$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa File: 7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa (raw, json) Hash identifier: 8pZECecfJUqWFnKP1350bpdfWiRp7++GhZkZQuE91sI= Subject key identifier: DD:EE:E0:EC:46:7A:B0:A6:BF:4F:DF:FA:44:02:51:73:07:FA:C7:25 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2DBB38BBBF87812E36EB0A1B23ABBCEEB207823E Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa Signing time: Mon 21 Jul 2025 16:30:03 +0000 ROA not before: Mon 21 Jul 2025 16:30:03 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2606:8140:500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bb:38:bb:bf:87:81:2e:36:eb:0a:1b:23:ab:bc:ee:b2:07:82:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 21 16:30:03 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=741ed5dd835dff7a80e0fc8c81d726c5997658a251623b6968e356c4e561f14c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:78:2f:b8:e2:24:22:87:d1:16:23:28:06:fc: 6a:6f:c4:c4:be:4f:79:45:48:f6:34:6f:f8:d9:9b: fa:78:d3:f3:26:88:4a:d5:19:6a:2e:c2:ae:ea:b4: cb:b7:bf:48:30:f4:1b:4a:30:0d:3a:d1:0e:45:ec: 3a:7e:c9:e2:61:d1:01:f2:08:e9:63:42:49:b1:1b: 67:4a:72:ac:cc:4b:40:bb:6c:5e:24:bb:30:4f:1d: d1:e3:a5:51:a7:66:e2:9b:9b:f0:6e:1c:8a:ef:cd: 1c:e7:cd:7d:fd:03:4b:7c:aa:a4:28:5b:34:02:e5: 8a:72:cc:10:d6:98:f8:cc:cc:e2:f7:2a:7f:52:c3: bc:fb:86:60:34:1e:ff:bf:a9:e8:45:6d:64:eb:d5: c2:fe:8d:a7:e4:fb:e7:6d:26:3b:a0:34:d1:72:9c: 5d:95:2d:b8:58:bb:cd:e1:30:f8:f2:8c:f1:c2:72: bb:67:4b:25:06:c3:dc:49:59:5d:6e:05:97:d8:f0: 09:84:39:3d:83:a3:21:82:9c:79:13:a7:1a:ce:37: b9:0b:1d:d5:a8:2c:4a:81:18:30:11:da:97:88:dc: 5a:f6:39:cf:58:23:73:2a:6a:f4:9b:69:54:50:c7: 4d:de:b6:74:c8:38:c7:50:ed:99:31:ef:0c:47:27: bd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EE:E0:EC:46:7A:B0:A6:BF:4F:DF:FA:44:02:51:73:07:FA:C7:25 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140:500::/40 Signature Algorithm: sha256WithRSAEncryption 5b:2a:05:be:3c:15:c0:a8:fc:01:28:88:be:0f:eb:15:14:b6: 2f:7b:3c:5d:65:14:df:15:61:8c:41:b1:05:eb:3f:8a:cb:7e: 9a:ae:7c:5c:2c:29:f4:73:58:99:fc:84:43:36:85:51:61:ae: 41:69:cd:7c:ae:63:d9:41:b1:50:57:0b:68:10:98:8f:cf:9f: fd:9a:f4:c5:52:87:84:1c:e6:93:c5:5c:36:3b:bd:06:c8:1b: 64:c0:2b:fd:65:63:78:c8:eb:d5:23:e4:4b:be:bd:c8:f3:a6: 9b:c1:e1:63:7b:81:4d:29:69:55:c5:90:1a:9b:16:e3:ef:32: 91:cb:40:5a:ca:6b:01:8c:df:52:31:77:8a:52:8d:81:51:64: 77:d5:6b:20:e5:d8:5e:42:1d:59:8a:12:ab:71:7c:24:18:f7: 9f:a5:cd:79:a1:3e:e8:c7:95:99:72:3f:8d:3d:58:41:0a:87: 5c:97:7c:6e:0b:43:63:7f:52:89:81:da:5c:76:e3:ac:72:8d: 6f:ba:19:be:b1:5e:77:40:6a:21:38:d2:a5:76:1c:cf:93:8a: 1f:5e:1b:72:99:c1:62:57:8b:04:76:e6:96:c1:05:b0:3f:b9: 01:68:52:0a:8f:28:6d:4f:9b:0a:11:77:e3:f1:e8:4d:55:fc: af:63:ac:32 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULbs4u7+HgS426wobI6u87rIHgj4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzIxMTYzMDAzWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDFlZDVkZDgzNWRmZjdhODBlMGZjOGM4MWQ3MjZjNTk5 NzY1OGEyNTE2MjNiNjk2OGUzNTZjNGU1NjFmMTRjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEeC+44iQih9EWIygG/GpvxMS+T3lFSPY0b/jZm/p40/Mm iErVGWouwq7qtMu3v0gw9BtKMA060Q5F7Dp+yeJh0QHyCOljQkmxG2dKcqzMS0C7 bF4kuzBPHdHjpVGnZuKbm/BuHIrvzRznzX39A0t8qqQoWzQC5YpyzBDWmPjMzOL3 Kn9Sw7z7hmA0Hv+/qehFbWTr1cL+jafk++dtJjugNNFynF2VLbhYu83hMPjyjPHC crtnSyUGw9xJWV1uBZfY8AmEOT2DoyGCnHkTpxrON7kLHdWoLEqBGDAR2peI3Fr2 Oc9YI3MqavSbaVRQx03etnTIOMdQ7Zkx7wxHJ71XAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU3e7g7EZ6sKa/T9/6RAJRcwf6xyUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzdkYTdlYjNmLTViYjUtNGJmOC04NDMwLTUwZTgyOTFmNGQxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBoFABTANBgkqhkiG9w0BAQsFAAOCAQEAWyoFvjwVwKj8ASiIvg/rFRS2 L3s8XWUU3xVhjEGxBes/ist+mq58XCwp9HNYmfyEQzaFUWGuQWnNfK5j2UGxUFcL aBCYj8+f/Zr0xVKHhBzmk8VcNju9BsgbZMAr/WVjeMjr1SPkS769yPOmm8HhY3uB TSlpVcWQGpsW4+8ykctAWsprAYzfUjF3ilKNgVFkd9VrIOXYXkIdWYoSq3F8JBj3 n6XNeaE+6MeVmXI/jT1YQQqHXJd8bgtDY39SiYHaXHbjrHKNb7oZvrFed0BqITjS pXYcz5OKH14bcpnBYleLBHbmlsEFsD+5AWhSCo8obU+bChF34/HoTVX8r2OsMg== -----END CERTIFICATE-----Generated at Thu Aug 7 04:33:52 2025 by rpki-client