$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3734e7db-8f22-40e0-b2cc-489f2d6365f3.roa File: 3734e7db-8f22-40e0-b2cc-489f2d6365f3.roa (raw, json) Hash identifier: 8VgOkbvkPWfn1gBLQtykeNfH+bPSuRESHnq1mEXcRNw= Subject key identifier: 8D:11:5E:C2:95:7D:A4:7E:5E:3A:3D:F7:B1:B4:74:34:0F:B1:D9:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48DBD350729AEB65E1BADA842FD3BC466182A8C7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3734e7db-8f22-40e0-b2cc-489f2d6365f3.roa Signing time: Tue 08 Jul 2025 00:51:41 +0000 ROA not before: Tue 08 Jul 2025 00:51:41 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:db:d3:50:72:9a:eb:65:e1:ba:da:84:2f:d3:bc:46:61:82:a8:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 00:51:41 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=40eade1074e19183eaac25cf520eec7491f8802e8fadb1e3e1b32ffe24bde6bb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:50:61:6c:4c:33:2f:20:58:5f:62:5a:b3:ab: e2:fe:b2:fa:f0:7b:b0:ab:83:37:d9:41:84:bc:65: 3f:96:55:be:d1:10:32:57:95:b7:bf:c5:94:5a:22: 92:2d:7a:9b:05:cb:c9:d2:fc:97:41:c9:f6:b1:d4: e8:64:77:4b:de:ab:61:12:8d:38:11:94:60:14:48: 96:1a:9e:26:80:f9:21:c2:60:03:86:98:dd:a4:10: 23:43:d0:a2:ea:67:d3:30:14:7d:2e:7b:47:f7:3a: 55:4c:19:87:59:c4:66:ca:90:52:62:24:9c:08:ef: 2a:ca:3a:e3:da:7f:21:31:e8:f8:99:36:f5:07:af: 9a:2b:fe:2c:6f:9c:dc:91:44:a5:fb:b1:d7:34:eb: 2f:ac:6e:35:43:da:d8:87:96:55:86:a9:97:79:20: 50:79:0c:82:b2:b1:f8:ee:c2:c0:26:06:47:d9:5e: dd:95:0e:a7:63:ef:7a:15:3a:34:ff:b5:5e:64:92: 29:1b:85:8b:5e:68:48:c5:d1:3f:87:81:2c:30:90: 25:9e:0d:8c:0f:83:3f:2b:dc:b7:1d:44:1c:76:ba: 6a:62:98:51:e0:b4:e2:c0:30:55:d0:a4:fb:7a:84: 0a:f6:00:1c:32:9e:44:f2:36:f5:f0:09:04:68:8b: cc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:11:5E:C2:95:7D:A4:7E:5E:3A:3D:F7:B1:B4:74:34:0F:B1:D9:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3734e7db-8f22-40e0-b2cc-489f2d6365f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:c040::/48 Signature Algorithm: sha256WithRSAEncryption c9:fe:04:79:34:8a:b4:92:65:48:e0:de:b2:3c:77:5a:84:01: ba:fb:ab:e1:8a:82:1a:e1:85:7f:1d:f2:e1:a3:d2:e4:ff:52: c8:57:c1:b3:9e:ff:bc:0c:c7:5d:0a:f9:f4:26:f2:ac:3b:bc: 93:71:0b:03:91:c0:f5:97:04:e5:bd:bb:46:c0:88:af:5b:c6: 35:62:d4:e4:d5:cd:2d:00:a1:4f:fd:a6:0b:c3:89:6e:d7:76: a3:a6:fa:7e:9b:19:9c:24:21:5e:d5:5d:83:a3:ba:18:62:22: 58:e8:ab:ba:85:09:b0:f7:3b:69:59:6f:a0:30:59:79:4f:7d: 66:1d:55:3a:d6:da:6a:ee:5f:c5:19:ac:f6:a6:80:b6:ac:cd: 32:a9:75:35:57:9d:36:7f:a2:a0:b5:d9:e7:a6:af:59:cb:00: a8:3c:a7:28:ec:ef:9a:34:7d:44:6a:49:a3:d9:a4:0e:6c:3d: 9b:ba:05:0d:70:de:4a:04:e3:a2:62:42:a0:1d:3a:bc:35:c2: aa:96:21:ba:00:d4:40:ca:a4:37:17:be:5d:76:7e:82:9a:28: 79:6f:40:1a:7f:a9:26:10:eb:78:9d:de:7a:fe:c4:53:31:a8: fa:64:0a:fd:60:77:9c:e5:d7:fe:5e:b5:f0:ae:01:3a:ba:9f: 0e:9d:45:af -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSNvTUHKa62XhutqEL9O8RmGCqMcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDA1MTQxWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGVhZGUxMDc0ZTE5MTgzZWFhYzI1Y2Y1MjBlZWM3NDkx Zjg4MDJlOGZhZGIxZTNlMWIzMmZmZTI0YmRlNmJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtUGFsTDMvIFhfYlqzq+L+svrwe7CrgzfZQYS8ZT+WVb7R EDJXlbe/xZRaIpItepsFy8nS/JdByfax1Ohkd0veq2ESjTgRlGAUSJYaniaA+SHC YAOGmN2kECND0KLqZ9MwFH0ue0f3OlVMGYdZxGbKkFJiJJwI7yrKOuPafyEx6PiZ NvUHr5or/ixvnNyRRKX7sdc06y+sbjVD2tiHllWGqZd5IFB5DIKysfjuwsAmBkfZ Xt2VDqdj73oVOjT/tV5kkikbhYteaEjF0T+HgSwwkCWeDYwPgz8r3LcdRBx2umpi mFHgtOLAMFXQpPt6hAr2ABwynkTyNvXwCQRoi8ztAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjRFewpV9pH5eOj33sbR0NA+x2ekwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM3MzRlN2RiLThmMjItNDBlMC1iMmNjLTQ4OWYyZDYzNjVmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//wEAwDQYJKoZIhvcNAQELBQADggEBAMn+BHk0irSSZUjg3rI8d1qE Abr7q+GKghrhhX8d8uGj0uT/UshXwbOe/7wMx10K+fQm8qw7vJNxCwORwPWXBOW9 u0bAiK9bxjVi1OTVzS0AoU/9pgvDiW7XdqOm+n6bGZwkIV7VXYOjuhhiIljoq7qF CbD3O2lZb6AwWXlPfWYdVTrW2mruX8UZrPamgLaszTKpdTVXnTZ/oqC12eemr1nL AKg8pyjs75o0fURqSaPZpA5sPZu6BQ1w3koE46JiQqAdOrw1wqqWIboA1EDKpDcX vl12foKaKHlvQBp/qSYQ63id3nr+xFMxqPpkCv1gd5zl1/5etfCuATq6nw6dRa8= -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:04 2025 by rpki-client