$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa File: a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa (raw, json) Hash identifier: tH9NudGpz6taOf2WqT6oSimYc3kQbtQrBM6FF0bTrgA= Subject key identifier: F6:E8:66:08:D7:67:77:73:EC:49:39:33:87:B5:52:F6:9E:A8:41:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25E4261B0BDB872DBA8E55F74E9B41A7804FB019 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa Signing time: Tue 08 Jul 2025 15:51:03 +0000 ROA not before: Tue 08 Jul 2025 15:51:03 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e4:26:1b:0b:db:87:2d:ba:8e:55:f7:4e:9b:41:a7:80:4f:b0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:51:03 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=93fccef74f97995860a8beb55b36e9dcfe8cf2008b8906d80c2998f188362bde, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:e6:00:68:69:ce:1d:e9:f7:15:5d:c9:c8: 0b:12:bd:3b:73:80:e7:7c:ad:98:b4:0b:06:29:b0: 98:68:d4:a1:18:6f:5b:ff:22:cf:6d:34:d2:58:a5: 98:80:95:3f:28:2a:e3:d3:43:16:42:38:bc:80:2a: 62:1a:54:af:6f:ed:bd:52:64:16:2d:f2:93:fa:41: e8:82:3b:f2:6e:99:c7:ed:2a:26:05:70:dc:a2:f8: de:4a:34:8e:6b:68:ec:b9:be:dd:0c:05:d2:bd:21: db:b5:ab:11:2d:c4:5f:53:b5:ea:e1:b7:6b:32:c4: a2:0a:b1:e9:8a:89:ae:4f:53:d5:8c:39:7e:a9:b3: b2:f0:3d:be:c2:13:9f:56:12:38:79:bf:8b:30:1d: 91:83:22:59:2e:29:d6:e9:c1:cd:27:37:c9:f5:f1: 27:8d:96:31:8e:65:43:24:27:62:cc:d1:9d:9c:4c: 7f:68:11:87:81:68:56:e0:10:cb:ce:22:a2:ea:37: c2:bc:83:92:a6:2f:79:44:cf:1f:5b:37:c6:8a:fc: 4b:a6:68:ff:61:d7:c1:5f:9f:cc:b9:00:26:8c:f8: c9:7d:73:47:f3:92:29:00:d2:78:68:43:53:2c:e3: 30:6d:d9:dd:07:ff:cb:04:8f:ee:23:7d:16:09:d8: 75:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E8:66:08:D7:67:77:73:EC:49:39:33:87:B5:52:F6:9E:A8:41:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:c000::/40 Signature Algorithm: sha256WithRSAEncryption 5e:0a:49:1c:ef:56:77:3a:26:65:a6:0b:53:97:92:e2:1d:55: 16:b8:ba:0f:54:85:66:c0:d1:65:7e:f5:be:5a:ff:48:95:75: c9:38:2b:b4:b1:e7:1c:5f:ed:8a:e0:68:3c:61:fb:d3:01:64: f7:ff:6e:cd:84:e0:32:d9:5b:22:4e:77:ef:07:e8:10:a7:bb: d5:6a:d9:97:da:a2:e1:f1:b8:ad:96:05:fa:82:56:df:c4:f2: eb:32:21:d5:2f:81:9b:f1:40:74:89:b9:5d:b1:52:0a:8b:ee: 27:81:19:97:cd:85:b3:1b:12:6f:99:77:49:04:d3:38:3d:4e: 08:c6:c7:dd:ae:92:72:00:58:ef:34:11:20:87:cf:1c:07:41: 88:21:26:58:2a:7c:5d:c3:fe:d8:7e:91:67:18:ea:a4:d2:76: 66:4c:e2:bb:12:ae:6e:ca:61:39:3f:bd:ca:c7:d9:8c:a4:95: 75:dd:8d:86:fa:4b:4a:4c:95:5b:28:2e:86:63:10:89:eb:69: 0d:25:3a:d2:18:eb:a8:6e:01:dd:8f:0f:ae:c9:53:4a:17:cb: d3:bb:b5:97:c7:e6:e2:60:2c:6f:89:a7:f8:8a:01:8b:ad:9c: 8e:a1:85:f6:74:25:eb:bc:6c:11:c7:76:70:6a:d9:73:8c:46: 5d:40:6d:77 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJeQmGwvbhy26jlX3TptBp4BPsBkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTU1MTAzWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5M2ZjY2VmNzRmOTc5OTU4NjBhOGJlYjU1YjM2ZTlkY2Zl OGNmMjAwOGI4OTA2ZDgwYzI5OThmMTg4MzYyYmRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG8OYAaGnOHen3FV3JyAsSvTtzgOd8rZi0CwYpsJho1KEY b1v/Is9tNNJYpZiAlT8oKuPTQxZCOLyAKmIaVK9v7b1SZBYt8pP6QeiCO/Jumcft KiYFcNyi+N5KNI5raOy5vt0MBdK9Idu1qxEtxF9Tterht2syxKIKsemKia5PU9WM OX6ps7LwPb7CE59WEjh5v4swHZGDIlkuKdbpwc0nN8n18SeNljGOZUMkJ2LM0Z2c TH9oEYeBaFbgEMvOIqLqN8K8g5KmL3lEzx9bN8aK/EumaP9h18Ffn8y5ACaM+Ml9 c0fzkikA0nhoQ1Ms4zBt2d0H/8sEj+4jfRYJ2HVhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9uhmCNdnd3PsSTkzh7VS9p6oQXAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyZGVkMGYxLTNlNTgtNGJmMy1iNWJjLWJlOGExMDVlNWI0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/ywDANBgkqhkiG9w0BAQsFAAOCAQEAXgpJHO9WdzomZaYLU5eS4h1V Fri6D1SFZsDRZX71vlr/SJV1yTgrtLHnHF/tiuBoPGH70wFk9/9uzYTgMtlbIk53 7wfoEKe71WrZl9qi4fG4rZYF+oJW38Ty6zIh1S+Bm/FAdIm5XbFSCovuJ4EZl82F sxsSb5l3SQTTOD1OCMbH3a6ScgBY7zQRIIfPHAdBiCEmWCp8XcP+2H6RZxjqpNJ2 ZkziuxKubsphOT+9ysfZjKSVdd2NhvpLSkyVWyguhmMQietpDSU60hjrqG4B3Y8P rslTShfL07u1l8fm4mAsb4mn+IoBi62cjqGF9nQl67xsEcd2cGrZc4xGXUBtdw== -----END CERTIFICATE-----Generated at Tue Jul 22 06:38:00 2025 by rpki-client