$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dec9a0fb-2b5f-482b-b31a-fcc241027165.roa File: dec9a0fb-2b5f-482b-b31a-fcc241027165.roa (raw, json) Hash identifier: vLf/GiE7dQ1ViLCrjhTSO666FnE+Bmosn5kn26O5NH8= Subject key identifier: E3:EE:D1:CC:EF:41:04:40:35:22:2D:8A:18:12:18:B9:E7:91:8B:E4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 20DF2E471A33E081B8CE36D80E7EB370753E3FA1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dec9a0fb-2b5f-482b-b31a-fcc241027165.roa Signing time: Mon 07 Jul 2025 16:32:05 +0000 ROA not before: Mon 07 Jul 2025 16:32:05 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:df:2e:47:1a:33:e0:81:b8:ce:36:d8:0e:7e:b3:70:75:3e:3f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:32:05 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=943114363d0658d71adb33bc42b4735e7f63a975765f774a8681b9a1b86a4839, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:63:57:4e:8e:0e:bb:bb:2d:5b:40:d9:f9: 12:a7:ed:fe:f7:4a:21:53:c2:92:4e:79:38:8e:72: 62:94:f8:bb:0a:0c:32:c6:67:b7:26:dd:79:bc:81: c5:84:bd:83:b2:82:87:f1:00:3e:37:ec:9b:5e:2a: d8:a8:93:db:eb:ca:4f:4a:05:35:2d:b7:56:c0:96: f2:e6:be:6a:34:9b:68:6d:ba:50:2f:cd:f1:69:29: fc:e5:d2:21:17:ad:5f:a3:7d:56:8d:3a:f8:fc:e1: fc:bd:58:d5:d8:df:d8:fb:dd:f3:78:da:d6:f6:a7: 6c:c0:63:87:90:0c:6c:0b:55:ae:06:4d:91:f1:b1: 58:49:8f:76:3a:e8:c1:d7:6f:f2:59:29:3c:d5:d0: 16:2f:ed:fb:46:e4:66:00:99:de:18:77:4f:d8:44: 69:a5:a4:a7:57:76:34:80:47:c1:ee:93:7d:6f:07: 3f:e8:4b:d9:f8:33:b9:f6:cc:9a:91:6c:e5:80:5a: 35:e6:fc:56:43:9c:b9:55:a0:e2:d4:0e:87:0a:17: 0e:32:ed:73:21:21:5d:c1:93:c4:eb:ff:5b:5a:ca: 47:85:66:54:ad:33:91:1b:2d:e9:86:7e:8a:20:b5: 42:ca:c8:06:a1:b5:d1:34:8f:bf:ee:1d:93:97:9c: 38:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EE:D1:CC:EF:41:04:40:35:22:2D:8A:18:12:18:B9:E7:91:8B:E4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dec9a0fb-2b5f-482b-b31a-fcc241027165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 9e:46:8b:6f:61:51:85:e2:5c:43:7d:a9:c8:b9:56:4f:0e:fe: 98:d6:0c:e9:49:16:ed:16:7a:70:75:af:30:11:be:5d:e2:41: b4:21:a2:39:dd:58:71:25:0b:c3:2a:55:75:9c:8c:b3:46:6c: ef:ad:86:28:cb:4b:a1:25:aa:13:59:25:6a:bf:bb:0c:8c:6e: 8e:e8:a3:ff:8b:20:52:82:45:4f:5b:12:da:9e:8e:35:83:31: 24:30:52:b2:17:da:31:21:65:20:0d:0f:c6:46:2e:83:15:93: 27:dc:78:ed:7c:6a:0c:e6:03:1c:71:b7:cc:c7:79:8f:91:0f: de:e1:c2:96:ec:ed:c2:57:fd:87:28:fc:fa:40:1e:b4:4d:a8: c3:80:0f:12:f8:5f:3f:b2:d0:fd:cd:31:dd:3e:da:e2:72:70: 6b:c0:f3:96:9b:cd:5f:e6:ba:8f:9b:ae:af:79:b8:17:7c:a9: 05:b8:2b:0b:0f:72:bc:1b:59:11:c7:5c:63:69:fb:02:f2:5c: 20:4a:0e:70:02:98:05:05:ba:85:19:9f:b4:5e:23:ad:37:53: 6c:f2:12:7a:3b:63:36:64:5a:de:73:96:fa:e6:cb:21:d5:75: 4d:d3:41:8e:40:89:a2:3d:80:2f:59:81:57:64:a6:41:89:69: 4e:5d:55:71 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIN8uRxoz4IG4zjbYDn6zcHU+P6EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYzMjA1WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDMxMTQzNjNkMDY1OGQ3MWFkYjMzYmM0MmI0NzM1ZTdm NjNhOTc1NzY1Zjc3NGE4NjgxYjlhMWI4NmE0ODM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvmWNXTo4Ou7stW0DZ+RKn7f73SiFTwpJOeTiOcmKU+LsK DDLGZ7cm3Xm8gcWEvYOygofxAD437JteKtiok9vryk9KBTUtt1bAlvLmvmo0m2ht ulAvzfFpKfzl0iEXrV+jfVaNOvj84fy9WNXY39j73fN42tb2p2zAY4eQDGwLVa4G TZHxsVhJj3Y66MHXb/JZKTzV0BYv7ftG5GYAmd4Yd0/YRGmlpKdXdjSAR8Huk31v Bz/oS9n4M7n2zJqRbOWAWjXm/FZDnLlVoOLUDocKFw4y7XMhIV3Bk8Tr/1taykeF ZlStM5EbLemGfoogtULKyAahtdE0j7/uHZOXnDg1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4+7RzO9BBEA1Ii2KGBIYueeRi+QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RlYzlhMGZiLTJiNWYtNDgyYi1iMzFhLWZjYzI0MTAyNzE2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yIMAwDQYJKoZIhvcNAQELBQADggEBAJ5Gi29hUYXiXEN9qci5Vk8O /pjWDOlJFu0WenB1rzARvl3iQbQhojndWHElC8MqVXWcjLNGbO+thijLS6ElqhNZ JWq/uwyMbo7oo/+LIFKCRU9bEtqejjWDMSQwUrIX2jEhZSAND8ZGLoMVkyfceO18 agzmAxxxt8zHeY+RD97hwpbs7cJX/Yco/PpAHrRNqMOADxL4Xz+y0P3NMd0+2uJy cGvA85abzV/muo+brq95uBd8qQW4KwsPcrwbWRHHXGNp+wLyXCBKDnACmAUFuoUZ n7ReI603U2zyEno7YzZkWt5zlvrmyyHVdU3TQY5AiaI9gC9ZgVdkpkGJaU5dVXE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:49 2025 by rpki-client