCDpsYwVLbQveh8LaOdw== -----END CERTIFICATE-----Generated at Tue Jul 22 05:09:38 2025 by rpki-client