$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3070339a-26b7-42fb-aa24-853f76e9020a.roa File: 3070339a-26b7-42fb-aa24-853f76e9020a.roa (raw, json) Hash identifier: UAPTMV312klZD8dDv8WDHYzv6tiVWX1cIt5gvpH0Huk= Subject key identifier: 6F:B2:3C:55:27:CB:CA:1C:55:CF:E0:4B:CC:9D:8F:D5:FF:9C:65:D9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D164DB08335ADCB0B4D1C10D539CA73F4F05198 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3070339a-26b7-42fb-aa24-853f76e9020a.roa Signing time: Sat 19 Jul 2025 00:21:05 +0000 ROA not before: Sat 19 Jul 2025 00:21:05 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f32::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:16:4d:b0:83:35:ad:cb:0b:4d:1c:10:d5:39:ca:73:f4:f0:51:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:21:05 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=d169594ddd9738ab456810660881d355c7cf0946cff0e919e977c4460e2da139, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:41:86:cb:06:30:42:34:66:69:f8:07:0b: ef:70:64:b4:4e:25:1f:32:ca:cc:44:1d:73:0c:58: 71:81:2b:d6:c2:36:7c:fe:8d:dc:32:ff:a9:09:6e: 4f:4c:38:50:e7:4a:f9:56:92:1f:2a:c1:be:d3:37: ec:fa:5c:c3:69:1e:53:45:d3:f2:ea:35:7f:6d:a8: a5:40:7e:3e:a8:7f:13:7e:f6:1e:34:79:ba:ae:00: a5:8f:34:30:0e:75:96:38:4c:c4:78:53:ae:ab:93: 14:dc:a9:05:53:84:1a:bd:cc:41:ef:4a:54:82:32: 11:b6:89:70:ef:10:d6:09:33:26:06:2d:1f:0c:9b: 72:c5:24:33:4d:80:93:03:1e:08:12:42:0a:1d:8a: 55:60:1c:ff:40:1f:2b:58:36:40:63:c6:14:20:46: 97:3f:c4:c8:88:78:d4:0b:80:f3:84:1d:21:9f:20: cb:e4:82:9d:33:6e:fc:11:9c:25:8a:f4:64:a8:6c: e2:67:56:5c:19:8c:91:92:52:69:fb:2f:22:0b:34: 68:e5:db:a3:05:e8:a7:c8:12:19:3b:e1:39:dc:08: 13:33:ee:62:43:20:c3:3a:c3:2e:9e:69:2a:68:9c: 1d:cd:2f:3d:69:81:2a:9a:0f:f3:8b:c5:a2:6e:0e: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B2:3C:55:27:CB:CA:1C:55:CF:E0:4B:CC:9D:8F:D5:FF:9C:65:D9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3070339a-26b7-42fb-aa24-853f76e9020a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f32::/32 Signature Algorithm: sha256WithRSAEncryption b9:c7:b7:9f:df:63:cd:a9:dc:d2:81:8e:b7:ca:13:e2:e9:8a: 1a:79:f1:4f:ef:9b:2c:a1:3b:04:7b:32:b0:00:c6:66:43:b0: 17:5c:bc:35:3f:f0:85:80:39:b4:45:eb:ad:fc:7c:59:d2:52: dd:b1:33:61:47:84:f2:26:50:c2:17:9a:bf:28:43:07:40:9d: 97:29:a3:6b:77:ac:88:98:88:ee:8b:69:e2:43:92:0e:c3:72: 1a:8d:1f:de:cf:09:30:19:ef:80:37:03:ab:88:ac:20:70:7e: f4:05:8f:91:01:f6:3a:1a:2f:3e:d4:86:81:ab:87:c1:f3:72: 9a:01:6e:a9:7d:53:92:a3:28:11:f7:88:1d:a0:e5:f3:69:9c: 9a:30:52:9d:7e:1f:57:60:f7:1c:09:bd:2f:87:be:fc:bc:2f: 81:2a:26:ae:79:a4:23:04:53:58:a8:52:1f:49:8a:b4:4e:14: a7:aa:c5:db:4b:5b:9b:a1:01:db:ea:e8:44:6f:51:c5:de:cd: ab:8c:cb:48:5a:91:fc:8b:6f:fa:c2:9d:1a:fc:5d:4b:a5:4d: 9e:6c:66:5b:58:d5:ae:6b:a6:3e:0f:d8:c1:c2:e9:ae:7b:64: 40:a3:30:d7:ad:b4:63:b6:8e:a8:d6:a9:4e:ef:76:b2:2e:6b: 81:6f:cc:15 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUfRZNsIM1rcsLTRwQ1TnKc/TwUZgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAyMTA1WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTY5NTk0ZGRkOTczOGFiNDU2ODEwNjYwODgxZDM1NWM3 Y2YwOTQ2Y2ZmMGU5MTllOTc3YzQ0NjBlMmRhMTM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFuUGGywYwQjRmafgHC+9wZLROJR8yysxEHXMMWHGBK9bC Nnz+jdwy/6kJbk9MOFDnSvlWkh8qwb7TN+z6XMNpHlNF0/LqNX9tqKVAfj6ofxN+ 9h40ebquAKWPNDAOdZY4TMR4U66rkxTcqQVThBq9zEHvSlSCMhG2iXDvENYJMyYG LR8Mm3LFJDNNgJMDHggSQgodilVgHP9AHytYNkBjxhQgRpc/xMiIeNQLgPOEHSGf IMvkgp0zbvwRnCWK9GSobOJnVlwZjJGSUmn7LyILNGjl26MF6KfIEhk74TncCBMz 7mJDIMM6wy6eaSponB3NLz1pgSqaD/OLxaJuDjqHAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUb7I8VSfLyhxVz+BLzJ2P1f+cZdkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMwNzAzMzlhLTI2YjctNDJmYi1hYTI0LTg1M2Y3NmU5MDIwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB8yMA0GCSqGSIb3DQEBCwUAA4IBAQC5x7ef32PNqdzSgY63yhPi6Yoa efFP75ssoTsEezKwAMZmQ7AXXLw1P/CFgDm0Reut/HxZ0lLdsTNhR4TyJlDCF5q/ KEMHQJ2XKaNrd6yImIjui2niQ5IOw3IajR/ezwkwGe+ANwOriKwgcH70BY+RAfY6 Gi8+1IaBq4fB83KaAW6pfVOSoygR94gdoOXzaZyaMFKdfh9XYPccCb0vh778vC+B KiaueaQjBFNYqFIfSYq0ThSnqsXbS1uboQHb6uhEb1HF3s2rjMtIWpH8i2/6wp0a /F1LpU2ebGZbWNWua6Y+D9jBwumue2RAozDXrbRjto6o1qlO73ayLmuBb8wV -----END CERTIFICATE-----Generated at Mon Jul 21 18:05:37 2025 by rpki-client