$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa File: d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa (raw, json) Hash identifier: nXyYva2bOZSoUxKyBS47ABGQHbd09BHz5x+OOlb/Cfc= Subject key identifier: C9:AB:6C:0A:A8:DC:E0:4B:5A:F8:42:02:53:D7:9A:58:C2:64:F2:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52F2195178E30C2CB4F5AF3C772471D340D764F3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa Signing time: Tue 08 Jul 2025 17:01:07 +0000 ROA not before: Tue 08 Jul 2025 17:01:07 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1c:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f2:19:51:78:e3:0c:2c:b4:f5:af:3c:77:24:71:d3:40:d7:64:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:01:07 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=fa53eb7a39fbcbf93006ab771a8e42f21f6f0c66d85da69d8e80fbb20cf91c6c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:a9:0a:70:e2:9b:cb:63:99:50:2c:93:3d: bb:43:4b:ad:17:2e:5c:d4:d8:bf:25:61:17:44:ff: 1f:68:0f:96:10:36:81:9f:ae:1c:e6:f0:48:c2:b2: 99:7f:f0:2e:91:c7:27:07:67:ae:ba:f8:d6:65:d9: 3f:bc:4b:52:a0:aa:cb:83:79:27:12:43:d8:0d:18: e4:fc:7e:76:6c:7f:90:5f:c3:00:0a:a9:77:1b:0a: 06:ad:12:db:bd:b1:42:af:1c:4f:8f:ec:d4:6f:11: 9a:19:8b:a8:69:6b:36:0c:84:dd:52:cd:e5:74:6d: ac:b4:16:e2:23:b3:0d:cc:c5:9a:46:b6:96:99:97: 6d:39:0e:9b:5f:28:ee:e2:95:6a:04:cc:fc:92:ef: 0a:20:a3:0e:d6:62:1a:05:8d:44:ef:e2:97:df:64: e8:46:20:92:33:43:db:58:e6:3f:61:aa:8f:3a:04: 62:a2:87:2d:06:b4:1e:11:fb:3f:c9:6e:1a:51:09: 96:09:7c:1a:57:57:ac:4c:51:fd:d9:66:58:02:07: 7c:2c:aa:e3:8a:95:00:eb:a2:66:c2:b7:19:b7:41: 19:3c:a2:14:d2:d2:23:61:e8:77:30:68:6d:c8:a6: 91:88:fb:01:cd:ee:db:c5:69:b6:ba:f8:fb:99:02: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AB:6C:0A:A8:DC:E0:4B:5A:F8:42:02:53:D7:9A:58:C2:64:F2:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1c:c800::/37 Signature Algorithm: sha256WithRSAEncryption 15:dd:ff:b5:84:cf:b0:f3:e2:c7:41:75:fe:9e:12:1e:4c:32: c9:32:90:63:46:e2:1b:9a:16:92:54:75:e7:57:2f:92:db:14: a8:cd:28:12:16:f3:b7:7b:c4:d5:b8:30:2f:7c:ad:9e:60:bf: e9:78:40:2a:ff:a2:c1:b3:0d:a7:c4:b7:53:84:19:8a:19:9e: 3c:d6:10:3a:55:d6:1d:de:18:69:11:f4:33:19:8f:24:6b:1a: 01:94:a1:8a:60:2c:38:f4:a6:8c:9e:aa:04:7b:7f:bb:c3:a1: 80:89:27:ef:32:a2:a6:bb:41:58:a3:9b:ec:43:43:89:0f:30: 7c:9d:d9:e7:22:86:af:b6:58:93:6d:4f:d8:4b:ce:16:88:dc: 58:38:f9:98:4d:c4:67:b2:81:a4:31:e1:e3:60:05:b4:15:5b: 95:02:53:f3:82:f6:9f:d7:c3:34:59:d2:0b:31:60:50:0e:60: 9b:52:51:56:7b:b8:c3:bc:80:d4:96:5e:65:9b:2f:aa:a4:f2: 74:8d:fd:1d:a7:fe:a6:d7:34:00:5b:e2:60:8e:0f:43:ca:8a: 56:d7:c6:a2:c8:30:2a:08:49:c4:67:f3:a6:5d:00:6b:82:9b: 4e:e6:5c:6d:50:1c:62:4b:1c:c0:60:fe:b0:49:6b:9c:92:5f: 03:41:c2:4b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUvIZUXjjDCy09a88dyRx00DXZPMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTcwMTA3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTUzZWI3YTM5ZmJjYmY5MzAwNmFiNzcxYThlNDJmMjFm NmYwYzY2ZDg1ZGE2OWQ4ZTgwZmJiMjBjZjkxYzZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUT6kKcOKby2OZUCyTPbtDS60XLlzU2L8lYRdE/x9oD5YQ NoGfrhzm8EjCspl/8C6RxycHZ666+NZl2T+8S1KgqsuDeScSQ9gNGOT8fnZsf5Bf wwAKqXcbCgatEtu9sUKvHE+P7NRvEZoZi6hpazYMhN1SzeV0bay0FuIjsw3MxZpG tpaZl205DptfKO7ilWoEzPyS7wogow7WYhoFjUTv4pffZOhGIJIzQ9tY5j9hqo86 BGKihy0GtB4R+z/JbhpRCZYJfBpXV6xMUf3ZZlgCB3wsquOKlQDrombCtxm3QRk8 ohTS0iNh6HcwaG3IppGI+wHN7tvFaba6+PuZAgOXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUyatsCqjc4Eta+EICU9eaWMJk8lQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QzNmMxMDVmLWE2ZTQtNGYzYS1hYmNiLWRhYWZmNTRiNWU3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8cyDANBgkqhkiG9w0BAQsFAAOCAQEAFd3/tYTPsPPix0F1/p4SHkwy yTKQY0biG5oWklR151cvktsUqM0oEhbzt3vE1bgwL3ytnmC/6XhAKv+iwbMNp8S3 U4QZihmePNYQOlXWHd4YaRH0MxmPJGsaAZShimAsOPSmjJ6qBHt/u8OhgIkn7zKi prtBWKOb7ENDiQ8wfJ3Z5yKGr7ZYk21P2EvOFojcWDj5mE3EZ7KBpDHh42AFtBVb lQJT84L2n9fDNFnSCzFgUA5gm1JRVnu4w7yA1JZeZZsvqqTydI39Haf+ptc0AFvi YI4PQ8qKVtfGosgwKghJxGfzpl0Aa4KbTuZcbVAcYkscwGD+sElrnJJfA0HCSw== -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:50 2025 by rpki-client