$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8998c883-9e67-4bcf-a61e-660dce0482d2.roa File: 8998c883-9e67-4bcf-a61e-660dce0482d2.roa (raw, json) Hash identifier: LmsWLCabq8IZIcLBrccuSZJXpljBSqtK3hgxUx7cDBI= Subject key identifier: 25:F1:CA:C8:EA:5C:A6:9D:B5:39:E7:CE:ED:DA:72:73:FD:1A:F1:AB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6BFB823E65F817179321DBCC2B34F09838C998E1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8998c883-9e67-4bcf-a61e-660dce0482d2.roa Signing time: Tue 08 Jul 2025 15:12:27 +0000 ROA not before: Tue 08 Jul 2025 15:12:27 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fb:82:3e:65:f8:17:17:93:21:db:cc:2b:34:f0:98:38:c9:98:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:12:27 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=1367210be0191b36a144728294d69511a5ed9d7ed768372bd3b353b264dfcc3e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:3e:a4:6a:8f:30:65:5b:0c:67:3a:0f:a5: a0:61:e1:cc:cd:11:df:e7:2f:b6:3e:b3:13:a0:3a: 81:fc:84:08:6a:80:8d:eb:68:44:cb:ee:fe:0b:09: d0:cb:40:2b:59:50:83:05:98:85:04:0a:24:f1:1c: 64:12:16:27:a6:77:80:71:a7:73:b7:39:6e:0e:d3: 47:67:3b:cb:8c:ad:38:a3:e5:2e:84:a3:10:59:f8: a3:d7:dc:8c:bb:a4:32:1f:89:35:19:5e:3d:d2:1f: cf:c7:43:52:66:ca:1a:0c:08:61:4a:fc:53:d1:bb: ad:a3:4a:ec:38:62:77:90:11:b6:7c:5e:0e:c5:27: 74:f4:47:cc:0e:bc:b7:9c:ae:cf:39:54:5f:1f:03: 74:62:e8:0f:59:31:be:b8:56:1e:98:42:68:0d:c7: 2a:35:2d:26:ee:b2:bd:4e:57:12:c2:d4:39:cd:23: 5f:8c:c2:33:52:47:51:a2:f3:0e:8f:1c:f6:6d:d7: cc:55:b0:41:8f:87:4d:86:aa:e6:be:6b:07:22:f2: 92:03:39:99:c1:f2:12:ca:9d:07:db:04:c3:fd:a7: 18:46:5b:9b:ef:de:90:0e:19:ee:b0:23:c9:59:54: 53:62:a2:20:d1:48:d0:63:24:da:fb:dd:32:1f:a9: 05:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F1:CA:C8:EA:5C:A6:9D:B5:39:E7:CE:ED:DA:72:73:FD:1A:F1:AB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8998c883-9e67-4bcf-a61e-660dce0482d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:e040::/48 Signature Algorithm: sha256WithRSAEncryption 19:3d:31:b3:e9:5f:c2:df:9b:73:4f:f5:13:28:4e:4e:aa:e6: 7d:75:8f:f2:5d:b4:95:16:77:b5:c1:54:b0:7e:2f:c0:f2:7c: cf:a7:04:0b:aa:54:63:df:2f:0c:8d:85:f6:d8:20:26:2a:07: 99:25:83:ab:b1:66:43:01:c8:29:1e:84:95:ab:35:20:ef:3c: ad:5a:da:5f:16:4d:d0:a0:0f:84:26:9a:ce:1b:78:75:64:5c: 12:da:bd:65:ed:00:f8:b8:ef:8f:ea:c0:a5:46:7b:6c:28:77: 99:48:87:3a:9a:a1:f9:ce:51:03:e7:73:b8:15:95:33:b3:8f: 5c:45:d1:5d:86:7b:bc:5a:6d:9c:ff:66:49:2d:b5:57:35:10: aa:06:08:af:bf:01:26:ca:86:06:8f:ff:25:51:a3:15:40:5d: b7:47:52:ce:bd:72:f4:98:49:32:ca:33:27:16:50:45:80:45: ea:8c:d2:ef:fa:d9:45:bb:26:e7:2f:53:2d:24:6a:e6:96:f6: 3f:1e:28:cd:32:00:ca:f7:ec:f1:c1:ba:f4:f8:80:7e:36:85: 6b:4c:b3:be:56:a8:b1:89:f9:7f:2f:5f:a2:cc:8c:34:88:4b: b7:d2:f7:c5:68:c0:3e:58:13:15:0d:fd:5c:be:db:75:85:02: 39:cf:9e:13 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUa/uCPmX4FxeTIdvMKzTwmDjJmOEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTUxMjI3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzY3MjEwYmUwMTkxYjM2YTE0NDcyODI5NGQ2OTUxMWE1 ZWQ5ZDdlZDc2ODM3MmJkM2IzNTNiMjY0ZGZjYzNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4mz6kao8wZVsMZzoPpaBh4czNEd/nL7Y+sxOgOoH8hAhq gI3raETL7v4LCdDLQCtZUIMFmIUECiTxHGQSFiemd4Bxp3O3OW4O00dnO8uMrTij 5S6EoxBZ+KPX3Iy7pDIfiTUZXj3SH8/HQ1JmyhoMCGFK/FPRu62jSuw4YneQEbZ8 Xg7FJ3T0R8wOvLecrs85VF8fA3Ri6A9ZMb64Vh6YQmgNxyo1LSbusr1OVxLC1DnN I1+MwjNSR1Gi8w6PHPZt18xVsEGPh02Gqua+awci8pIDOZnB8hLKnQfbBMP9pxhG W5vv3pAOGe6wI8lZVFNioiDRSNBjJNr73TIfqQUbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJfHKyOpcpp21OefO7dpyc/0a8aswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5OThjODgzLTllNjctNGJjZi1hNjFlLTY2MGRjZTA0ODJkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9h4EAwDQYJKoZIhvcNAQELBQADggEBABk9MbPpX8Lfm3NP9RMoTk6q 5n11j/JdtJUWd7XBVLB+L8DyfM+nBAuqVGPfLwyNhfbYICYqB5klg6uxZkMByCke hJWrNSDvPK1a2l8WTdCgD4Qmms4beHVkXBLavWXtAPi474/qwKVGe2wod5lIhzqa ofnOUQPnc7gVlTOzj1xF0V2Ge7xabZz/ZkkttVc1EKoGCK+/ASbKhgaP/yVRoxVA XbdHUs69cvSYSTLKMycWUEWAReqM0u/62UW7JucvUy0kauaW9j8eKM0yAMr37PHB uvT4gH42hWtMs75WqLGJ+X8vX6LMjDSIS7fS98VowD5YExUN/Vy+23WFAjnPnhM= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:18 2025 by rpki-client