$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b588cfa2-f60b-46f7-9f9a-af276c1edc37.roa File: b588cfa2-f60b-46f7-9f9a-af276c1edc37.roa (raw, json) Hash identifier: wHnofjp3lCEhVGIt4qUb2VjjZyEMEFP1PNObJrvuoFM= Subject key identifier: F9:BC:CC:0E:3B:13:B3:59:8F:19:87:6B:FD:7A:E1:B3:AB:35:3C:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6AA5CDDA6C76DB7A01BD24D54CE28A1B8BA083E2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b588cfa2-f60b-46f7-9f9a-af276c1edc37.roa Signing time: Sat 12 Jul 2025 00:20:13 +0000 ROA not before: Sat 12 Jul 2025 00:20:13 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fef:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a5:cd:da:6c:76:db:7a:01:bd:24:d5:4c:e2:8a:1b:8b:a0:83:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 12 00:20:13 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=d7f60341ffadec67661a9205a9f9e900117133ef6df1692657a3f938e7f183d8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cc:d4:b5:63:13:f2:f4:23:c4:c7:e1:2d:65: 6e:1d:c0:ab:d6:21:e2:1b:a1:58:0d:52:02:eb:f0: c7:a3:2f:77:07:18:d5:de:be:f3:ac:e7:0e:e0:8e: e7:4b:7d:12:e8:53:31:d9:48:b9:ae:f1:e5:51:79: 60:5c:c5:0c:d8:e1:13:1b:b0:81:87:af:5a:d6:98: c8:46:ae:7e:15:40:50:29:2f:77:84:88:aa:ab:b1: 71:eb:9c:cc:46:e3:c8:0a:9e:d3:d8:2b:80:b5:9a: ee:7e:1a:73:c3:f2:de:59:b4:47:30:d9:15:8a:61: d1:0c:3d:20:b4:f0:e4:b9:f3:5e:d4:5b:2b:70:c5: c2:a3:ff:3a:db:91:20:8a:af:3b:e6:ff:3c:09:d4: 75:1d:9c:a2:37:b2:50:fa:82:c6:e2:6c:a1:2e:fa: e8:25:29:e6:85:f9:81:8c:f1:fc:78:55:1b:cf:e1: 74:cc:b4:63:89:11:a0:26:3c:64:9e:f4:27:59:28: 86:c0:c0:d6:a0:94:c2:43:f0:f4:d8:86:9a:c9:41: 37:e7:a1:49:d8:e5:0d:db:fc:da:1c:cb:ef:e2:30: 52:ad:2c:9b:9d:c1:59:c3:f9:5f:dc:9f:64:db:a6: 2a:8c:8f:76:3c:26:9d:0c:20:80:2a:2a:90:f6:3b: 4d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BC:CC:0E:3B:13:B3:59:8F:19:87:6B:FD:7A:E1:B3:AB:35:3C:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b588cfa2-f60b-46f7-9f9a-af276c1edc37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:2000::/40 Signature Algorithm: sha256WithRSAEncryption ab:0d:4f:e6:04:0d:f7:c8:40:a6:da:d1:89:01:c1:50:13:92: 53:68:53:4c:42:24:18:72:b7:d8:5c:81:f1:21:ac:23:b7:7a: c9:9f:40:49:bf:26:44:01:1e:b2:c4:2a:9d:81:c7:d8:a0:45: 32:46:86:10:dc:41:df:32:d8:ec:16:f8:15:08:2e:75:04:3f: 1b:53:85:11:8f:f7:b0:6d:5f:5f:6b:21:ca:14:9c:c9:bf:28: 1a:ca:4e:d3:be:a4:f0:23:72:5b:7e:4b:6f:a7:95:23:9a:49: c9:39:7f:6e:a2:30:03:31:f6:40:9a:22:9e:6f:aa:c9:9c:f8: 1b:ed:25:59:7d:54:b1:5d:fc:8d:aa:d8:13:00:4e:23:7f:08: a7:8b:44:2c:78:cc:d4:82:24:8c:07:32:f7:32:e3:b8:b3:f0: 24:6d:e1:9a:2b:6c:fe:70:17:0f:75:8d:d5:b0:5d:32:b0:db: 94:02:eb:7f:7d:8a:c1:d1:19:b7:e4:94:e5:b0:53:7b:da:f5: d1:99:5a:25:71:a0:30:23:72:3b:e2:8d:2e:b4:b3:bf:6a:e1: 75:33:26:5f:09:5e:ad:ab:ea:f8:c8:1e:22:cf:87:f8:dc:94: 3a:f6:7b:2e:1a:af:c2:81:aa:43:4e:da:c3:7b:79:98:ac:52: 4e:6c:b9:fa -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaqXN2mx223oBvSTVTOKKG4ugg+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzEyMDAyMDEzWhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkN2Y2MDM0MWZmYWRlYzY3NjYxYTkyMDVhOWY5ZTkwMDEx NzEzM2VmNmRmMTY5MjY1N2EzZjkzOGU3ZjE4M2Q4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrzNS1YxPy9CPEx+EtZW4dwKvWIeIboVgNUgLr8MejL3cH GNXevvOs5w7gjudLfRLoUzHZSLmu8eVReWBcxQzY4RMbsIGHr1rWmMhGrn4VQFAp L3eEiKqrsXHrnMxG48gKntPYK4C1mu5+GnPD8t5ZtEcw2RWKYdEMPSC08OS5817U WytwxcKj/zrbkSCKrzvm/zwJ1HUdnKI3slD6gsbibKEu+uglKeaF+YGM8fx4VRvP 4XTMtGOJEaAmPGSe9CdZKIbAwNaglMJD8PTYhprJQTfnoUnY5Q3b/Nocy+/iMFKt LJudwVnD+V/cn2TbpiqMj3Y8Jp0MIIAqKpD2O02VAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU+bzMDjsTs1mPGYdr/Xrhs6s1PHMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1ODhjZmEyLWY2MGItNDZmNy05ZjlhLWFmMjc2YzFlZGMzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vIDANBgkqhkiG9w0BAQsFAAOCAQEAqw1P5gQN98hAptrRiQHBUBOS U2hTTEIkGHK32FyB8SGsI7d6yZ9ASb8mRAEessQqnYHH2KBFMkaGENxB3zLY7Bb4 FQgudQQ/G1OFEY/3sG1fX2shyhScyb8oGspO076k8CNyW35Lb6eVI5pJyTl/bqIw AzH2QJoinm+qyZz4G+0lWX1UsV38jarYEwBOI38Ip4tELHjM1IIkjAcy9zLjuLPw JG3hmits/nAXD3WN1bBdMrDblALrf32KwdEZt+SU5bBTe9r10ZlaJXGgMCNyO+KN LrSzv2rhdTMmXwleravq+MgeIs+H+NyUOvZ7LhqvwoGqQ07aw3t5mKxSTmy5+g== -----END CERTIFICATE-----Generated at Tue Jul 22 04:32:18 2025 by rpki-client