$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90cfe61c-18cf-49e8-b6df-56574149e45f.roa File: 90cfe61c-18cf-49e8-b6df-56574149e45f.roa (raw, json) Hash identifier: 4UdbZyJjDa6jXwaB8rX9Dv31f1iriTphnvV+aBDDZVw= Subject key identifier: EB:39:86:00:C9:28:0B:0D:E2:24:55:05:6F:6F:35:22:F9:11:DA:CA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 18FB055E6BEA188968736555E44292B5E9A312AE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90cfe61c-18cf-49e8-b6df-56574149e45f.roa Signing time: Sat 26 Jul 2025 00:20:16 +0000 ROA not before: Sat 26 Jul 2025 00:20:16 +0000 ROA not after: Sat 30 Aug 2025 23:59:59 +0000 asID: 19047 IP address blocks: 2605:b940:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:fb:05:5e:6b:ea:18:89:68:73:65:55:e4:42:92:b5:e9:a3:12:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 26 00:20:16 2025 GMT Not After : Aug 30 23:59:59 2025 GMT Subject: serialNumber=5e7995d3ee2c08ac0fcade444448a19745b1f32d07203434d9b4a07b2d284eeb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2d:c6:77:3c:64:99:cc:d6:ac:59:bc:35:fb: 75:b9:4e:67:39:b9:9d:89:fe:e3:79:4b:58:aa:b0: 92:2c:ed:ce:cd:61:df:a5:17:9b:76:7f:86:4a:31: db:5f:89:a6:13:88:8a:a3:9b:61:7d:0b:f7:8c:d7: 1f:d0:97:af:25:be:5d:ce:20:f3:a0:3f:44:7e:d0: 3d:51:0d:13:e3:8b:37:68:83:0d:e9:37:09:3d:ff: 63:cb:29:9f:2f:d1:58:24:7b:f6:09:c2:41:b3:d0: 3e:50:74:2e:c4:73:46:db:62:85:79:8a:43:04:44: 8e:d8:58:d3:b1:7f:07:e8:14:f5:96:08:a1:16:30: cb:0b:65:1e:6b:98:a2:d9:49:ca:50:f9:c3:0a:e7: d8:e0:25:54:16:1e:ad:24:a2:61:13:b2:78:ea:c6: 7d:6c:0f:02:33:91:27:4b:00:21:d5:51:02:81:f4: ab:f6:32:01:24:a5:0c:71:bd:71:c7:3c:fe:d9:d6: 41:a5:ef:4c:c3:36:7f:e1:4a:52:27:7c:6c:7f:4c: 49:1a:ef:63:82:1a:64:79:f1:db:22:38:9b:98:7a: de:45:12:23:b2:c3:bd:a5:3d:82:8b:98:fb:4d:f5: 4e:4a:85:7d:9b:bd:d2:9f:32:26:f1:49:0a:34:8b: 0f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:39:86:00:C9:28:0B:0D:E2:24:55:05:6F:6F:35:22:F9:11:DA:CA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90cfe61c-18cf-49e8-b6df-56574149e45f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:b940:4::/48 Signature Algorithm: sha256WithRSAEncryption 80:53:ea:ec:cf:65:13:d8:76:c9:49:0f:16:e9:40:b5:f1:c7: 5e:9f:aa:90:54:21:23:db:11:b4:15:4c:04:61:1d:b5:dc:9a: e7:3e:2c:4c:0d:db:92:92:fc:ca:4f:e6:30:c9:7e:3d:c4:13: 3f:3c:d1:4f:c4:21:bb:0c:66:ab:84:39:2a:df:b9:80:9b:db: ad:52:c6:a6:13:ca:ca:f7:9b:eb:a6:08:61:f0:ea:76:16:aa: 8f:16:d3:3b:fc:33:9b:aa:cf:a9:8c:39:76:59:a3:3e:9b:30: 28:98:de:7d:b7:48:af:85:38:b9:88:a0:9c:a6:4d:96:cc:fe: cf:fa:94:2e:b2:1a:35:b3:86:c6:87:24:39:e6:1a:bb:f1:af: a5:0e:8b:2c:37:da:04:ba:cf:c3:a7:c4:4e:30:14:fd:d9:2c: 44:28:4f:91:02:c5:2c:7a:57:9f:d7:26:18:fe:78:11:9f:7c: 11:ed:d4:ae:bb:ba:2a:53:b9:45:09:e3:3e:57:01:ca:06:9e: 7a:a1:75:32:78:bd:97:3a:67:17:45:fd:87:a0:52:1e:70:6c: 37:c0:d4:ce:f9:3a:ab:90:6d:5a:03:c3:15:76:97:cf:16:bd: 2e:c4:f0:2b:91:ed:8e:e9:f6:75:99:45:20:05:e9:0c:b3:ed: 66:0a:06:80 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGPsFXmvqGIloc2VV5EKStemjEq4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwNzI2MDAyMDE2WhcNMjUwODMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTc5OTVkM2VlMmMwOGFjMGZjYWRlNDQ0NDQ4YTE5NzQ1 YjFmMzJkMDcyMDM0MzRkOWI0YTA3YjJkMjg0ZWViMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNLcZ3PGSZzNasWbw1+3W5Tmc5uZ2J/uN5S1iqsJIs7c7N Yd+lF5t2f4ZKMdtfiaYTiIqjm2F9C/eM1x/Ql68lvl3OIPOgP0R+0D1RDRPjizdo gw3pNwk9/2PLKZ8v0Vgke/YJwkGz0D5QdC7Ec0bbYoV5ikMERI7YWNOxfwfoFPWW CKEWMMsLZR5rmKLZScpQ+cMK59jgJVQWHq0komETsnjqxn1sDwIzkSdLACHVUQKB 9Kv2MgEkpQxxvXHHPP7Z1kGl70zDNn/hSlInfGx/TEka72OCGmR58dsiOJuYet5F EiOyw72lPYKLmPtN9U5KhX2bvdKfMibxSQo0iw+xAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6zmGAMkoCw3iJFUFb281IvkR2sowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzkwY2ZlNjFjLTE4Y2YtNDllOC1iNmRmLTU2NTc0MTQ5ZTQ1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBblAAAQwDQYJKoZIhvcNAQELBQADggEBAIBT6uzPZRPYdslJDxbpQLXx x16fqpBUISPbEbQVTARhHbXcmuc+LEwN25KS/MpP5jDJfj3EEz880U/EIbsMZquE OSrfuYCb261SxqYTysr3m+umCGHw6nYWqo8W0zv8M5uqz6mMOXZZoz6bMCiY3n23 SK+FOLmIoJymTZbM/s/6lC6yGjWzhsaHJDnmGrvxr6UOiyw32gS6z8OnxE4wFP3Z LEQoT5ECxSx6V5/XJhj+eBGffBHt1K67uipTuUUJ4z5XAcoGnnqhdTJ4vZc6ZxdF /YegUh5wbDfA1M75OquQbVoDwxV2l88WvS7E8CuR7Y7p9nWZRSAF6Qyz7WYKBoA= -----END CERTIFICATE-----Generated at Tue Aug 5 19:56:19 2025 by rpki-client