$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b534c61b-4786-4f9e-a256-b91de7a7f811.roa File: b534c61b-4786-4f9e-a256-b91de7a7f811.roa (raw, json) Hash identifier: 3uVRCEydcl/P9TKAiRlWseDo6OiOGliSh0XpOMYhHW8= Subject key identifier: 9E:D3:86:70:FE:D5:86:3E:A2:B0:17:E4:AC:34:8D:1E:5C:18:18:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BDC1068EDCC3A8420C2291E0DA669C552AB41B0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b534c61b-4786-4f9e-a256-b91de7a7f811.roa Signing time: Mon 07 Jul 2025 16:50:51 +0000 ROA not before: Mon 07 Jul 2025 16:50:51 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:80a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:dc:10:68:ed:cc:3a:84:20:c2:29:1e:0d:a6:69:c5:52:ab:41:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:50:51 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=6e21a8f4bf680a800f049814169815406d1c5954da04eb698c820c2b722eb243, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:12:1e:ed:8d:56:da:7e:cf:70:b5:3a:cb:61: 76:cd:58:ad:9d:a2:6a:f7:ea:c9:18:23:80:22:25: 4f:74:a7:71:96:c1:f9:78:b5:23:57:4f:b3:e7:76: 85:74:17:7f:7f:de:9b:d3:72:3f:48:ef:1c:a2:82: 6e:bd:98:ee:4b:09:06:86:09:12:7f:6f:2e:74:88: 76:92:ca:30:5b:8a:95:0a:c0:da:d5:fd:f1:d6:87: 60:58:de:98:6c:11:74:7e:95:7f:bf:b4:55:38:9c: 8c:2d:5d:9f:e3:f6:19:7b:82:6d:47:aa:9c:49:76: ad:5c:90:15:dd:0b:94:3a:e1:26:b3:8a:7e:14:9a: 48:45:6e:be:b3:cc:d3:c4:97:05:40:59:8a:36:82: e4:ae:d5:07:dc:2e:30:4f:be:59:0c:3e:ce:93:6f: 16:94:52:99:27:ce:94:e0:77:c4:83:da:c2:6a:4d: 05:22:2f:4b:b7:2f:37:f1:3d:de:22:0d:03:e4:81: c3:6e:5a:a4:98:37:b4:e3:c9:39:c6:01:b4:f3:9e: 2b:be:59:4c:a2:bc:db:f3:ad:65:a4:88:69:6d:8a: ef:b0:60:4d:47:0e:9f:2e:88:aa:8a:74:2c:df:b3: 81:33:12:14:2c:3d:a7:56:25:a8:6a:b9:00:79:49: 53:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D3:86:70:FE:D5:86:3E:A2:B0:17:E4:AC:34:8D:1E:5C:18:18:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b534c61b-4786-4f9e-a256-b91de7a7f811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:80a1::/48 Signature Algorithm: sha256WithRSAEncryption 57:6f:45:65:14:2e:99:95:72:de:56:00:0e:13:d7:23:33:e9: 82:84:64:7f:d4:3d:ef:9f:44:e5:74:c3:96:42:82:ab:1e:43: 12:9b:ca:c8:5f:1a:0b:fd:63:5f:d2:4e:68:ef:bd:5d:96:f1: d1:5b:2f:e9:2e:0d:da:85:7b:50:f0:e4:28:b4:c1:2a:c9:b6: cc:1d:f2:c0:d8:7a:39:fa:f4:bb:13:64:71:c8:78:33:a3:57: 4e:bd:a2:2a:f2:a4:6f:c1:32:b6:32:aa:11:81:96:dd:e1:c2: 1b:c7:de:1d:2e:72:93:1c:c5:0c:cf:ca:cb:78:2c:3a:ea:28: e3:42:3c:94:6f:40:16:b1:12:b0:d4:1e:11:cb:f4:fa:5a:dd: 74:df:67:8b:31:60:4d:34:b4:83:9e:dd:c2:5b:bb:a5:d6:7c: e6:cc:e6:ec:73:1f:f5:fa:2b:16:81:43:5a:2d:73:ce:cc:3a: 5e:1f:59:37:26:cb:6d:5f:ea:59:ac:c4:db:89:30:87:14:c1: 74:f9:ff:d1:66:44:06:d7:37:f7:31:d1:54:ea:a2:1e:5c:9c: f2:dd:47:f5:ce:76:32:99:54:11:af:af:02:ed:f9:53:af:72: f0:29:e2:3c:84:ac:56:ad:6e:20:48:4d:69:f0:61:cc:e4:fc: 07:f9:95:61 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUC9wQaO3MOoQgwikeDaZpxVKrQbAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTY1MDUxWhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZTIxYThmNGJmNjgwYTgwMGYwNDk4MTQxNjk4MTU0MDZk MWM1OTU0ZGEwNGViNjk4YzgyMGMyYjcyMmViMjQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMEh7tjVbafs9wtTrLYXbNWK2domr36skYI4AiJU90p3GW wfl4tSNXT7PndoV0F39/3pvTcj9I7xyigm69mO5LCQaGCRJ/by50iHaSyjBbipUK wNrV/fHWh2BY3phsEXR+lX+/tFU4nIwtXZ/j9hl7gm1HqpxJdq1ckBXdC5Q64Saz in4UmkhFbr6zzNPElwVAWYo2guSu1QfcLjBPvlkMPs6TbxaUUpknzpTgd8SD2sJq TQUiL0u3LzfxPd4iDQPkgcNuWqSYN7TjyTnGAbTzniu+WUyivNvzrWWkiGltiu+w YE1HDp8uiKqKdCzfs4EzEhQsPadWJahquQB5SVNDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUntOGcP7Vhj6isBfkrDSNHlwYGBwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1MzRjNjFiLTQ3ODYtNGY5ZS1hMjU2LWI5MWRlN2E3ZjgxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/7gKEwDQYJKoZIhvcNAQELBQADggEBAFdvRWUULpmVct5WAA4T1yMz 6YKEZH/UPe+fROV0w5ZCgqseQxKbyshfGgv9Y1/STmjvvV2W8dFbL+kuDdqFe1Dw 5Ci0wSrJtswd8sDYejn69LsTZHHIeDOjV069oirypG/BMrYyqhGBlt3hwhvH3h0u cpMcxQzPyst4LDrqKONCPJRvQBaxErDUHhHL9Ppa3XTfZ4sxYE00tIOe3cJbu6XW fObM5uxzH/X6KxaBQ1otc87MOl4fWTcmy21f6lmsxNuJMIcUwXT5/9FmRAbXN/cx 0VTqoh5cnPLdR/XOdjKZVBGvrwLt+VOvcvAp4jyErFatbiBITWnwYczk/Af5lWE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:30 2025 by rpki-client