$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c784078-b9ac-40b3-a9b7-f77c614be8ff.roa File: 7c784078-b9ac-40b3-a9b7-f77c614be8ff.roa (raw, json) Hash identifier: OjTpoTD0DeKiCtaqeiP2Eb5VNWV/E8WvDJo6dRP1cKM= Subject key identifier: 88:70:3E:8A:B9:EE:00:D8:44:2A:D4:70:75:A2:ED:86:64:4F:8C:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 77399D78C3DBE5B2EE7DF0BE7BE8535077FF88DE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c784078-b9ac-40b3-a9b7-f77c614be8ff.roa Signing time: Fri 01 Aug 2025 15:50:14 +0000 ROA not before: Fri 01 Aug 2025 15:50:14 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f38:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:39:9d:78:c3:db:e5:b2:ee:7d:f0:be:7b:e8:53:50:77:ff:88:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:50:14 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=4a6fd1a3ca521c323b647659b69b1bceb13ea68eb6183f8fc13c53f37253cb38, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2e:4a:c1:08:df:5a:d0:c2:d2:d4:dd:ee:df: d6:ad:72:9d:30:ec:83:6e:e7:ab:ad:13:b2:ae:f7: 46:ba:84:c7:27:7e:ba:7e:10:a8:bd:c3:e4:b6:82: fc:35:2d:a8:9d:12:e8:49:25:44:b7:8a:d4:ea:6f: c8:61:ab:06:0b:93:4a:53:da:e4:24:e6:18:bf:35: ec:78:d0:c6:a2:fd:23:93:9b:12:bd:75:dc:81:59: 53:62:0b:f6:c9:19:8e:f5:de:d7:06:ca:56:c6:93: 2c:7d:88:62:7e:14:95:a1:4f:dd:a9:73:2a:64:fd: fe:4b:4a:39:1a:7a:23:fa:bc:43:1f:31:88:4f:ab: dc:9f:b7:21:e4:b2:d5:ce:93:fc:c6:ce:97:c9:50: 4d:f0:39:ff:44:68:23:2a:2a:e8:9f:bd:ad:8f:d3: 32:13:39:e1:20:19:64:03:cf:50:8d:25:6e:96:17: 2a:24:0f:35:dd:a4:9e:5e:c2:13:1d:75:7d:1a:17: 9e:6b:8d:93:dd:5b:3a:62:be:37:e1:a4:16:bd:5c: 46:9b:f7:44:7e:d4:4d:f1:8e:5d:dc:f8:a0:f3:b1: fd:2c:de:a3:dc:88:39:8d:12:f4:7e:4a:15:6b:2c: 30:bf:aa:5d:c5:a4:6b:8f:3f:2c:09:6b:22:42:5f: 77:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:70:3E:8A:B9:EE:00:D8:44:2A:D4:70:75:A2:ED:86:64:4F:8C:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c784078-b9ac-40b3-a9b7-f77c614be8ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 23:df:60:51:56:4c:12:6d:c0:b1:35:f6:e3:fd:2d:a4:42:26: d1:b8:4b:20:b8:1a:de:f9:fb:46:b6:e4:df:f3:84:02:dc:10: 24:f2:c6:fb:3e:86:3e:d7:50:17:0f:31:17:6d:3b:87:f7:95: ff:d1:46:0e:21:c0:2d:e5:fe:59:8f:66:e9:5e:b1:c7:4d:7c: 18:5a:e7:6b:97:d6:3c:30:9a:eb:b2:43:a2:ed:62:e6:5c:0d: ab:f8:b6:9d:df:26:71:26:23:ad:fd:f9:24:fe:34:af:50:89: f7:ba:08:e5:f6:f7:2f:ca:4b:45:95:d7:d6:e4:47:11:00:63: 1a:63:69:33:8d:88:01:3c:78:8f:f0:cc:cc:22:26:a4:a9:b9: 76:30:b1:ff:a9:4f:87:c5:1b:98:a6:7d:5c:3d:9c:39:63:1b: 04:6f:a0:3a:cd:7c:9b:5d:cb:c4:4f:d7:07:52:0d:06:b2:fc: 06:cd:64:e2:3f:5d:4d:26:c4:a4:25:9e:6c:14:03:80:e6:47: 2f:8d:3b:ed:49:eb:6d:b6:73:be:5c:bf:5a:61:06:c4:37:00: 0e:94:f2:63:00:57:de:50:63:af:b8:f4:69:c2:6a:31:e6:21: 38:5e:6d:41:eb:80:e0:ca:78:0a:0c:cc:6f:36:56:01:83:0f: bb:03:6e:59 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdzmdeMPb5bLuffC+e+hTUHf/iN4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTU1MDE0WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTZmZDFhM2NhNTIxYzMyM2I2NDc2NTliNjliMWJjZWIx M2VhNjhlYjYxODNmOGZjMTNjNTNmMzcyNTNjYjM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqLkrBCN9a0MLS1N3u39atcp0w7INu56utE7Ku90a6hMcn frp+EKi9w+S2gvw1LaidEuhJJUS3itTqb8hhqwYLk0pT2uQk5hi/Nex40Mai/SOT mxK9ddyBWVNiC/bJGY713tcGylbGkyx9iGJ+FJWhT92pcypk/f5LSjkaeiP6vEMf MYhPq9yftyHkstXOk/zGzpfJUE3wOf9EaCMqKuifva2P0zITOeEgGWQDz1CNJW6W FyokDzXdpJ5ewhMddX0aF55rjZPdWzpivjfhpBa9XEab90R+1E3xjl3c+KDzsf0s 3qPciDmNEvR+ShVrLDC/ql3FpGuPPywJayJCX3eTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiHA+irnuANhEKtRwdaLthmRPjHkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdjNzg0MDc4LWI5YWMtNDBiMy1hOWI3LWY3N2M2MTRiZThmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84IMAwDQYJKoZIhvcNAQELBQADggEBACPfYFFWTBJtwLE19uP9LaRC JtG4SyC4Gt75+0a25N/zhALcECTyxvs+hj7XUBcPMRdtO4f3lf/RRg4hwC3l/lmP ZulescdNfBha52uX1jwwmuuyQ6LtYuZcDav4tp3fJnEmI639+ST+NK9Qife6COX2 9y/KS0WV19bkRxEAYxpjaTONiAE8eI/wzMwiJqSpuXYwsf+pT4fFG5imfVw9nDlj GwRvoDrNfJtdy8RP1wdSDQay/AbNZOI/XU0mxKQlnmwUA4DmRy+NO+1J6222c75c v1phBsQ3AA6U8mMAV95QY6+49GnCajHmIThebUHrgODKeAoMzG82VgGDD7sDblk= -----END CERTIFICATE-----Generated at Mon Aug 4 22:21:22 2025 by rpki-client