$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adaa974c-4683-4751-815d-d3dc3f784bfc.roa File: adaa974c-4683-4751-815d-d3dc3f784bfc.roa (raw, json) Hash identifier: zKIAN1whAyVX4exVNW40dkmMjbQ5Bavje/irc/BiGEY= Subject key identifier: 3E:4D:92:F1:81:6A:06:0E:98:35:3E:20:DD:6B:4A:32:77:95:CB:22 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B284C336895AD4A1B74699172484A3A2A8734C8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adaa974c-4683-4751-815d-d3dc3f784bfc.roa Signing time: Tue 08 Jul 2025 16:40:57 +0000 ROA not before: Tue 08 Jul 2025 16:40:57 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f13:4800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:28:4c:33:68:95:ad:4a:1b:74:69:91:72:48:4a:3a:2a:87:34:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:40:57 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=ca6e21a6fc7a26a7a7203a13fee2cf2916cd33b689569a4fcc4590dbc744fd5e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:08:a7:31:0e:fc:e4:16:10:da:47:93:86:8f: c1:74:fc:c5:6d:56:57:83:0a:dc:6e:7f:eb:21:c6: a5:3a:f5:48:b9:d0:6c:d0:22:8d:10:39:fa:d8:4c: 49:10:47:26:4c:f3:2a:01:d2:ff:69:b6:cd:92:60: 79:c8:75:7d:cd:35:fb:09:b1:0e:2f:5c:e9:5d:02: 3f:91:06:bd:b4:61:66:7f:19:a3:56:54:b4:b7:83: ee:45:d5:97:8c:44:e4:c4:8c:e1:da:fb:e6:9d:ba: d0:0f:b4:36:c1:d7:10:dd:14:6d:7a:f4:29:8e:f6: 61:ec:48:99:98:38:b4:71:31:ff:14:5b:b8:31:13: a8:f2:f3:da:c8:52:36:69:83:82:82:83:a3:53:00: 6f:e7:cc:80:fe:27:2f:57:c3:1f:1a:8a:e0:51:19: d5:c4:81:26:c9:92:07:b0:d7:40:e7:f4:6d:d0:97: c2:cc:33:0e:e2:d6:ae:e2:fc:9c:af:84:62:0a:0d: 6f:a1:5f:97:4a:18:56:df:75:f4:7b:04:25:18:6d: ad:31:16:0f:cd:2c:2f:6d:4d:78:8c:41:f9:5a:e3: ac:38:d5:7a:34:65:a4:53:ce:e8:df:b9:a2:87:01: 65:ed:62:95:b5:95:d7:ac:b1:9b:7b:88:fa:1f:86: 6e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4D:92:F1:81:6A:06:0E:98:35:3E:20:DD:6B:4A:32:77:95:CB:22 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adaa974c-4683-4751-815d-d3dc3f784bfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f13:4800::/38 Signature Algorithm: sha256WithRSAEncryption d3:46:8d:be:e1:67:46:5a:9e:d4:06:bc:bf:a9:42:c4:b0:e5: 6f:57:fc:c7:74:87:a3:5b:3d:d9:9f:70:dd:cb:0b:37:d3:85: 05:e9:56:1d:3d:99:93:ea:cc:09:f7:94:b7:76:12:65:6d:d2: 6b:09:c2:49:1b:2d:17:f3:5c:d3:61:63:44:fa:0a:4f:64:09: b5:a0:0e:ed:32:26:e2:75:48:18:46:07:e0:f8:d2:c5:8e:e2: c4:4f:a4:25:49:33:ea:dd:76:e6:37:62:c7:2d:6f:c3:c1:05: e4:e4:78:ae:73:8f:ea:aa:c1:00:53:02:4e:4b:85:e4:a9:ac: 60:6c:f3:6a:c6:00:92:c7:95:6a:3d:30:69:ee:ad:5b:3a:25: 2a:5c:91:33:8e:7f:69:e9:58:68:0f:08:61:af:68:a8:1b:49: 7b:b0:87:19:5c:5f:fa:fa:e0:eb:34:a2:d7:d3:5b:23:9f:0b: 19:25:7a:6c:66:d2:31:ad:60:ba:4a:b1:27:11:59:c2:3a:b2: e2:7d:a3:67:58:74:60:bd:dd:70:b2:5d:fd:6d:47:05:1c:5a: 67:08:72:93:43:66:8a:60:a3:8f:f6:13:6d:37:51:9c:32:e3: 98:09:27:1e:4f:5a:13:5e:dd:51:2a:cf:b9:cd:39:58:06:cf: 85:18:48:33 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCyhMM2iVrUobdGmRckhKOiqHNMgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTY0MDU3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYTZlMjFhNmZjN2EyNmE3YTcyMDNhMTNmZWUyY2YyOTE2 Y2QzM2I2ODk1NjlhNGZjYzQ1OTBkYmM3NDRmZDVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoCKcxDvzkFhDaR5OGj8F0/MVtVleDCtxuf+shxqU69Ui5 0GzQIo0QOfrYTEkQRyZM8yoB0v9pts2SYHnIdX3NNfsJsQ4vXOldAj+RBr20YWZ/ GaNWVLS3g+5F1ZeMROTEjOHa++adutAPtDbB1xDdFG169CmO9mHsSJmYOLRxMf8U W7gxE6jy89rIUjZpg4KCg6NTAG/nzID+Jy9Xwx8aiuBRGdXEgSbJkgew10Dn9G3Q l8LMMw7i1q7i/JyvhGIKDW+hX5dKGFbfdfR7BCUYba0xFg/NLC9tTXiMQfla46w4 1Xo0ZaRTzujfuaKHAWXtYpW1ldessZt7iPofhm5pAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUPk2S8YFqBg6YNT4g3WtKMneVyyIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FkYWE5NzRjLTQ2ODMtNDc1MS04MTVkLWQzZGMzZjc4NGJmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8TSDANBgkqhkiG9w0BAQsFAAOCAQEA00aNvuFnRlqe1Aa8v6lCxLDl b1f8x3SHo1s92Z9w3csLN9OFBelWHT2Zk+rMCfeUt3YSZW3SawnCSRstF/Nc02Fj RPoKT2QJtaAO7TIm4nVIGEYH4PjSxY7ixE+kJUkz6t125jdixy1vw8EF5OR4rnOP 6qrBAFMCTkuF5KmsYGzzasYAkseVaj0wae6tWzolKlyRM45/aelYaA8IYa9oqBtJ e7CHGVxf+vrg6zSi19NbI58LGSV6bGbSMa1gukqxJxFZwjqy4n2jZ1h0YL3dcLJd /W1HBRxaZwhyk0NmimCjj/YTbTdRnDLjmAknHk9aE17dUSrPuc05WAbPhRhIMw== -----END CERTIFICATE-----Generated at Mon Jul 21 23:23:39 2025 by rpki-client