$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8fee92f-dff4-4aa3-b0d0-5cbdbd043517.roa File: c8fee92f-dff4-4aa3-b0d0-5cbdbd043517.roa (raw, json) Hash identifier: phUMWwzpLa/OWQYeMFyPFyKUjFtz9GBrMKF25MVpsi8= Subject key identifier: 10:94:1E:16:98:95:81:C1:71:B7:F0:BE:D5:DC:52:5E:D5:EF:86:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 75A82B7E703D17891C033CCC825D4B34F94C05A4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8fee92f-dff4-4aa3-b0d0-5cbdbd043517.roa Signing time: Tue 08 Jul 2025 17:21:44 +0000 ROA not before: Tue 08 Jul 2025 17:21:44 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f18:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a8:2b:7e:70:3d:17:89:1c:03:3c:cc:82:5d:4b:34:f9:4c:05:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:21:44 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=24ca229f178a7bd70730a0e8035eb8c329ae37c56b173d820cb5e1edaf5ea774, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:53:f1:70:d5:eb:f1:36:93:62:bb:15:ae:e6: 01:e5:23:7d:e3:be:7e:1e:60:c5:23:ab:6c:d6:95: a8:13:96:6e:44:70:c0:02:3e:00:56:59:36:b3:6d: 30:a6:41:b7:71:5c:74:5e:2c:80:3e:af:48:1b:ef: 81:22:7c:9e:bb:ce:ae:a5:21:29:0f:65:e0:44:6f: 32:79:8c:47:7c:ea:c2:72:9b:c2:15:c5:05:a3:ed: 5a:fb:40:af:ba:e5:4a:ad:4a:ae:7b:f4:3d:d3:af: d7:48:cd:93:90:0d:bf:3e:41:0e:bc:07:65:1a:93: 1b:70:55:6d:f4:b7:a6:49:d4:ec:6a:d0:69:5c:61: 5b:88:09:a5:5b:1e:b2:16:17:a7:d5:cc:ec:8b:90: b4:f4:24:d4:13:02:03:f8:a5:b3:b0:88:73:99:6f: b2:a7:f2:85:09:2e:f8:6c:77:1a:a6:be:f3:12:f5: a6:47:6d:6c:48:ac:28:31:60:c8:75:06:36:aa:fd: 91:e1:6e:cf:4f:3c:39:bf:af:e0:49:68:b6:3e:4a: 9f:bf:d1:3b:05:f8:34:51:df:bd:8a:00:9d:64:5b: ae:3e:b4:62:2d:68:db:a9:a3:db:d6:7e:68:96:3c: 6c:e7:31:54:ce:7d:65:87:9f:fe:6e:68:17:05:26: 59:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:94:1E:16:98:95:81:C1:71:B7:F0:BE:D5:DC:52:5E:D5:EF:86:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8fee92f-dff4-4aa3-b0d0-5cbdbd043517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f18:8000::/36 Signature Algorithm: sha256WithRSAEncryption 23:51:b0:b2:ac:44:a1:9d:15:14:71:1e:5c:69:a6:8d:8a:2c: 02:3d:b8:9f:76:79:18:88:d4:9c:02:3a:10:d2:dc:8a:14:09: 80:22:7b:a0:56:8f:eb:76:b7:1a:d6:f2:5f:66:bf:ab:e2:d9: a3:42:51:18:7c:3a:a6:ff:b4:a9:af:26:fc:61:46:d8:86:9d: 46:b4:1b:ff:d2:3a:83:6f:4c:af:16:7e:35:b0:70:aa:21:4b: 12:9b:84:66:a9:f4:b9:7e:e5:29:15:bb:6b:5d:78:b1:19:94: 7f:ab:56:53:a1:50:0c:90:36:9e:03:f1:5f:77:82:81:13:5b: ba:a9:57:10:18:70:07:00:f7:92:73:ee:bd:c6:ae:d2:58:87: ba:08:da:df:45:f7:a0:31:97:2d:f1:12:cd:43:c6:99:ad:c0: a6:8d:60:35:21:0e:80:a4:f2:a1:7d:f2:03:7a:bc:05:db:75: ee:5e:ac:a7:cb:12:67:c0:78:60:6b:13:ef:9b:60:b9:c0:f7: c2:1e:e8:da:d8:95:7f:b5:38:77:af:32:bd:08:18:4f:5c:1c: 55:e7:8e:72:e5:3f:6d:ad:99:59:0f:fb:20:94:6b:1a:ac:84: bf:42:1c:e7:86:4c:8d:e9:ef:6d:d2:dc:a3:23:26:e0:f6:52: e8:00:e0:6d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdagrfnA9F4kcAzzMgl1LNPlMBaQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTcyMTQ0WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNGNhMjI5ZjE3OGE3YmQ3MDczMGEwZTgwMzVlYjhjMzI5 YWUzN2M1NmIxNzNkODIwY2I1ZTFlZGFmNWVhNzc0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXU/Fw1evxNpNiuxWu5gHlI33jvn4eYMUjq2zWlagTlm5E cMACPgBWWTazbTCmQbdxXHReLIA+r0gb74EifJ67zq6lISkPZeBEbzJ5jEd86sJy m8IVxQWj7Vr7QK+65UqtSq579D3Tr9dIzZOQDb8+QQ68B2UakxtwVW30t6ZJ1Oxq 0GlcYVuICaVbHrIWF6fVzOyLkLT0JNQTAgP4pbOwiHOZb7Kn8oUJLvhsdxqmvvMS 9aZHbWxIrCgxYMh1Bjaq/ZHhbs9PPDm/r+BJaLY+Sp+/0TsF+DRR372KAJ1kW64+ tGItaNupo9vWfmiWPGznMVTOfWWHn/5uaBcFJlmXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUEJQeFpiVgcFxt/C+1dxSXtXvhh0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4ZmVlOTJmLWRmZjQtNGFhMy1iMGQwLTVjYmRiZDA0MzUxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8YgDANBgkqhkiG9w0BAQsFAAOCAQEAI1GwsqxEoZ0VFHEeXGmmjYos Aj24n3Z5GIjUnAI6ENLcihQJgCJ7oFaP63a3GtbyX2a/q+LZo0JRGHw6pv+0qa8m /GFG2IadRrQb/9I6g29MrxZ+NbBwqiFLEpuEZqn0uX7lKRW7a114sRmUf6tWU6FQ DJA2ngPxX3eCgRNbuqlXEBhwBwD3knPuvcau0liHugja30X3oDGXLfESzUPGma3A po1gNSEOgKTyoX3yA3q8Bdt17l6sp8sSZ8B4YGsT75tgucD3wh7o2tiVf7U4d68y vQgYT1wcVeeOcuU/ba2ZWQ/7IJRrGqyEv0Ic54ZMjenvbdLcoyMm4PZS6ADgbQ== -----END CERTIFICATE-----Generated at Mon Jul 21 18:07:43 2025 by rpki-client