$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20bc2686-ecbe-4028-a625-050eb5987b44.roa File: 20bc2686-ecbe-4028-a625-050eb5987b44.roa (raw, json) Hash identifier: ORpn8RQRLgupiv2qak9VOr6cYu7iprR7HHa2JBuA9Nk= Subject key identifier: AA:16:29:E1:33:4F:42:B4:3F:B1:16:ED:63:6A:2A:F8:1F:A6:76:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 367898457389D61DBC66034F28070637DC1DD682 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20bc2686-ecbe-4028-a625-050eb5987b44.roa Signing time: Mon 07 Jul 2025 18:01:16 +0000 ROA not before: Mon 07 Jul 2025 18:01:16 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:78:98:45:73:89:d6:1d:bc:66:03:4f:28:07:06:37:dc:1d:d6:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 18:01:16 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=29de10100dc09f240613444f0289a2d6277452cdc680a9d3e9e08bc95fb0f196, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:ce:8c:2e:88:57:c3:60:cf:d0:21:73:81: 25:36:40:cc:16:f8:c0:15:10:ed:7f:b0:fa:4b:a8: dc:26:05:34:9d:54:02:7e:47:6d:d1:63:8c:c0:70: 3f:be:23:32:9a:4e:19:d1:a5:e2:2b:10:66:4c:6b: 0b:0a:0c:32:0f:e1:3c:e1:c6:00:f0:6b:d7:5c:b8: 7f:fa:3e:a7:17:a0:47:7f:59:b0:6b:d3:61:5a:87: d4:c3:72:6d:f0:0e:be:e5:9c:4c:23:ed:c1:c0:38: 5d:83:15:17:5f:eb:6d:41:ef:d6:e3:be:44:cf:a2: 63:b3:ce:41:85:f0:4f:54:69:4a:ad:c4:40:e1:1f: d4:cc:2b:2d:55:de:36:f5:eb:20:4d:8d:00:4e:88: 54:7b:57:6b:4c:08:e8:bb:74:64:87:16:45:7f:06: 93:fb:e8:07:6a:32:31:c5:19:59:b0:12:e6:8c:a4: 9a:c2:e0:fd:47:f3:5a:54:5d:7c:af:b3:73:c3:64: a8:9d:91:6e:e4:72:27:9e:64:61:ac:b3:20:ac:17: 53:e4:de:d5:52:cb:23:64:03:78:64:98:c6:e3:2e: 82:c0:e7:49:d6:2a:4e:4f:cf:5f:14:76:13:d3:2b: 76:6b:64:83:75:9c:89:90:11:19:b5:52:95:b3:c1: 00:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:16:29:E1:33:4F:42:B4:3F:B1:16:ED:63:6A:2A:F8:1F:A6:76:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20bc2686-ecbe-4028-a625-050eb5987b44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:6040::/48 Signature Algorithm: sha256WithRSAEncryption 05:a8:ae:36:1b:35:6f:ce:2b:61:10:17:33:4e:78:81:a7:7f: ef:24:01:b4:05:07:85:88:6c:8d:47:24:d0:2d:fe:2c:f0:35: 25:2f:6d:6d:5d:aa:9f:0b:02:ff:46:34:54:6a:7d:0f:0d:42: af:d5:10:f6:0a:3c:48:60:9d:bb:36:1e:a7:63:da:44:6d:0d: bd:36:7b:8f:42:5f:4c:0a:fd:61:f8:04:bb:19:7f:07:03:bd: ec:41:61:db:37:4e:10:5f:f6:0e:20:2e:f8:93:6e:a2:58:d1: 0a:df:b5:db:9d:f7:ad:74:4f:9b:cf:61:db:b8:ee:e1:85:74: 30:a7:13:36:68:1f:45:8f:32:f1:b1:9e:5d:26:aa:3d:1c:d4: 2a:ae:fe:bd:02:d3:da:d3:10:34:de:3a:fe:46:96:63:a4:dd: d9:c7:a6:a9:f8:5c:55:fa:8e:b3:ee:63:05:26:37:2a:8e:67: f2:92:d4:57:d1:72:fd:51:de:5d:85:96:e4:89:e2:a9:06:73: c1:22:9a:ef:5e:65:db:d6:c4:86:2f:97:f2:fa:56:33:92:2f: 51:e7:33:63:3c:c0:e9:36:1b:1d:ba:08:f1:37:4b:cd:d1:c9: a9:5a:65:d3:b5:27:17:1c:88:b2:3a:50:86:83:28:16:a7:84: ea:13:d0:30 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNniYRXOJ1h28ZgNPKAcGN9wd1oIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTgwMTE2WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWRlMTAxMDBkYzA5ZjI0MDYxMzQ0NGYwMjg5YTJkNjI3 NzQ1MmNkYzY4MGE5ZDNlOWUwOGJjOTVmYjBmMTk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4lc6MLohXw2DP0CFzgSU2QMwW+MAVEO1/sPpLqNwmBTSd VAJ+R23RY4zAcD++IzKaThnRpeIrEGZMawsKDDIP4TzhxgDwa9dcuH/6PqcXoEd/ WbBr02Fah9TDcm3wDr7lnEwj7cHAOF2DFRdf621B79bjvkTPomOzzkGF8E9UaUqt xEDhH9TMKy1V3jb16yBNjQBOiFR7V2tMCOi7dGSHFkV/BpP76AdqMjHFGVmwEuaM pJrC4P1H81pUXXyvs3PDZKidkW7kcieeZGGssyCsF1Pk3tVSyyNkA3hkmMbjLoLA 50nWKk5Pz18UdhPTK3ZrZIN1nImQERm1UpWzwQB5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqhYp4TNPQrQ/sRbtY2oq+B+mdlAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwYmMyNjg2LWVjYmUtNDAyOC1hNjI1LTA1MGViNTk4N2I0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//YEAwDQYJKoZIhvcNAQELBQADggEBAAWorjYbNW/OK2EQFzNOeIGn f+8kAbQFB4WIbI1HJNAt/izwNSUvbW1dqp8LAv9GNFRqfQ8NQq/VEPYKPEhgnbs2 Hqdj2kRtDb02e49CX0wK/WH4BLsZfwcDvexBYds3ThBf9g4gLviTbqJY0Qrftdud 9610T5vPYdu47uGFdDCnEzZoH0WPMvGxnl0mqj0c1Cqu/r0C09rTEDTeOv5GlmOk 3dnHpqn4XFX6jrPuYwUmNyqOZ/KS1FfRcv1R3l2FluSJ4qkGc8Eimu9eZdvWxIYv l/L6VjOSL1HnM2M8wOk2Gx26CPE3S83RyalaZdO1JxcciLI6UIaDKBanhOoT0DA= -----END CERTIFICATE-----Generated at Thu Jul 31 01:16:18 2025 by rpki-client