$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062a4323-efbe-479f-a7a6-76d410f10273.roa File: 062a4323-efbe-479f-a7a6-76d410f10273.roa (raw, json) Hash identifier: 5qpFm7PLTIXb2Urz/hUVTTFpWThzb7tGiWQvlD7leU4= Subject key identifier: 7F:AE:55:9A:0D:9B:51:68:A4:23:9D:D0:CA:65:70:35:2F:39:16:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0200C6ECC78E1BEC956318833842CBC2D0E010FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062a4323-efbe-479f-a7a6-76d410f10273.roa Signing time: Tue 08 Jul 2025 16:41:45 +0000 ROA not before: Tue 08 Jul 2025 16:41:45 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff0:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:00:c6:ec:c7:8e:1b:ec:95:63:18:83:38:42:cb:c2:d0:e0:10:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:41:45 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=701e9ad3d312e045a15e4ce8a46890a1f40394dae46f827095e2ebe20c683d8c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:68:26:1f:14:36:bd:91:13:40:76:92:b1: 99:b7:70:96:b4:70:cc:08:85:19:06:5a:ce:94:8d: ea:0d:9a:ae:f6:7c:41:f3:24:55:e8:96:c5:e4:76: 4c:9c:26:36:62:c1:e4:0e:ed:b2:c9:64:08:8b:87: af:9c:37:27:8a:97:4f:ad:1d:1c:fd:04:b8:68:00: 93:80:5c:f7:5a:54:72:75:15:e7:25:54:dc:7b:9f: e4:61:77:09:8a:20:3f:c8:14:b0:82:4f:58:3b:f8: d7:fb:d0:93:73:46:57:eb:06:78:8a:46:ed:43:20: 6d:ea:95:91:7a:fa:1d:f6:b8:fb:e8:2e:db:4a:99: 33:18:17:d6:77:b6:3a:13:d0:df:90:75:9e:eb:d0: 89:e5:93:23:b4:3e:f1:7d:bf:19:3b:ee:cd:67:3d: 98:07:dd:3c:f9:b2:b4:77:3f:0e:db:a9:74:d8:66: 52:90:99:34:2c:1e:08:71:b2:62:4c:bc:c0:d6:9d: 1a:91:b0:0e:86:96:7f:5e:7b:0e:f2:67:a7:c0:3c: 29:9d:af:83:ca:dc:bc:d4:74:10:c4:d8:83:be:30: 5f:98:e3:76:52:eb:79:5b:c5:0a:db:11:6a:9e:c8: f2:a5:fd:d7:a8:8a:8a:97:b9:13:96:03:e4:a8:db: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AE:55:9A:0D:9B:51:68:A4:23:9D:D0:CA:65:70:35:2F:39:16:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062a4323-efbe-479f-a7a6-76d410f10273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff0:8000::/39 Signature Algorithm: sha256WithRSAEncryption 47:cf:e6:1e:42:c8:a7:4c:fe:31:42:43:44:da:a7:3a:39:8f: 69:b8:10:f1:8d:d7:d5:ec:39:e5:84:c8:7b:16:83:db:9d:de: 40:bc:16:b0:3a:f3:9a:df:00:9e:33:a2:33:11:cd:ab:ca:b3: e6:86:5c:a2:02:81:74:69:65:b7:ab:9b:66:71:75:e3:e4:d3: 6f:1e:f5:a1:a3:e9:bc:ca:df:aa:58:f6:25:25:2b:7a:7f:e9: ab:a0:3c:ad:be:3a:3f:cb:45:ef:ea:67:90:42:5a:f9:e2:b9: 27:60:eb:c8:f9:a9:47:3f:70:a6:d0:cd:f5:cf:c2:74:64:2f: fc:77:bf:3e:9a:6c:c8:11:69:fa:8d:31:9b:e8:d4:aa:bf:df: 95:15:b9:a6:47:65:5d:0c:77:24:0e:65:b9:fd:93:a1:4e:ec: a0:69:6b:51:2e:fd:34:fb:c7:3e:df:62:ba:d0:19:b2:ba:7a: 84:3f:6e:37:c0:61:c1:d3:89:7a:2c:d4:ed:2f:ac:59:cd:b0: 25:23:3b:96:02:87:85:d3:19:dd:4e:74:bf:a8:e2:df:e0:78: f6:f6:85:9e:63:2d:3f:ea:49:43:23:59:a1:30:e7:bd:d1:78: 73:f9:e6:3d:fe:ef:a3:1f:b2:77:ec:81:d3:ac:7b:69:19:cf: e1:c1:d4:d0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUAgDG7MeOG+yVYxiDOELLwtDgEP4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTY0MTQ1WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDFlOWFkM2QzMTJlMDQ1YTE1ZTRjZThhNDY4OTBhMWY0 MDM5NGRhZTQ2ZjgyNzA5NWUyZWJlMjBjNjgzZDhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq1mgmHxQ2vZETQHaSsZm3cJa0cMwIhRkGWs6UjeoNmq72 fEHzJFXolsXkdkycJjZiweQO7bLJZAiLh6+cNyeKl0+tHRz9BLhoAJOAXPdaVHJ1 FeclVNx7n+RhdwmKID/IFLCCT1g7+Nf70JNzRlfrBniKRu1DIG3qlZF6+h32uPvo LttKmTMYF9Z3tjoT0N+QdZ7r0InlkyO0PvF9vxk77s1nPZgH3Tz5srR3Pw7bqXTY ZlKQmTQsHghxsmJMvMDWnRqRsA6Gln9eew7yZ6fAPCmdr4PK3LzUdBDE2IO+MF+Y 43ZS63lbxQrbEWqeyPKl/deoioqXuROWA+So2x7zAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUf65Vmg2bUWikI53QymVwNS85FrcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2MmE0MzIzLWVmYmUtNDc5Zi1hN2E2LTc2ZDQxMGYxMDI3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/wgDANBgkqhkiG9w0BAQsFAAOCAQEAR8/mHkLIp0z+MUJDRNqnOjmP abgQ8Y3X1ew55YTIexaD253eQLwWsDrzmt8AnjOiMxHNq8qz5oZcogKBdGllt6ub ZnF14+TTbx71oaPpvMrfqlj2JSUren/pq6A8rb46P8tF7+pnkEJa+eK5J2DryPmp Rz9wptDN9c/CdGQv/He/PppsyBFp+o0xm+jUqr/flRW5pkdlXQx3JA5luf2ToU7s oGlrUS79NPvHPt9iutAZsrp6hD9uN8BhwdOJeizU7S+sWc2wJSM7lgKHhdMZ3U50 v6ji3+B49vaFnmMtP+pJQyNZoTDnvdF4c/nmPf7vox+yd+yB06x7aRnP4cHU0A== -----END CERTIFICATE-----Generated at Mon Jul 21 18:18:35 2025 by rpki-client