$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c14f0e90-598e-47d6-b9ac-81f6af2fb9e8.roa File: c14f0e90-598e-47d6-b9ac-81f6af2fb9e8.roa (raw, json) Hash identifier: C4FX0m5mRAqvoXWgNYR+n3l3eWxqkjirWzaEj4GRUqs= Subject key identifier: 65:55:56:86:BF:49:52:8A:A1:1D:22:5A:77:E1:59:51:C2:28:D1:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1CD489CFCBA72862A4F1036E7D209636E3AFDA4E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c14f0e90-598e-47d6-b9ac-81f6af2fb9e8.roa Signing time: Tue 08 Jul 2025 16:00:22 +0000 ROA not before: Tue 08 Jul 2025 16:00:22 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ffb:8081::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d4:89:cf:cb:a7:28:62:a4:f1:03:6e:7d:20:96:36:e3:af:da:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:00:22 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=8a913ae33fdd02d08c827ec2fc15708d046577d471ae1598acab92944c73ac8c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:90:3c:6e:9a:b7:e9:bb:95:c4:5d:89:74: c4:bc:04:ea:c9:81:0e:2f:e9:16:d3:eb:8b:22:48: 71:61:08:74:3d:f5:f0:b3:0b:97:af:1f:48:92:f2: d2:20:bb:6a:e4:13:3c:42:aa:5f:c0:bc:c1:e2:d3: 07:c8:ce:10:96:ef:81:70:f6:d4:2f:26:26:45:fd: 02:e5:ed:a5:34:65:79:21:15:e8:41:e3:7d:0b:26: 1a:77:7a:d5:ca:75:44:5d:95:ad:51:67:34:53:9a: ea:4e:22:58:a0:62:ce:e1:f5:d6:a2:f3:53:51:92: 5b:da:06:ac:f8:78:22:d8:b3:d6:36:e2:c2:e0:e6: 8d:04:60:0c:de:83:d2:3b:e7:d8:5f:33:fa:d6:46: 7a:05:eb:1a:02:10:4f:f2:2f:e0:5e:d1:65:ed:58: f3:21:fe:26:88:76:d6:a7:e4:20:9b:0d:61:3b:e6: 81:6e:b6:25:f9:9d:7c:62:89:0d:21:c1:ee:c2:e8: 11:fb:2b:ec:2f:4d:03:d2:ee:03:9a:02:fe:35:89: 89:0a:8e:73:f4:1b:bd:d1:d5:ea:2d:90:52:04:66: 05:88:7f:f7:53:39:f0:91:f5:c5:c4:6a:1f:fe:2d: 45:96:c1:15:1b:eb:ee:e5:08:11:b5:cc:14:2c:0e: f4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:55:56:86:BF:49:52:8A:A1:1D:22:5A:77:E1:59:51:C2:28:D1:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c14f0e90-598e-47d6-b9ac-81f6af2fb9e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:8081::/48 Signature Algorithm: sha256WithRSAEncryption c0:98:75:f7:4a:35:df:10:83:1d:84:35:73:cc:40:ad:f0:3a: c7:fe:52:55:86:88:4f:1c:11:31:26:72:be:31:10:28:6e:df: 0c:16:73:67:be:88:2f:97:ab:76:8a:ae:d3:4b:8a:f9:50:60: 47:36:89:bf:9c:24:ba:95:30:76:55:ef:e8:9d:51:f7:03:bd: 8d:82:78:94:f3:e4:e5:bf:fd:9a:f1:ed:90:da:ec:d2:f1:7c: 2e:a3:d4:11:38:9e:e9:2e:c5:9c:84:7a:44:76:96:b5:57:d5: 18:f8:13:30:bb:b0:3e:ec:f5:18:62:90:0e:50:5f:21:7f:0e: e1:ce:4a:d3:58:d7:8c:d3:65:2f:65:95:2a:9f:72:24:e3:18: ea:28:ee:60:22:93:0b:7e:ca:80:54:5b:63:99:7c:7f:3a:63: 5c:a4:f4:6f:8c:2c:a3:00:6b:03:c2:a2:cf:01:8a:9b:99:2b: d1:16:a7:19:7a:30:58:33:0c:af:f4:4f:0b:96:86:e2:a3:df: d6:8b:5b:b7:18:df:ae:0e:3e:55:cc:c4:cb:d1:db:d0:8a:28: 3e:63:28:98:a9:2b:cf:26:3b:3c:d9:49:eb:02:41:12:64:81: d2:9c:b9:d1:a2:de:eb:8f:eb:45:00:4c:c9:e9:52:32:01:2b: 5b:91:4d:2b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHNSJz8unKGKk8QNufSCWNuOv2k4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYwMDIyWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTkxM2FlMzNmZGQwMmQwOGM4MjdlYzJmYzE1NzA4ZDA0 NjU3N2Q0NzFhZTE1OThhY2FiOTI5NDRjNzNhYzhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxZZA8bpq36buVxF2JdMS8BOrJgQ4v6RbT64siSHFhCHQ9 9fCzC5evH0iS8tIgu2rkEzxCql/AvMHi0wfIzhCW74Fw9tQvJiZF/QLl7aU0ZXkh FehB430LJhp3etXKdURdla1RZzRTmupOIligYs7h9dai81NRklvaBqz4eCLYs9Y2 4sLg5o0EYAzeg9I759hfM/rWRnoF6xoCEE/yL+Be0WXtWPMh/iaIdtan5CCbDWE7 5oFutiX5nXxiiQ0hwe7C6BH7K+wvTQPS7gOaAv41iYkKjnP0G73R1eotkFIEZgWI f/dTOfCR9cXEah/+LUWWwRUb6+7lCBG1zBQsDvQVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZVVWhr9JUoqhHSJad+FZUcIo0ZkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxNGYwZTkwLTU5OGUtNDdkNi1iOWFjLTgxZjZhZjJmYjllOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/7gIEwDQYJKoZIhvcNAQELBQADggEBAMCYdfdKNd8Qgx2ENXPMQK3w Osf+UlWGiE8cETEmcr4xEChu3wwWc2e+iC+Xq3aKrtNLivlQYEc2ib+cJLqVMHZV 7+idUfcDvY2CeJTz5OW//Zrx7ZDa7NLxfC6j1BE4nukuxZyEekR2lrVX1Rj4EzC7 sD7s9RhikA5QXyF/DuHOStNY14zTZS9llSqfciTjGOoo7mAikwt+yoBUW2OZfH86 Y1yk9G+MLKMAawPCos8BipuZK9EWpxl6MFgzDK/0TwuWhuKj39aLW7cY364OPlXM xMvR29CKKD5jKJipK88mOzzZSesCQRJkgdKcudGi3uuP60UATMnpUjIBK1uRTSs= -----END CERTIFICATE-----Generated at Mon Jul 21 13:01:19 2025 by rpki-client