$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7014528-b1b3-4dab-9df1-adfd3b6f0a61.roa File: c7014528-b1b3-4dab-9df1-adfd3b6f0a61.roa (raw, json) Hash identifier: Y6Buq9qZre9LjRbnUnFF+dDE+WoZ74ogGfjjUklK56Y= Subject key identifier: 72:8F:DD:39:BF:8E:85:90:DF:48:A1:93:28:E8:27:24:33:EF:F7:AB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 22752443CC103E8B53C72F91EBBCECE19988B5AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7014528-b1b3-4dab-9df1-adfd3b6f0a61.roa Signing time: Sat 28 Jun 2025 00:31:32 +0000 ROA not before: Sat 28 Jun 2025 00:31:32 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:75:24:43:cc:10:3e:8b:53:c7:2f:91:eb:bc:ec:e1:99:88:b5:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 28 00:31:32 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=7669f7b28960c9245916517c69fff14fbfceea29b0848da5db1a675856a9a2df, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:fa:33:63:5f:62:0d:e2:6a:0a:f2:34:43: 14:f4:15:ec:8e:6a:4b:43:d6:f0:f0:42:fd:e5:b2: 6a:cb:24:f9:5f:6e:20:5d:02:c7:ef:4c:d0:a3:47: 1a:3a:4c:96:4d:f6:37:0b:44:03:cd:98:ff:20:c2: 03:bf:d1:3f:29:3b:86:5c:10:03:cc:25:3f:2a:96: 9c:e1:2f:d8:ad:8b:a2:42:0e:ec:06:d6:9f:d4:39: cb:85:5d:3a:d3:dd:bb:04:a9:4e:b7:0b:af:0e:af: 1b:5f:9e:73:4a:8a:67:50:26:8a:b9:92:0d:23:5f: 25:03:a4:6c:55:33:fc:f4:53:b8:07:ce:9a:d4:27: e2:d3:c9:40:f1:06:9a:79:34:c3:a4:57:76:9c:ee: e5:6d:0f:ea:71:5d:df:0d:fb:24:40:53:89:11:4a: 34:fe:55:fc:73:c2:fd:c2:60:0a:0a:f7:63:d6:eb: 70:2b:45:90:cc:71:ae:5d:e4:4d:73:1d:d3:82:72: 11:7d:7a:6f:36:40:7c:53:c2:20:47:0a:66:f1:6b: d7:cf:59:1a:74:83:4e:34:52:77:31:00:0c:18:d9: 12:46:47:a6:0b:08:c8:8c:68:fa:c2:b9:e8:fe:4c: 31:ab:db:66:f0:9a:14:f0:a8:e9:6e:14:43:ef:95: a0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8F:DD:39:BF:8E:85:90:DF:48:A1:93:28:E8:27:24:33:EF:F7:AB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7014528-b1b3-4dab-9df1-adfd3b6f0a61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8000::/39 Signature Algorithm: sha256WithRSAEncryption 24:1c:9d:85:14:a1:f5:29:56:35:53:40:c2:37:90:7b:6d:f3: 69:23:92:cb:61:0d:a7:10:3b:cc:b6:fa:ef:2a:3c:2a:86:03: ff:89:22:f6:08:6f:b3:36:32:76:dd:1e:91:93:5e:f6:9d:f1: 67:02:ac:c0:7d:c4:2a:6d:50:ce:8c:bb:f6:7d:c3:aa:62:2d: be:44:07:91:e0:7c:01:73:4a:e7:a6:a3:e8:a1:e7:a0:43:f9: 6e:bd:24:38:4b:99:b6:52:a5:6e:6f:6e:1f:e1:c0:78:36:40: 80:1e:a9:1a:65:3a:45:84:3f:d2:07:07:96:42:fa:8e:6f:b9: 78:27:98:1d:63:dc:c2:6b:dd:a0:ac:df:8e:09:72:96:72:76: 93:81:55:3a:56:67:0d:4f:6b:33:d9:e2:2e:47:08:dd:3f:a9: 68:2f:2f:a7:d2:1e:9a:eb:53:d3:f3:74:2c:de:e0:b8:3e:ba: 6f:5e:ad:62:27:f4:1c:ac:9f:56:c0:42:5e:29:93:99:65:a6: d4:c7:99:53:b6:2b:4f:9c:cd:5a:ce:c0:f0:ed:c7:7d:e7:34: 0b:0d:ce:1f:c7:ca:26:c1:e4:83:a7:d4:1c:bc:e1:dc:36:7f: 8d:91:6e:c3:66:dc:f9:bb:99:df:cb:7b:79:bf:fd:1d:3f:80: 82:11:20:e1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUInUkQ8wQPotTxy+R67zs4ZmIta8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI4MDAzMTMyWhcNMjUwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjY5ZjdiMjg5NjBjOTI0NTkxNjUxN2M2OWZmZjE0ZmJm Y2VlYTI5YjA4NDhkYTVkYjFhNjc1ODU2YTlhMmRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWh/ozY19iDeJqCvI0QxT0FeyOaktD1vDwQv3lsmrLJPlf biBdAsfvTNCjRxo6TJZN9jcLRAPNmP8gwgO/0T8pO4ZcEAPMJT8qlpzhL9iti6JC DuwG1p/UOcuFXTrT3bsEqU63C68OrxtfnnNKimdQJoq5kg0jXyUDpGxVM/z0U7gH zprUJ+LTyUDxBpp5NMOkV3ac7uVtD+pxXd8N+yRAU4kRSjT+Vfxzwv3CYAoK92PW 63ArRZDMca5d5E1zHdOCchF9em82QHxTwiBHCmbxa9fPWRp0g040UncxAAwY2RJG R6YLCMiMaPrCuej+TDGr22bwmhTwqOluFEPvlaBpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUco/dOb+OhZDfSKGTKOgnJDPv96swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3MDE0NTI4LWIxYjMtNGRhYi05ZGYxLWFkZmQzYjZmMGE2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB//gDANBgkqhkiG9w0BAQsFAAOCAQEAJBydhRSh9SlWNVNAwjeQe23z aSOSy2ENpxA7zLb67yo8KoYD/4ki9ghvszYydt0ekZNe9p3xZwKswH3EKm1Qzoy7 9n3DqmItvkQHkeB8AXNK56aj6KHnoEP5br0kOEuZtlKlbm9uH+HAeDZAgB6pGmU6 RYQ/0gcHlkL6jm+5eCeYHWPcwmvdoKzfjglylnJ2k4FVOlZnDU9rM9niLkcI3T+p aC8vp9IemutT0/N0LN7guD66b16tYif0HKyfVsBCXimTmWWm1MeZU7YrT5zNWs7A 8O3Hfec0Cw3OH8fKJsHkg6fUHLzh3DZ/jZFuw2bc+buZ38t7eb/9HT+AghEg4Q== -----END CERTIFICATE-----Generated at Wed Jul 2 00:20:21 2025 by rpki-client