$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9ab0c80-713e-4c08-a740-97ba0f9d766c.roa File: c9ab0c80-713e-4c08-a740-97ba0f9d766c.roa (raw, json) Hash identifier: 9GpjQcwBDyS3UqQGdJYz7IO9lF05GnmagWFqEIsK7C0= Subject key identifier: 5C:A6:90:AB:FE:CC:EA:3E:0F:07:AF:BD:A8:99:5B:17:DB:1E:B5:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6E3CE2745B8CCD41998D21E1B8CEB6DAE2D22C8B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9ab0c80-713e-4c08-a740-97ba0f9d766c.roa Signing time: Mon 07 Jul 2025 17:20:57 +0000 ROA not before: Mon 07 Jul 2025 17:20:57 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:3c:e2:74:5b:8c:cd:41:99:8d:21:e1:b8:ce:b6:da:e2:d2:2c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 17:20:57 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=32d17b45fddb53d78261a3a6c88e08f44af0576095458d70a60793995843cef1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:6e:24:b2:7a:46:28:b6:a9:96:0a:23:b8: 24:22:8d:2b:e5:1e:55:cd:27:03:b2:42:7d:95:ae: 13:36:ac:79:2d:d2:cc:02:81:79:ec:eb:26:d1:45: 7f:59:8e:e4:b5:be:f0:fb:12:ab:26:ce:7d:79:da: 03:c6:ef:97:fd:5b:b3:e7:f7:67:68:d7:c2:b4:0d: ef:15:80:19:a2:b3:95:8f:df:cf:4a:a8:47:fc:08: 73:26:22:48:1c:35:31:9e:3d:4e:a8:7e:01:64:53: 24:71:42:8b:e6:a9:60:57:f9:eb:89:ba:0f:6f:e0: dc:dc:e4:69:be:71:17:ff:37:be:10:b3:25:21:ee: 87:98:3b:ab:68:49:d6:ce:3c:e6:a8:a3:f6:c9:bb: 8b:e8:07:11:0a:47:20:5b:6a:76:20:8b:99:c9:b7: 6c:7c:2c:69:62:c7:bd:df:46:46:18:48:3e:36:93: 24:33:3e:ee:e4:f6:cd:ce:6d:b2:ee:77:cd:ee:a8: 20:86:05:23:5e:79:98:77:70:71:ec:e7:36:3a:73: 39:24:83:22:59:2e:7b:5d:0b:c6:fc:fb:81:38:31: 63:67:c1:d1:07:8d:b6:29:72:11:2d:4a:2d:04:83: ab:45:a5:eb:cd:58:96:bf:eb:8b:48:36:cb:8c:d5: 20:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A6:90:AB:FE:CC:EA:3E:0F:07:AF:BD:A8:99:5B:17:DB:1E:B5:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9ab0c80-713e-4c08-a740-97ba0f9d766c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:1040::/48 Signature Algorithm: sha256WithRSAEncryption d5:ce:a1:ac:71:3e:09:3d:ad:d1:3a:fe:5c:01:88:45:9e:c8: d1:34:98:a1:11:b0:ba:ba:9e:bb:cc:48:68:db:6a:99:f2:82: 28:97:46:43:54:d6:64:39:a5:3c:a7:8b:54:3f:b2:71:fd:1a: c4:bd:64:f1:cd:ec:7e:20:d0:54:71:1b:d0:06:9b:ac:6e:de: 7b:55:f7:86:d1:1e:14:a1:92:40:3a:06:88:98:3a:d0:37:ab: a3:dc:03:31:62:4f:06:fd:72:12:6c:d1:6f:b3:9e:3b:b7:c8: 05:3f:bc:44:7b:40:ce:ee:9a:fd:26:c0:09:ad:c6:e4:b8:b2: 6e:26:8e:e1:00:81:7b:3a:3c:c3:60:d4:37:33:4b:4f:5f:f6: 90:25:3b:99:b4:14:c8:8e:3c:21:24:db:e8:81:9e:ca:fc:84: b5:b5:fb:61:5e:9f:3c:c3:1d:07:48:36:ec:b6:7a:fd:4b:de: cb:44:58:24:83:f6:e6:79:54:4b:52:66:38:31:d4:6c:39:bd: f8:69:84:78:f2:0a:82:54:91:ae:3c:e9:c5:b6:c0:d9:8c:8e: 80:af:44:89:be:66:4d:a2:20:58:3c:a7:ce:17:b2:bc:ee:6d: 2f:70:d6:06:3b:f2:b0:1c:c7:49:e2:80:79:86:e0:54:39:ca: de:70:f9:61 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbjzidFuMzUGZjSHhuM622uLSLIswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTcyMDU3WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMmQxN2I0NWZkZGI1M2Q3ODI2MWEzYTZjODhlMDhmNDRh ZjA1NzYwOTU0NThkNzBhNjA3OTM5OTU4NDNjZWYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC78G4ksnpGKLaplgojuCQijSvlHlXNJwOyQn2VrhM2rHkt 0swCgXns6ybRRX9ZjuS1vvD7Eqsmzn152gPG75f9W7Pn92do18K0De8VgBmis5WP 389KqEf8CHMmIkgcNTGePU6ofgFkUyRxQovmqWBX+euJug9v4Nzc5Gm+cRf/N74Q syUh7oeYO6toSdbOPOaoo/bJu4voBxEKRyBbanYgi5nJt2x8LGlix73fRkYYSD42 kyQzPu7k9s3ObbLud83uqCCGBSNeeZh3cHHs5zY6czkkgyJZLntdC8b8+4E4MWNn wdEHjbYpchEtSi0Eg6tFpevNWJa/64tINsuM1SBbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXKaQq/7M6j4PB6+9qJlbF9setYgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M5YWIwYzgwLTcxM2UtNGMwOC1hNzQwLTk3YmEwZjlkNzY2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hEEAwDQYJKoZIhvcNAQELBQADggEBANXOoaxxPgk9rdE6/lwBiEWe yNE0mKERsLq6nrvMSGjbapnygiiXRkNU1mQ5pTyni1Q/snH9GsS9ZPHN7H4g0FRx G9AGm6xu3ntV94bRHhShkkA6BoiYOtA3q6PcAzFiTwb9chJs0W+znju3yAU/vER7 QM7umv0mwAmtxuS4sm4mjuEAgXs6PMNg1DczS09f9pAlO5m0FMiOPCEk2+iBnsr8 hLW1+2FenzzDHQdINuy2ev1L3stEWCSD9uZ5VEtSZjgx1Gw5vfhphHjyCoJUka48 6cW2wNmMjoCvRIm+Zk2iIFg8p84XsrzubS9w1gY78rAcx0nigHmG4FQ5yt5w+WE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:52 2025 by rpki-client