$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee948ef5-5b65-46c2-b45c-31ac0d8892e8.roa File: ee948ef5-5b65-46c2-b45c-31ac0d8892e8.roa (raw, json) Hash identifier: l37K93c6a1XXqm4G2E9fsCRdAxQRZ/30J/83Z3qA4SY= Subject key identifier: F0:6E:EE:47:1D:04:22:60:B5:F8:DD:F2:B7:BF:C7:9A:08:53:C2:FF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 424B64508B7AB471FAA2645370A139C2800531E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee948ef5-5b65-46c2-b45c-31ac0d8892e8.roa Signing time: Tue 08 Jul 2025 16:31:33 +0000 ROA not before: Tue 08 Jul 2025 16:31:33 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f32:7400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4b:64:50:8b:7a:b4:71:fa:a2:64:53:70:a1:39:c2:80:05:31:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:31:33 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=35c5ad6c855cb84597ce9748056b45ee6a718cc91070b4fba59b32a14b29738c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d2:e8:e8:90:57:31:09:f8:3b:e8:da:5c:96: e6:f2:f5:d8:28:7d:2a:08:b3:2e:23:8d:3a:42:e2: 60:8d:e9:64:ec:1a:6a:67:4e:c2:73:53:21:1c:fe: d8:62:e2:9a:9b:cf:8e:9c:6f:a7:8b:cc:c3:25:b7: cd:a4:d5:cb:1a:b5:9b:37:a5:68:97:8c:e7:ed:c6: fc:45:d8:3c:ab:ef:1d:fd:49:35:bb:26:f0:12:3d: 19:0b:af:41:1e:8d:15:73:79:a0:df:e3:f1:11:ac: 5d:50:e8:cd:43:2a:81:48:ab:74:4d:00:a0:9a:1f: 76:70:9c:97:2b:5c:fb:d0:0d:b5:dc:3e:96:f0:f1: 47:5c:3c:73:3d:e4:a6:4b:5d:12:8d:b3:aa:bd:77: 86:67:cc:9f:67:93:e7:1b:59:c8:14:12:aa:e0:0c: 9e:74:4f:db:f3:14:27:8a:60:46:69:41:13:29:59: 2c:68:65:b3:40:9c:75:97:5b:4f:11:47:94:8a:73: d2:9a:2b:67:fb:22:04:10:36:6d:81:f5:66:0f:d0: 7d:96:34:3f:4f:60:d1:cd:dd:18:ee:73:74:df:14: 3f:8b:e2:f4:5d:26:eb:0c:53:f1:73:c2:52:21:c5: fc:a8:e0:77:b4:65:9b:47:a1:8b:e7:70:5c:ab:13: 76:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6E:EE:47:1D:04:22:60:B5:F8:DD:F2:B7:BF:C7:9A:08:53:C2:FF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee948ef5-5b65-46c2-b45c-31ac0d8892e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f32:7400::/40 Signature Algorithm: sha256WithRSAEncryption c9:38:6e:1c:a2:24:ae:aa:55:b7:81:dd:a4:7c:71:9e:85:d8: 84:b0:e8:ed:19:ae:56:76:60:da:2d:d3:e2:17:18:c5:a2:d9: 3f:e6:45:1b:3f:9d:25:0d:5b:32:4d:b9:65:d7:04:e1:4f:d4: ef:eb:e7:b4:db:fe:c4:fe:e3:fc:d1:28:d4:04:e8:77:32:66: 22:90:ee:56:a5:77:a6:40:19:a9:83:f5:99:3b:05:f5:c9:18: 8d:4f:a8:f0:21:58:b9:5a:b8:85:71:96:fc:40:6b:ae:d7:fb: a1:ea:16:6e:9f:47:af:65:1c:8c:63:8c:27:25:2a:54:bc:08: 39:6b:d7:9f:29:35:00:09:7d:8a:bb:43:dc:e0:05:54:75:b7: f5:ab:24:27:61:5c:f8:72:ad:75:32:57:4c:57:73:ee:62:22: f0:d9:af:1a:a9:ad:07:ea:23:a2:a6:2d:1c:ad:c6:61:04:03: 7f:e7:c4:4b:95:e5:73:4e:c5:e8:44:8e:1f:dc:82:16:93:e0: cd:2f:5c:d0:79:00:ff:0d:36:57:d6:00:62:bc:d7:50:be:8b: 1c:b5:16:74:d2:aa:25:a0:34:cd:e5:47:00:ba:fc:81:82:2e: 39:5f:b3:21:c0:d3:81:91:1a:98:36:bf:84:d9:31:d8:ba:31: 8a:ad:3f:ab -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQktkUIt6tHH6omRTcKE5woAFMekwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYzMTMzWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNWM1YWQ2Yzg1NWNiODQ1OTdjZTk3NDgwNTZiNDVlZTZh NzE4Y2M5MTA3MGI0ZmJhNTliMzJhMTRiMjk3MzhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI0ujokFcxCfg76Npcluby9dgofSoIsy4jjTpC4mCN6WTs GmpnTsJzUyEc/thi4pqbz46cb6eLzMMlt82k1csatZs3pWiXjOftxvxF2Dyr7x39 STW7JvASPRkLr0EejRVzeaDf4/ERrF1Q6M1DKoFIq3RNAKCaH3ZwnJcrXPvQDbXc Ppbw8UdcPHM95KZLXRKNs6q9d4ZnzJ9nk+cbWcgUEqrgDJ50T9vzFCeKYEZpQRMp WSxoZbNAnHWXW08RR5SKc9KaK2f7IgQQNm2B9WYP0H2WND9PYNHN3Rjuc3TfFD+L 4vRdJusMU/FzwlIhxfyo4He0ZZtHoYvncFyrE3YLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU8G7uRx0EImC1+N3yt7/HmghTwv8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VlOTQ4ZWY1LTViNjUtNDZjMi1iNDVjLTMxYWMwZDg4OTJlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8ydDANBgkqhkiG9w0BAQsFAAOCAQEAyThuHKIkrqpVt4HdpHxxnoXY hLDo7RmuVnZg2i3T4hcYxaLZP+ZFGz+dJQ1bMk25ZdcE4U/U7+vntNv+xP7j/NEo 1ATodzJmIpDuVqV3pkAZqYP1mTsF9ckYjU+o8CFYuVq4hXGW/EBrrtf7oeoWbp9H r2UcjGOMJyUqVLwIOWvXnyk1AAl9irtD3OAFVHW39askJ2Fc+HKtdTJXTFdz7mIi 8NmvGqmtB+ojoqYtHK3GYQQDf+fES5Xlc07F6ESOH9yCFpPgzS9c0HkA/w02V9YA YrzXUL6LHLUWdNKqJaA0zeVHALr8gYIuOV+zIcDTgZEamDa/hNkx2Loxiq0/qw== -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:07 2025 by rpki-client