$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d94a7aa-9505-4db3-925e-cf3f285b296b.roa File: 9d94a7aa-9505-4db3-925e-cf3f285b296b.roa (raw, json) Hash identifier: Gl85VUCd7IzzVygCGxQC8knty/fmuJo3YgGAz6Lgspw= Subject key identifier: FA:ED:76:DC:C8:8C:39:66:4A:8B:0D:A9:BA:F6:AF:4C:B1:84:B0:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40FE4BDF10AD1C97AB7510260C2BD953EAD0940C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d94a7aa-9505-4db3-925e-cf3f285b296b.roa Signing time: Tue 08 Jul 2025 17:31:27 +0000 ROA not before: Tue 08 Jul 2025 17:31:27 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f10:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fe:4b:df:10:ad:1c:97:ab:75:10:26:0c:2b:d9:53:ea:d0:94:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:31:27 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=df243a950f7e479d5143f7cc46b2b2d0c826040787a045a63138e125f4422890, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:53:25:66:15:f2:2d:97:df:fb:89:23:e5: c6:3a:88:47:35:5f:e8:ab:8d:65:c1:5f:8f:94:38: 7c:a5:94:15:b2:ef:3b:cd:15:c0:b0:e9:67:1f:81: e1:e4:bc:87:53:d0:a3:5b:2c:29:3a:44:2a:c3:c7: 7c:5d:07:b3:84:7b:b4:e1:45:76:e9:aa:96:20:c4: 41:45:ef:c0:78:01:c5:ed:99:f1:4a:ac:51:81:69: ff:60:2b:18:07:2d:f2:08:2e:e8:df:58:a7:39:4c: f8:e4:06:56:23:2f:ab:c3:7c:78:dd:03:6d:d3:32: 8c:f1:0e:52:ea:79:a9:24:6c:9e:57:72:fb:0a:73: c5:7d:e8:3c:ff:25:4b:14:e1:da:cf:4b:a2:13:27: b8:6a:97:3c:0b:ea:00:2d:31:e0:1b:d0:70:e0:5e: 23:d5:1e:06:e8:50:42:3e:f5:e2:de:24:e0:b9:6a: 80:cb:5f:4d:bd:a6:94:bf:de:2f:d2:ec:94:f0:c4: d1:b7:42:cb:7f:a6:51:73:ff:d4:15:e6:32:bf:85: ba:64:db:17:10:c7:9b:5a:3c:34:f5:c4:8a:a9:bb: c9:9c:8d:51:da:43:23:8a:b7:55:4b:51:b6:8d:cb: 9f:2a:f4:47:9b:4a:34:e4:d9:22:e1:88:ce:82:89: 7b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:ED:76:DC:C8:8C:39:66:4A:8B:0D:A9:BA:F6:AF:4C:B1:84:B0:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d94a7aa-9505-4db3-925e-cf3f285b296b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f10:8000::/36 Signature Algorithm: sha256WithRSAEncryption c5:29:49:04:a4:c5:2e:9f:6a:44:09:94:68:51:e0:c9:7f:f3: e6:6f:25:ba:e3:cf:dc:a2:12:32:89:c8:21:bd:d2:44:54:9b: 01:4b:57:02:66:5d:45:4c:cd:af:77:51:91:4c:1e:a0:83:06: a3:d3:36:eb:27:60:6a:1a:5f:4c:1e:fa:88:39:12:6e:9a:a4: 2e:09:4b:7e:c4:0c:4b:01:b5:e1:82:07:bf:27:c7:df:44:b6: bb:d1:4b:60:fa:da:ad:c0:f7:2e:82:dc:ef:e4:15:ec:bd:e9: 3f:db:a3:fd:29:30:d2:41:fa:3b:f2:88:d0:dd:b5:80:4a:17: 6f:57:a0:65:74:e1:b0:05:f3:f7:b3:7a:24:b6:6c:dc:9e:14: 26:c2:16:5d:5e:51:13:a9:e5:d8:16:5a:ca:bf:c4:f4:f9:14: ce:ae:83:c9:38:c1:15:d1:cb:a1:d6:2d:33:00:7f:a9:7e:88: fc:d7:43:0b:79:89:85:8c:f6:59:4d:90:30:98:3c:85:5c:e0: 9c:e6:b7:8f:a4:37:31:3f:4d:f9:86:da:60:b5:79:00:c3:99: 21:45:54:83:f6:40:1b:84:11:e9:29:a7:e4:d6:24:7e:e2:7e: b4:12:3c:be:e1:af:83:9e:3a:67:71:23:13:6b:88:66:33:df: 4b:89:cf:b3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQP5L3xCtHJerdRAmDCvZU+rQlAwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTczMTI3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjI0M2E5NTBmN2U0NzlkNTE0M2Y3Y2M0NmIyYjJkMGM4 MjYwNDA3ODdhMDQ1YTYzMTM4ZTEyNWY0NDIyODkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbW1MlZhXyLZff+4kj5cY6iEc1X+irjWXBX4+UOHyllBWy 7zvNFcCw6WcfgeHkvIdT0KNbLCk6RCrDx3xdB7OEe7ThRXbpqpYgxEFF78B4AcXt mfFKrFGBaf9gKxgHLfIILujfWKc5TPjkBlYjL6vDfHjdA23TMozxDlLqeakkbJ5X cvsKc8V96Dz/JUsU4drPS6ITJ7hqlzwL6gAtMeAb0HDgXiPVHgboUEI+9eLeJOC5 aoDLX029ppS/3i/S7JTwxNG3Qst/plFz/9QV5jK/hbpk2xcQx5taPDT1xIqpu8mc jVHaQyOKt1VLUbaNy58q9EebSjTk2SLhiM6CiXsFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU+u123MiMOWZKiw2puvavTLGEsKQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlkOTRhN2FhLTk1MDUtNGRiMy05MjVlLWNmM2YyODViMjk2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8QgDANBgkqhkiG9w0BAQsFAAOCAQEAxSlJBKTFLp9qRAmUaFHgyX/z 5m8luuPP3KISMonIIb3SRFSbAUtXAmZdRUzNr3dRkUweoIMGo9M26ydgahpfTB76 iDkSbpqkLglLfsQMSwG14YIHvyfH30S2u9FLYPrarcD3LoLc7+QV7L3pP9uj/Skw 0kH6O/KI0N21gEoXb1egZXThsAXz97N6JLZs3J4UJsIWXV5RE6nl2BZayr/E9PkU zq6DyTjBFdHLodYtMwB/qX6I/NdDC3mJhYz2WU2QMJg8hVzgnOa3j6Q3MT9N+Yba YLV5AMOZIUVUg/ZAG4QR6Smn5NYkfuJ+tBI8vuGvg546Z3EjE2uIZjPfS4nPsw== -----END CERTIFICATE-----Generated at Mon Jul 21 18:13:48 2025 by rpki-client