$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d135eb9-4879-4568-98c1-f37c5449cc5a.roa File: 3d135eb9-4879-4568-98c1-f37c5449cc5a.roa (raw, json) Hash identifier: 2rwcDdb7Ektyc7A+vnZB5Ido25IZYylW7QSLYUzNzWU= Subject key identifier: 11:0D:8C:B1:DE:D4:4A:7C:85:C7:A4:18:3A:53:DB:78:A4:BF:C4:25 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07D4C765370FBBBAF9F1CF3007FF301D34B7EF50 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d135eb9-4879-4568-98c1-f37c5449cc5a.roa Signing time: Sat 19 Jul 2025 00:10:21 +0000 ROA not before: Sat 19 Jul 2025 00:10:21 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:818f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d4:c7:65:37:0f:bb:ba:f9:f1:cf:30:07:ff:30:1d:34:b7:ef:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:10:21 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=194c5b384934e41cd760b87a590d3356e747214e69882ea40a36fc137c43e01e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1c:f6:6d:88:f2:49:d7:8b:58:08:79:f7:d4: b9:a9:a7:f0:94:23:89:41:db:43:95:bc:90:15:62: 61:76:b0:2d:cd:34:93:11:53:d7:39:3e:b6:d4:39: dd:01:22:07:3a:9e:7f:56:45:6c:bc:ee:f0:5f:a9: cf:62:fc:45:27:04:c6:cc:c6:90:1d:fe:0b:72:15: 05:04:37:4e:8a:d1:17:bd:69:b4:cc:a3:98:10:44: 3a:24:a0:c1:9e:47:fc:14:de:1c:e4:4b:24:13:18: 47:b7:e8:3a:c4:41:03:08:9a:50:de:4f:08:96:a4: 66:95:cc:1f:62:70:7a:7c:de:e2:8d:cb:7f:85:fb: ba:33:4e:c3:8f:cf:ac:74:a3:9d:df:8f:9c:50:d3: 26:30:cb:aa:25:f2:1a:30:ff:1e:8c:84:8c:c9:6e: 08:6c:49:d9:d6:6c:ed:53:5c:0e:1d:84:c8:a5:ec: eb:e5:ad:ab:80:6b:5d:6a:85:b6:a3:56:20:11:68: 3e:65:7a:42:25:72:a2:51:99:47:83:69:37:12:f2: d0:15:08:af:98:69:46:d7:ae:bb:4c:31:39:73:af: d6:09:9f:0b:9e:c2:00:d2:cf:c4:35:31:c4:27:a7: 93:6f:87:13:45:8f:fd:35:c9:36:82:d5:37:d9:9e: 92:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0D:8C:B1:DE:D4:4A:7C:85:C7:A4:18:3A:53:DB:78:A4:BF:C4:25 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d135eb9-4879-4568-98c1-f37c5449cc5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:818f::/48 Signature Algorithm: sha256WithRSAEncryption 00:e5:7e:b5:88:4e:ec:6f:ab:40:47:a2:23:ab:18:52:b5:d5: 77:2c:8b:ed:c7:e1:67:0d:ed:a5:e9:4c:87:65:d7:1f:82:97: 26:50:91:cd:ff:d7:1d:0a:dc:10:e8:2b:32:00:45:f1:2e:01: be:f8:a7:0a:fa:58:d1:27:8e:a6:a2:7e:5e:1f:27:c2:9f:a2: 85:a1:ec:af:fa:ec:1f:d0:90:5a:4f:2f:47:c5:b3:b9:a0:b7: 91:64:6b:b0:d7:c4:7f:a0:ef:2c:41:4d:0d:f7:de:95:e5:ff: 77:83:97:2a:5f:93:f3:ed:80:0d:7f:08:09:48:a2:1a:d5:e1: 76:75:c2:e8:7e:ad:f4:12:81:69:54:3b:ad:1f:84:b4:fa:a5: 9b:83:d8:67:5b:7a:8f:8a:69:11:9a:d8:2a:f6:2d:85:db:5a: 8a:36:0b:93:68:1e:93:b4:f8:27:dd:b5:ef:9f:24:07:c0:d6: 84:aa:c4:91:57:bd:5c:3b:9f:1b:b3:98:c3:ff:dd:4a:13:ed: d8:17:f7:c4:e0:b9:a2:73:15:0d:68:88:b1:76:6f:fa:e9:9e: 45:a7:a2:db:45:3d:6e:53:8e:c5:00:24:f0:1d:c9:c4:3f:41: 3b:2f:38:e6:3d:27:80:be:41:c4:75:e8:99:51:d5:2e:b0:5b: 01:15:d0:26 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB9THZTcPu7r58c8wB/8wHTS371AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAxMDIxWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTRjNWIzODQ5MzRlNDFjZDc2MGI4N2E1OTBkMzM1NmU3 NDcyMTRlNjk4ODJlYTQwYTM2ZmMxMzdjNDNlMDFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5HPZtiPJJ14tYCHn31Lmpp/CUI4lB20OVvJAVYmF2sC3N NJMRU9c5PrbUOd0BIgc6nn9WRWy87vBfqc9i/EUnBMbMxpAd/gtyFQUEN06K0Re9 abTMo5gQRDokoMGeR/wU3hzkSyQTGEe36DrEQQMImlDeTwiWpGaVzB9icHp83uKN y3+F+7ozTsOPz6x0o53fj5xQ0yYwy6ol8how/x6MhIzJbghsSdnWbO1TXA4dhMil 7OvlrauAa11qhbajViARaD5lekIlcqJRmUeDaTcS8tAVCK+YaUbXrrtMMTlzr9YJ nwuewgDSz8Q1McQnp5NvhxNFj/01yTaC1TfZnpIhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEQ2Msd7USnyFx6QYOlPbeKS/xCUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkMTM1ZWI5LTQ4NzktNDU2OC05OGMxLWYzN2M1NDQ5Y2M1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gY8wDQYJKoZIhvcNAQELBQADggEBAADlfrWITuxvq0BHoiOrGFK1 1Xcsi+3H4WcN7aXpTIdl1x+ClyZQkc3/1x0K3BDoKzIARfEuAb74pwr6WNEnjqai fl4fJ8KfooWh7K/67B/QkFpPL0fFs7mgt5Fka7DXxH+g7yxBTQ333pXl/3eDlypf k/PtgA1/CAlIohrV4XZ1wuh+rfQSgWlUO60fhLT6pZuD2Gdbeo+KaRGa2Cr2LYXb Woo2C5NoHpO0+Cfdte+fJAfA1oSqxJFXvVw7nxuzmMP/3UoT7dgX98TguaJzFQ1o iLF2b/rpnkWnottFPW5TjsUAJPAdycQ/QTsvOOY9J4C+QcR16JlR1S6wWwEV0CY= -----END CERTIFICATE-----Generated at Tue Jul 22 12:22:52 2025 by rpki-client