$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/943694fe-e278-4d76-b786-7df26f151dd9.roa File: 943694fe-e278-4d76-b786-7df26f151dd9.roa (raw, json) Hash identifier: A6yqMbn44AreothxZxVflBMvO70yznQVFxlbQAF5drQ= Subject key identifier: 8E:40:2F:73:33:7E:F6:B4:C9:1D:6A:EF:B6:EC:BD:6A:6B:A3:11:24 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 6BA5E9F63F65A0B2DD8AC90ABAAB88384D98B425 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/943694fe-e278-4d76-b786-7df26f151dd9.roa Signing time: Mon 21 Jul 2025 16:00:13 +0000 ROA not before: Mon 21 Jul 2025 16:00:13 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2606:f40:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a5:e9:f6:3f:65:a0:b2:dd:8a:c9:0a:ba:ab:88:38:4d:98:b4:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Jul 21 16:00:13 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=2cef5811117adc54a65cfd7dc4d46edd3e02f7feacf69469bb75baa3dfe1ff90, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8f:50:56:73:5e:0c:cc:f3:33:e4:bb:fa:96: 71:c3:fe:fe:7b:9d:0a:99:6d:63:2b:ee:50:2b:d9: 39:40:d6:03:02:0f:f7:aa:5e:85:13:da:52:ce:62: 7a:49:93:8f:eb:47:18:ac:8f:cb:33:c5:8f:14:79: 5e:fe:41:6f:b9:01:4d:8c:96:36:c0:06:e4:29:1d: d6:6c:a0:db:72:58:8d:68:fb:38:ee:12:6a:2a:b4: 80:3e:cd:fd:11:5c:16:2e:85:a2:35:c2:b4:2c:fc: 5d:39:b0:41:1c:56:8f:be:da:32:1c:c1:fd:bd:d6: 1a:37:be:a2:af:60:75:0f:ae:e8:24:3d:a1:e1:3a: 0b:48:49:fe:ec:3f:49:e6:0c:06:cc:51:6d:8b:97: 36:7e:23:a2:fd:68:f2:b8:0a:f1:c5:d7:fa:33:bc: e1:df:ca:49:63:4a:10:2c:5a:99:0a:32:87:3e:2d: 00:96:43:3c:20:13:e4:1d:29:ed:fa:aa:f0:ba:96: 8f:2c:21:7f:31:24:fd:9b:c3:28:3e:64:5f:31:f2: 82:7c:b3:03:f1:b0:cf:30:91:81:ca:fe:82:d6:cb: 96:7d:c3:2a:b1:06:31:8b:94:b5:0d:75:16:e5:f5: f2:54:0a:01:3c:78:cb:39:0e:c4:6c:c3:05:fe:e5: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:40:2F:73:33:7E:F6:B4:C9:1D:6A:EF:B6:EC:BD:6A:6B:A3:11:24 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/943694fe-e278-4d76-b786-7df26f151dd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:f40:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 53:47:3c:27:ca:ca:a1:e9:57:59:db:1f:7c:bc:c7:03:01:3f: c4:99:b9:87:7a:9a:7a:c8:61:ae:34:be:95:90:78:1a:0f:56: d9:77:36:64:cb:b4:f7:f3:04:66:9f:9f:22:66:b8:81:8b:2d: 2c:f8:ec:69:35:36:04:14:2d:86:61:e2:35:9d:4e:6f:29:7f: 48:e3:cd:5f:96:b2:8b:52:6d:93:6f:23:23:00:f8:7c:3d:ad: b1:02:cb:1a:42:09:e8:3a:3e:22:cc:93:6e:7f:3d:c1:3c:27: 75:02:b7:00:70:ac:cc:b7:3a:c6:c2:21:75:3c:1a:24:f6:2b: 49:e0:ee:87:0d:f0:26:af:98:71:d1:f6:6e:7b:3a:1f:6e:9b: 3e:0a:52:4a:f3:89:cd:60:d4:8c:f3:b6:8b:72:19:45:ed:e1: b2:93:33:0e:43:83:65:ad:ff:c0:26:0f:f1:24:70:b8:ab:75: be:f1:a1:73:97:26:4e:04:ec:15:be:8b:3d:13:8c:d0:d1:0b: c2:10:4d:2b:b6:25:70:d3:4d:43:03:49:bf:71:5f:92:55:e3: 21:e9:cd:18:1a:54:dc:a1:55:b6:9a:8a:fa:54:bd:7f:a4:fd: 2b:c8:0a:e6:c7:f2:3c:f6:a3:f2:b1:fc:38:08:e2:4d:3b:ff: ff:35:96:39 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUa6Xp9j9loLLdiskKuquIOE2YtCUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjUwNzIxMTYwMDEzWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2VmNTgxMTExN2FkYzU0YTY1Y2ZkN2RjNGQ0NmVkZDNl MDJmN2ZlYWNmNjk0NjliYjc1YmFhM2RmZTFmZjkwMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3j1BWc14MzPMz5Lv6lnHD/v57nQqZbWMr7lAr2TlA1gMC D/eqXoUT2lLOYnpJk4/rRxisj8szxY8UeV7+QW+5AU2MljbABuQpHdZsoNtyWI1o +zjuEmoqtIA+zf0RXBYuhaI1wrQs/F05sEEcVo++2jIcwf291ho3vqKvYHUPrugk PaHhOgtISf7sP0nmDAbMUW2LlzZ+I6L9aPK4CvHF1/ozvOHfykljShAsWpkKMoc+ LQCWQzwgE+QdKe36qvC6lo8sIX8xJP2bwyg+ZF8x8oJ8swPxsM8wkYHK/oLWy5Z9 wyqxBjGLlLUNdRbl9fJUCgE8eMs5DsRswwX+5dapAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjkAvczN+9rTJHWrvtuy9amujESQwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzk0MzY5NGZlLWUyNzgtNGQ3Ni1iNzg2LTdkZjI2ZjE1MWRkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBg9A//4wDQYJKoZIhvcNAQELBQADggEBAFNHPCfKyqHpV1nbH3y8xwMB P8SZuYd6mnrIYa40vpWQeBoPVtl3NmTLtPfzBGafnyJmuIGLLSz47Gk1NgQULYZh 4jWdTm8pf0jjzV+WsotSbZNvIyMA+Hw9rbECyxpCCeg6PiLMk25/PcE8J3UCtwBw rMy3OsbCIXU8GiT2K0ng7ocN8CavmHHR9m57Oh9umz4KUkrzic1g1IzztotyGUXt 4bKTMw5Dg2Wt/8AmD/EkcLirdb7xoXOXJk4E7BW+iz0TjNDRC8IQTSu2JXDTTUMD Sb9xX5JV4yHpzRgaVNyhVbaaivpUvX+k/SvICubH8jz2o/Kx/DgI4k07//81ljk= -----END CERTIFICATE-----Generated at Mon Jul 21 23:22:06 2025 by rpki-client