$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bea4742a-2c67-46f9-98cb-f8cc6cb8d910.roa File: bea4742a-2c67-46f9-98cb-f8cc6cb8d910.roa (raw, json) Hash identifier: fEPagY0FDZ2wisUsUHtyLTd92TKiva8gchnGQ8rlAjA= Subject key identifier: 94:B1:0D:3B:29:53:B8:0D:4B:5C:BD:98:DA:28:82:99:74:8F:FB:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70A1BFBDDC3923E9F241D72CC1E4AEA338954A82 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bea4742a-2c67-46f9-98cb-f8cc6cb8d910.roa Signing time: Mon 07 Jul 2025 17:41:40 +0000 ROA not before: Mon 07 Jul 2025 17:41:40 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:81e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a1:bf:bd:dc:39:23:e9:f2:41:d7:2c:c1:e4:ae:a3:38:95:4a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 17:41:40 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=9461c032a0d539e51655f41bcbfea77c307157397bb067052d3343f0367a5eb3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:4c:36:2f:e6:80:57:ac:1d:ee:f3:74:57: 5b:0b:54:c8:0b:45:81:4e:2a:0f:e9:22:e0:f9:3b: 98:5f:63:6f:0e:ef:04:16:31:dd:8a:b3:ea:3c:b2: 17:5a:d0:f5:cb:e0:93:0a:cb:f3:31:32:6b:03:26: de:0f:07:aa:5a:18:93:6c:5b:b8:9d:d9:dd:d0:e8: d5:42:93:36:68:7d:bf:63:98:5a:db:fb:54:f5:3e: 9d:97:01:f6:cd:a9:b7:67:45:04:5a:d9:46:d1:92: a4:ad:6f:de:ce:f8:af:38:be:fa:5b:08:95:4d:c4: fc:29:79:c3:d6:da:dd:77:ef:4f:44:95:06:06:f8: a2:ea:2e:f5:88:18:da:14:06:9b:ed:c0:a7:e9:2f: 08:d5:69:62:82:36:a0:d7:b4:2b:bb:c5:18:68:9e: 5e:da:92:57:7d:4f:12:21:21:0e:33:98:4d:5d:47: e5:48:64:11:d2:87:2d:0e:9f:30:12:52:64:d0:5e: d5:0f:67:c9:d6:6b:f9:6b:b2:2f:bb:b3:31:66:a6: 8f:aa:61:b9:ad:4a:1b:47:6f:4d:be:e3:82:fc:d0: d0:dc:95:20:cc:d1:6d:1b:dc:a9:b3:9d:ee:bc:85: 98:93:d1:07:91:57:a2:48:9e:bc:de:75:39:a6:bd: 18:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B1:0D:3B:29:53:B8:0D:4B:5C:BD:98:DA:28:82:99:74:8F:FB:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bea4742a-2c67-46f9-98cb-f8cc6cb8d910.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:81e0::/48 Signature Algorithm: sha256WithRSAEncryption 69:d0:3c:43:9b:be:c7:9d:0f:54:1d:f7:8d:7e:3a:b9:b9:ec: fc:17:b5:c6:6b:bd:db:1b:31:1a:73:14:23:a2:3d:83:d5:58: 44:97:d3:f0:ed:d6:f5:fe:8e:c2:c5:a8:a4:83:af:f7:ea:8b: 53:8a:e2:fe:cc:df:34:21:5c:cd:81:93:5f:9b:f5:33:cc:fe: e4:48:96:5c:df:91:3f:4a:a8:18:00:82:e4:68:ed:2a:2a:25: d3:98:dd:cf:3d:be:2c:ba:d5:88:38:d4:5e:29:80:85:20:4d: db:61:38:47:57:1d:a4:25:1f:42:9b:6f:2c:0a:09:2d:e0:f1: 46:25:9c:3f:5b:c9:6a:5d:8d:e7:fa:b9:63:76:a0:cd:99:ab: 4d:a8:9c:82:11:ac:49:24:7a:d6:9e:a5:22:b3:df:82:af:fb: a1:4b:d1:f1:48:c9:28:45:df:81:15:89:8f:79:bf:57:86:99: c0:48:d0:47:de:23:d9:7e:d4:26:a6:a9:00:a0:5f:2f:cf:65: 93:82:2c:27:1b:b5:c3:c2:5f:98:f4:be:be:9b:46:31:d8:65: 1f:93:e7:3d:c9:74:cb:8e:30:b4:e1:c5:02:88:27:82:e8:71: 15:da:6f:da:70:85:ec:ca:35:bd:eb:d6:1f:84:a0:ba:c5:3c: 17:3c:65:aa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcKG/vdw5I+nyQdcsweSuoziVSoIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTc0MTQwWhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDYxYzAzMmEwZDUzOWU1MTY1NWY0MWJjYmZlYTc3YzMw NzE1NzM5N2JiMDY3MDUyZDMzNDNmMDM2N2E1ZWIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjIUw2L+aAV6wd7vN0V1sLVMgLRYFOKg/pIuD5O5hfY28O 7wQWMd2Ks+o8shda0PXL4JMKy/MxMmsDJt4PB6paGJNsW7id2d3Q6NVCkzZofb9j mFrb+1T1Pp2XAfbNqbdnRQRa2UbRkqStb97O+K84vvpbCJVNxPwpecPW2t13709E lQYG+KLqLvWIGNoUBpvtwKfpLwjVaWKCNqDXtCu7xRhonl7akld9TxIhIQ4zmE1d R+VIZBHShy0OnzASUmTQXtUPZ8nWa/lrsi+7szFmpo+qYbmtShtHb02+44L80NDc lSDM0W0b3Kmzne68hZiT0QeRV6JInrzedTmmvRgfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlLENOylTuA1LXL2Y2iiCmXSP++4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JlYTQ3NDJhLTJjNjctNDZmOS05OGNiLWY4Y2M2Y2I4ZDkxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgeAwDQYJKoZIhvcNAQELBQADggEBAGnQPEObvsedD1Qd941+Orm5 7PwXtcZrvdsbMRpzFCOiPYPVWESX0/Dt1vX+jsLFqKSDr/fqi1OK4v7M3zQhXM2B k1+b9TPM/uRIllzfkT9KqBgAguRo7SoqJdOY3c89viy61Yg41F4pgIUgTdthOEdX HaQlH0KbbywKCS3g8UYlnD9byWpdjef6uWN2oM2Zq02onIIRrEkketaepSKz34Kv +6FL0fFIyShF34EViY95v1eGmcBI0EfeI9l+1CamqQCgXy/PZZOCLCcbtcPCX5j0 vr6bRjHYZR+T5z3JdMuOMLThxQKIJ4LocRXab9pwhezKNb3r1h+EoLrFPBc8Zao= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:21 2025 by rpki-client