$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20755d60-bf66-4983-a6c3-090f1c287f3f.roa File: 20755d60-bf66-4983-a6c3-090f1c287f3f.roa (raw, json) Hash identifier: e5BSQYK+/0A8gg+9IJeDCeoyiRZzfUphp8eHM787U+I= Subject key identifier: 16:02:5B:4F:67:18:9D:53:87:0A:1D:E9:1E:B6:36:33:C5:49:89:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 676DAAEC064B19682F8479508EE8AC2585BFD75E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20755d60-bf66-4983-a6c3-090f1c287f3f.roa Signing time: Tue 08 Jul 2025 15:20:15 +0000 ROA not before: Tue 08 Jul 2025 15:20:15 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6d:aa:ec:06:4b:19:68:2f:84:79:50:8e:e8:ac:25:85:bf:d7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:20:15 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=42e0e09077b91e1d791e09d8b5c7c952df2a2ae1f9d015dd4f62d95e292a81d9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:54:26:bc:71:3f:58:38:48:60:a4:bb:29:16: 7b:3d:ec:eb:a0:ed:e2:3e:40:65:85:15:f5:e0:22: e8:5c:e3:a6:67:ab:6b:56:91:de:2b:10:81:5e:35: ff:e8:b9:90:0a:ea:33:b7:cd:4f:19:51:32:ec:11: b4:dc:23:8b:b1:5e:d7:61:72:d9:7c:00:72:3b:d6: 78:ae:2d:74:6f:05:28:1c:63:fc:63:2a:8e:f1:5c: 8c:c3:40:ef:6d:6e:ac:3f:dd:e2:07:79:26:e6:34: 19:f8:46:4a:69:b9:47:64:cd:b7:44:70:1d:03:53: 8b:b5:cb:85:36:9b:d1:dc:5d:0b:93:0a:93:54:0e: 97:89:eb:c7:78:6e:2e:ea:22:06:ec:a5:e7:28:98: 25:fc:24:b3:7b:ce:71:88:5e:0c:83:10:78:59:bc: 18:36:89:ce:c7:42:44:79:ae:4f:f5:15:cd:06:cb: 4b:e2:e5:05:b5:8f:11:91:85:9b:6e:ae:94:d3:07: ad:fe:63:12:a3:8b:a3:d1:0c:ba:15:45:e3:ee:21: 0f:c5:84:9c:16:94:cf:c0:50:f2:7e:04:dd:1d:60: 8a:de:79:dc:58:1a:6a:bb:ee:b4:0e:73:fc:d8:73: e2:35:3c:00:e8:40:ac:cd:6c:74:86:81:16:dd:56: fd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:02:5B:4F:67:18:9D:53:87:0A:1D:E9:1E:B6:36:33:C5:49:89:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20755d60-bf66-4983-a6c3-090f1c287f3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8010::/48 Signature Algorithm: sha256WithRSAEncryption 9c:fe:03:45:dc:25:f8:59:6e:32:45:2d:55:1f:f9:06:a6:47: 0a:fd:02:01:35:a0:dd:ba:e5:f8:d5:5a:cd:3a:b6:b7:52:28: b2:52:72:7d:78:0b:1c:77:44:d5:5d:c1:bb:08:e4:e6:31:1b: a6:6b:67:c4:67:47:59:93:2f:65:23:6e:9c:55:b7:52:b2:db: 16:c0:20:43:5e:f0:08:0d:68:30:c3:c2:db:ee:46:78:58:4f: f7:3d:e5:e7:b4:a5:ea:39:32:cc:33:d1:3d:f5:a0:dc:22:2b: 61:b7:5d:82:07:42:68:7c:7e:4f:a6:40:85:30:15:ea:df:dd: f8:d4:1a:2a:8d:73:bf:1f:ac:36:94:f9:60:cc:19:67:0e:00: cc:ab:6b:d3:19:50:64:72:f7:ba:5d:2b:1b:af:c2:2c:1e:ee: 52:2b:1c:80:02:73:f5:43:1b:dd:c5:2b:d7:23:6d:82:9d:86: f1:ff:12:a5:9a:2a:ae:b6:67:cd:b4:5f:2f:61:0a:da:58:c1: ac:ec:78:f8:bb:1a:19:c4:8a:0a:85:fb:80:2c:f5:31:a1:3b: a9:5c:90:31:28:0d:5d:33:a7:1a:73:d4:00:ef:5f:03:2e:2f: 0a:44:ac:0c:0d:9d:18:dc:d5:75:97:00:d4:47:d1:37:94:be: 3f:d4:7a:16 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZ22q7AZLGWgvhHlQjuisJYW/114wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTUyMDE1WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmUwZTA5MDc3YjkxZTFkNzkxZTA5ZDhiNWM3Yzk1MmRm MmEyYWUxZjlkMDE1ZGQ0ZjYyZDk1ZTI5MmE4MWQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbVCa8cT9YOEhgpLspFns97Oug7eI+QGWFFfXgIuhc46Zn q2tWkd4rEIFeNf/ouZAK6jO3zU8ZUTLsEbTcI4uxXtdhctl8AHI71niuLXRvBSgc Y/xjKo7xXIzDQO9tbqw/3eIHeSbmNBn4RkppuUdkzbdEcB0DU4u1y4U2m9HcXQuT CpNUDpeJ68d4bi7qIgbspecomCX8JLN7znGIXgyDEHhZvBg2ic7HQkR5rk/1Fc0G y0vi5QW1jxGRhZturpTTB63+YxKji6PRDLoVRePuIQ/FhJwWlM/AUPJ+BN0dYIre edxYGmq77rQOc/zYc+I1PADoQKzNbHSGgRbdVv2ZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFgJbT2cYnVOHCh3pHrY2M8VJiewwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwNzU1ZDYwLWJmNjYtNDk4My1hNmMzLTA5MGYxYzI4N2YzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gBAwDQYJKoZIhvcNAQELBQADggEBAJz+A0XcJfhZbjJFLVUf+Qam Rwr9AgE1oN265fjVWs06trdSKLJScn14Cxx3RNVdwbsI5OYxG6ZrZ8RnR1mTL2Uj bpxVt1Ky2xbAIENe8AgNaDDDwtvuRnhYT/c95ee0peo5Mswz0T31oNwiK2G3XYIH Qmh8fk+mQIUwFerf3fjUGiqNc78frDaU+WDMGWcOAMyra9MZUGRy97pdKxuvwiwe 7lIrHIACc/VDG93FK9cjbYKdhvH/EqWaKq62Z820Xy9hCtpYwazsePi7GhnEigqF +4As9TGhO6lckDEoDV0zpxpz1ADvXwMuLwpErAwNnRjc1XWXANRH0TeUvj/UehY= -----END CERTIFICATE-----Generated at Thu Jul 31 01:20:31 2025 by rpki-client