$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9946c4c-e399-41df-9a79-a969df79e7c4.roa File: a9946c4c-e399-41df-9a79-a969df79e7c4.roa (raw, json) Hash identifier: PlQG3VDpcEKPqvInNJ6+HbNiG5YSPf8S8QVDA2DC3PE= Subject key identifier: 9A:F0:B9:D9:08:F7:6D:7E:14:8B:B9:2F:CB:AF:8A:94:F5:12:24:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 123499D520AF95E7829AC0F1F3CBEEB054B95E29 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9946c4c-e399-41df-9a79-a969df79e7c4.roa Signing time: Mon 07 Jul 2025 16:50:25 +0000 ROA not before: Mon 07 Jul 2025 16:50:25 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:34:99:d5:20:af:95:e7:82:9a:c0:f1:f3:cb:ee:b0:54:b9:5e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:50:25 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=58fd010c25b1171fa32528c0366055c097eb5c0b48bd768ca3737f063af0ac8f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:fb:38:40:e8:01:94:90:90:e2:9c:42:00: f8:21:5e:a6:7e:a6:d4:28:28:e8:39:36:c8:15:e2: bc:1d:be:a6:56:d7:6c:a2:dc:61:18:23:2a:b0:7c: 6f:9e:42:b1:fc:bf:e7:b9:c3:85:84:54:5e:ae:9e: e0:fe:d2:dc:c9:8c:e8:ce:0e:d9:79:d4:20:ea:8b: 1a:e0:01:88:68:0d:d5:f4:af:e1:d4:8d:21:99:fa: 04:71:b0:3f:1d:7c:79:27:44:d5:1a:70:11:cf:61: c6:b7:39:8c:04:83:26:d5:1b:9a:22:42:3e:db:11: 2c:73:3d:d5:ee:5c:98:48:57:9a:bb:fd:db:45:5c: 12:41:df:0c:a4:9d:b2:24:84:b9:ae:9c:c3:16:b8: bd:4e:65:14:93:a6:03:f1:be:f8:5b:d7:15:a3:86: 59:b7:1f:76:c4:ea:e5:d5:df:18:28:26:7a:97:d3: 2b:cc:40:07:32:55:00:30:cd:60:5f:bf:9e:1b:2e: 6e:f8:70:3a:57:d3:8c:2e:d7:3a:ae:6b:bd:bd:e0: bc:48:3b:14:f7:33:7d:75:d5:cd:99:9a:51:1e:df: 8f:66:93:5a:27:0b:f3:ed:b8:9d:fa:cd:78:39:c1: 8b:16:fa:b2:5c:0d:66:7e:2c:4f:21:fc:0c:14:80: 2c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F0:B9:D9:08:F7:6D:7E:14:8B:B9:2F:CB:AF:8A:94:F5:12:24:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9946c4c-e399-41df-9a79-a969df79e7c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 88:56:ee:e9:65:08:10:60:4b:82:6e:c1:3d:44:10:ec:70:2b: c8:0e:1f:af:67:77:e1:22:f5:3e:43:e5:88:ad:2d:6e:16:88: 99:cf:e1:ad:7a:f7:ee:74:50:a1:73:27:04:f7:47:47:29:29: de:55:6e:da:a7:e9:c6:6d:cd:39:f1:69:76:77:c3:fa:02:a3: b9:c3:11:c7:6a:e1:72:fa:75:79:be:6b:72:6a:b0:e1:a7:21: 6e:d8:f2:80:c4:46:c7:0b:ca:54:85:12:93:e4:b1:46:15:cd: 8d:9a:d4:ff:33:d2:e6:37:ee:f0:c1:b6:ce:0e:ad:6e:55:fc: c7:a6:89:65:b0:c2:9b:82:d0:5b:34:e7:80:6f:40:fa:be:6d: 7a:00:3c:df:67:3f:93:8e:b3:58:59:9a:22:df:bd:db:51:e2: 6f:c3:89:6e:32:be:c9:ce:2a:3d:c7:28:ba:a4:61:74:0e:e0: 19:d4:c2:0e:59:29:83:3f:f7:6f:59:65:10:77:1a:e8:71:ef: f7:af:dd:17:20:eb:18:9c:19:3d:2e:2b:30:c7:81:f5:07:96: 4a:90:c7:47:c6:f5:35:88:fb:86:f6:fd:ae:2b:a2:cb:6b:df: 7f:57:3b:6c:69:06:b7:02:ea:cb:0e:b3:a5:9c:db:03:8d:48: 43:cc:08:06 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEjSZ1SCvleeCmsDx88vusFS5XikwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTY1MDI1WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OGZkMDEwYzI1YjExNzFmYTMyNTI4YzAzNjYwNTVjMDk3 ZWI1YzBiNDhiZDc2OGNhMzczN2YwNjNhZjBhYzhmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN0Ps4QOgBlJCQ4pxCAPghXqZ+ptQoKOg5NsgV4rwdvqZW 12yi3GEYIyqwfG+eQrH8v+e5w4WEVF6unuD+0tzJjOjODtl51CDqixrgAYhoDdX0 r+HUjSGZ+gRxsD8dfHknRNUacBHPYca3OYwEgybVG5oiQj7bESxzPdXuXJhIV5q7 /dtFXBJB3wyknbIkhLmunMMWuL1OZRSTpgPxvvhb1xWjhlm3H3bE6uXV3xgoJnqX 0yvMQAcyVQAwzWBfv54bLm74cDpX04wu1zqua7294LxIOxT3M3111c2ZmlEe349m k1onC/PtuJ36zXg5wYsW+rJcDWZ+LE8h/AwUgCzbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmvC52Qj3bX4Ui7kvy6+KlPUSJDswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E5OTQ2YzRjLWUzOTktNDFkZi05YTc5LWE5NjlkZjc5ZTdjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AIMAwDQYJKoZIhvcNAQELBQADggEBAIhW7ullCBBgS4JuwT1EEOxw K8gOH69nd+Ei9T5D5YitLW4WiJnP4a169+50UKFzJwT3R0cpKd5Vbtqn6cZtzTnx aXZ3w/oCo7nDEcdq4XL6dXm+a3JqsOGnIW7Y8oDERscLylSFEpPksUYVzY2a1P8z 0uY37vDBts4OrW5V/MemiWWwwpuC0Fs054BvQPq+bXoAPN9nP5OOs1hZmiLfvdtR 4m/DiW4yvsnOKj3HKLqkYXQO4BnUwg5ZKYM/929ZZRB3Guhx7/ev3Rcg6xicGT0u KzDHgfUHlkqQx0fG9TWI+4b2/a4rostr339XO2xpBrcC6ssOs6Wc2wONSEPMCAY= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:22 2025 by rpki-client