$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5ede365-047d-4c5f-a97d-dee6ba58b110.roa File: f5ede365-047d-4c5f-a97d-dee6ba58b110.roa (raw, json) Hash identifier: roEIlLAxShz6xyI/z22K9FJUSTCyq5k9fm69TH5H36s= Subject key identifier: 12:A8:B2:C5:07:B4:96:0F:1D:C7:C6:A6:05:38:CF:64:52:F3:81:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 702323BC908DFA9D6D918C2F300F4E5C8D8E739D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5ede365-047d-4c5f-a97d-dee6ba58b110.roa Signing time: Tue 08 Jul 2025 16:51:47 +0000 ROA not before: Tue 08 Jul 2025 16:51:47 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f17:4400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:23:23:bc:90:8d:fa:9d:6d:91:8c:2f:30:0f:4e:5c:8d:8e:73:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:51:47 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=9f6d0230fd6b004c41d4636115a28e16f11ba12c4620e1e1290dc60bf161c82e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:78:b7:dc:75:21:00:87:4e:f8:d2:51:17:69: 85:19:2b:1f:e4:ee:43:d8:4c:10:66:40:6e:69:72: d8:7a:6d:b6:8a:e3:a1:0f:e5:03:68:eb:fb:0f:a9: 94:c2:a8:fc:38:46:ae:3e:9c:2d:d8:b1:01:71:65: a4:cf:64:0a:f1:39:ab:4d:b9:18:c2:71:bf:0f:a1: c1:f3:32:18:65:0b:9a:da:79:a8:d9:cf:01:a0:50: fe:7b:c5:61:c6:8c:e5:78:c6:e6:db:c2:bf:73:8b: 84:46:fd:18:cc:84:78:9e:7e:ce:26:df:63:67:a5: 76:22:ef:5f:3d:14:6a:39:99:28:4b:4f:5a:47:ec: 8f:0b:e7:14:44:9f:31:d4:31:7b:e2:9e:40:46:63: f4:8d:b1:46:4b:2f:73:a0:20:86:e6:ec:37:9c:a0: a1:31:fe:71:4a:26:9a:aa:59:3e:2c:79:4e:0b:2f: 93:a5:9d:c5:b6:9d:76:bb:07:e7:cb:fe:3f:ea:6c: 66:8f:51:66:64:f7:85:4d:e4:05:b5:55:40:e6:19: 73:55:6e:ba:4e:ff:18:c8:d1:25:07:e0:47:61:66: 88:fc:cf:97:8e:4f:34:54:84:41:5e:fd:ed:b7:28: 35:7c:dd:03:df:08:3b:92:6d:e3:85:b7:f2:5e:98: 21:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A8:B2:C5:07:B4:96:0F:1D:C7:C6:A6:05:38:CF:64:52:F3:81:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5ede365-047d-4c5f-a97d-dee6ba58b110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f17:4400::/38 Signature Algorithm: sha256WithRSAEncryption ad:55:0d:ea:53:7b:c4:59:a0:cf:1e:eb:2a:41:a7:6c:e5:64: 1e:1f:a4:06:3a:f6:2b:d6:1f:74:a3:26:23:13:a4:07:64:75: 04:ad:a0:99:b2:85:95:79:69:ec:d1:52:81:6e:a2:dd:ea:ca: da:6e:a2:39:e0:b4:96:93:91:c1:07:49:9c:36:dd:89:2a:ba: 41:52:9c:dc:3a:6b:62:74:b5:f5:94:db:b9:12:39:64:3f:11: a4:b6:7d:69:a7:e4:88:15:c2:e5:87:e8:f2:4f:c0:df:43:b9: 97:78:7a:f8:d9:9a:50:a9:f6:b8:4d:68:8c:d7:b1:39:96:0c: 39:07:05:d9:e4:89:7f:44:6f:26:97:a9:86:ee:f2:98:2a:e9: 9a:a0:6c:a4:c4:2a:06:e5:cc:c0:e5:39:2a:9f:3d:0b:26:ff: dd:23:3d:0b:78:22:dc:4b:de:a4:9a:23:b5:10:05:fa:94:fd: 43:d7:e9:58:3e:75:76:7f:4a:e2:03:02:0c:45:70:cc:7b:50: 2d:cc:29:f9:ff:94:8c:2d:9f:5b:d6:5f:98:73:44:ac:10:48: a9:58:48:f9:81:d7:3a:d7:44:b5:d8:56:15:81:d2:32:0d:e2: 5a:8b:19:e6:07:83:ce:3e:0e:f5:bb:57:91:0b:d3:66:b4:47: d6:bb:b2:ae -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUcCMjvJCN+p1tkYwvMA9OXI2Oc50wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTY1MTQ3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjZkMDIzMGZkNmIwMDRjNDFkNDYzNjExNWEyOGUxNmYx MWJhMTJjNDYyMGUxZTEyOTBkYzYwYmYxNjFjODJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCseLfcdSEAh0740lEXaYUZKx/k7kPYTBBmQG5pcth6bbaK 46EP5QNo6/sPqZTCqPw4Rq4+nC3YsQFxZaTPZArxOatNuRjCcb8PocHzMhhlC5ra eajZzwGgUP57xWHGjOV4xubbwr9zi4RG/RjMhHiefs4m32NnpXYi7189FGo5mShL T1pH7I8L5xREnzHUMXvinkBGY/SNsUZLL3OgIIbm7DecoKEx/nFKJpqqWT4seU4L L5OlncW2nXa7B+fL/j/qbGaPUWZk94VN5AW1VUDmGXNVbrpO/xjI0SUH4EdhZoj8 z5eOTzRUhEFe/e23KDV83QPfCDuSbeOFt/JemCH9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUEqiyxQe0lg8dx8amBTjPZFLzgVgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1ZWRlMzY1LTA0N2QtNGM1Zi1hOTdkLWRlZTZiYTU4YjExMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8XRDANBgkqhkiG9w0BAQsFAAOCAQEArVUN6lN7xFmgzx7rKkGnbOVk Hh+kBjr2K9YfdKMmIxOkB2R1BK2gmbKFlXlp7NFSgW6i3erK2m6iOeC0lpORwQdJ nDbdiSq6QVKc3DprYnS19ZTbuRI5ZD8RpLZ9aafkiBXC5Yfo8k/A30O5l3h6+Nma UKn2uE1ojNexOZYMOQcF2eSJf0RvJpephu7ymCrpmqBspMQqBuXMwOU5Kp89Cyb/ 3SM9C3gi3EvepJojtRAF+pT9Q9fpWD51dn9K4gMCDEVwzHtQLcwp+f+UjC2fW9Zf mHNErBBIqVhI+YHXOtdEtdhWFYHSMg3iWosZ5geDzj4O9btXkQvTZrRH1ruyrg== -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:55 2025 by rpki-client