$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa File: 7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa (raw, json) Hash identifier: S3zCL/kl0Cu1fYhZeqVTmm9zgESdtZYeJvdrf+aEDLk= Subject key identifier: F6:3D:67:1B:E9:6D:7B:DC:AC:86:00:D8:A2:8D:6A:9F:C5:13:47:75 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 45E7A5FF83CE8C9D7ECB950738CDE46EC75A3B0D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa Signing time: Wed 25 Jun 2025 15:06:46 +0000 ROA not before: Wed 25 Jun 2025 15:06:46 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2606:8140:500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e7:a5:ff:83:ce:8c:9d:7e:cb:95:07:38:cd:e4:6e:c7:5a:3b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 25 15:06:46 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=55a9bf6c455cd0bd011c623890ff24315369c475e90091932d217980ceac879f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:c7:86:2e:c0:e2:33:a1:18:2a:9b:66:66: 65:e1:f2:4e:1c:e5:e3:47:8c:6a:c7:5d:e4:35:a9: ad:9f:04:39:59:e1:98:0f:7b:08:1d:13:1d:e9:b9: 2e:4e:7d:9c:c8:5c:fc:fe:0a:7c:61:57:b6:9b:25: 94:73:01:4e:1c:8e:ad:52:fc:10:d9:e6:21:e7:42: 98:1b:70:71:67:14:4b:f8:36:b3:7b:a7:a3:1f:93: ea:ed:95:45:45:c6:bd:db:d3:fa:24:e5:b7:f9:37: b3:ad:6a:18:a3:d0:4c:dc:8b:bf:0e:a3:1d:8b:9b: 81:71:08:22:4a:b6:0e:c4:47:44:b0:09:bf:f8:60: c6:8c:69:6e:cb:36:14:10:ba:a7:28:65:9b:06:e7: 31:61:aa:be:3f:2c:a9:1a:b5:2c:20:85:fe:25:53: 40:fc:6f:3a:63:1e:bc:9c:c0:5f:76:26:c4:60:20: 41:c7:5b:01:94:91:bb:af:eb:95:9b:71:74:e7:f6: 68:2d:a3:40:57:d0:6d:99:f8:63:c7:5d:9b:66:36: e6:3f:39:67:e2:12:5a:d5:74:e8:40:a6:e3:62:3e: 7d:db:d5:c9:d0:15:e4:18:e0:e7:09:57:4d:08:9d: c6:7e:94:08:f7:f1:7c:3f:86:d8:98:37:ae:ca:af: 04:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3D:67:1B:E9:6D:7B:DC:AC:86:00:D8:A2:8D:6A:9F:C5:13:47:75 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140:500::/40 Signature Algorithm: sha256WithRSAEncryption 1f:06:ab:51:45:f8:6c:f0:c3:dc:24:10:15:41:49:39:89:b1: dd:cd:5c:9b:26:3c:30:bf:cd:a8:f3:58:fe:b5:91:86:a4:41: 7e:5a:ff:cf:51:75:71:f8:52:1b:7f:f9:72:52:93:36:ce:31: 23:c1:e1:59:1c:b6:c3:b8:4a:cc:7b:30:ba:f2:55:b1:4b:54: 81:ad:8e:0c:2f:42:d8:8a:50:83:10:9c:5b:db:32:9e:92:b9: 11:ea:49:32:d9:a4:f8:ea:bd:3a:ff:74:3b:dd:7b:c0:ec:d9: c0:14:40:41:e5:6f:8d:5d:40:db:6c:7d:00:28:87:01:46:fd: da:f9:9f:8c:9e:1b:1e:6f:76:84:44:18:d4:73:b9:3b:6b:94: 02:ee:ca:c7:d9:17:d3:ab:bb:12:03:a8:96:d3:20:df:77:9b: 41:37:c0:9f:e5:99:37:73:39:ee:ad:5d:47:4c:7d:b4:2d:70: 9c:ab:3c:37:c8:3a:60:bd:5c:50:6d:65:1d:c1:d4:40:02:39: 9b:5b:b7:d4:7a:d5:13:c8:ed:93:fe:b5:67:59:98:a5:3c:f4: e5:23:c0:23:19:af:f7:5c:6c:0f:4d:f3:55:e5:60:e3:b4:6e: 67:25:63:d2:20:20:f5:57:8f:d4:54:97:2b:c7:25:0e:05:f1: bf:0f:97:e3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUReel/4POjJ1+y5UHOM3kbsdaOw0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjI1MTUwNjQ2WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NWE5YmY2YzQ1NWNkMGJkMDExYzYyMzg5MGZmMjQzMTUz NjljNDc1ZTkwMDkxOTMyZDIxNzk4MGNlYWM4NzlmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvdceGLsDiM6EYKptmZmXh8k4c5eNHjGrHXeQ1qa2fBDlZ 4ZgPewgdEx3puS5OfZzIXPz+CnxhV7abJZRzAU4cjq1S/BDZ5iHnQpgbcHFnFEv4 NrN7p6Mfk+rtlUVFxr3b0/ok5bf5N7Otahij0Ezci78Oox2Lm4FxCCJKtg7ER0Sw Cb/4YMaMaW7LNhQQuqcoZZsG5zFhqr4/LKkatSwghf4lU0D8bzpjHrycwF92JsRg IEHHWwGUkbuv65WbcXTn9mgto0BX0G2Z+GPHXZtmNuY/OWfiElrVdOhApuNiPn3b 1cnQFeQY4OcJV00IncZ+lAj38Xw/htiYN67KrwQrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9j1nG+lte9yshgDYoo1qn8UTR3UwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzdkYTdlYjNmLTViYjUtNGJmOC04NDMwLTUwZTgyOTFmNGQxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBoFABTANBgkqhkiG9w0BAQsFAAOCAQEAHwarUUX4bPDD3CQQFUFJOYmx 3c1cmyY8ML/NqPNY/rWRhqRBflr/z1F1cfhSG3/5clKTNs4xI8HhWRy2w7hKzHsw uvJVsUtUga2ODC9C2IpQgxCcW9synpK5EepJMtmk+Oq9Ov90O917wOzZwBRAQeVv jV1A22x9ACiHAUb92vmfjJ4bHm92hEQY1HO5O2uUAu7Kx9kX06u7EgOoltMg33eb QTfAn+WZN3M57q1dR0x9tC1wnKs8N8g6YL1cUG1lHcHUQAI5m1u31HrVE8jtk/61 Z1mYpTz05SPAIxmv91xsD03zVeVg47RuZyVj0iAg9VeP1FSXK8clDgXxvw+X4w== -----END CERTIFICATE-----Generated at Tue Jul 1 14:17:34 2025 by rpki-client