$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1c8c053-5660-4b24-8aaa-28cebd569f74.roa File: e1c8c053-5660-4b24-8aaa-28cebd569f74.roa (raw, json) Hash identifier: 2+QD4ZMvtvGpC4DZoOHdI4cji8DQ0kGPpUxDC4pn7EY= Subject key identifier: D4:11:F8:7C:12:10:CE:39:20:6A:18:38:C1:02:A7:85:08:04:DA:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03AD439778DFF5C04EBF909C9CDBA5FD9D940F62 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1c8c053-5660-4b24-8aaa-28cebd569f74.roa Signing time: Tue 08 Jul 2025 16:32:21 +0000 ROA not before: Tue 08 Jul 2025 16:32:21 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff5:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ad:43:97:78:df:f5:c0:4e:bf:90:9c:9c:db:a5:fd:9d:94:0f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:32:21 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=13bc645c72c9d428138a3a1101b0360f96fdb4248e50c79184c714067b5574de, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:d0:c2:ac:27:9a:a5:ff:50:49:2d:66:45: 13:2d:3d:90:b6:f0:50:8d:88:79:36:7b:9e:6d:c5: 9e:0f:c5:33:59:d5:c7:e5:4e:03:56:78:57:44:9a: 78:bd:c5:ed:ad:dd:db:0f:ab:15:2c:0d:92:99:83: ed:23:cb:eb:db:5a:7c:2c:38:43:9d:c0:8e:c9:85: f0:d8:44:59:ab:ed:f7:32:42:83:52:e1:9b:1f:35: 7b:d9:6e:6e:11:58:23:3b:95:bf:29:ff:16:2a:a7: 90:6d:ec:b8:9f:39:97:32:1d:d9:e5:26:ca:cf:34: 1b:d2:d5:a1:5c:39:66:17:3d:99:a5:6b:7a:17:e2: 57:db:f0:8a:5d:95:8d:2e:ca:1b:f5:06:b3:c3:39: 27:c8:39:22:62:ff:7d:fb:ee:40:90:04:cb:ee:74: 71:9f:9e:66:59:a0:ac:c6:68:29:96:8f:b7:68:4f: af:34:65:49:93:68:c4:22:a6:d9:0b:6e:f1:95:34: ac:e1:86:49:aa:97:fe:93:96:95:fe:90:d8:82:e5: e9:83:af:1f:92:ed:97:3c:ba:34:25:14:00:3f:7b: 36:0a:aa:e2:81:c0:5e:ed:a6:d5:1c:62:03:18:87: 53:90:30:a7:56:08:26:49:bb:17:ad:c8:25:e0:9c: 08:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:11:F8:7C:12:10:CE:39:20:6A:18:38:C1:02:A7:85:08:04:DA:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1c8c053-5660-4b24-8aaa-28cebd569f74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff5:8000::/40 Signature Algorithm: sha256WithRSAEncryption 0f:18:e8:8d:46:42:e8:cb:f6:27:f3:2a:ee:67:72:72:7d:51: 68:d4:ef:e5:16:e8:ee:cd:56:67:87:b0:5b:ec:fc:42:2b:00: 2d:ad:ec:40:cb:3b:43:4a:3a:1b:52:70:f8:48:a3:31:8e:7a: d1:8a:f1:30:96:f1:5a:d6:39:f6:97:b2:92:ac:40:97:76:21: 7e:29:6f:9e:dd:57:4e:a3:b8:a1:6e:54:4f:c1:ce:40:f6:29: 53:a9:e9:ad:25:ad:b8:ba:fd:eb:21:bd:08:e4:26:03:16:b3: 79:15:9c:11:ba:c7:a4:3a:f6:97:01:59:fd:ab:13:ee:f1:03: c6:c3:f0:1a:d8:6c:48:4d:16:f1:5d:0f:d4:4c:7c:e1:07:33: 8c:1c:7e:50:e0:4a:ac:43:6d:27:bb:78:27:e3:ba:72:00:c0: 76:0b:b1:64:55:65:4e:8d:cd:eb:c1:ca:75:36:9a:8e:c7:17: fb:67:58:38:2a:ca:e9:d5:3f:78:0e:0d:0b:db:4d:6b:80:a5: d6:da:ca:6e:dc:9c:f3:fd:1e:b6:39:63:e5:5a:2a:aa:c3:93: ab:af:24:d5:89:e2:f8:e9:11:17:e4:1b:a6:b2:ed:07:84:4f: 14:0c:7b:e3:57:ab:ae:14:40:38:1e:d0:32:54:e6:d2:23:71: c2:28:5f:e5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUA61Dl3jf9cBOv5CcnNul/Z2UD2IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYzMjIxWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2JjNjQ1YzcyYzlkNDI4MTM4YTNhMTEwMWIwMzYwZjk2 ZmRiNDI0OGU1MGM3OTE4NGM3MTQwNjdiNTU3NGRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqE9DCrCeapf9QSS1mRRMtPZC28FCNiHk2e55txZ4PxTNZ 1cflTgNWeFdEmni9xe2t3dsPqxUsDZKZg+0jy+vbWnwsOEOdwI7JhfDYRFmr7fcy QoNS4ZsfNXvZbm4RWCM7lb8p/xYqp5Bt7LifOZcyHdnlJsrPNBvS1aFcOWYXPZml a3oX4lfb8IpdlY0uyhv1BrPDOSfIOSJi/3377kCQBMvudHGfnmZZoKzGaCmWj7do T680ZUmTaMQiptkLbvGVNKzhhkmql/6TlpX+kNiC5emDrx+S7Zc8ujQlFAA/ezYK quKBwF7tptUcYgMYh1OQMKdWCCZJuxetyCXgnAgHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU1BH4fBIQzjkgahg4wQKnhQgE2ogwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UxYzhjMDUzLTU2NjAtNGIyNC04YWFhLTI4Y2ViZDU2OWY3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/1gDANBgkqhkiG9w0BAQsFAAOCAQEADxjojUZC6Mv2J/Mq7mdycn1R aNTv5Rbo7s1WZ4ewW+z8QisALa3sQMs7Q0o6G1Jw+EijMY560YrxMJbxWtY59pey kqxAl3Yhfilvnt1XTqO4oW5UT8HOQPYpU6nprSWtuLr96yG9COQmAxazeRWcEbrH pDr2lwFZ/asT7vEDxsPwGthsSE0W8V0P1Ex84QczjBx+UOBKrENtJ7t4J+O6cgDA dguxZFVlTo3N68HKdTaajscX+2dYOCrK6dU/eA4NC9tNa4Cl1trKbtyc8/0etjlj 5VoqqsOTq68k1Yni+OkRF+QbprLtB4RPFAx741errhRAOB7QMlTm0iNxwihf5Q== -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:45 2025 by rpki-client