$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aecb2898-1ea4-4169-a334-e907e8dc483a.roa File: aecb2898-1ea4-4169-a334-e907e8dc483a.roa (raw, json) Hash identifier: Wp/KQQ+SztK67ZL47SaUlOtOaqG/+758IW49DcRDspw= Subject key identifier: F6:14:B6:71:BA:EC:04:CB:E1:B3:6B:3E:77:13:D4:4E:17:C0:BE:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0EBD8166BA6066017B1BA678C0EAE8A391604CF5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aecb2898-1ea4-4169-a334-e907e8dc483a.roa Signing time: Tue 08 Jul 2025 16:51:24 +0000 ROA not before: Tue 08 Jul 2025 16:51:24 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f17:4000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:bd:81:66:ba:60:66:01:7b:1b:a6:78:c0:ea:e8:a3:91:60:4c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:51:24 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=dc0964039ccf4e20303a2538b6662d0722b93738befebcf0647edb4180978254, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:34:6e:37:da:25:45:d7:51:fb:a6:d0:be:90: 45:80:05:e9:28:b8:f2:49:f2:ac:dc:d0:91:d2:08: 70:92:bb:6c:2a:8d:b0:26:4e:90:47:48:63:fe:17: a2:90:97:6e:81:04:9b:3d:7f:6e:ad:dd:db:34:3b: 31:ef:77:8d:9b:89:ec:d0:01:f2:a9:a9:31:aa:ac: 93:13:47:4d:e0:51:99:fd:bd:cf:d4:15:22:ae:69: c4:42:7b:e6:4d:64:9f:0f:61:77:02:fa:89:4b:be: 74:f2:c2:c4:0a:0b:50:14:55:f5:2b:fb:74:7d:ca: 4b:b8:67:25:6e:f7:a3:ae:78:5d:13:5f:a6:f5:68: 6f:b8:26:6d:16:a8:45:68:40:d3:a6:7f:7c:bc:ca: 41:88:7a:79:28:a3:5b:3a:a9:f8:6f:ea:02:05:19: 7a:60:2f:22:9d:33:14:58:c6:51:bc:be:0c:02:bc: ce:b5:3d:a0:2e:81:a9:ad:46:6e:e2:5f:d5:55:b5: 80:2c:b6:f1:68:31:8d:66:c2:35:e0:ef:1b:fd:89: d0:f6:f3:f6:92:93:8f:9a:16:24:68:a8:fa:40:b1: 5c:e2:94:99:4a:67:4e:f7:43:9e:2a:5b:68:8b:df: cd:2c:8e:87:f4:4b:1b:af:b0:77:73:7c:d8:2d:f9: e2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:14:B6:71:BA:EC:04:CB:E1:B3:6B:3E:77:13:D4:4E:17:C0:BE:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aecb2898-1ea4-4169-a334-e907e8dc483a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f17:4000::/38 Signature Algorithm: sha256WithRSAEncryption 37:6d:27:85:6c:5a:99:83:83:43:ac:c5:03:83:13:4f:41:52: 75:7f:61:3e:ff:f8:16:5a:67:aa:6e:92:21:6a:e4:b2:2c:6e: da:da:48:2b:5e:90:2d:4c:a8:46:d5:70:18:87:14:94:05:b8: 35:e4:34:6f:2c:45:4f:e6:04:04:1c:ff:c6:49:e6:41:d8:c7: 54:73:e7:68:c2:4d:a7:10:5b:e0:6f:d6:1b:16:f9:a6:d4:7a: 81:37:3e:57:45:4a:19:8a:44:1c:7c:11:ba:bb:41:28:4a:f5: 7b:cb:eb:1c:b6:5d:15:47:99:40:db:d9:f1:68:75:c6:fd:8d: a5:d1:2b:02:32:fd:37:9e:71:e6:53:d7:c0:85:fa:97:49:9e: ae:19:dd:68:52:bc:63:72:d4:16:3b:ba:cf:aa:88:6e:0d:90: 82:24:ca:5f:fc:82:33:a1:94:2e:f9:e7:92:0b:a5:6c:fb:09: 9b:9c:be:26:2e:f7:1f:ab:a6:1b:53:0a:6b:90:d8:b2:33:d4: 1f:09:4b:8f:4c:ba:da:83:f2:85:cd:07:4d:e8:c4:cd:2a:ee: c8:5a:a4:dd:65:96:7d:ed:54:5f:34:1e:b9:84:97:42:50:ea: 20:60:02:b4:f7:44:e6:4f:a2:ab:bb:61:97:ed:8d:1f:38:47: 9e:7b:ce:45 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDr2BZrpgZgF7G6Z4wOroo5FgTPUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTY1MTI0WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYzA5NjQwMzljY2Y0ZTIwMzAzYTI1MzhiNjY2MmQwNzIy YjkzNzM4YmVmZWJjZjA2NDdlZGI0MTgwOTc4MjU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDING432iVF11H7ptC+kEWABekouPJJ8qzc0JHSCHCSu2wq jbAmTpBHSGP+F6KQl26BBJs9f26t3ds0OzHvd42biezQAfKpqTGqrJMTR03gUZn9 vc/UFSKuacRCe+ZNZJ8PYXcC+olLvnTywsQKC1AUVfUr+3R9yku4ZyVu96OueF0T X6b1aG+4Jm0WqEVoQNOmf3y8ykGIenkoo1s6qfhv6gIFGXpgLyKdMxRYxlG8vgwC vM61PaAugamtRm7iX9VVtYAstvFoMY1mwjXg7xv9idD28/aSk4+aFiRoqPpAsVzi lJlKZ073Q54qW2iL380sjof0SxuvsHdzfNgt+eKfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9hS2cbrsBMvhs2s+dxPUThfAvqowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlY2IyODk4LTFlYTQtNDE2OS1hMzM0LWU5MDdlOGRjNDgzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8XQDANBgkqhkiG9w0BAQsFAAOCAQEAN20nhWxamYODQ6zFA4MTT0FS dX9hPv/4Flpnqm6SIWrksixu2tpIK16QLUyoRtVwGIcUlAW4NeQ0byxFT+YEBBz/ xknmQdjHVHPnaMJNpxBb4G/WGxb5ptR6gTc+V0VKGYpEHHwRurtBKEr1e8vrHLZd FUeZQNvZ8Wh1xv2NpdErAjL9N55x5lPXwIX6l0merhndaFK8Y3LUFju6z6qIbg2Q giTKX/yCM6GULvnnkgulbPsJm5y+Ji73H6umG1MKa5DYsjPUHwlLj0y62oPyhc0H TejEzSruyFqk3WWWfe1UXzQeuYSXQlDqIGACtPdE5k+iq7thl+2NHzhHnnvORQ== -----END CERTIFICATE-----Generated at Thu Jul 24 12:07:15 2025 by rpki-client