$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6133bfa6-1c4f-4c49-9a75-7856dd78ecec.roa File: 6133bfa6-1c4f-4c49-9a75-7856dd78ecec.roa (raw, json) Hash identifier: pBxIq2m0jKZQIydmI1FFgGRwcz5WyseF8DKZwNN8R58= Subject key identifier: 94:8E:34:CB:B5:7E:96:A2:2E:97:3B:B4:51:F5:3E:46:21:DD:07:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1433A71084F0B9FA488BACDB137C680BA4134849 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6133bfa6-1c4f-4c49-9a75-7856dd78ecec.roa Signing time: Mon 30 Jun 2025 15:11:42 +0000 ROA not before: Mon 30 Jun 2025 15:11:42 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f60:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:33:a7:10:84:f0:b9:fa:48:8b:ac:db:13:7c:68:0b:a4:13:48:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 30 15:11:42 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=06c7167d7586774b226e818a496b6f715f02e1970d4be3515725ac4baf528a10, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:24:bb:e2:ac:ce:a6:e8:92:e0:e2:d3:88:8c: 0d:7d:d5:f6:94:43:0e:bd:fd:22:02:32:a6:0e:27: 66:c1:b8:f0:ab:4b:d3:93:97:4f:f2:37:10:70:9c: 70:ef:c1:1b:98:e0:c8:09:c1:da:bc:d8:ca:a2:0f: 93:86:13:bb:49:4b:3a:86:02:1a:fb:2e:8c:c2:92: 40:07:a1:72:35:78:67:ff:f4:0f:4b:57:5b:e8:36: 8c:0a:8b:b3:f8:a2:ff:91:e4:83:64:21:ea:a9:c4: 8e:e5:d3:4a:d0:75:7d:23:93:77:db:b5:ee:dd:c5: 49:7e:31:46:32:54:ce:09:6a:77:ac:65:1d:0e:1f: 1d:92:92:fb:ae:7f:7d:a3:bb:8c:fd:23:f7:46:f2: b8:b7:a8:56:05:9e:2c:7f:10:47:3a:1c:67:31:f5: 91:f7:fe:6f:31:9f:04:9b:42:73:f5:d7:3a:67:dd: d6:1e:fd:8f:15:1b:85:a0:45:2c:19:a0:47:7e:e6: 61:16:be:3c:6f:e6:c0:51:ed:32:f3:4f:d2:cc:71: 4f:c3:b7:d8:51:c5:54:e4:12:92:a2:0c:66:04:82: ce:c6:b0:34:0e:0c:f6:ae:8f:04:1b:9a:5a:27:78: 56:b7:f5:83:da:f7:48:9e:82:4a:78:9d:90:c6:b0: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8E:34:CB:B5:7E:96:A2:2E:97:3B:B4:51:F5:3E:46:21:DD:07:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6133bfa6-1c4f-4c49-9a75-7856dd78ecec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f60:1000::/40 Signature Algorithm: sha256WithRSAEncryption af:e9:e5:08:f7:9a:04:31:8d:a4:54:10:81:0e:5e:29:b6:3c: 18:28:f0:36:73:81:8b:a2:5a:5a:fd:e0:f4:8c:e7:4f:87:20: 24:b9:cf:8e:ac:c9:d4:3b:13:cb:e5:59:c6:48:e6:71:a6:94: 22:92:77:5f:e3:2b:67:83:e6:68:e6:1f:2b:b0:d5:40:45:88: ad:ed:29:c1:ec:35:f1:d9:f1:c5:b3:16:f0:5e:ba:56:53:cb: ea:9b:bb:1a:4c:b4:d9:28:3f:15:37:67:fb:d1:4a:43:3e:eb: b4:68:0a:22:fd:3d:c0:27:35:39:e5:62:13:57:83:25:45:3a: 9e:d0:da:5c:ad:07:4f:5b:5b:29:e4:4b:0d:56:74:f8:43:ae: 95:78:51:50:4a:80:07:93:86:e5:fc:bf:04:56:22:c4:94:a0: d7:71:3f:cb:b1:30:63:70:ee:16:9c:15:3c:6d:7a:c4:f8:b5: 12:28:99:d6:c7:d1:97:03:95:d5:bb:e6:31:b2:98:0b:ee:36: 2f:78:46:64:a0:2e:7b:ce:4a:2f:07:41:64:0e:7f:e6:3a:2a: c0:cb:53:74:fd:b5:b4:60:3f:60:1c:9c:ee:97:e7:3f:77:e3: 98:1b:19:0a:0a:41:a1:cb:59:7c:9a:33:7f:07:42:a9:be:13: 25:f2:ba:b4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFDOnEITwufpIi6zbE3xoC6QTSEkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjMwMTUxMTQyWhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNmM3MTY3ZDc1ODY3NzRiMjI2ZTgxOGE0OTZiNmY3MTVm MDJlMTk3MGQ0YmUzNTE1NzI1YWM0YmFmNTI4YTEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoJLvirM6m6JLg4tOIjA191faUQw69/SICMqYOJ2bBuPCr S9OTl0/yNxBwnHDvwRuY4MgJwdq82MqiD5OGE7tJSzqGAhr7LozCkkAHoXI1eGf/ 9A9LV1voNowKi7P4ov+R5INkIeqpxI7l00rQdX0jk3fbte7dxUl+MUYyVM4Janes ZR0OHx2Skvuuf32ju4z9I/dG8ri3qFYFnix/EEc6HGcx9ZH3/m8xnwSbQnP11zpn 3dYe/Y8VG4WgRSwZoEd+5mEWvjxv5sBR7TLzT9LMcU/Dt9hRxVTkEpKiDGYEgs7G sDQODPaujwQbmloneFa39YPa90iegkp4nZDGsHLtAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUlI40y7V+lqIulzu0UfU+RiHdBzIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxMzNiZmE2LTFjNGYtNGM0OS05YTc1LTc4NTZkZDc4ZWNlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9gEDANBgkqhkiG9w0BAQsFAAOCAQEAr+nlCPeaBDGNpFQQgQ5eKbY8 GCjwNnOBi6JaWv3g9IznT4cgJLnPjqzJ1DsTy+VZxkjmcaaUIpJ3X+MrZ4PmaOYf K7DVQEWIre0pwew18dnxxbMW8F66VlPL6pu7Gky02Sg/FTdn+9FKQz7rtGgKIv09 wCc1OeViE1eDJUU6ntDaXK0HT1tbKeRLDVZ0+EOulXhRUEqAB5OG5fy/BFYixJSg 13E/y7EwY3DuFpwVPG16xPi1EiiZ1sfRlwOV1bvmMbKYC+42L3hGZKAue85KLwdB ZA5/5joqwMtTdP21tGA/YByc7pfnP3fjmBsZCgpBoctZfJozfwdCqb4TJfK6tA== -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:49 2025 by rpki-client