$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa File: bd7b206c-0527-49d0-914a-fe7ee32411b1.roa (raw, json) Hash identifier: mE1s5HrZe1PUHFs4W94jqqtkt9eDK6/1ZsklGCBBNXw= Subject key identifier: 36:33:2F:B3:65:05:AC:E2:B1:AC:A1:DA:07:8A:EA:57:3A:77:52:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5CD0DC90FE552BCB1106DAB4E5FFB4030764C3BE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa Signing time: Mon 07 Jul 2025 17:31:04 +0000 ROA not before: Mon 07 Jul 2025 17:31:04 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ffd:8066::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d0:dc:90:fe:55:2b:cb:11:06:da:b4:e5:ff:b4:03:07:64:c3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 17:31:04 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=98c86a456627c39ff36a48f170aa57711b04a78add6c8bc4e6ca143e7e83eec1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6b:71:49:f9:99:74:0c:0d:5d:65:51:c9:ff: be:56:fe:3c:2d:ab:44:e3:40:8a:71:84:ce:fa:b8: de:ff:4c:c4:9d:f0:af:61:6d:3e:f2:0a:97:8d:13: 13:54:e6:65:31:66:ee:27:a4:3f:aa:16:4a:3d:89: 54:76:80:17:f5:36:6c:34:63:5c:0c:26:3e:8f:bf: 77:be:3f:c4:ac:14:8e:7e:a3:0a:bb:8a:05:f3:f0: 20:b2:5f:b8:45:c8:3f:7a:a4:44:ce:89:fc:d4:f4: 9d:5e:31:64:8b:72:dd:9e:5d:00:9d:50:f4:02:60: fe:27:d5:60:cc:96:02:35:c3:47:14:f5:5e:2b:9e: 29:98:09:66:e8:42:9a:9c:6a:71:22:a1:06:a3:44: 88:ea:1e:1c:ab:25:69:10:f3:12:79:d3:1a:82:6b: 1d:a7:ce:1f:40:cf:07:57:65:02:e2:fe:e9:65:c1: 1d:90:c8:70:40:9e:07:e9:87:86:16:e2:93:5b:79: 6f:3c:34:f5:b2:c1:9b:41:35:09:1a:67:0d:96:a6: 6b:1a:1f:4a:93:df:11:f8:eb:79:2e:f8:69:e9:40: 87:be:d4:2a:b5:e6:38:28:b3:97:f5:b1:5b:1a:91: bf:4f:d3:23:93:f9:ee:83:36:5f:44:da:98:90:44: e0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:33:2F:B3:65:05:AC:E2:B1:AC:A1:DA:07:8A:EA:57:3A:77:52:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:8066::/48 Signature Algorithm: sha256WithRSAEncryption a7:13:1f:5b:31:df:12:83:e3:9e:2e:69:66:38:bd:1d:80:72: d7:77:15:3a:0e:32:5e:0f:d5:bf:18:0e:4f:6f:58:ac:a3:81: 4f:69:76:f9:b1:3c:fa:78:ee:39:e1:13:a4:81:86:01:4c:99: cd:7d:dc:7c:50:2b:82:3d:eb:2e:07:aa:8a:cd:c9:b0:8e:56: b9:97:7d:ca:c3:98:a6:64:c2:bc:1e:84:40:88:50:1a:c6:76: 35:91:d9:5d:b7:e5:23:94:9e:79:ab:70:df:e0:05:5b:c0:91: 59:b9:ef:4b:f8:aa:c8:57:a3:f7:69:e2:8b:19:03:4d:57:aa: ae:9e:d0:ae:96:20:69:b6:43:f4:e3:70:ce:8e:54:3a:34:40: 09:fb:52:2f:35:08:84:32:67:6a:5e:a3:7f:a3:10:c1:81:f0: d2:3f:37:a9:0f:23:18:8a:27:9c:0f:a9:38:49:de:0e:78:b9: 8e:05:bb:04:c9:fb:1b:44:d6:ef:2a:55:a9:4d:55:27:82:68: a4:0c:08:37:e3:b9:4b:a3:36:cc:5e:16:ad:4d:c9:b5:31:c6: 1d:5d:f8:54:9e:13:11:0d:b0:5b:b6:77:34:0d:dd:51:b6:75: a7:06:2c:a0:1d:f2:d5:36:8f:67:b2:8a:78:1b:29:07:f7:5d: b5:9e:3c:eb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXNDckP5VK8sRBtq05f+0Awdkw74wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTczMTA0WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5OGM4NmE0NTY2MjdjMzlmZjM2YTQ4ZjE3MGFhNTc3MTFi MDRhNzhhZGQ2YzhiYzRlNmNhMTQzZTdlODNlZWMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDca3FJ+Zl0DA1dZVHJ/75W/jwtq0TjQIpxhM76uN7/TMSd 8K9hbT7yCpeNExNU5mUxZu4npD+qFko9iVR2gBf1Nmw0Y1wMJj6Pv3e+P8SsFI5+ owq7igXz8CCyX7hFyD96pETOifzU9J1eMWSLct2eXQCdUPQCYP4n1WDMlgI1w0cU 9V4rnimYCWboQpqcanEioQajRIjqHhyrJWkQ8xJ50xqCax2nzh9AzwdXZQLi/ull wR2QyHBAngfph4YW4pNbeW88NPWywZtBNQkaZw2WpmsaH0qT3xH463ku+GnpQIe+ 1Cq15jgos5f1sVsakb9P0yOT+e6DNl9E2piQROA9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNjMvs2UFrOKxrKHaB4rqVzp3UrMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkN2IyMDZjLTA1MjctNDlkMC05MTRhLWZlN2VlMzI0MTFiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gGYwDQYJKoZIhvcNAQELBQADggEBAKcTH1sx3xKD454uaWY4vR2A ctd3FToOMl4P1b8YDk9vWKyjgU9pdvmxPPp47jnhE6SBhgFMmc193HxQK4I96y4H qorNybCOVrmXfcrDmKZkwrwehECIUBrGdjWR2V235SOUnnmrcN/gBVvAkVm570v4 qshXo/dp4osZA01Xqq6e0K6WIGm2Q/TjcM6OVDo0QAn7Ui81CIQyZ2peo3+jEMGB 8NI/N6kPIxiKJ5wPqThJ3g54uY4FuwTJ+xtE1u8qValNVSeCaKQMCDfjuUujNsxe Fq1NybUxxh1d+FSeExENsFu2dzQN3VG2dacGLKAd8tU2j2eyingbKQf3XbWePOs= -----END CERTIFICATE-----Generated at Thu Jul 24 04:56:44 2025 by rpki-client