$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/91a27594-a038-483a-a558-a5377f4d266f.roa File: 91a27594-a038-483a-a558-a5377f4d266f.roa (raw, json) Hash identifier: b+3CqYtcFKsoed5Y8S/AKgW7db84CEDuEbbUcsIfcss= Subject key identifier: 6E:15:21:FD:C0:93:0F:25:54:AC:EF:9A:11:0B:E9:4F:AB:58:EA:DF Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 19CC799B84E94FC0A706D7E66A84327EA831F5D6 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/91a27594-a038-483a-a558-a5377f4d266f.roa Signing time: Mon 21 Jul 2025 16:00:16 +0000 ROA not before: Mon 21 Jul 2025 16:00:16 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2606:f40:fffc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:cc:79:9b:84:e9:4f:c0:a7:06:d7:e6:6a:84:32:7e:a8:31:f5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Jul 21 16:00:16 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=2635cd44af02f75075d3f3159362ea9e121bef3af0e0ec93b80c92510ce40136, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:34:2f:5b:da:74:c6:6b:06:74:55:22:81:b7: 41:be:c3:e2:65:53:b7:ce:e0:2f:b1:22:36:31:20: 0a:1a:90:7b:1f:65:08:1c:06:68:18:8d:08:e9:cf: 8a:7a:b4:51:3a:25:93:7d:ab:a5:c7:3f:96:ac:8c: 8d:04:fa:ad:84:60:fe:7a:5b:ec:aa:fc:00:a1:54: 95:7c:38:9e:5c:74:51:63:e9:d2:dd:7e:ec:28:fc: 0b:2a:f8:12:64:d3:e4:d6:05:80:e8:a5:68:09:f1: dd:ec:41:40:7d:3f:5e:91:4f:80:2e:ca:77:92:ab: 52:7a:fe:b1:8d:95:db:2d:84:b0:d6:7d:48:c4:55: 1f:4b:be:ec:35:d7:a6:34:5e:9c:26:bd:30:2b:24: 5c:e7:27:92:93:f8:0d:e6:60:08:e2:1f:16:52:94: e6:49:bc:92:75:b2:60:2b:55:39:3e:1a:5f:55:bc: a0:68:43:1a:e9:2d:e8:a9:e2:0d:f0:3d:9b:a1:d7: 25:f1:6b:da:31:26:75:bf:5b:28:60:bb:12:53:ce: c4:74:fa:5a:99:3a:8e:b4:2a:fc:5d:fe:05:b6:1b: f0:fe:3f:2f:c1:12:aa:49:8e:e8:c0:14:83:f2:59: a1:78:f8:ba:64:b7:5a:9f:77:ab:48:29:a8:5c:5d: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:15:21:FD:C0:93:0F:25:54:AC:EF:9A:11:0B:E9:4F:AB:58:EA:DF X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/91a27594-a038-483a-a558-a5377f4d266f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:f40:fffc::/48 Signature Algorithm: sha256WithRSAEncryption 21:ab:21:af:fd:28:d9:19:17:7d:60:2d:cf:62:84:da:02:1d: 9b:c6:22:53:6b:e5:8c:2a:0c:98:53:ab:a0:b9:ab:53:32:bc: 42:71:5d:36:f4:f7:9b:81:ff:2d:79:b4:2c:f3:9d:60:a5:a3: 93:88:4c:f5:57:7f:5f:60:af:7c:9d:89:c0:b2:54:5e:97:66: a9:77:c5:0a:be:cd:9c:74:0a:95:ef:61:37:06:4f:a8:9e:80: e4:97:f0:cd:67:26:09:d0:36:90:d0:6a:68:96:f3:10:ce:54: 95:52:2a:fd:e9:f2:cd:f8:85:c8:b4:bb:25:9b:49:0d:60:5f: ed:90:68:87:dd:6a:10:11:fa:85:bc:da:2a:7c:cd:1f:73:79: 63:b7:4f:7a:b9:43:bc:fb:eb:51:91:a0:cb:72:90:48:73:93: 00:b7:c0:9e:fc:65:fe:6c:26:ae:f1:06:ad:a1:82:3e:33:f3: f5:13:a0:46:d7:d3:14:1a:8d:0a:5b:48:2e:4e:0a:20:1e:2b: 11:31:36:8f:a7:e9:58:ca:74:4b:25:6b:f0:72:6d:dc:e3:3c: 18:b5:c3:51:33:6d:6c:72:62:bf:5e:8b:1b:ff:7d:1b:78:a9: 39:a3:e2:ad:f6:41:ff:08:3c:4c:84:dc:c7:b8:56:0c:10:17: 2f:06:37:2a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGcx5m4TpT8CnBtfmaoQyfqgx9dYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjUwNzIxMTYwMDE2WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjM1Y2Q0NGFmMDJmNzUwNzVkM2YzMTU5MzYyZWE5ZTEy MWJlZjNhZjBlMGVjOTNiODBjOTI1MTBjZTQwMTM2MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcNC9b2nTGawZ0VSKBt0G+w+JlU7fO4C+xIjYxIAoakHsf ZQgcBmgYjQjpz4p6tFE6JZN9q6XHP5asjI0E+q2EYP56W+yq/AChVJV8OJ5cdFFj 6dLdfuwo/Asq+BJk0+TWBYDopWgJ8d3sQUB9P16RT4AuyneSq1J6/rGNldsthLDW fUjEVR9Lvuw116Y0XpwmvTArJFznJ5KT+A3mYAjiHxZSlOZJvJJ1smArVTk+Gl9V vKBoQxrpLeip4g3wPZuh1yXxa9oxJnW/WyhguxJTzsR0+lqZOo60Kvxd/gW2G/D+ Py/BEqpJjujAFIPyWaF4+Lpkt1qfd6tIKahcXdhhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbhUh/cCTDyVUrO+aEQvpT6tY6t8wHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzkxYTI3NTk0LWEwMzgtNDgzYS1hNTU4LWE1Mzc3ZjRkMjY2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBg9A//wwDQYJKoZIhvcNAQELBQADggEBACGrIa/9KNkZF31gLc9ihNoC HZvGIlNr5YwqDJhTq6C5q1MyvEJxXTb095uB/y15tCzznWClo5OITPVXf19gr3yd icCyVF6XZql3xQq+zZx0CpXvYTcGT6iegOSX8M1nJgnQNpDQamiW8xDOVJVSKv3p 8s34hci0uyWbSQ1gX+2QaIfdahAR+oW82ip8zR9zeWO3T3q5Q7z761GRoMtykEhz kwC3wJ78Zf5sJq7xBq2hgj4z8/UToEbX0xQajQpbSC5OCiAeKxExNo+n6VjKdEsl a/BybdzjPBi1w1EzbWxyYr9eixv/fRt4qTmj4q32Qf8IPEyE3Me4VgwQFy8GNyo= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:26 2025 by rpki-client