$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6859535-bcd6-43c2-94b9-081032003acb.roa File: b6859535-bcd6-43c2-94b9-081032003acb.roa (raw, json) Hash identifier: NqvkitdXeLXbgwCBxN+xuq27hMas8i3rXs4gHN2T2ZE= Subject key identifier: CC:4A:46:FC:82:C5:2D:85:A2:1D:FA:15:AB:F3:98:2B:27:05:E4:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5639B3024762EB023181291504024A18BB23E1E7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6859535-bcd6-43c2-94b9-081032003acb.roa Signing time: Tue 22 Jul 2025 00:21:37 +0000 ROA not before: Tue 22 Jul 2025 00:21:37 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:39:b3:02:47:62:eb:02:31:81:29:15:04:02:4a:18:bb:23:e1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:21:37 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=20ca1c5326eeec79c08c91d646d4e75d81d2bdc908075a6c2984b42ac41f3d48, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:6a:d1:4e:cc:d8:98:0d:73:69:60:1b:67: 8f:e5:fe:a4:e8:4b:70:61:13:df:2b:7e:0c:29:0d: 5e:7b:1f:1d:4a:73:9d:e7:8c:46:8a:f6:6e:a4:a5: 7c:aa:6a:ed:da:8b:35:a9:a5:c6:3c:52:74:5e:cb: cf:63:63:cd:28:6b:58:19:24:4e:c3:ae:87:ad:4f: 1a:a5:11:05:0e:9d:2d:7b:df:05:ba:3d:bd:47:68: 9d:e2:31:f8:0a:b1:37:8f:e9:07:74:f8:ef:88:63: 21:b5:27:7d:15:78:73:d2:9d:0d:a7:03:0f:55:bf: b9:23:54:d7:01:93:82:a4:be:bb:af:82:b5:79:1b: 41:75:76:73:b3:7b:b0:34:c5:6c:ad:bf:3a:78:44: ed:60:a8:a4:24:b1:6d:a9:39:cf:7a:40:28:23:75: 3d:2d:ca:52:36:be:ca:ca:af:0a:cb:3c:d4:ac:73: 30:4d:90:85:f5:a5:e0:cc:d8:de:19:ce:14:63:ed: ab:2b:7d:7e:14:54:b1:fc:d5:9e:64:92:6e:20:b5: 6d:6c:23:1d:ee:ba:cb:33:8e:dc:b0:99:06:30:96: 23:72:67:75:ce:2a:4a:54:6f:7e:2c:f6:0e:ab:fa: c8:ae:dc:c7:bc:27:4b:f4:7f:9c:ce:06:d9:bf:bc: 3e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4A:46:FC:82:C5:2D:85:A2:1D:FA:15:AB:F3:98:2B:27:05:E4:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6859535-bcd6-43c2-94b9-081032003acb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:c000::/40 Signature Algorithm: sha256WithRSAEncryption 51:58:96:9c:90:70:f3:7e:31:69:04:30:03:b9:17:45:44:01: c1:a0:ce:33:a7:59:03:97:8d:35:a2:68:8c:e9:21:eb:e0:c5: 1b:df:a8:73:57:a6:97:5f:55:84:65:47:15:7c:7a:37:52:e6: 8b:aa:14:b1:49:33:ce:16:c0:1b:21:ad:0a:4a:f3:c2:e4:8c: 13:d6:3c:1c:3a:b0:9b:f9:64:d7:9e:23:92:81:11:f9:48:ee: 4d:0d:ce:a7:a0:a6:53:cc:f4:b8:dc:fa:dd:6a:1d:72:51:ec: 2b:af:59:98:50:b3:f4:ff:00:37:f0:99:49:3d:35:6b:d3:b4: 95:bb:58:e8:5c:41:7d:e8:38:2e:50:c2:ae:48:6b:f7:f8:fd: 7a:84:24:fb:73:bd:88:13:3f:c6:a1:f4:35:2f:ec:da:bd:2f: bc:60:4a:4f:61:7f:ac:9b:db:48:84:28:9e:29:e3:88:9b:0e: b5:22:8a:7e:2b:4e:f1:e6:e9:47:7e:b4:a1:27:28:07:ee:40: d2:c7:a7:0c:cf:2a:55:13:2e:72:d0:fa:cf:7a:85:09:0f:ae: 63:c0:58:b7:64:b9:ae:72:7e:a0:57:60:21:df:b3:4f:38:f0: a6:17:01:0f:9d:76:82:4b:54:9c:4b:25:88:84:8c:9e:49:28: 30:b5:50:d6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVjmzAkdi6wIxgSkVBAJKGLsj4ecwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAyMTM3WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGNhMWM1MzI2ZWVlYzc5YzA4YzkxZDY0NmQ0ZTc1ZDgx ZDJiZGM5MDgwNzVhNmMyOTg0YjQyYWM0MWYzZDQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn5WrRTszYmA1zaWAbZ4/l/qToS3BhE98rfgwpDV57Hx1K c53njEaK9m6kpXyqau3aizWppcY8UnRey89jY80oa1gZJE7DroetTxqlEQUOnS17 3wW6Pb1HaJ3iMfgKsTeP6Qd0+O+IYyG1J30VeHPSnQ2nAw9Vv7kjVNcBk4Kkvruv grV5G0F1dnOze7A0xWytvzp4RO1gqKQksW2pOc96QCgjdT0tylI2vsrKrwrLPNSs czBNkIX1peDM2N4ZzhRj7asrfX4UVLH81Z5kkm4gtW1sIx3uusszjtywmQYwliNy Z3XOKkpUb34s9g6r+siu3Me8J0v0f5zOBtm/vD5hAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUzEpG/ILFLYWiHfoVq/OYKycF5LowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I2ODU5NTM1LWJjZDYtNDNjMi05NGI5LTA4MTAzMjAwM2FjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4wDANBgkqhkiG9w0BAQsFAAOCAQEAUViWnJBw834xaQQwA7kXRUQB waDOM6dZA5eNNaJojOkh6+DFG9+oc1eml19VhGVHFXx6N1Lmi6oUsUkzzhbAGyGt CkrzwuSME9Y8HDqwm/lk154jkoER+UjuTQ3Op6CmU8z0uNz63WodclHsK69ZmFCz 9P8AN/CZST01a9O0lbtY6FxBfeg4LlDCrkhr9/j9eoQk+3O9iBM/xqH0NS/s2r0v vGBKT2F/rJvbSIQoninjiJsOtSKKfitO8ebpR360oScoB+5A0senDM8qVRMuctD6 z3qFCQ+uY8BYt2S5rnJ+oFdgId+zTzjwphcBD512gktUnEsliISMnkkoMLVQ1g== -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:03 2025 by rpki-client