$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e86fc22e-29f4-4cc9-bdf1-05710d575781.roa File: e86fc22e-29f4-4cc9-bdf1-05710d575781.roa (raw, json) Hash identifier: E42EOcrGJ6aSdOhxHZAcleu5PsHfRz8jq5kcLdyRVGM= Subject key identifier: 49:32:03:00:43:55:84:CB:87:95:99:F1:2D:AB:BC:04:A2:A0:E7:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4491BAD6496F864F696C60B125A7255A0652B6C4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e86fc22e-29f4-4cc9-bdf1-05710d575781.roa Signing time: Fri 11 Jul 2025 00:21:04 +0000 ROA not before: Fri 11 Jul 2025 00:21:04 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ffc:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:91:ba:d6:49:6f:86:4f:69:6c:60:b1:25:a7:25:5a:06:52:b6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:21:04 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=91d922c78f849ba22a1b4bb90f34acf0d0000eef66d9d13c987be9478d0297a8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:7b:c0:ec:98:58:a3:fd:cb:0a:2e:84:7f: a6:28:c2:3b:c3:35:0f:7d:b3:01:8b:36:0c:26:72: b6:d4:96:09:9d:87:4c:8a:9f:0f:36:ee:0f:9a:de: 89:97:65:72:46:4c:5c:ab:36:37:53:07:ba:98:31: b1:d7:e5:79:89:bd:80:c5:01:33:c2:64:d7:8a:23: 04:f4:88:88:df:0f:ed:88:17:32:bf:bf:c4:a5:c0: 21:6a:ad:83:d0:5f:6e:0c:45:d2:72:2e:73:63:f6: 6f:0a:a4:2d:ac:23:d5:cf:c6:15:c9:0c:4d:bf:d8: f2:a0:fc:69:1e:4c:65:19:13:77:69:fa:ef:78:e2: a1:dc:39:45:8f:0b:32:cd:4f:9e:be:3f:df:22:95: 18:06:c1:ff:a1:3f:fe:c5:b3:a2:d6:17:31:c1:99: b2:48:60:b0:da:b2:ff:65:21:d1:60:7f:87:2e:8a: e0:99:cc:bb:6c:bb:48:14:06:f5:1b:8f:14:da:6d: ef:f0:1e:a2:0d:e9:bc:7a:84:29:86:72:3b:12:f2: 36:f3:7b:41:16:53:f5:42:10:70:4d:be:ed:2c:17: a4:8f:44:14:c8:1d:b6:aa:d1:17:fc:79:43:9b:dc: 4d:79:e4:40:5a:5a:d4:5c:fb:09:08:79:7c:c7:62: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:32:03:00:43:55:84:CB:87:95:99:F1:2D:AB:BC:04:A2:A0:E7:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e86fc22e-29f4-4cc9-bdf1-05710d575781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffc:8000::/39 Signature Algorithm: sha256WithRSAEncryption b0:b8:b5:4c:dd:90:80:4d:0d:22:95:4b:a3:88:c0:db:d8:e1: b2:76:47:2f:c1:bf:76:b2:2d:df:7b:61:71:ed:83:7f:76:0a: 12:74:74:83:6a:d5:95:8c:cb:0d:ea:39:6f:80:6d:7d:e1:52: c7:fa:6f:d1:3f:1c:06:dc:e1:73:5f:29:70:b3:fc:a1:ee:8f: 6c:b9:96:3b:ff:e0:41:b7:a1:9c:20:49:7d:c2:71:01:f3:98: 15:1d:e4:c6:6e:2f:3b:0e:28:90:a5:e1:0f:3a:59:2e:82:3f: e8:81:de:9d:b3:b6:ad:42:13:57:14:25:e1:25:11:83:28:61: 63:ba:0d:81:cf:99:2c:22:89:d0:04:e3:6d:0e:d8:41:3e:e2: b3:68:d0:3b:e8:3e:76:b0:68:c3:af:7d:b3:50:01:a7:e4:51: fe:b7:d3:8b:d1:5b:9e:d8:ca:d7:92:ea:b7:4a:85:e5:d2:e7: 2f:97:e9:0b:84:2f:66:4f:ca:8b:40:ca:95:6e:1c:bf:51:2d: 73:09:3b:d6:cb:20:e6:df:86:24:40:7e:b0:5b:e7:fc:0e:92: 83:16:a2:0f:85:05:44:28:4b:7d:bd:79:09:bf:1c:88:72:ed: 70:6a:c9:4f:e9:00:19:5b:d8:4b:dd:ed:cd:a8:47:b5:ab:2d: 57:10:b4:6e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURJG61klvhk9pbGCxJaclWgZStsQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAyMTA0WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MWQ5MjJjNzhmODQ5YmEyMmExYjRiYjkwZjM0YWNmMGQw MDAwZWVmNjZkOWQxM2M5ODdiZTk0NzhkMDI5N2E4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUDXvA7JhYo/3LCi6Ef6YowjvDNQ99swGLNgwmcrbUlgmd h0yKnw827g+a3omXZXJGTFyrNjdTB7qYMbHX5XmJvYDFATPCZNeKIwT0iIjfD+2I FzK/v8SlwCFqrYPQX24MRdJyLnNj9m8KpC2sI9XPxhXJDE2/2PKg/GkeTGUZE3dp +u944qHcOUWPCzLNT56+P98ilRgGwf+hP/7Fs6LWFzHBmbJIYLDasv9lIdFgf4cu iuCZzLtsu0gUBvUbjxTabe/wHqIN6bx6hCmGcjsS8jbze0EWU/VCEHBNvu0sF6SP RBTIHbaq0Rf8eUOb3E155EBaWtRc+wkIeXzHYk31AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSTIDAENVhMuHlZnxLau8BKKg57AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4NmZjMjJlLTI5ZjQtNGNjOS1iZGYxLTA1NzEwZDU3NTc4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/8gDANBgkqhkiG9w0BAQsFAAOCAQEAsLi1TN2QgE0NIpVLo4jA29jh snZHL8G/drIt33thce2Df3YKEnR0g2rVlYzLDeo5b4BtfeFSx/pv0T8cBtzhc18p cLP8oe6PbLmWO//gQbehnCBJfcJxAfOYFR3kxm4vOw4okKXhDzpZLoI/6IHenbO2 rUITVxQl4SURgyhhY7oNgc+ZLCKJ0ATjbQ7YQT7is2jQO+g+drBow699s1ABp+RR /rfTi9FbntjK15Lqt0qF5dLnL5fpC4QvZk/Ki0DKlW4cv1Etcwk71ssg5t+GJEB+ sFvn/A6SgxaiD4UFRChLfb15Cb8ciHLtcGrJT+kAGVvYS93tzahHtastVxC0bg== -----END CERTIFICATE-----Generated at Tue Jul 22 04:40:43 2025 by rpki-client