$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4967c52f-4fce-4524-95f6-4f8414082188.roa File: 4967c52f-4fce-4524-95f6-4f8414082188.roa (raw, json) Hash identifier: pYOzrrQsZyn04HKyyOfrIAGvB1pUnhg0Cj2qfk39rwU= Subject key identifier: F0:17:A0:76:F7:58:0B:9F:14:07:6F:D1:E0:2B:E8:89:86:6E:5A:E6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1FEBDF1DC7647831623F6515760CD90DFD5536BD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4967c52f-4fce-4524-95f6-4f8414082188.roa Signing time: Mon 07 Jul 2025 16:31:31 +0000 ROA not before: Mon 07 Jul 2025 16:31:31 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:eb:df:1d:c7:64:78:31:62:3f:65:15:76:0c:d9:0d:fd:55:36:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:31:31 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=46ef4c4e6dc99577ff0ff1958f80c4a3220c0c9e8e3af3f5d4fcaed1843323f0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:31:f5:4a:8e:f3:31:7e:b7:cd:a1:13:6b:8b: 1b:7b:a3:b8:04:86:b7:3e:f3:6a:14:84:d0:2b:3c: 24:98:63:1f:11:58:cf:20:be:f3:08:07:9e:6c:b8: a8:0b:80:02:d3:9b:90:27:e3:47:d1:73:65:38:b8: b8:1f:91:5b:63:ae:1c:1a:59:a7:79:12:05:2c:9a: f8:bb:95:62:04:34:e1:82:70:3a:5a:0d:65:cd:cf: fe:b1:e8:f9:cc:f3:99:c2:76:48:81:08:82:12:07: 8f:b1:2b:ac:a4:66:b8:d0:00:dc:49:85:2d:4a:fc: 90:80:65:00:7f:55:e6:23:e9:9b:fe:bf:f3:34:c0: 40:83:e4:55:eb:4c:f9:77:27:13:15:ec:48:dd:c9: 9f:c7:15:b9:6d:11:b9:2e:ab:1e:51:f3:9a:e5:df: 06:35:b8:53:75:d5:32:14:aa:68:10:b3:a0:57:ef: de:08:e9:5f:65:a3:cd:c0:73:ff:39:42:fe:e0:48: 60:d4:0d:d4:b4:41:5e:d0:5d:8a:59:7d:22:13:c9: e4:5c:0c:27:f8:56:a6:6b:9a:31:61:4e:df:c4:45: 98:fb:db:da:b7:29:07:c0:8d:e8:a7:2a:47:74:07: 59:79:37:e1:24:9a:09:44:aa:9d:90:54:dc:ab:dd: 5f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:17:A0:76:F7:58:0B:9F:14:07:6F:D1:E0:2B:E8:89:86:6E:5A:E6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4967c52f-4fce-4524-95f6-4f8414082188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:4040::/48 Signature Algorithm: sha256WithRSAEncryption 0c:7b:38:d7:b1:e7:19:10:3a:b8:89:61:39:c9:ba:36:e5:e4: 6e:6c:ec:99:bf:16:44:5c:52:cb:d6:73:aa:aa:2e:a4:cb:46: 48:ba:b7:fc:44:9a:33:f3:b1:03:9e:66:7f:4f:5c:ff:4c:e7: 88:91:dc:3b:3f:2b:4c:86:12:36:6f:cb:17:10:be:ec:10:d7: 35:19:36:38:03:0c:fd:7f:95:38:2b:16:85:8b:29:de:fc:80: 37:b4:c6:29:e5:c6:05:80:b8:9a:91:cf:54:df:ac:47:cd:1b: 2b:3e:fc:d7:33:a8:55:8a:1d:af:4d:4b:b0:52:75:2e:42:6e: 96:cc:87:1a:de:03:c1:b8:07:4e:b1:bf:f5:16:42:2b:8d:60: 94:ad:97:1e:54:a1:a1:a6:f9:91:8d:c5:4a:7c:e7:74:24:4b: 25:79:55:9f:52:2e:6b:42:f9:cf:00:29:ac:75:80:95:6d:a4: 1c:4a:1a:70:4f:6b:af:6b:51:d7:a6:3e:73:43:ea:83:e7:df: 1f:7e:9b:83:20:05:dc:ce:9e:07:ac:72:7d:78:bc:8f:d2:ee: a2:1c:01:4c:59:0d:55:e3:ea:e8:7d:57:ef:3e:f4:ea:8a:6f: 71:9f:f8:97:77:e6:8c:d8:9b:ad:85:bf:97:f4:9e:81:64:74: 75:e1:3b:de -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUH+vfHcdkeDFiP2UVdgzZDf1VNr0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYzMTMxWhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmVmNGM0ZTZkYzk5NTc3ZmYwZmYxOTU4ZjgwYzRhMzIy MGMwYzllOGUzYWYzZjVkNGZjYWVkMTg0MzMyM2YwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHMfVKjvMxfrfNoRNrixt7o7gEhrc+82oUhNArPCSYYx8R WM8gvvMIB55suKgLgALTm5An40fRc2U4uLgfkVtjrhwaWad5EgUsmvi7lWIENOGC cDpaDWXNz/6x6PnM85nCdkiBCIISB4+xK6ykZrjQANxJhS1K/JCAZQB/VeYj6Zv+ v/M0wECD5FXrTPl3JxMV7EjdyZ/HFbltEbkuqx5R85rl3wY1uFN11TIUqmgQs6BX 794I6V9lo83Ac/85Qv7gSGDUDdS0QV7QXYpZfSITyeRcDCf4VqZrmjFhTt/ERZj7 29q3KQfAjeinKkd0B1l5N+EkmglEqp2QVNyr3V+VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8BegdvdYC58UB2/R4CvoiYZuWuYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ5NjdjNTJmLTRmY2UtNDUyNC05NWY2LTRmODQxNDA4MjE4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//QEAwDQYJKoZIhvcNAQELBQADggEBAAx7ONex5xkQOriJYTnJujbl 5G5s7Jm/FkRcUsvWc6qqLqTLRki6t/xEmjPzsQOeZn9PXP9M54iR3Ds/K0yGEjZv yxcQvuwQ1zUZNjgDDP1/lTgrFoWLKd78gDe0xinlxgWAuJqRz1TfrEfNGys+/Ncz qFWKHa9NS7BSdS5CbpbMhxreA8G4B06xv/UWQiuNYJStlx5UoaGm+ZGNxUp853Qk SyV5VZ9SLmtC+c8AKax1gJVtpBxKGnBPa69rUdemPnND6oPn3x9+m4MgBdzOnges cn14vI/S7qIcAUxZDVXj6uh9V+8+9OqKb3Gf+Jd35ozYm62Fv5f0noFkdHXhO94= -----END CERTIFICATE-----Generated at Thu Jul 31 01:14:45 2025 by rpki-client