$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c288c187-a311-482f-a404-3061061e705c.roa File: c288c187-a311-482f-a404-3061061e705c.roa (raw, json) Hash identifier: 93oG9qGecVjXjBdQNcfOkC566xEIMGeFwwHQMAdEy2g= Subject key identifier: 88:29:F4:D3:3B:09:1A:68:8E:EB:E3:67:12:F9:5A:93:5E:8A:D2:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A834464050A33972A261E7B939C09304FF5E221 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c288c187-a311-482f-a404-3061061e705c.roa Signing time: Tue 08 Jul 2025 16:51:57 +0000 ROA not before: Tue 08 Jul 2025 16:51:57 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f12:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:83:44:64:05:0a:33:97:2a:26:1e:7b:93:9c:09:30:4f:f5:e2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:51:57 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=6e34f8806db5dac50dc1775682cb7f5beaa55cb5bc65e9071be19470d210b568, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:d4:75:85:d7:e1:8a:f3:d6:c9:f1:ec:60: a1:04:2a:7b:c3:7f:a7:22:28:19:30:1b:ca:6b:db: 76:a4:bf:12:e4:5f:c7:d8:9e:71:57:84:dc:9a:a5: 3f:82:26:ab:a7:7f:78:c4:6d:7b:97:58:65:26:52: 42:6a:6b:04:d3:64:4c:e1:c9:bf:e8:99:fe:d1:0c: 88:f6:d2:c5:34:b7:36:22:55:9e:84:9a:e9:b8:cc: e7:65:9a:fd:d9:de:22:86:c1:97:9d:2d:37:0d:2a: 7c:13:a0:6b:b3:0a:7d:18:11:50:9c:1c:66:67:04: 86:a5:9f:32:68:1d:6b:77:94:e5:c9:d5:6e:2d:ef: 0c:18:e5:ed:d9:e4:5f:b5:cc:08:40:7a:7d:a0:fe: e0:40:13:c8:5f:84:39:06:3a:b0:d0:33:7f:02:4a: f3:d2:c6:d1:35:6c:8f:90:65:c1:0b:e0:2f:0e:67: ce:32:5b:d3:3f:4e:e1:19:da:f0:03:ed:b2:21:24: 96:f7:52:f7:38:72:3e:18:3d:28:28:31:cc:cf:94: 0e:76:65:b2:9c:0a:5b:53:92:3a:fe:eb:3d:d1:5e: 79:48:7b:10:f6:6c:64:84:f4:53:05:3f:2d:c8:f6: 49:56:ae:3a:8c:10:4d:44:fc:ee:9e:54:f0:10:f2: be:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:29:F4:D3:3B:09:1A:68:8E:EB:E3:67:12:F9:5A:93:5E:8A:D2:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c288c187-a311-482f-a404-3061061e705c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f12:400::/38 Signature Algorithm: sha256WithRSAEncryption ae:2f:24:fc:85:bc:7c:57:65:42:c1:c4:e6:f0:e6:57:39:3b: 00:8e:db:28:d5:3e:6e:96:da:29:60:1e:f7:aa:d1:25:5b:8f: 26:8d:00:73:0d:b1:21:32:54:23:e8:15:aa:c7:17:bf:76:bd: 25:50:c9:5f:54:77:96:82:04:8c:29:f5:c0:1c:99:c3:76:ab: 44:45:d7:6e:36:75:71:80:8f:51:46:da:a9:bc:86:4d:fd:92: 39:d6:b0:b6:97:a7:60:a5:19:95:b8:59:95:fa:0d:70:41:59: dc:ef:07:da:ba:56:60:7b:04:fe:1b:32:7a:37:d1:69:f6:df: 7e:ed:e5:ad:f5:51:5e:ce:36:f1:96:1c:a7:2f:1f:b7:82:53: ce:e2:6c:0e:2a:7b:95:21:fc:d2:25:b7:00:f9:a2:f2:f0:7d: 57:ef:32:ca:da:2d:b0:41:b5:93:93:de:a0:04:7b:b9:2f:6d: 90:a3:64:9c:bb:a0:d5:be:b9:a8:5c:2a:a9:88:1b:36:4b:b1: 1a:8d:1a:32:fb:0d:52:73:5c:89:74:57:48:4e:6a:9d:a2:5a: 39:9a:3a:57:a7:b4:25:cc:70:50:f5:a7:d4:3e:40:8f:8b:a7: 6b:44:28:79:e1:6c:4b:fc:15:48:50:6f:cf:39:d5:42:59:47: c5:56:83:dc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaoNEZAUKM5cqJh57k5wJME/14iEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTY1MTU3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZTM0Zjg4MDZkYjVkYWM1MGRjMTc3NTY4MmNiN2Y1YmVh YTU1Y2I1YmM2NWU5MDcxYmUxOTQ3MGQyMTBiNTY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGxdR1hdfhivPWyfHsYKEEKnvDf6ciKBkwG8pr23akvxLk X8fYnnFXhNyapT+CJqunf3jEbXuXWGUmUkJqawTTZEzhyb/omf7RDIj20sU0tzYi VZ6Emum4zOdlmv3Z3iKGwZedLTcNKnwToGuzCn0YEVCcHGZnBIalnzJoHWt3lOXJ 1W4t7wwY5e3Z5F+1zAhAen2g/uBAE8hfhDkGOrDQM38CSvPSxtE1bI+QZcEL4C8O Z84yW9M/TuEZ2vAD7bIhJJb3Uvc4cj4YPSgoMczPlA52ZbKcCltTkjr+6z3RXnlI exD2bGSE9FMFPy3I9klWrjqMEE1E/O6eVPAQ8r6/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUiCn00zsJGmiO6+NnEvlak16K0g0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyODhjMTg3LWEzMTEtNDgyZi1hNDA0LTMwNjEwNjFlNzA1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8SBDANBgkqhkiG9w0BAQsFAAOCAQEAri8k/IW8fFdlQsHE5vDmVzk7 AI7bKNU+bpbaKWAe96rRJVuPJo0Acw2xITJUI+gVqscXv3a9JVDJX1R3loIEjCn1 wByZw3arREXXbjZ1cYCPUUbaqbyGTf2SOdawtpenYKUZlbhZlfoNcEFZ3O8H2rpW YHsE/hsyejfRafbffu3lrfVRXs428ZYcpy8ft4JTzuJsDip7lSH80iW3APmi8vB9 V+8yytotsEG1k5PeoAR7uS9tkKNknLug1b65qFwqqYgbNkuxGo0aMvsNUnNciXRX SE5qnaJaOZo6V6e0JcxwUPWn1D5Aj4una0QoeeFsS/wVSFBvzznVQllHxVaD3A== -----END CERTIFICATE-----Generated at Tue Jul 22 05:13:11 2025 by rpki-client