$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92d593ea-9a2d-4cb9-95b8-cfe741a70127.roa File: 92d593ea-9a2d-4cb9-95b8-cfe741a70127.roa (raw, json) Hash identifier: VJwj94+LXX+96c8xp5sVK9i0LaLinh2bvzPdq2wV2zU= Subject key identifier: 9F:B6:B4:57:8D:5E:76:7A:CE:AB:25:0C:BE:58:30:A6:EA:63:16:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 76AF528FFF0E3682881312BBFF52B9F0316AA1F9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92d593ea-9a2d-4cb9-95b8-cfe741a70127.roa Signing time: Tue 10 Jun 2025 16:21:48 +0000 ROA not before: Tue 10 Jun 2025 16:21:48 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f38:5040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:af:52:8f:ff:0e:36:82:88:13:12:bb:ff:52:b9:f0:31:6a:a1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:21:48 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=3fcbe4b14ec47f0535745d1f50654cb7d950fda8fca23406f5ef6a48ee2ada11, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1c:87:3a:29:af:19:fa:5a:34:46:e2:b9:b6: 5a:19:04:62:25:fa:28:5a:aa:97:d3:83:96:17:70: 1c:64:76:7a:99:05:4e:a5:ef:85:83:6d:95:ad:8c: 1f:18:66:ad:3c:0a:2f:44:9c:47:24:20:36:da:e2: 96:f1:87:05:af:ad:42:0d:d9:9a:4a:ba:ff:98:7c: 8a:df:53:b6:f6:1f:7e:5f:7a:41:5b:4b:df:cb:30: 3f:72:ed:7a:92:8a:d2:42:5c:67:57:3d:34:7b:e2: a5:ea:9f:97:af:10:9a:08:b7:c0:54:52:20:fb:2c: 16:de:aa:47:bc:5b:0f:a6:c4:9a:57:e1:23:b9:5a: 86:b6:ec:60:de:9d:f1:e7:90:1b:ac:a4:5d:de:77: 58:6b:ef:81:32:21:59:99:d1:a9:75:ca:61:17:27: 72:d0:52:74:5f:4a:14:6a:55:78:59:de:97:67:55: cb:c5:e0:5c:41:61:3f:06:77:05:99:c5:1b:c0:a2: 66:3a:03:fe:32:ed:06:1c:e1:40:4e:c7:12:a5:c1: 44:41:99:df:bd:5c:3a:01:27:87:b2:ee:b8:55:27: 93:2a:5d:d5:a6:fb:dd:66:0a:0f:c5:71:d8:44:cc: 92:2a:6f:92:6f:1d:de:77:ce:5a:70:46:fd:80:f1: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B6:B4:57:8D:5E:76:7A:CE:AB:25:0C:BE:58:30:A6:EA:63:16:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92d593ea-9a2d-4cb9-95b8-cfe741a70127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:5040::/48 Signature Algorithm: sha256WithRSAEncryption 4a:11:3e:00:33:65:bd:71:a0:e5:ec:7e:29:61:61:8a:bd:d4: be:27:94:43:d0:82:04:91:06:c0:a6:55:27:89:38:a4:5a:90: 87:ca:92:b6:ac:18:34:c1:70:48:3d:81:ba:b8:36:1e:3c:bc: da:b8:93:64:09:a4:32:c9:6b:e2:13:c5:72:05:59:84:74:b4: 24:de:69:20:f1:da:01:98:97:f6:f1:cb:bd:f4:7c:9d:cf:a1: 4a:34:90:82:a7:96:57:a5:a0:fd:c7:93:2b:3d:4a:ca:ba:38: 3a:31:0e:01:c3:d4:88:54:4f:fd:44:4c:a5:25:e3:cc:1a:9a: 01:69:17:8e:2f:8c:53:28:03:88:50:42:9d:9b:44:fe:1c:60: d4:a5:0e:54:37:b9:3d:32:f1:25:b1:53:30:8b:e0:56:ef:5a: 9f:47:da:a2:30:1a:92:24:51:95:65:dc:f9:13:10:d8:6a:a9: 95:12:e6:c2:a9:5d:d4:dc:cf:3e:2a:92:9f:d0:55:f4:d8:eb: bc:f1:a2:b2:30:67:a5:7f:8b:37:7c:ac:ba:94:92:a0:79:8a: f7:99:e4:5b:e0:24:22:17:8e:d2:55:b1:ae:29:91:36:e7:ed: 3a:ba:c8:01:c7:97:22:c4:16:73:20:73:89:d2:6d:93:cc:54: a4:0c:9f:19 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdq9Sj/8ONoKIExK7/1K58DFqofkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTYyMTQ4WhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZmNiZTRiMTRlYzQ3ZjA1MzU3NDVkMWY1MDY1NGNiN2Q5 NTBmZGE4ZmNhMjM0MDZmNWVmNmE0OGVlMmFkYTExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDHIc6Ka8Z+lo0RuK5tloZBGIl+ihaqpfTg5YXcBxkdnqZ BU6l74WDbZWtjB8YZq08Ci9EnEckIDba4pbxhwWvrUIN2ZpKuv+YfIrfU7b2H35f ekFbS9/LMD9y7XqSitJCXGdXPTR74qXqn5evEJoIt8BUUiD7LBbeqke8Ww+mxJpX 4SO5Woa27GDenfHnkBuspF3ed1hr74EyIVmZ0al1ymEXJ3LQUnRfShRqVXhZ3pdn VcvF4FxBYT8GdwWZxRvAomY6A/4y7QYc4UBOxxKlwURBmd+9XDoBJ4ey7rhVJ5Mq XdWm+91mCg/FcdhEzJIqb5JvHd53zlpwRv2A8dwlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUn7a0V41ednrOqyUMvlgwpupjFp4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyZDU5M2VhLTlhMmQtNGNiOS05NWI4LWNmZTc0MWE3MDEyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84UEAwDQYJKoZIhvcNAQELBQADggEBAEoRPgAzZb1xoOXsfilhYYq9 1L4nlEPQggSRBsCmVSeJOKRakIfKkrasGDTBcEg9gbq4Nh48vNq4k2QJpDLJa+IT xXIFWYR0tCTeaSDx2gGYl/bxy730fJ3PoUo0kIKnlleloP3Hkys9Ssq6ODoxDgHD 1IhUT/1ETKUl48wamgFpF44vjFMoA4hQQp2bRP4cYNSlDlQ3uT0y8SWxUzCL4Fbv Wp9H2qIwGpIkUZVl3PkTENhqqZUS5sKpXdTczz4qkp/QVfTY67zxorIwZ6V/izd8 rLqUkqB5iveZ5FvgJCIXjtJVsa4pkTbn7Tq6yAHHlyLEFnMgc4nSbZPMVKQMnxk= -----END CERTIFICATE-----Generated at Tue Jul 1 09:10:22 2025 by rpki-client