$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1c9dcb-93fb-441d-8015-1d13f8a272fc.roa File: 6b1c9dcb-93fb-441d-8015-1d13f8a272fc.roa (raw, json) Hash identifier: aA3oR3elY4YgAvJ7evpHTRMsU28Gttn0Wq28fp244fU= Subject key identifier: A9:21:91:8D:C5:DB:54:8F:86:06:1B:E3:F6:BF:29:D4:E2:E7:4F:D9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7759C8EE7A5E484CE69D352AE29FD78CF348ECB5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1c9dcb-93fb-441d-8015-1d13f8a272fc.roa Signing time: Tue 08 Jul 2025 15:22:09 +0000 ROA not before: Tue 08 Jul 2025 15:22:09 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:59:c8:ee:7a:5e:48:4c:e6:9d:35:2a:e2:9f:d7:8c:f3:48:ec:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:22:09 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=185f9ca4f70053f0e045370699b5bbe8eb3c4718924281a293e9a338b21188b0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f7:17:73:16:66:d0:e1:ad:dc:ef:a5:4f:cb: fd:01:93:f8:e9:42:c9:88:e1:c5:42:4f:67:38:19: 69:d4:28:25:57:54:17:9f:cf:10:47:58:ba:19:18: 6b:1b:56:1b:a5:3a:35:e5:5e:d2:8b:c1:0b:b2:d5: 4a:81:76:c0:21:b9:e3:11:31:34:2f:bb:c8:4a:3e: ea:8c:4a:08:7e:cc:6f:dc:d1:1b:55:43:19:57:e9: 64:3c:81:ff:4b:8a:77:00:75:3a:4d:b4:2e:96:ab: b0:d0:50:d7:d6:54:a2:e6:9e:84:20:5f:b9:72:2a: ad:e6:0e:2f:c9:1f:93:99:5b:63:e9:52:94:28:6a: 78:81:ba:93:2c:e7:bf:59:00:e9:e2:e8:45:be:db: a1:97:d3:82:4d:79:03:cc:4b:d8:d6:0a:84:d0:25: b7:f9:20:be:fb:8d:2c:c5:b8:c3:db:23:5f:9b:16: 8f:31:9e:cb:6e:f7:75:e3:26:54:f2:6c:f4:f5:c0: 47:8f:53:cf:06:24:64:81:cc:f4:a9:5d:0f:d8:50: ab:da:49:45:4e:06:84:f0:b8:e8:b2:6b:cc:ac:07: 5a:0f:f2:47:28:c3:fc:d2:e7:10:6f:7c:d3:91:fb: 25:a2:15:8d:93:9d:d6:3d:52:e3:1d:99:f9:78:38: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:21:91:8D:C5:DB:54:8F:86:06:1B:E3:F6:BF:29:D4:E2:E7:4F:D9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1c9dcb-93fb-441d-8015-1d13f8a272fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:2080::/48 Signature Algorithm: sha256WithRSAEncryption 92:d2:2f:95:a1:e2:ff:f2:73:c5:b4:ea:8b:25:93:bd:c7:b0: 9b:ce:b0:81:7d:a7:98:27:32:30:4d:df:fa:bf:eb:3b:f3:10: 07:13:04:0c:b9:36:f1:4a:55:9d:49:7b:15:fb:31:c8:41:d6: ef:69:6b:55:c2:83:49:bd:ee:8c:86:3e:83:ef:bd:fc:10:3e: 70:0d:40:f8:53:79:60:ff:63:2c:d3:30:5e:41:b5:38:d3:c9: 45:43:ab:fb:f9:d1:ae:91:22:69:b0:58:13:92:60:88:cf:25: 1e:14:e5:7c:29:92:b7:28:41:95:21:fd:e8:21:73:b1:4c:13: 3b:e1:46:cd:7e:fe:d7:f3:6d:ce:e6:95:4a:dd:05:b2:23:07: 82:a5:d1:0e:10:41:8e:68:71:bc:db:2d:85:e7:c5:b5:1d:a3: 40:05:4e:10:6a:a4:e8:a8:8d:13:77:31:26:8c:55:19:09:f3: a9:4f:69:e8:19:2c:5d:c5:2a:4d:3b:0c:3c:01:7f:22:e1:f4: 22:89:73:75:37:3b:fc:3f:76:ca:e2:71:84:36:16:be:d6:aa: 89:23:16:b3:fb:9a:65:60:1a:ef:a3:bf:ea:6b:a5:37:e8:be: 4a:4d:53:17:d4:88:79:a5:00:54:00:ed:0e:66:ad:97:e8:80: 91:0f:b9:18 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd1nI7npeSEzmnTUq4p/XjPNI7LUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTUyMjA5WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxODVmOWNhNGY3MDA1M2YwZTA0NTM3MDY5OWI1YmJlOGVi M2M0NzE4OTI0MjgxYTI5M2U5YTMzOGIyMTE4OGIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDa9xdzFmbQ4a3c76VPy/0Bk/jpQsmI4cVCT2c4GWnUKCVX VBefzxBHWLoZGGsbVhulOjXlXtKLwQuy1UqBdsAhueMRMTQvu8hKPuqMSgh+zG/c 0RtVQxlX6WQ8gf9LincAdTpNtC6Wq7DQUNfWVKLmnoQgX7lyKq3mDi/JH5OZW2Pp UpQoaniBupMs579ZAOni6EW+26GX04JNeQPMS9jWCoTQJbf5IL77jSzFuMPbI1+b Fo8xnstu93XjJlTybPT1wEePU88GJGSBzPSpXQ/YUKvaSUVOBoTwuOiya8ysB1oP 8kcow/zS5xBvfNOR+yWiFY2TndY9UuMdmfl4ODQzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqSGRjcXbVI+GBhvj9r8p1OLnT9kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZiMWM5ZGNiLTkzZmItNDQxZC04MDE1LTFkMTNmOGEyNzJmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yIIAwDQYJKoZIhvcNAQELBQADggEBAJLSL5Wh4v/yc8W06oslk73H sJvOsIF9p5gnMjBN3/q/6zvzEAcTBAy5NvFKVZ1JexX7MchB1u9pa1XCg0m97oyG PoPvvfwQPnANQPhTeWD/YyzTMF5BtTjTyUVDq/v50a6RImmwWBOSYIjPJR4U5Xwp krcoQZUh/eghc7FMEzvhRs1+/tfzbc7mlUrdBbIjB4Kl0Q4QQY5ocbzbLYXnxbUd o0AFThBqpOiojRN3MSaMVRkJ86lPaegZLF3FKk07DDwBfyLh9CKJc3U3O/w/dsri cYQ2Fr7WqokjFrP7mmVgGu+jv+prpTfovkpNUxfUiHmlAFQA7Q5mrZfogJEPuRg= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:27 2025 by rpki-client