$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbd9fd1b-4f1d-4515-81ab-0cf33f738f76.roa File: bbd9fd1b-4f1d-4515-81ab-0cf33f738f76.roa (raw, json) Hash identifier: 1qQOuY9N+fRVe5yssaoAszeIELcOZBVFhltSBOUmwl4= Subject key identifier: A0:D6:61:CE:DA:9C:8F:6B:3B:E6:2A:60:2F:26:09:96:6C:DF:8B:6C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FF7099266262C8B382E668A1D47E3AADF9EA352 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbd9fd1b-4f1d-4515-81ab-0cf33f738f76.roa Signing time: Tue 08 Jul 2025 15:01:30 +0000 ROA not before: Tue 08 Jul 2025 15:01:30 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:8020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f7:09:92:66:26:2c:8b:38:2e:66:8a:1d:47:e3:aa:df:9e:a3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:01:30 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=fea01eab343f4451deb10bfbc9a5a2b595884e9eaa32d430a56cf4aacef06401, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:ab:56:c0:62:4f:68:51:cb:80:3e:fb:70: 91:aa:2d:19:f2:fb:5f:04:92:c4:61:55:f9:ec:73: 00:6d:eb:25:f4:78:8d:80:aa:af:96:7f:02:91:27: ed:f6:4a:99:75:a7:5f:47:45:f5:8a:b5:97:df:54: 99:2a:5d:c2:fe:12:88:e3:73:ce:7e:9e:ef:fa:f0: ca:36:35:a9:21:95:0b:58:7c:ff:c8:13:40:34:83: 04:ec:ea:72:24:37:a0:67:a0:71:7e:84:9c:9f:73: 49:3e:15:98:52:a3:b2:42:0d:9d:2e:80:e4:5f:4a: b9:d1:9e:6d:5a:12:db:87:3a:e4:23:bc:dd:58:47: 76:f3:16:67:c5:f3:64:32:ce:e7:4a:44:57:72:8b: ed:4c:2b:1f:bd:1a:38:4f:e7:1d:a0:81:14:fb:b7: d9:53:0d:dc:b4:94:3e:33:e9:be:20:d3:3b:83:9c: a6:d8:f9:13:22:3c:6b:52:5d:10:c6:24:c0:37:fa: 69:27:48:03:0d:47:91:63:34:6f:c7:6e:2b:de:24: ee:4c:93:84:20:bf:e6:fc:ea:de:d9:23:98:8f:70: c3:1e:23:ab:77:bc:69:51:59:df:3d:65:17:b4:21: 72:72:5b:81:3c:ac:8e:d5:2a:fd:da:09:a4:c4:5c: a0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D6:61:CE:DA:9C:8F:6B:3B:E6:2A:60:2F:26:09:96:6C:DF:8B:6C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbd9fd1b-4f1d-4515-81ab-0cf33f738f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:8020::/46 Signature Algorithm: sha256WithRSAEncryption 78:d5:9c:4a:15:6a:76:7d:a3:71:69:44:b3:f2:eb:c5:77:52: bb:66:7b:56:15:a7:84:80:e0:19:ac:39:57:73:bc:09:94:5c: f6:bf:17:f7:62:d7:f1:db:1c:50:13:0f:4e:97:9e:80:a9:56: b2:07:ab:24:fd:b4:88:6c:d6:98:27:ab:7b:7d:c3:8f:aa:a3: 64:3a:23:b2:42:56:a1:84:14:63:76:f5:18:9b:73:32:de:a9: 78:42:5a:5b:fd:18:e4:9d:27:fe:8c:54:02:91:d7:15:b6:a4: f2:97:b1:ca:3d:27:60:53:fd:c2:c8:a1:54:aa:95:8e:2d:06: 52:cc:87:10:cd:5d:79:51:8a:34:e4:ba:88:f1:f7:8f:42:4d: 4b:b0:e2:64:03:27:c1:ef:82:3c:96:fa:44:a9:6b:6d:c6:65: 21:6a:94:57:5e:ef:85:bc:13:73:d0:c1:5d:d6:fc:fb:2c:0f: 07:17:ba:49:12:ed:60:a9:8f:ba:db:82:b0:a2:4f:77:db:5c: e7:e8:04:a6:16:36:93:bf:97:9d:6e:0e:cf:dd:26:04:f0:3f: 7a:39:e8:66:94:3c:e1:f9:4a:7a:4c:cd:30:71:02:49:20:83: 74:73:d2:e2:b7:fe:0f:12:3a:4d:83:d3:4e:ca:ad:92:a1:15: b7:2a:9a:17 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUf/cJkmYmLIs4LmaKHUfjqt+eo1IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTUwMTMwWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZWEwMWVhYjM0M2Y0NDUxZGViMTBiZmJjOWE1YTJiNTk1 ODg0ZTllYWEzMmQ0MzBhNTZjZjRhYWNlZjA2NDAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG1KtWwGJPaFHLgD77cJGqLRny+18EksRhVfnscwBt6yX0 eI2Aqq+WfwKRJ+32Spl1p19HRfWKtZffVJkqXcL+Eojjc85+nu/68Mo2NakhlQtY fP/IE0A0gwTs6nIkN6BnoHF+hJyfc0k+FZhSo7JCDZ0ugORfSrnRnm1aEtuHOuQj vN1YR3bzFmfF82QyzudKRFdyi+1MKx+9GjhP5x2ggRT7t9lTDdy0lD4z6b4g0zuD nKbY+RMiPGtSXRDGJMA3+mknSAMNR5FjNG/HbiveJO5Mk4Qgv+b86t7ZI5iPcMMe I6t3vGlRWd89ZRe0IXJyW4E8rI7VKv3aCaTEXKBtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoNZhztqcj2s75ipgLyYJlmzfi2wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JiZDlmZDFiLTRmMWQtNDUxNS04MWFiLTBjZjMzZjczOGY3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/7gCAwDQYJKoZIhvcNAQELBQADggEBAHjVnEoVanZ9o3FpRLPy68V3 Urtme1YVp4SA4BmsOVdzvAmUXPa/F/di1/HbHFATD06XnoCpVrIHqyT9tIhs1pgn q3t9w4+qo2Q6I7JCVqGEFGN29RibczLeqXhCWlv9GOSdJ/6MVAKR1xW2pPKXsco9 J2BT/cLIoVSqlY4tBlLMhxDNXXlRijTkuojx949CTUuw4mQDJ8HvgjyW+kSpa23G ZSFqlFde74W8E3PQwV3W/PssDwcXukkS7WCpj7rbgrCiT3fbXOfoBKYWNpO/l51u Ds/dJgTwP3o56GaUPOH5SnpMzTBxAkkgg3Rz0uK3/g8SOk2D007KrZKhFbcqmhc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:04 2025 by rpki-client