$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e17c69e-b02b-4a9d-b382-51893c648e00.roa File: 4e17c69e-b02b-4a9d-b382-51893c648e00.roa (raw, json) Hash identifier: AS/3XJ5uTYW3LsLqaRZ1UU+sBLBB0eULAUg28e9lOLM= Subject key identifier: CC:46:9E:A8:2F:16:7B:9B:6F:74:EE:15:C3:DA:70:09:A0:9A:F2:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 084B076601000C08E13475E8479D509AE463BCAB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e17c69e-b02b-4a9d-b382-51893c648e00.roa Signing time: Mon 07 Jul 2025 16:50:21 +0000 ROA not before: Mon 07 Jul 2025 16:50:21 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:8190::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4b:07:66:01:00:0c:08:e1:34:75:e8:47:9d:50:9a:e4:63:bc:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:50:21 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=346854a9b78d4f55240dd4fbeba8aefc6aa2226bcce0ea816826f26fd6ab15cc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:ce:eb:ae:66:28:1d:ef:8d:c5:08:38:4d: 84:95:3a:29:53:94:e3:06:20:cc:09:43:79:97:5e: b0:20:fb:ea:4a:fe:36:66:57:fc:a2:91:b6:51:a9: 76:00:39:2e:d0:2b:88:ae:6d:71:39:2b:60:7a:f1: 0c:d1:81:0b:55:f4:19:5a:2b:a4:eb:1e:a8:38:ee: 25:82:3e:68:a8:81:cf:70:63:dc:22:7a:55:a2:bd: 08:c6:60:90:58:0d:ea:c4:bb:9f:89:cf:f4:6d:9b: 61:1c:fc:f9:f0:21:1e:91:6a:68:38:3a:d0:7f:f6: 6e:78:09:63:0a:a7:69:02:94:02:9d:aa:e1:82:de: 49:28:54:fd:02:b1:4e:15:69:23:fe:53:b9:37:2e: 49:62:43:aa:23:c7:a8:f4:2a:52:c0:e1:a8:b8:1b: 71:79:b2:4b:e7:06:12:95:62:f9:2e:2a:97:6c:6d: 56:a9:35:1b:04:b8:fd:33:ba:e4:6b:46:0a:c2:c7: 7b:65:ee:36:f9:5f:27:d7:88:5d:2e:84:e6:f7:b0: 6c:af:be:44:c0:76:ba:1d:10:a8:f5:3a:5d:52:2b: b6:09:3b:03:a0:56:f8:e6:32:9f:9c:a5:fa:4d:9c: 47:5e:d4:ca:42:53:6e:89:11:f1:e7:00:22:ce:18: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:46:9E:A8:2F:16:7B:9B:6F:74:EE:15:C3:DA:70:09:A0:9A:F2:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e17c69e-b02b-4a9d-b382-51893c648e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8190::/48 Signature Algorithm: sha256WithRSAEncryption 86:16:60:07:58:a8:df:65:58:4d:82:07:00:58:dc:5b:84:b3: 46:70:93:81:a4:c7:34:be:d6:cc:88:07:e0:17:98:7c:f0:f2: b1:d1:09:21:c6:75:8b:57:0f:f3:4d:a9:de:b0:cf:bc:59:d3: e9:15:07:e9:1d:2d:9e:8f:dd:97:a3:a9:93:c7:16:dd:17:f9: ca:87:91:f7:8d:81:38:18:64:6a:94:ee:17:f7:3c:85:9e:3d: 8e:c7:de:81:29:7e:c9:53:f1:47:44:85:38:43:bb:b4:0b:94: cf:18:c6:28:ec:cc:76:1d:d6:3b:83:b1:32:1f:21:41:b7:fc: b4:5f:8c:a0:1f:22:60:e5:9a:e1:1b:99:3f:f0:c9:a9:13:f4: cd:ec:04:46:e6:f5:25:64:17:8a:f9:26:da:ab:a3:58:7f:18: 61:67:75:3d:9d:e3:80:54:9d:b8:5a:3d:b2:95:33:10:70:e1: 37:7f:1e:d0:1f:e6:48:91:cd:d4:b0:66:69:77:1a:a7:d2:45: 51:af:60:4d:59:a3:f9:e8:0a:1c:ce:ca:3b:b3:60:0a:9e:dc: 5e:5c:61:32:bf:27:1f:b3:06:1f:b0:3a:fc:6e:8f:68:91:61: 66:d6:29:8e:70:79:f7:52:e6:c2:a6:9f:91:5c:b9:68:36:bd: 0f:8a:17:d2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCEsHZgEADAjhNHXoR51QmuRjvKswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTY1MDIxWhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDY4NTRhOWI3OGQ0ZjU1MjQwZGQ0ZmJlYmE4YWVmYzZh YTIyMjZiY2NlMGVhODE2ODI2ZjI2ZmQ2YWIxNWNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5dc7rrmYoHe+NxQg4TYSVOilTlOMGIMwJQ3mXXrAg++pK /jZmV/yikbZRqXYAOS7QK4iubXE5K2B68QzRgQtV9BlaK6TrHqg47iWCPmiogc9w Y9wielWivQjGYJBYDerEu5+Jz/Rtm2Ec/PnwIR6Ramg4OtB/9m54CWMKp2kClAKd quGC3kkoVP0CsU4VaSP+U7k3LkliQ6ojx6j0KlLA4ai4G3F5skvnBhKVYvkuKpds bVapNRsEuP0zuuRrRgrCx3tl7jb5XyfXiF0uhOb3sGyvvkTAdrodEKj1Ol1SK7YJ OwOgVvjmMp+cpfpNnEde1MpCU26JEfHnACLOGF4JAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzEaeqC8We5tvdO4Vw9pwCaCa8rQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRlMTdjNjllLWIwMmItNGE5ZC1iMzgyLTUxODkzYzY0OGUwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgZAwDQYJKoZIhvcNAQELBQADggEBAIYWYAdYqN9lWE2CBwBY3FuE s0Zwk4GkxzS+1syIB+AXmHzw8rHRCSHGdYtXD/NNqd6wz7xZ0+kVB+kdLZ6P3Zej qZPHFt0X+cqHkfeNgTgYZGqU7hf3PIWePY7H3oEpfslT8UdEhThDu7QLlM8Yxijs zHYd1juDsTIfIUG3/LRfjKAfImDlmuEbmT/wyakT9M3sBEbm9SVkF4r5Jtqro1h/ GGFndT2d44BUnbhaPbKVMxBw4Td/HtAf5kiRzdSwZml3GqfSRVGvYE1Zo/noChzO yjuzYAqe3F5cYTK/Jx+zBh+wOvxuj2iRYWbWKY5wefdS5sKmn5FcuWg2vQ+KF9I= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:45 2025 by rpki-client