$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f16b923-96f5-4070-b07e-8883a22a8290.roa File: 8f16b923-96f5-4070-b07e-8883a22a8290.roa (raw, json) Hash identifier: UYahlXZFK2BHmBDS9B2t3zsoqWWo/wTzc7AB/OMZgLw= Subject key identifier: BF:F3:62:8D:42:3C:88:33:36:4E:DC:F3:D6:3A:22:60:69:4C:DB:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 57F7AB25DCA153E075B6D7A8263C82979B0364B7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f16b923-96f5-4070-b07e-8883a22a8290.roa Signing time: Tue 08 Jul 2025 17:30:28 +0000 ROA not before: Tue 08 Jul 2025 17:30:28 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f18::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f7:ab:25:dc:a1:53:e0:75:b6:d7:a8:26:3c:82:97:9b:03:64:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:30:28 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=e6e7b1623c1015f7d434db20e89adeaf5328cf2de42f88a02bfbfdb3023530fe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b0:24:58:de:ce:6b:07:0a:f4:2d:d5:c2:90: b4:9c:49:cc:c4:03:35:5a:d5:f8:94:e2:95:f7:d6: 3f:01:94:d2:06:fd:3a:0b:64:77:35:20:86:db:24: 1b:f2:cf:ce:9c:e4:90:e4:d6:30:f4:8d:82:ff:93: c6:f6:65:0e:78:34:a0:e3:9e:ae:17:31:0f:d9:49: 0e:28:cf:39:3b:4e:bd:bb:d9:c7:f5:c2:32:da:65: 49:32:f3:8b:bc:10:e5:5c:0c:5f:78:ae:c5:02:2f: 65:eb:d7:b9:3f:6f:3e:0a:44:1d:70:f3:aa:d7:d8: dd:74:71:54:a4:82:0d:7b:d9:f9:cc:2b:f8:30:67: 9f:84:f3:4e:70:11:24:c0:b7:ae:20:ba:d8:6a:72: 86:fd:12:3f:25:5f:7a:8e:0a:93:d1:aa:af:3f:4f: 68:be:70:b5:81:79:78:2d:23:56:e3:8c:05:db:b9: 28:ec:84:48:9b:6f:06:b8:d7:ad:01:80:54:88:ad: bf:d6:88:88:aa:df:f9:8b:ec:38:48:c9:a5:41:24: 8c:37:b4:eb:b6:84:d3:77:08:f4:1e:94:e1:84:e3: e9:d4:2f:3f:ce:52:e7:ce:e2:d0:31:3f:8a:91:99: 18:22:e4:0e:96:c3:b0:6e:f2:0b:33:03:3d:87:74: 38:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F3:62:8D:42:3C:88:33:36:4E:DC:F3:D6:3A:22:60:69:4C:DB:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f16b923-96f5-4070-b07e-8883a22a8290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f18::/35 Signature Algorithm: sha256WithRSAEncryption 58:ce:ec:23:c9:b4:39:7a:88:75:94:0e:3d:82:d1:2c:18:a0: b6:93:ae:2a:54:5f:30:57:2d:f4:79:84:97:88:a1:5b:98:9b: 10:da:eb:24:a1:87:84:71:82:b5:24:6a:af:44:9f:f9:ab:35: 2f:8b:bc:c0:0d:d2:d6:9d:d1:1a:22:78:12:da:51:ca:4e:2f: 96:29:ff:b2:4d:69:a3:8a:84:55:97:9f:f3:82:88:f3:ea:35: 54:df:be:ea:ee:53:7b:c5:e7:05:20:bf:77:42:28:ee:54:29: be:9d:e8:d0:1e:0e:98:26:d7:26:b7:cf:0d:a1:36:b5:0c:78: 83:3b:b8:63:aa:c3:85:12:f0:99:c2:33:bc:a5:38:bd:08:99: c3:99:2e:69:0c:dc:de:64:fd:a8:cd:2b:42:32:da:aa:2c:26: b3:26:8f:de:c1:c9:1d:b1:80:5e:09:a7:da:45:1a:fe:9b:4b: 4a:bf:4a:44:9e:b3:2f:71:d1:b3:25:8f:16:30:0e:d5:91:d4: 56:45:fa:da:50:e1:9b:b4:2f:e8:0b:3a:5d:16:e1:83:91:2a: 43:a9:aa:bc:a0:da:b2:55:79:af:d8:ae:e1:47:4d:22:dd:a5: 83:7e:02:2e:b4:d1:a8:ae:d9:4c:f8:43:42:e3:c9:91:12:e8: c2:fb:11:9c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUV/erJdyhU+B1tteoJjyCl5sDZLcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTczMDI4WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmU3YjE2MjNjMTAxNWY3ZDQzNGRiMjBlODlhZGVhZjUz MjhjZjJkZTQyZjg4YTAyYmZiZmRiMzAyMzUzMGZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfsCRY3s5rBwr0LdXCkLScSczEAzVa1fiU4pX31j8BlNIG /ToLZHc1IIbbJBvyz86c5JDk1jD0jYL/k8b2ZQ54NKDjnq4XMQ/ZSQ4ozzk7Tr27 2cf1wjLaZUky84u8EOVcDF94rsUCL2Xr17k/bz4KRB1w86rX2N10cVSkgg172fnM K/gwZ5+E805wESTAt64guthqcob9Ej8lX3qOCpPRqq8/T2i+cLWBeXgtI1bjjAXb uSjshEibbwa4160BgFSIrb/WiIiq3/mL7DhIyaVBJIw3tOu2hNN3CPQelOGE4+nU Lz/OUufO4tAxP4qRmRgi5A6Ww7Bu8gszAz2HdDiRAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUv/NijUI8iDM2Ttzz1joiYGlM26QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhmMTZiOTIzLTk2ZjUtNDA3MC1iMDdlLTg4ODNhMjJhODI5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgUmAB8YADANBgkqhkiG9w0BAQsFAAOCAQEAWM7sI8m0OXqIdZQOPYLRLBig tpOuKlRfMFct9HmEl4ihW5ibENrrJKGHhHGCtSRqr0Sf+as1L4u8wA3S1p3RGiJ4 EtpRyk4vlin/sk1po4qEVZef84KI8+o1VN++6u5Te8XnBSC/d0Io7lQpvp3o0B4O mCbXJrfPDaE2tQx4gzu4Y6rDhRLwmcIzvKU4vQiZw5kuaQzc3mT9qM0rQjLaqiwm syaP3sHJHbGAXgmn2kUa/ptLSr9KRJ6zL3HRsyWPFjAO1ZHUVkX62lDhm7Qv6As6 XRbhg5EqQ6mqvKDaslV5r9iu4UdNIt2lg34CLrTRqK7ZTPhDQuPJkRLowvsRnA== -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:20 2025 by rpki-client