$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/62814b99-92f8-4054-8d21-b418199235c9.roa File: 62814b99-92f8-4054-8d21-b418199235c9.roa (raw, json) Hash identifier: HD/YcbCUCMFi6xna60zdryevzPeGHOs0HV74/zVnitg= Subject key identifier: DB:35:D1:0E:0F:B4:25:12:6B:BB:56:32:7A:7F:83:89:17:D5:2F:DF Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4DB51ED29E5716B6336D1D1827C04AC5B8391F43 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/62814b99-92f8-4054-8d21-b418199235c9.roa Signing time: Fri 11 Jul 2025 15:10:06 +0000 ROA not before: Fri 11 Jul 2025 15:10:06 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:5203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b5:1e:d2:9e:57:16:b6:33:6d:1d:18:27:c0:4a:c5:b8:39:1f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 11 15:10:06 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=c1c99cbc2a802e1cabcdc8409500f1498a27102a47f2295d08e9e7900e3d3e63, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b0:69:25:f5:dd:6a:83:75:32:ce:a1:9b:b2: 73:1b:d6:d8:b7:6c:23:ab:5f:ec:40:2f:17:2d:89: 81:a7:36:50:04:04:9a:98:d5:c3:9f:f7:3f:38:ba: f3:9c:8c:36:47:aa:36:f0:7a:e9:19:33:32:dd:e4: 65:f9:6b:5b:7e:92:cb:bc:76:c6:b4:5b:3d:24:51: db:28:22:20:30:a7:42:91:ee:2d:0e:c2:9c:43:50: 58:dd:31:e4:01:e3:0d:2b:de:e1:45:20:4c:c3:15: 6d:d3:61:f6:a7:dc:c0:3f:0f:ef:b4:5c:f3:1d:ac: ce:ee:98:3b:06:36:7b:cc:74:d7:84:80:3d:02:61: 20:42:37:67:48:8d:e8:4b:7e:d6:0b:b8:8e:fa:34: 3d:d1:29:ec:b5:8f:92:fa:61:14:3b:8a:5d:5a:69: 44:31:16:de:37:b1:e5:79:f4:06:9a:0a:78:9f:90: 07:ee:5f:5c:e7:9f:21:86:f7:97:ac:60:99:7d:87: fc:18:1b:17:e0:f7:24:6c:19:44:9f:d1:af:50:be: af:d8:c3:6a:da:82:8d:53:50:93:4b:9c:99:b3:65: d5:c3:78:0f:b4:f4:51:b2:9c:e6:0b:4f:cd:6d:98: 43:8a:4a:a0:16:c5:ee:f4:1b:e3:81:8a:fd:a7:1f: 97:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:35:D1:0E:0F:B4:25:12:6B:BB:56:32:7A:7F:83:89:17:D5:2F:DF X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/62814b99-92f8-4054-8d21-b418199235c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:5203::/48 Signature Algorithm: sha256WithRSAEncryption bb:fb:00:b7:53:d6:65:fc:a6:c0:7c:fa:d4:ba:4b:18:e5:95: 8d:27:41:59:32:b4:3e:11:63:38:f6:9f:07:f7:e3:2a:36:52: 51:9a:64:46:99:62:1d:4a:06:1f:fc:18:be:ca:b3:4d:84:b8: 73:cd:55:ce:b2:f7:ee:7e:36:1b:9a:ab:42:48:21:f9:e3:a3: d6:d2:7c:4b:00:bf:1a:79:42:f1:33:bb:46:ec:99:7c:d2:0b: 57:75:99:9c:38:34:82:95:f3:e4:d3:fc:0d:6e:3a:e9:3a:8c: 73:29:f6:1b:14:af:5d:bc:69:51:9c:72:d7:bc:06:9e:e6:e2: 45:82:b4:6c:2e:af:e4:da:cd:d2:4b:b6:22:95:0b:f7:6c:78: c3:db:fc:5f:de:04:de:f6:2f:29:e4:af:82:8f:55:b0:af:4d: fb:03:97:46:41:06:b1:cd:42:ed:cd:45:5c:1d:dc:4b:6d:7f: 13:48:eb:01:c3:a4:06:e9:da:08:db:f4:21:f2:91:ed:75:56: 98:b9:1d:8d:a2:c1:5c:3a:59:15:bb:b8:19:6f:7a:18:72:87: 4e:d0:21:54:e6:3c:b7:8e:40:66:59:7d:8c:07:8e:6f:e7:82: 11:b0:b6:14:99:c4:95:78:66:ed:cb:39:f3:fd:85:c7:0d:e7: 5d:38:7d:46 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTbUe0p5XFrYzbR0YJ8BKxbg5H0MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwNzExMTUxMDA2WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWM5OWNiYzJhODAyZTFjYWJjZGM4NDA5NTAwZjE0OThh MjcxMDJhNDdmMjI5NWQwOGU5ZTc5MDBlM2QzZTYzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxsGkl9d1qg3UyzqGbsnMb1ti3bCOrX+xALxctiYGnNlAE BJqY1cOf9z84uvOcjDZHqjbweukZMzLd5GX5a1t+ksu8dsa0Wz0kUdsoIiAwp0KR 7i0OwpxDUFjdMeQB4w0r3uFFIEzDFW3TYfan3MA/D++0XPMdrM7umDsGNnvMdNeE gD0CYSBCN2dIjehLftYLuI76ND3RKey1j5L6YRQ7il1aaUQxFt43seV59AaaCnif kAfuX1znnyGG95esYJl9h/wYGxfg9yRsGUSf0a9Qvq/Yw2rago1TUJNLnJmzZdXD eA+09FGynOYLT81tmEOKSqAWxe70G+OBiv2nH5f7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2zXRDg+0JRJru1Yyen+DiRfVL98wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzYyODE0Yjk5LTkyZjgtNDA1NC04ZDIxLWI0MTgxOTkyMzVjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAUgMwDQYJKoZIhvcNAQELBQADggEBALv7ALdT1mX8psB8+tS6Sxjl lY0nQVkytD4RYzj2nwf34yo2UlGaZEaZYh1KBh/8GL7Ks02EuHPNVc6y9+5+Nhua q0JIIfnjo9bSfEsAvxp5QvEzu0bsmXzSC1d1mZw4NIKV8+TT/A1uOuk6jHMp9hsU r128aVGccte8Bp7m4kWCtGwur+TazdJLtiKVC/dseMPb/F/eBN72Lynkr4KPVbCv TfsDl0ZBBrHNQu3NRVwd3EttfxNI6wHDpAbp2gjb9CHyke11Vpi5HY2iwVw6WRW7 uBlvehhyh07QIVTmPLeOQGZZfYwHjm/nghGwthSZxJV4Zu3LOfP9hccN5104fUY= -----END CERTIFICATE-----Generated at Tue Jul 22 11:52:59 2025 by rpki-client