$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df94d7d2-40bf-476c-a671-b3d5a7f48f14.roa File: df94d7d2-40bf-476c-a671-b3d5a7f48f14.roa (raw, json) Hash identifier: la+HlLhsGAvM/cOykgd29r1c51nLC3c4oAgEFSKY71U= Subject key identifier: 63:CD:C7:27:58:78:24:EF:2D:A6:BA:E6:50:E6:50:34:F2:38:F0:C8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12230226CDC1E21808F803D667C025FB990B2E9C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df94d7d2-40bf-476c-a671-b3d5a7f48f14.roa Signing time: Tue 08 Jul 2025 17:10:22 +0000 ROA not before: Tue 08 Jul 2025 17:10:22 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f14:800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:23:02:26:cd:c1:e2:18:08:f8:03:d6:67:c0:25:fb:99:0b:2e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:10:22 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=1e00ae3201ef92f867bf40209bc827656efe38706b5a1d8f5dfc3ae5ae06a9e3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:16:dd:92:85:d1:bf:e0:04:48:28:90:3b:34: 35:9e:d1:a3:37:cd:24:e4:8a:bf:9f:e4:84:91:fa: 99:4f:c6:43:73:86:1d:42:3b:4c:ce:9d:ee:b9:a0: d0:6f:dc:b4:5d:6c:84:c3:92:1c:57:87:ad:52:30: c2:f4:a6:de:9d:65:ab:4a:d1:6d:a6:66:80:f0:d9: 53:c7:f7:b4:70:e8:50:45:f6:47:60:3d:96:25:cf: 23:3c:88:6c:1b:ac:69:99:14:52:d9:d8:2e:ed:0a: ed:be:f3:1c:b1:55:02:f2:8d:74:c5:84:dc:e7:83: 7f:bc:bb:e9:24:ea:eb:f5:aa:cd:2c:e1:44:da:28: 1a:c2:83:f9:f5:94:8a:78:1a:10:28:d7:0c:eb:d6: 0c:9c:0b:c7:e9:89:fa:5d:48:ea:bc:35:3f:bd:4d: c2:d5:aa:e8:64:3a:b5:57:0b:61:7f:eb:80:c1:b0: 44:9f:45:30:a7:75:63:4d:79:8d:13:5d:77:0d:27: ee:60:4a:2b:b8:4b:e7:25:64:2d:3e:93:22:76:ad: c4:98:d8:d2:62:f2:a2:a3:be:8f:c6:23:a5:7e:4d: b7:86:fa:98:57:a5:86:83:1e:a5:36:76:07:94:34: f3:78:21:5f:fe:95:0b:66:01:9e:af:32:d3:70:de: 06:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CD:C7:27:58:78:24:EF:2D:A6:BA:E6:50:E6:50:34:F2:38:F0:C8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df94d7d2-40bf-476c-a671-b3d5a7f48f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f14:800::/37 Signature Algorithm: sha256WithRSAEncryption 36:ba:25:df:50:0b:a8:a3:1e:a1:e0:60:01:9b:17:ec:fe:04: 0c:1c:0a:98:8f:06:ac:63:47:92:57:27:4c:cc:cb:23:7e:03: 17:5a:0e:68:24:45:17:3e:de:83:39:6d:53:71:d0:02:4e:5b: ba:26:ec:f7:cd:81:18:cd:fe:6f:6c:a9:a4:d5:df:72:62:52: 91:ea:e2:da:d5:ca:f7:bc:9e:95:65:48:4c:86:84:f5:52:f4: aa:94:ec:9c:c1:d7:95:b1:8b:20:6d:7f:ec:b8:74:ab:b4:59: b3:08:16:c0:b0:28:81:9e:4b:28:57:2c:d9:1b:62:a4:3a:9d: 20:9b:13:08:7f:3d:5e:fd:65:35:00:0b:a6:2e:d3:97:0e:c0: f5:e2:57:7f:b4:0f:fd:9c:07:60:56:c8:bc:11:e4:8c:c8:29: 0e:77:81:12:11:d7:bc:d5:5d:7d:90:6f:1c:c4:5e:c0:d9:3d: 1c:82:1f:a1:9d:b5:e8:ef:7c:4e:3b:1c:1c:e3:77:9e:6a:ba: ba:44:f1:68:15:ea:b4:a7:a4:bb:4e:b0:7e:1f:a7:b1:9e:89: 41:64:dc:7b:c1:27:a0:57:51:8a:cc:98:8d:1e:ae:62:41:6b: 70:1c:0f:38:6f:7d:d2:24:47:64:74:32:1b:57:79:c3:3c:70: fa:56:7b:88 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEiMCJs3B4hgI+APWZ8Al+5kLLpwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTcxMDIyWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTAwYWUzMjAxZWY5MmY4NjdiZjQwMjA5YmM4Mjc2NTZl ZmUzODcwNmI1YTFkOGY1ZGZjM2FlNWFlMDZhOWUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1Ft2ShdG/4ARIKJA7NDWe0aM3zSTkir+f5ISR+plPxkNz hh1CO0zOne65oNBv3LRdbITDkhxXh61SMML0pt6dZatK0W2mZoDw2VPH97Rw6FBF 9kdgPZYlzyM8iGwbrGmZFFLZ2C7tCu2+8xyxVQLyjXTFhNzng3+8u+kk6uv1qs0s 4UTaKBrCg/n1lIp4GhAo1wzr1gycC8fpifpdSOq8NT+9TcLVquhkOrVXC2F/64DB sESfRTCndWNNeY0TXXcNJ+5gSiu4S+clZC0+kyJ2rcSY2NJi8qKjvo/GI6V+TbeG +phXpYaDHqU2dgeUNPN4IV/+lQtmAZ6vMtNw3gZ5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUY83HJ1h4JO8tprrmUOZQNPI48MgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmOTRkN2QyLTQwYmYtNDc2Yy1hNjcxLWIzZDVhN2Y0OGYxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8UCDANBgkqhkiG9w0BAQsFAAOCAQEANrol31ALqKMeoeBgAZsX7P4E DBwKmI8GrGNHklcnTMzLI34DF1oOaCRFFz7egzltU3HQAk5buibs982BGM3+b2yp pNXfcmJSkeri2tXK97yelWVITIaE9VL0qpTsnMHXlbGLIG1/7Lh0q7RZswgWwLAo gZ5LKFcs2RtipDqdIJsTCH89Xv1lNQALpi7Tlw7A9eJXf7QP/ZwHYFbIvBHkjMgp DneBEhHXvNVdfZBvHMRewNk9HIIfoZ216O98TjscHON3nmq6ukTxaBXqtKeku06w fh+nsZ6JQWTce8EnoFdRisyYjR6uYkFrcBwPOG990iRHZHQyG1d5wzxw+lZ7iA== -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:10 2025 by rpki-client