$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6527a6a7-121d-43dc-8efc-219b189b20fb.roa File: 6527a6a7-121d-43dc-8efc-219b189b20fb.roa (raw, json) Hash identifier: dIatixRzpHeg7IemCzf/JwiQbL9JHVA1M0IQbeJEPAQ= Subject key identifier: DA:A0:BF:5E:6F:74:FA:68:71:16:6B:F0:DB:BB:75:4F:A9:25:AB:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 562C5A66141EA72D5CF81DB7C9AF075100A26959 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6527a6a7-121d-43dc-8efc-219b189b20fb.roa Signing time: Tue 08 Jul 2025 17:31:24 +0000 ROA not before: Tue 08 Jul 2025 17:31:24 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f10:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2c:5a:66:14:1e:a7:2d:5c:f8:1d:b7:c9:af:07:51:00:a2:69:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:31:24 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=d342e4c1cc025c352a68615bbec69706c4ee53e292c0f48d0388ec8dc64ecb73, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:8e:5f:a0:eb:b8:81:aa:86:a3:28:cd:ff: 40:80:af:84:0e:dd:39:f6:29:3e:55:c3:f8:cb:be: dc:0b:e6:12:cb:d3:ac:e6:5b:d2:66:d7:bb:05:7e: d9:ab:95:8e:04:fd:4d:90:db:17:2f:70:65:bd:36: 07:b3:67:1c:8f:a1:82:0a:a2:6d:81:b7:f6:2f:c8: 26:2b:f6:1d:19:ed:27:e0:d7:5a:55:00:33:a2:f4: 34:cb:70:b2:15:96:02:c1:66:b1:16:f6:a5:f2:d4: 00:60:c2:c4:1a:ee:e4:81:14:84:7a:83:6c:05:10: f8:dd:a2:08:64:0f:ed:ac:78:21:8a:b2:76:df:10: 64:90:77:97:ae:12:34:3d:25:5c:ae:7a:ad:bd:26: 42:ea:2e:0e:4f:3c:7c:1a:1c:7b:e7:f0:f7:3f:31: 67:41:2f:04:93:37:80:b3:77:b5:07:85:17:ec:34: 85:80:22:16:5f:8f:bf:d6:0d:4b:9c:6e:9f:ac:2b: 92:73:0c:a8:10:47:c1:0c:ee:96:15:03:67:4f:37: c4:dd:ce:67:db:1d:8d:71:da:8a:ed:45:5a:29:81: 6e:ff:43:55:6c:b3:b0:40:71:5a:df:1b:34:cd:a1: 6f:ce:4c:e6:09:a2:86:44:c6:b2:79:a6:7e:f1:b6: a2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A0:BF:5E:6F:74:FA:68:71:16:6B:F0:DB:BB:75:4F:A9:25:AB:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6527a6a7-121d-43dc-8efc-219b189b20fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f10:4000::/36 Signature Algorithm: sha256WithRSAEncryption aa:85:ab:82:39:af:7b:2b:c5:44:4d:93:08:8c:e2:7f:7c:4f: 28:a0:a9:be:d0:60:92:88:f6:98:4e:ed:c9:4d:ed:fe:a6:5b: d1:90:04:d6:d6:fb:67:84:d8:92:2e:78:ea:4f:67:f4:e0:3c: 8b:6f:84:c1:a1:91:8c:0a:29:d2:c3:3b:fe:b1:95:c8:ad:8f: 1b:04:1c:a9:3d:73:0e:e9:22:4f:6a:ea:82:c9:a9:1f:2b:06: e3:5d:34:d7:7a:f2:86:ab:d2:5b:c0:e9:24:0e:af:25:cf:dc: 5e:26:f8:a8:ae:ad:28:fb:a7:c3:12:bf:65:26:82:a6:08:f6: a6:68:bb:42:0b:8e:a5:4c:b9:2a:3d:0f:23:80:b5:a7:f1:10: 4d:95:7d:6d:17:99:98:c7:62:1e:20:9a:59:a9:44:69:f8:75: 77:6b:d0:91:e3:bf:e3:0e:21:e1:a7:0b:3d:23:3b:6d:80:49: 4e:e1:fb:8d:ae:3f:c1:34:df:52:9f:7e:f5:04:36:4d:d0:92: 6c:54:9d:da:77:d3:8b:bc:7b:42:5e:8f:e3:be:f4:02:db:f5: b6:ec:8f:be:98:29:55:de:90:d7:1e:5d:dc:87:74:77:17:3f: 3d:fb:67:eb:f3:c2:ad:04:99:67:df:7b:7f:37:08:c5:43:38: e8:68:8c:45 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVixaZhQepy1c+B23ya8HUQCiaVkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTczMTI0WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzQyZTRjMWNjMDI1YzM1MmE2ODYxNWJiZWM2OTcwNmM0 ZWU1M2UyOTJjMGY0OGQwMzg4ZWM4ZGM2NGVjYjczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC43o5foOu4gaqGoyjN/0CAr4QO3Tn2KT5Vw/jLvtwL5hLL 06zmW9Jm17sFftmrlY4E/U2Q2xcvcGW9NgezZxyPoYIKom2Bt/YvyCYr9h0Z7Sfg 11pVADOi9DTLcLIVlgLBZrEW9qXy1ABgwsQa7uSBFIR6g2wFEPjdoghkD+2seCGK snbfEGSQd5euEjQ9JVyueq29JkLqLg5PPHwaHHvn8Pc/MWdBLwSTN4Czd7UHhRfs NIWAIhZfj7/WDUucbp+sK5JzDKgQR8EM7pYVA2dPN8TdzmfbHY1x2ortRVopgW7/ Q1Vss7BAcVrfGzTNoW/OTOYJooZExrJ5pn7xtqKhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2qC/Xm90+mhxFmvw27t1T6klq2YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY1MjdhNmE3LTEyMWQtNDNkYy04ZWZjLTIxOWIxODliMjBmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8QQDANBgkqhkiG9w0BAQsFAAOCAQEAqoWrgjmveyvFRE2TCIzif3xP KKCpvtBgkoj2mE7tyU3t/qZb0ZAE1tb7Z4TYki546k9n9OA8i2+EwaGRjAop0sM7 /rGVyK2PGwQcqT1zDukiT2rqgsmpHysG410013ryhqvSW8DpJA6vJc/cXib4qK6t KPunwxK/ZSaCpgj2pmi7QguOpUy5Kj0PI4C1p/EQTZV9bReZmMdiHiCaWalEafh1 d2vQkeO/4w4h4acLPSM7bYBJTuH7ja4/wTTfUp9+9QQ2TdCSbFSd2nfTi7x7Ql6P 4770Atv1tuyPvpgpVd6Q1x5d3Id0dxc/Pftn6/PCrQSZZ997fzcIxUM46GiMRQ== -----END CERTIFICATE-----Generated at Tue Jul 22 04:54:20 2025 by rpki-client