$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1911b766-c65e-4841-b9a2-a47621e5ac42.roa File: 1911b766-c65e-4841-b9a2-a47621e5ac42.roa (raw, json) Hash identifier: dBhO+y0gsGx+8oUJL0KnbEUT4Fy2+EIQUEaqL5ghPJo= Subject key identifier: 73:C1:47:D8:4D:BB:17:D3:ED:38:F8:6E:C0:26:F9:99:B6:A3:2E:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 568EE6082E04F3ADF736A81D7D9CFF80D85A41A2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1911b766-c65e-4841-b9a2-a47621e5ac42.roa Signing time: Sat 19 Jul 2025 00:11:37 +0000 ROA not before: Sat 19 Jul 2025 00:11:37 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ffc:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8e:e6:08:2e:04:f3:ad:f7:36:a8:1d:7d:9c:ff:80:d8:5a:41:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:11:37 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=57d76ea1de0467af83b58eb44759378effa51ed0459856c949639cf8f6acd6c7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f2:6d:e3:b6:f5:a8:65:d1:20:98:17:82:23: 90:ce:fa:ce:60:13:0c:88:25:e5:1b:84:7c:c7:9f: 7b:62:ab:7d:73:60:ef:8f:53:04:6d:55:95:73:85: 35:b7:5f:5d:aa:66:06:18:57:b9:09:88:8e:37:7b: 51:12:78:f3:95:3b:bd:71:97:2f:ad:0d:fb:9c:a4: f9:51:b7:79:9a:fb:b9:56:9d:06:5b:a4:32:9f:d1: de:b1:98:e8:6d:8f:f5:01:c8:ed:bc:0c:17:47:59: 5b:98:be:6e:12:22:13:25:6c:66:cf:8e:fc:79:5a: 62:3a:d8:fc:57:5e:4f:9c:8b:8e:6e:7f:99:76:99: c1:cc:42:87:9f:b5:be:2a:ed:12:6f:52:b3:c3:12: 84:71:66:f0:d2:63:61:1f:01:cc:1a:f3:1e:64:ce: 6e:53:8b:a4:ad:2a:1a:7e:15:a6:ad:1c:60:a9:91: ce:55:d5:b8:b2:15:f3:3a:5a:0a:82:f4:e2:5a:af: e1:58:c9:6c:19:43:ed:71:c0:45:40:05:05:bf:2c: aa:4c:3c:1a:04:c3:5b:08:89:9b:0f:e0:8f:14:86: 32:ce:01:8a:dc:56:e9:33:1e:09:b0:fb:f1:53:67: 84:ef:f2:07:ca:97:09:9a:45:f4:8e:16:f4:ed:4e: 42:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C1:47:D8:4D:BB:17:D3:ED:38:F8:6E:C0:26:F9:99:B6:A3:2E:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1911b766-c65e-4841-b9a2-a47621e5ac42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffc:2000::/40 Signature Algorithm: sha256WithRSAEncryption a1:29:02:d1:9c:ae:8f:94:d8:3c:84:6b:03:c2:7a:ef:da:c0: 27:da:0c:23:e7:b1:2c:e0:06:a1:18:aa:d9:e0:0a:d1:6f:8a: d5:8e:fe:ef:2d:22:2f:9b:bf:81:16:06:c6:b8:34:b6:d1:32: d7:33:b9:5a:45:e2:f7:38:0e:fc:5b:f5:5b:99:52:a8:6c:80: 7a:7a:35:00:00:11:1a:af:3c:44:bf:74:20:80:d2:1e:eb:c5: be:99:69:c4:98:26:b0:75:67:ec:7d:af:bd:f6:5e:d3:6a:3d: 3d:03:de:d8:19:9c:1f:83:1e:3d:b7:a1:2e:df:39:a2:82:e2: bf:a5:17:2d:69:0e:81:ec:9f:d0:9b:43:aa:a4:c7:ca:1b:6a: 19:80:0f:d5:2f:f0:e7:07:04:13:4c:bb:ae:53:54:57:a1:47: bf:ce:9a:46:57:30:f9:e8:5e:b8:16:5e:79:f8:b5:10:3d:2f: 10:50:9d:a7:0d:37:ee:6f:60:ef:0a:9b:4c:9c:10:cf:65:2b: 29:4e:9a:25:f3:52:a7:43:0b:65:69:4c:36:54:26:87:04:46: 7a:d6:27:aa:d7:a6:f6:cf:75:e1:3e:7d:24:a9:b1:be:b0:11: 18:29:0c:9d:fe:08:39:94:a2:05:6c:f1:3e:11:04:40:0e:1f: 3b:9b:58:51 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVo7mCC4E8633NqgdfZz/gNhaQaIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAxMTM3WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1N2Q3NmVhMWRlMDQ2N2FmODNiNThlYjQ0NzU5Mzc4ZWZm YTUxZWQwNDU5ODU2Yzk0OTYzOWNmOGY2YWNkNmM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR8m3jtvWoZdEgmBeCI5DO+s5gEwyIJeUbhHzHn3tiq31z YO+PUwRtVZVzhTW3X12qZgYYV7kJiI43e1ESePOVO71xly+tDfucpPlRt3ma+7lW nQZbpDKf0d6xmOhtj/UByO28DBdHWVuYvm4SIhMlbGbPjvx5WmI62PxXXk+ci45u f5l2mcHMQoeftb4q7RJvUrPDEoRxZvDSY2EfAcwa8x5kzm5Ti6StKhp+FaatHGCp kc5V1biyFfM6WgqC9OJar+FYyWwZQ+1xwEVABQW/LKpMPBoEw1sIiZsP4I8UhjLO AYrcVukzHgmw+/FTZ4Tv8gfKlwmaRfSOFvTtTkI1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUc8FH2E27F9PtOPhuwCb5mbajLrkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5MTFiNzY2LWM2NWUtNDg0MS1iOWEyLWE0NzYyMWU1YWM0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/8IDANBgkqhkiG9w0BAQsFAAOCAQEAoSkC0Zyuj5TYPIRrA8J679rA J9oMI+exLOAGoRiq2eAK0W+K1Y7+7y0iL5u/gRYGxrg0ttEy1zO5WkXi9zgO/Fv1 W5lSqGyAeno1AAARGq88RL90IIDSHuvFvplpxJgmsHVn7H2vvfZe02o9PQPe2Bmc H4MePbehLt85ooLiv6UXLWkOgeyf0JtDqqTHyhtqGYAP1S/w5wcEE0y7rlNUV6FH v86aRlcw+eheuBZeefi1ED0vEFCdpw037m9g7wqbTJwQz2UrKU6aJfNSp0MLZWlM NlQmhwRGetYnqtem9s914T59JKmxvrARGCkMnf4IOZSiBWzxPhEEQA4fO5tYUQ== -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:01 2025 by rpki-client