$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dee1cde8-2231-41cb-ab9d-5c9305dc92e4.roa File: dee1cde8-2231-41cb-ab9d-5c9305dc92e4.roa (raw, json) Hash identifier: JNC6+G0liBa7wyJ4nb8H3wWxGkR7znvFUKEoNyHlEjQ= Subject key identifier: 74:68:C6:E2:6E:F1:70:3D:CB:05:23:CE:2F:C0:7E:D6:CF:2A:D1:4A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B0AE8439768CF7E30918C25270279574BEAEFBF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dee1cde8-2231-41cb-ab9d-5c9305dc92e4.roa Signing time: Wed 23 Jul 2025 00:31:54 +0000 ROA not before: Wed 23 Jul 2025 00:31:54 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:4120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:0a:e8:43:97:68:cf:7e:30:91:8c:25:27:02:79:57:4b:ea:ef:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:31:54 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=fda24b01912816637a1338e0a67dd91c2e5dc6b4e13bb55b9a856ce50360ce8e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b6:96:82:23:a1:fd:78:fe:4a:7b:9b:c9:da: 46:c5:a6:6d:9c:a9:c0:69:f5:84:b5:9a:12:98:92: 48:62:ab:71:a2:3e:4c:f9:ae:36:d7:d1:ee:dd:c6: 13:27:0e:71:42:b1:bc:51:9b:af:53:01:94:a0:5b: 86:84:68:30:7f:67:ff:09:68:80:11:fe:33:61:73: 1c:91:94:00:57:4e:90:90:ac:b3:a3:00:67:87:9f: 09:36:1f:1e:be:04:46:76:d8:bd:25:65:c9:e0:f6: ea:ae:2b:88:a2:ac:25:d0:d4:68:a3:59:79:89:d6: 93:de:2b:9a:c6:5a:35:74:1d:1b:71:c1:55:ec:08: b1:79:a4:51:09:6a:73:84:ef:91:7a:85:f9:de:0f: 3a:27:94:f7:96:2b:a8:db:67:99:a3:45:39:e3:a7: be:52:06:41:6e:b0:7c:c9:a5:cc:5b:56:fd:3a:1a: cb:0b:e8:ba:d3:e7:2d:f4:51:bf:20:c9:3b:6b:74: b6:ff:4d:ad:35:28:e7:80:18:85:0f:6c:3b:ac:d1: a1:e3:06:ee:9c:32:fe:e8:ca:bc:67:e9:53:08:92: ff:8a:e5:28:87:54:bd:fc:65:d8:08:aa:d5:1e:6b: 7e:55:94:16:16:6e:a7:26:3e:a9:00:3b:f7:12:34: c6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:68:C6:E2:6E:F1:70:3D:CB:05:23:CE:2F:C0:7E:D6:CF:2A:D1:4A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dee1cde8-2231-41cb-ab9d-5c9305dc92e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:4120::/48 Signature Algorithm: sha256WithRSAEncryption 18:98:9e:04:b0:61:60:81:8b:02:90:86:6e:5a:5d:5c:48:a2: 7e:29:ea:8d:9f:e7:0d:ae:43:69:62:1a:34:82:00:92:ad:b8: 58:16:45:97:60:d3:36:99:60:98:1c:15:4b:31:b9:1e:05:5d: f6:bb:4b:53:a1:b1:a6:84:3e:38:4e:33:c0:7d:b7:46:c9:c5: 0f:45:da:2c:9c:41:8e:76:cc:b1:5f:d2:27:77:76:81:cb:a9: b8:d6:e5:09:b6:05:df:47:ad:3b:9d:36:21:58:49:e3:31:77: cb:6d:e2:1d:79:c5:24:60:b5:d9:02:a9:53:2c:c0:b9:e8:e4: 0b:3a:40:c7:fb:3c:f5:0e:b2:da:db:92:22:2e:51:16:22:d5: fa:57:fb:b3:4d:20:a1:99:27:f7:f8:b7:c2:90:28:b7:f8:cf: 85:bd:a3:66:f2:a1:f7:f3:ad:f0:c5:28:bd:31:af:f6:c7:55: fc:d3:01:c1:1b:58:22:06:6b:48:6d:ea:c2:a9:03:b4:0d:d1: df:ef:67:21:14:df:da:c3:12:27:43:4f:9b:5a:a5:c4:c4:bf: 22:6e:ff:e5:3d:1a:06:e3:b3:6a:88:b8:70:10:59:82:67:80: f0:dd:ff:58:5c:5f:7f:88:15:2f:78:b9:12:9e:ef:e7:2e:62: 4c:2d:66:e7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCwroQ5doz34wkYwlJwJ5V0vq778wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDAzMTU0WhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZGEyNGIwMTkxMjgxNjYzN2ExMzM4ZTBhNjdkZDkxYzJl NWRjNmI0ZTEzYmI1NWI5YTg1NmNlNTAzNjBjZThlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCntpaCI6H9eP5Ke5vJ2kbFpm2cqcBp9YS1mhKYkkhiq3Gi Pkz5rjbX0e7dxhMnDnFCsbxRm69TAZSgW4aEaDB/Z/8JaIAR/jNhcxyRlABXTpCQ rLOjAGeHnwk2Hx6+BEZ22L0lZcng9uquK4iirCXQ1GijWXmJ1pPeK5rGWjV0HRtx wVXsCLF5pFEJanOE75F6hfneDzonlPeWK6jbZ5mjRTnjp75SBkFusHzJpcxbVv06 GssL6LrT5y30Ub8gyTtrdLb/Ta01KOeAGIUPbDus0aHjBu6cMv7oyrxn6VMIkv+K 5SiHVL38ZdgIqtUea35VlBYWbqcmPqkAO/cSNMbtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdGjG4m7xcD3LBSPOL8B+1s8q0UowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RlZTFjZGU4LTIyMzEtNDFjYi1hYjlkLTVjOTMwNWRjOTJlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//QSAwDQYJKoZIhvcNAQELBQADggEBABiYngSwYWCBiwKQhm5aXVxI on4p6o2f5w2uQ2liGjSCAJKtuFgWRZdg0zaZYJgcFUsxuR4FXfa7S1OhsaaEPjhO M8B9t0bJxQ9F2iycQY52zLFf0id3doHLqbjW5Qm2Bd9HrTudNiFYSeMxd8tt4h15 xSRgtdkCqVMswLno5As6QMf7PPUOstrbkiIuURYi1fpX+7NNIKGZJ/f4t8KQKLf4 z4W9o2byoffzrfDFKL0xr/bHVfzTAcEbWCIGa0ht6sKpA7QN0d/vZyEU39rDEidD T5tapcTEvyJu/+U9Ggbjs2qIuHAQWYJngPDd/1hcX3+IFS94uRKe7+cuYkwtZuc= -----END CERTIFICATE-----Generated at Thu Jul 31 01:09:03 2025 by rpki-client