$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c79f04-473d-4841-b63b-2ae8818ab0b3.roa File: b7c79f04-473d-4841-b63b-2ae8818ab0b3.roa (raw, json) Hash identifier: ZknMkvzGbhdWGX7QAaCP8aU8O83x2mQqFbq9nQMmsoo= Subject key identifier: 02:AD:45:9F:91:00:60:BC:C8:D4:E8:B2:0B:E5:9E:98:28:52:C1:5D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D952FC49736C66080FFBC918EACC058DEC280B2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c79f04-473d-4841-b63b-2ae8818ab0b3.roa Signing time: Mon 23 Jun 2025 15:11:38 +0000 ROA not before: Mon 23 Jun 2025 15:11:38 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f01:4804::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:95:2f:c4:97:36:c6:60:80:ff:bc:91:8e:ac:c0:58:de:c2:80:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 23 15:11:38 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=a4d096638b703e12538e106e3a8b55cdf4486937dd6fe1bbe497fd3d6d0592bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:6b:e8:e1:c7:fe:11:03:64:e3:0d:eb:40: dc:47:85:ab:e9:33:25:fa:b8:66:c1:9b:3d:85:53: 73:06:65:c5:4f:61:db:35:26:ba:76:ed:01:02:01: 7a:f3:16:a2:be:28:7c:a1:38:88:ac:08:62:a6:0e: d5:f2:e8:91:4d:a5:25:3d:a2:ca:8b:6a:0d:9e:70: 74:02:73:d3:75:04:bb:2a:1d:dd:de:19:29:a8:4b: f3:67:f4:29:5b:66:c4:09:d2:a0:0b:cc:88:df:c5: 6c:17:86:0e:a1:1c:a3:95:87:fa:90:48:bb:b4:12: 01:1b:fe:f2:df:16:c4:c5:c9:81:84:ba:d1:10:7c: 2c:92:84:e9:86:7a:90:0e:7c:dc:4d:0c:69:0e:1e: 43:c6:10:f1:1f:5f:7d:82:5e:f1:52:b4:44:46:56: 55:a3:45:b2:3c:4a:46:46:bf:ef:c2:b2:48:53:86: 25:50:e5:46:b8:83:92:6c:76:9e:93:cd:db:10:1b: 1b:3f:fc:d9:e1:fc:43:99:24:12:66:1d:64:ee:42: 48:a1:05:4d:39:32:2c:27:1f:25:14:d4:df:15:12: 67:d9:c2:25:8b:42:a2:b4:cf:3d:ba:90:6a:af:0b: 03:46:d4:26:56:42:54:a7:df:8d:e8:28:fe:1d:29: 65:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AD:45:9F:91:00:60:BC:C8:D4:E8:B2:0B:E5:9E:98:28:52:C1:5D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c79f04-473d-4841-b63b-2ae8818ab0b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:4804::/47 Signature Algorithm: sha256WithRSAEncryption 8b:ba:d7:a5:67:24:c5:df:9a:26:2f:a8:93:05:75:33:a7:f4: 8c:09:99:27:d7:03:60:54:c0:62:6e:e7:2d:e4:20:9e:8d:7b: b4:a7:cc:ae:5c:d2:89:19:18:f0:01:cd:3d:5a:54:83:b5:e8: de:a3:16:da:1e:2a:1c:e5:ea:63:5e:74:4b:a8:c8:ba:68:14: a7:ea:16:66:60:16:1d:f8:19:ee:a7:1c:b4:83:b1:4b:b8:eb: 82:5a:7a:e8:7d:44:79:49:2e:87:c1:cd:b5:ed:2e:1e:f0:9b: e8:35:7a:a5:6d:fa:66:11:c2:7a:26:0d:72:fa:54:f5:d0:7b: 77:8a:65:6f:31:de:dd:2d:3b:2c:c0:33:58:2f:79:f5:8f:29: 7a:65:c0:07:c4:d1:8a:50:97:0d:6a:ec:50:a5:5b:cc:a4:fd: 9a:e7:ef:60:93:74:f8:95:3f:84:4a:9e:73:28:83:2d:52:da: f3:c5:40:c3:03:3f:2c:e2:69:1d:3a:3f:3d:54:d9:a4:3a:6f: 31:60:f3:32:e3:ec:b3:7c:38:8d:e2:98:9f:6d:00:bb:dc:bf: d5:f0:45:49:03:9b:fc:04:d2:4c:ed:9f:21:99:66:5b:62:08: 9c:64:64:1d:57:51:bb:f3:dc:88:5b:be:2b:99:1a:d4:2f:d7: 60:b4:11:67 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXZUvxJc2xmCA/7yRjqzAWN7CgLIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIzMTUxMTM4WhcNMjUwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNGQwOTY2MzhiNzAzZTEyNTM4ZTEwNmUzYThiNTVjZGY0 NDg2OTM3ZGQ2ZmUxYmJlNDk3ZmQzZDZkMDU5MmJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK2Gvo4cf+EQNk4w3rQNxHhavpMyX6uGbBmz2FU3MGZcVP Yds1Jrp27QECAXrzFqK+KHyhOIisCGKmDtXy6JFNpSU9osqLag2ecHQCc9N1BLsq Hd3eGSmoS/Nn9ClbZsQJ0qALzIjfxWwXhg6hHKOVh/qQSLu0EgEb/vLfFsTFyYGE utEQfCyShOmGepAOfNxNDGkOHkPGEPEfX32CXvFStERGVlWjRbI8SkZGv+/CskhT hiVQ5Ua4g5Jsdp6TzdsQGxs//Nnh/EOZJBJmHWTuQkihBU05MiwnHyUU1N8VEmfZ wiWLQqK0zz26kGqvCwNG1CZWQlSn343oKP4dKWWHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAq1Fn5EAYLzI1OiyC+WemChSwV0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3Yzc5ZjA0LTQ3M2QtNDg0MS1iNjNiLTJhZTg4MThhYjBiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSAQwDQYJKoZIhvcNAQELBQADggEBAIu616VnJMXfmiYvqJMFdTOn 9IwJmSfXA2BUwGJu5y3kIJ6Ne7SnzK5c0okZGPABzT1aVIO16N6jFtoeKhzl6mNe dEuoyLpoFKfqFmZgFh34Ge6nHLSDsUu464Jaeuh9RHlJLofBzbXtLh7wm+g1eqVt +mYRwnomDXL6VPXQe3eKZW8x3t0tOyzAM1gvefWPKXplwAfE0YpQlw1q7FClW8yk /Zrn72CTdPiVP4RKnnMogy1S2vPFQMMDPyziaR06Pz1U2aQ6bzFg8zLj7LN8OI3i mJ9tALvcv9XwRUkDm/wE0kztnyGZZltiCJxkZB1XUbvz3IhbviuZGtQv12C0EWc= -----END CERTIFICATE-----Generated at Tue Jul 1 10:19:12 2025 by rpki-client