$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6616d1-d87c-4d15-b298-8cf39a2dfb3c.roa File: 8b6616d1-d87c-4d15-b298-8cf39a2dfb3c.roa (raw, json) Hash identifier: Wh+xNFvS3p0yEzwlsP0lQgX3iEjzJHpYvnXJ1bnEloE= Subject key identifier: D7:06:99:D9:CD:0D:FE:3F:AD:15:21:23:70:AC:9D:02:E9:C2:9F:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B7D1B80EE4058EA455F60551990F26E956DE6E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6616d1-d87c-4d15-b298-8cf39a2dfb3c.roa Signing time: Mon 21 Jul 2025 16:01:10 +0000 ROA not before: Mon 21 Jul 2025 16:01:10 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7d:1b:80:ee:40:58:ea:45:5f:60:55:19:90:f2:6e:95:6d:e6:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 16:01:10 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=a02a4589d0a48a474b8a12de0500fc7806d155b9c11e39e6950526c7c2097448, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:58:bc:b0:50:7d:3e:85:9b:de:ee:da:4a:b9: 85:10:94:a0:0d:b4:a7:d6:31:4d:e2:28:a8:b4:b1: 48:03:da:35:f0:2e:f0:95:fd:00:6e:bd:94:f3:06: 18:4e:64:0c:35:8e:b7:71:72:3d:5b:e6:f3:34:34: 94:91:a9:f8:05:c3:05:17:c4:c1:e0:93:a1:9b:2a: 8b:e9:7d:7c:b4:55:8d:83:0e:17:de:fd:43:b5:a5: 35:4e:4a:18:85:ab:77:86:d2:29:88:8f:1a:10:5e: 96:2f:1d:4d:a2:91:3f:25:e8:0f:13:b8:7a:1d:c2: be:55:30:a4:75:bb:a4:fa:4c:c0:52:c5:8b:78:90: 13:84:2d:a1:d0:26:06:49:f4:dd:f7:d6:3a:36:b1: dc:e8:eb:41:63:fe:49:4d:89:37:9c:32:52:db:cb: b8:73:f1:32:df:80:74:a8:51:44:88:5b:16:08:e6: d5:1a:63:a3:21:f2:98:a8:4c:87:f1:e7:5c:24:41: 0c:36:77:ff:ca:6b:04:1f:b2:58:d3:0a:3e:8b:b0: 06:24:f2:45:e0:ce:72:ed:13:d0:2b:a6:3c:5b:d4: a1:f8:8b:d7:58:49:dd:45:fd:a7:a3:c2:bf:33:44: 7b:1e:54:b3:45:29:d0:09:aa:9e:14:55:e9:de:7d: e0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:06:99:D9:CD:0D:FE:3F:AD:15:21:23:70:AC:9D:02:E9:C2:9F:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6616d1-d87c-4d15-b298-8cf39a2dfb3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f30::/32 Signature Algorithm: sha256WithRSAEncryption 80:94:6e:7a:8e:95:1e:14:29:ff:24:61:d0:c6:5c:fb:d6:e4: bf:31:f0:87:97:18:da:d8:1b:d5:2d:c4:2d:a9:dc:b4:81:8f: 29:49:ef:d9:25:ab:42:c9:39:1e:5b:23:72:c0:a1:13:0a:33: d2:bb:a5:be:cd:2e:f9:1d:f0:89:97:a8:3d:f0:70:67:08:fe: 6f:1a:1b:a7:fa:cc:28:01:b9:a2:1b:b0:30:dc:09:52:ee:ce: e0:fd:e9:4b:8a:b5:ba:90:c0:1c:ba:42:cb:b4:a2:49:9f:84: ce:7f:73:d4:83:f2:31:97:f4:59:d5:7a:89:92:8a:27:3d:43: c2:d7:e2:5a:93:e3:da:07:c4:a9:0c:bb:26:8e:fb:1e:b9:5c: c9:1d:37:65:b6:62:8c:eb:22:c9:74:81:4f:84:56:6c:03:3f: 2a:57:d2:f1:f7:41:2c:56:5d:93:55:cc:d8:d6:ee:31:e3:bd: 60:87:fc:d9:31:1d:78:d5:fb:7a:7c:b5:b2:c4:5b:77:78:b3: 8e:cc:39:20:1b:1c:e6:bd:e8:69:80:f1:39:94:47:29:31:0a: bc:6c:9f:03:e6:51:40:cb:9a:1d:0b:34:bf:99:b8:2d:65:b0: 55:30:77:47:9e:65:d9:c4:02:c5:f9:37:a6:db:89:f6:d9:44: f8:95:3e:8b -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUS30bgO5AWOpFX2BVGZDybpVt5ukwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIxMTYwMTEwWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDJhNDU4OWQwYTQ4YTQ3NGI4YTEyZGUwNTAwZmM3ODA2 ZDE1NWI5YzExZTM5ZTY5NTA1MjZjN2MyMDk3NDQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLWLywUH0+hZve7tpKuYUQlKANtKfWMU3iKKi0sUgD2jXw LvCV/QBuvZTzBhhOZAw1jrdxcj1b5vM0NJSRqfgFwwUXxMHgk6GbKovpfXy0VY2D Dhfe/UO1pTVOShiFq3eG0imIjxoQXpYvHU2ikT8l6A8TuHodwr5VMKR1u6T6TMBS xYt4kBOELaHQJgZJ9N331jo2sdzo60Fj/klNiTecMlLby7hz8TLfgHSoUUSIWxYI 5tUaY6Mh8pioTIfx51wkQQw2d//KawQfsljTCj6LsAYk8kXgznLtE9Arpjxb1KH4 i9dYSd1F/aejwr8zRHseVLNFKdAJqp4UVenefeCBAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQU1waZ2c0N/j+tFSEjcKydAunCn5AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiNjYxNmQxLWQ4N2MtNGQxNS1iMjk4LThjZjM5YTJkZmIzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB8wMA0GCSqGSIb3DQEBCwUAA4IBAQCAlG56jpUeFCn/JGHQxlz71uS/ MfCHlxja2BvVLcQtqdy0gY8pSe/ZJatCyTkeWyNywKETCjPSu6W+zS75HfCJl6g9 8HBnCP5vGhun+swoAbmiG7Aw3AlS7s7g/elLirW6kMAcukLLtKJJn4TOf3PUg/Ix l/RZ1XqJkoonPUPC1+Jak+PaB8SpDLsmjvseuVzJHTdltmKM6yLJdIFPhFZsAz8q V9Lx90EsVl2TVczY1u4x471gh/zZMR141ft6fLWyxFt3eLOOzDkgGxzmvehpgPE5 lEcpMQq8bJ8D5lFAy5odCzS/mbgtZbBVMHdHnmXZxALF+Tem24n22UT4lT6L -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:18 2025 by rpki-client