$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dac6d91f-0131-4f38-be3d-421eba8e0816.roa File: dac6d91f-0131-4f38-be3d-421eba8e0816.roa (raw, json) Hash identifier: 7H7hQYi0dP9vwaqS0BgZsbFQmjHfb/8nELBt8xOkJl0= Subject key identifier: 76:0F:BC:37:02:68:13:7C:ED:25:21:82:19:97:DD:80:32:F6:A7:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4073F27A82C8D86083A07880DAD8DD32ADF22FAA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dac6d91f-0131-4f38-be3d-421eba8e0816.roa Signing time: Tue 08 Jul 2025 16:20:47 +0000 ROA not before: Tue 08 Jul 2025 16:20:47 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:c040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:73:f2:7a:82:c8:d8:60:83:a0:78:80:da:d8:dd:32:ad:f2:2f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:20:47 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=3b2a0baceac4cbc9bf6346253b7da91a329488b0ac53fc25ad7929b843587d4e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:d8:aa:a8:f3:b4:33:ae:ac:53:84:d2:4a:8c: 9a:f3:c9:1c:00:9b:2a:66:c5:9c:e0:37:8d:e1:6c: a3:56:d8:20:fa:4f:06:dc:ed:79:d6:c7:9f:94:99: 9e:ec:b0:c7:5b:f9:6b:e2:f5:68:10:5b:0d:d0:84: 63:87:c5:ef:dc:88:ba:46:7a:1c:e8:4f:21:7f:4a: b1:a9:6c:8c:28:fb:87:cd:5a:01:2d:e8:43:06:02: 38:f7:d6:67:5a:8d:02:a8:75:b8:ce:1c:d0:32:cb: c3:fd:4f:72:7a:8c:87:c6:b6:0a:22:c5:0d:35:6c: 47:17:f6:28:82:27:c0:0c:14:10:b8:b2:4c:f4:f9: 6e:c8:b5:66:fb:79:ee:9e:b6:49:a7:53:78:f8:f3: ce:c0:c7:e1:8f:d3:37:fe:14:af:d1:21:28:d3:02: 68:91:5c:fe:f7:01:6a:c5:c3:74:27:2d:22:99:5b: f0:e4:d3:75:7b:e8:21:fb:07:1b:e1:66:a7:ac:7b: 07:d6:2a:d6:62:ba:45:9c:c2:b9:c3:23:0a:32:35: 4b:c5:39:b6:fb:cb:49:de:b1:1d:e7:c2:29:f2:b7: 7f:b3:27:2e:68:5e:ec:42:e7:07:76:6c:1c:d0:ed: 01:43:41:e2:ae:a0:0a:fa:1e:24:e0:0c:b0:c3:29: 35:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0F:BC:37:02:68:13:7C:ED:25:21:82:19:97:DD:80:32:F6:A7:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dac6d91f-0131-4f38-be3d-421eba8e0816.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:c040::/46 Signature Algorithm: sha256WithRSAEncryption b7:fe:5c:04:df:95:bd:12:b7:f2:fb:26:0f:9f:3e:38:b0:6e: 9c:fa:bc:91:39:2e:2c:fa:aa:47:88:67:dd:0d:af:18:47:8d: da:ca:04:1a:2c:cc:d0:4c:b4:1b:0a:df:b1:83:ae:84:9d:85: d7:bb:e2:41:03:59:07:67:e9:7d:93:f3:43:5d:03:cc:83:c0: 63:40:b6:07:a7:00:5d:1a:4a:f9:a8:ec:63:b5:2d:56:85:c8: df:e1:70:fe:c4:bc:54:6b:b1:6b:aa:45:d6:c5:6f:5e:85:f1: 6d:60:7e:0e:17:f7:05:a3:68:c5:19:6e:20:ee:b5:12:c4:3d: 8b:7d:8d:4d:62:af:72:a9:b6:6d:21:81:f1:fe:94:2c:f1:fc: c1:b9:ab:93:b3:51:3e:63:f2:a4:bc:f4:8d:43:aa:ce:c3:f3: 2c:cd:c4:d9:8b:0f:f5:3b:d9:25:7e:3e:c2:9e:e0:b3:d0:a9: cf:bc:01:40:5e:3d:b2:21:42:3e:18:f6:72:be:d8:90:6a:0a: d3:dd:1c:c9:80:b8:f2:9c:af:3f:df:2a:44:16:e3:1e:2e:66: 68:e9:3e:37:bd:47:4d:55:a4:de:de:c9:7a:1b:25:77:11:55: f1:53:2e:26:4e:e8:a4:21:fb:63:1b:2f:07:f5:1a:8f:84:78: 60:91:43:b5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQHPyeoLI2GCDoHiA2tjdMq3yL6owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYyMDQ3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjJhMGJhY2VhYzRjYmM5YmY2MzQ2MjUzYjdkYTkxYTMy OTQ4OGIwYWM1M2ZjMjVhZDc5MjliODQzNTg3ZDRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD72Kqo87QzrqxThNJKjJrzyRwAmypmxZzgN43hbKNW2CD6 Twbc7XnWx5+UmZ7ssMdb+Wvi9WgQWw3QhGOHxe/ciLpGehzoTyF/SrGpbIwo+4fN WgEt6EMGAjj31mdajQKodbjOHNAyy8P9T3J6jIfGtgoixQ01bEcX9iiCJ8AMFBC4 skz0+W7ItWb7ee6etkmnU3j4887Ax+GP0zf+FK/RISjTAmiRXP73AWrFw3QnLSKZ W/Dk03V76CH7BxvhZqesewfWKtZiukWcwrnDIwoyNUvFObb7y0nesR3nwinyt3+z Jy5oXuxC5wd2bBzQ7QFDQeKuoAr6HiTgDLDDKTVlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdg+8NwJoE3ztJSGCGZfdgDL2p3wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhYzZkOTFmLTAxMzEtNGYzOC1iZTNkLTQyMWViYThlMDgxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pwEAwDQYJKoZIhvcNAQELBQADggEBALf+XATflb0St/L7Jg+fPjiw bpz6vJE5Liz6qkeIZ90NrxhHjdrKBBoszNBMtBsK37GDroSdhde74kEDWQdn6X2T 80NdA8yDwGNAtgenAF0aSvmo7GO1LVaFyN/hcP7EvFRrsWuqRdbFb16F8W1gfg4X 9wWjaMUZbiDutRLEPYt9jU1ir3Kptm0hgfH+lCzx/MG5q5OzUT5j8qS89I1Dqs7D 8yzNxNmLD/U72SV+PsKe4LPQqc+8AUBePbIhQj4Y9nK+2JBqCtPdHMmAuPKcrz/f KkQW4x4uZmjpPje9R01VpN7eyXobJXcRVfFTLiZO6KQh+2MbLwf1Go+EeGCRQ7U= -----END CERTIFICATE-----Generated at Mon Jul 21 23:25:50 2025 by rpki-client