$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186224eb-58a9-4d11-bc6b-39128a803177.roa File: 186224eb-58a9-4d11-bc6b-39128a803177.roa (raw, json) Hash identifier: i4ESdSJJp+qIp9DjS0BmzDovjH11OIYJ8gLnACl+Izc= Subject key identifier: 9A:D2:C1:B7:CB:A3:68:53:68:1B:42:C8:95:FE:C6:51:B5:30:05:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7922719314002D41E6D8C7849C3AF2CCC7CD3038 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186224eb-58a9-4d11-bc6b-39128a803177.roa Signing time: Tue 08 Jul 2025 16:21:35 +0000 ROA not before: Tue 08 Jul 2025 16:21:35 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:22:71:93:14:00:2d:41:e6:d8:c7:84:9c:3a:f2:cc:c7:cd:30:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:21:35 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=6ea8dca886a36e3eec19fc171a72e7cf3002878cb0c0f8065bd6bf972d2e6641, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6d:b5:20:5e:ec:cd:47:a2:00:b6:a9:81:10: d9:05:e4:4b:5c:8b:8d:12:56:cc:72:38:3f:71:0f: 69:b9:e8:53:4c:50:da:63:3f:72:b3:09:f3:b9:03: 7d:0c:25:7a:91:7c:a8:33:ae:da:81:b3:5d:c8:2d: 65:85:2f:34:ed:6a:ad:5a:1f:3b:60:b5:c8:60:c0: c0:87:36:ac:d9:40:1c:fb:91:08:44:8f:02:a0:8d: e9:39:81:ad:47:bb:01:86:1c:87:8b:76:50:28:14: af:eb:6b:41:f8:1e:be:5a:82:3b:d5:19:41:ee:0a: 1b:21:64:7c:54:9c:51:10:76:e2:de:35:1e:71:40: 08:c7:13:a3:21:e9:45:ef:a5:be:12:f9:a5:bf:50: 36:7b:02:e8:18:a4:93:af:c8:86:85:cd:38:b4:11: 3c:cb:96:18:2c:9b:6f:42:d2:dc:b3:22:14:18:7b: 46:30:12:c1:8b:af:a4:af:71:1f:9a:e0:d5:1b:b7: d5:31:c8:17:8c:62:e4:2e:2a:47:6d:2d:1f:bb:e2: ce:3f:76:9d:f8:c5:e6:d4:d9:b4:40:da:03:9e:65: 4d:9f:c6:53:36:b0:9d:64:e4:8b:f8:2b:67:3d:44: 0d:3f:fb:a0:cc:f3:65:f1:60:9d:5e:fc:11:c1:17: 8b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D2:C1:B7:CB:A3:68:53:68:1B:42:C8:95:FE:C6:51:B5:30:05:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/186224eb-58a9-4d11-bc6b-39128a803177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:6000::/40 Signature Algorithm: sha256WithRSAEncryption 95:e5:a5:45:7e:ae:c8:80:ea:97:ed:af:e5:1d:97:e1:15:2a: 93:6a:72:f8:25:3e:68:d9:ee:61:d8:b6:b1:c2:17:34:fb:19: 18:42:db:d9:d5:f3:17:16:5e:0c:e7:8a:46:0c:3c:c5:56:53: 9d:b5:47:40:63:49:9c:86:8e:c8:f7:7c:52:79:ee:6a:bc:cc: cc:f1:0b:75:db:dc:e3:76:d1:58:7c:69:d1:f8:e8:5d:6f:d1: 46:15:7f:41:14:d1:1e:12:fa:6c:a0:a1:27:5b:56:2c:15:08: 54:93:86:46:ed:f4:3f:15:07:68:10:24:c3:e4:18:51:f2:92: 49:e2:fb:46:54:e0:da:2f:14:fb:49:d8:fd:bc:ab:27:46:01: ff:ab:82:3f:d6:5a:e3:e1:63:aa:2e:53:6f:8b:1f:00:4b:13: 65:ca:a3:91:c3:2a:bc:a2:ee:12:94:79:3e:2a:6f:1e:85:33: 61:6c:3f:cc:22:d8:43:57:7d:ad:41:79:b7:b1:78:ff:9f:03: 3b:ac:1d:76:30:99:7b:3e:bc:59:53:95:6a:eb:67:9a:e7:eb: 81:46:f6:a2:66:a6:d9:ab:36:4e:5d:0b:6a:6c:1a:03:65:e0: a7:1c:3f:a5:2f:cd:ed:b9:9f:7e:42:0a:a1:8f:4e:02:5d:4c: d2:fe:38:fd -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUeSJxkxQALUHm2MeEnDryzMfNMDgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYyMTM1WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZWE4ZGNhODg2YTM2ZTNlZWMxOWZjMTcxYTcyZTdjZjMw MDI4NzhjYjBjMGY4MDY1YmQ2YmY5NzJkMmU2NjQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQbbUgXuzNR6IAtqmBENkF5Etci40SVsxyOD9xD2m56FNM UNpjP3KzCfO5A30MJXqRfKgzrtqBs13ILWWFLzTtaq1aHztgtchgwMCHNqzZQBz7 kQhEjwKgjek5ga1HuwGGHIeLdlAoFK/ra0H4Hr5agjvVGUHuChshZHxUnFEQduLe NR5xQAjHE6Mh6UXvpb4S+aW/UDZ7AugYpJOvyIaFzTi0ETzLlhgsm29C0tyzIhQY e0YwEsGLr6SvcR+a4NUbt9UxyBeMYuQuKkdtLR+74s4/dp34xebU2bRA2gOeZU2f xlM2sJ1k5Iv4K2c9RA0/+6DM82XxYJ1e/BHBF4s1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUmtLBt8ujaFNoG0LIlf7GUbUwBaowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4NjIyNGViLTU4YTktNGQxMS1iYzZiLTM5MTI4YTgwMzE3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9pYDANBgkqhkiG9w0BAQsFAAOCAQEAleWlRX6uyIDql+2v5R2X4RUq k2py+CU+aNnuYdi2scIXNPsZGELb2dXzFxZeDOeKRgw8xVZTnbVHQGNJnIaOyPd8 UnnuarzMzPELddvc43bRWHxp0fjoXW/RRhV/QRTRHhL6bKChJ1tWLBUIVJOGRu30 PxUHaBAkw+QYUfKSSeL7RlTg2i8U+0nY/byrJ0YB/6uCP9Za4+Fjqi5Tb4sfAEsT ZcqjkcMqvKLuEpR5PipvHoUzYWw/zCLYQ1d9rUF5t7F4/58DO6wddjCZez68WVOV autnmufrgUb2omam2as2Tl0LamwaA2Xgpxw/pS/N7bmffkIKoY9OAl1M0v44/Q== -----END CERTIFICATE-----Generated at Mon Jul 21 18:20:08 2025 by rpki-client