$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9a67dba-13fc-4b07-9d44-def1dd6a809e.roa File: b9a67dba-13fc-4b07-9d44-def1dd6a809e.roa (raw, json) Hash identifier: QXqrAIRIVMY1b4wqr7dJvOtgeWqgj6Cs1+dI9JWfZ60= Subject key identifier: D4:26:0D:A0:56:AE:3B:7F:21:3A:9A:A4:99:65:BC:7F:B6:28:A4:F9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 600919E46256A644411AED7C567E7D8C64C139BE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9a67dba-13fc-4b07-9d44-def1dd6a809e.roa Signing time: Fri 11 Jul 2025 00:20:55 +0000 ROA not before: Fri 11 Jul 2025 00:20:55 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fb8:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:09:19:e4:62:56:a6:44:41:1a:ed:7c:56:7e:7d:8c:64:c1:39:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:20:55 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=a006fafcca1e2ab4614215977616c4674858c8de18bba794e9dba398f2c87604, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:64:d5:32:7d:fd:ff:f8:63:e9:0d:ae:79: 2c:e0:31:d6:35:35:55:75:a9:aa:59:90:c5:70:48: 4c:d0:fa:65:9b:1a:45:54:69:33:0d:8c:5f:c9:f3: f1:8c:32:8d:1c:d7:88:0f:4f:a7:13:8e:4f:47:15: 10:46:7f:69:f5:11:87:c4:e0:ea:81:0d:ac:a5:ff: 73:72:76:d1:b8:4d:86:0b:8d:e6:24:12:fe:c6:e1: 86:9d:c4:03:df:73:e0:4c:b3:75:c9:49:33:01:8d: 0e:c6:72:ac:b7:d1:3c:b2:a0:97:35:77:cf:19:cc: 37:5d:1d:2c:39:6d:0b:bd:d0:30:f4:7f:9a:d2:c2: e7:20:1e:91:2d:82:e9:4f:7c:1e:48:5b:82:4d:d4: df:f7:e8:a7:8b:3a:4f:12:15:4e:f2:80:3c:53:23: 6c:b2:55:81:ae:12:69:3e:91:be:df:17:16:ef:a3: 7d:6c:36:9f:e4:06:55:b1:ed:d2:5f:e6:7f:ed:79: 29:c1:81:64:26:99:1a:66:e0:38:26:5f:5d:e7:10: 17:51:22:c2:77:bb:4b:3d:52:18:78:ff:9f:1d:03: 04:9b:1b:00:ac:5a:96:3a:03:c0:84:af:a8:4b:21: 5e:cd:98:d3:46:bd:75:c3:1d:0b:2c:1f:13:9d:7c: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:26:0D:A0:56:AE:3B:7F:21:3A:9A:A4:99:65:BC:7F:B6:28:A4:F9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9a67dba-13fc-4b07-9d44-def1dd6a809e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:2000::/40 Signature Algorithm: sha256WithRSAEncryption 62:c6:0a:d7:0e:cc:a1:db:2c:18:24:86:2b:b8:2a:3c:dd:8e: e0:47:62:ba:9d:29:cd:8d:41:c2:26:9d:18:39:86:75:48:b7: e9:6e:14:40:8f:84:6c:bb:97:a4:c6:94:da:a1:97:ef:01:9b: a5:d8:9e:0e:60:68:6e:c9:28:90:9c:d9:80:5f:6c:c2:48:ec: 8d:21:84:82:ea:11:a0:8b:34:71:9e:c3:28:2d:05:70:55:72: 44:7c:91:5c:48:ac:66:bf:b4:b8:37:7a:55:33:59:e7:c4:ba: d9:c4:1a:3b:52:3e:d1:bf:3d:0a:ac:d8:2f:1a:77:f3:d3:17: 70:8b:cc:79:d7:e7:f0:3f:94:92:46:18:3b:59:fd:bc:68:0a: 12:73:7e:cf:48:b2:88:a5:86:82:27:ff:08:49:96:ba:5b:2f: 82:03:0a:13:81:c5:0d:d3:af:69:6c:d9:01:27:e1:5c:13:4a: 07:a4:34:32:51:d8:c3:ae:65:33:f1:cf:f9:e8:c5:cc:91:38: 1a:3e:5b:6b:ee:94:57:3c:90:5d:6a:18:36:0c:b8:a0:00:5e: 2e:08:20:7e:41:52:f1:75:9b:93:ae:f8:30:3e:50:6b:f8:ed: 4f:6c:0f:0f:e3:4b:28:eb:17:25:25:5a:cb:64:d6:ad:d8:c8: 16:92:52:af -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYAkZ5GJWpkRBGu18Vn59jGTBOb4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAyMDU1WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDA2ZmFmY2NhMWUyYWI0NjE0MjE1OTc3NjE2YzQ2NzQ4 NThjOGRlMThiYmE3OTRlOWRiYTM5OGYyYzg3NjA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/8WTVMn39//hj6Q2ueSzgMdY1NVV1qapZkMVwSEzQ+mWb GkVUaTMNjF/J8/GMMo0c14gPT6cTjk9HFRBGf2n1EYfE4OqBDayl/3NydtG4TYYL jeYkEv7G4YadxAPfc+BMs3XJSTMBjQ7Gcqy30TyyoJc1d88ZzDddHSw5bQu90DD0 f5rSwucgHpEtgulPfB5IW4JN1N/36KeLOk8SFU7ygDxTI2yyVYGuEmk+kb7fFxbv o31sNp/kBlWx7dJf5n/teSnBgWQmmRpm4DgmX13nEBdRIsJ3u0s9Uhh4/58dAwSb GwCsWpY6A8CEr6hLIV7NmNNGvXXDHQssHxOdfEtJAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU1CYNoFauO38hOpqkmWW8f7YopPkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5YTY3ZGJhLTEzZmMtNGIwNy05ZDQ0LWRlZjFkZDZhODA5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4IDANBgkqhkiG9w0BAQsFAAOCAQEAYsYK1w7ModssGCSGK7gqPN2O 4Ediup0pzY1BwiadGDmGdUi36W4UQI+EbLuXpMaU2qGX7wGbpdieDmBobskokJzZ gF9swkjsjSGEguoRoIs0cZ7DKC0FcFVyRHyRXEisZr+0uDd6VTNZ58S62cQaO1I+ 0b89CqzYLxp389MXcIvMedfn8D+UkkYYO1n9vGgKEnN+z0iyiKWGgif/CEmWulsv ggMKE4HFDdOvaWzZASfhXBNKB6Q0MlHYw65lM/HP+ejFzJE4Gj5ba+6UVzyQXWoY Ngy4oABeLgggfkFS8XWbk674MD5Qa/jtT2wPD+NLKOsXJSVay2TWrdjIFpJSrw== -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:06 2025 by rpki-client