$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b07534e-bc1a-4174-b382-3a0d284bf978.roa File: 9b07534e-bc1a-4174-b382-3a0d284bf978.roa (raw, json) Hash identifier: MUk1MuZ9g1em1V4wrXRLzAtU9cUNTqMLwQ+IIBaDf8w= Subject key identifier: E5:E0:C3:A4:0F:20:D3:B2:33:E6:4C:5E:72:C9:84:4B:D7:40:4F:2A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 14D49DC0954C7DC8D5872711DB264FDB666BB824 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b07534e-bc1a-4174-b382-3a0d284bf978.roa Signing time: Tue 08 Jul 2025 15:51:04 +0000 ROA not before: Tue 08 Jul 2025 15:51:04 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:4180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d4:9d:c0:95:4c:7d:c8:d5:87:27:11:db:26:4f:db:66:6b:b8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:51:04 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=b3b1e41e431ff640d5cf1ff85870f2e959441be7ccd62734b827e0b9ffedd8d3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6b:25:51:23:8a:95:4a:4e:0a:50:8f:14:15: c0:fb:29:a5:36:bc:99:27:d4:f9:98:a8:eb:fe:0f: d7:26:91:e1:ae:ac:cd:fd:db:80:d7:e2:db:ed:60: eb:c8:b2:25:3e:c6:da:7c:0e:7b:e9:44:ab:0d:22: a2:68:34:3d:41:82:21:79:d7:02:1c:b8:d7:6d:24: ea:0e:7b:3c:bb:99:ad:02:d9:f7:61:d9:77:ef:cc: c5:01:ad:91:8f:62:9c:63:48:6c:3a:6e:23:80:fa: 2a:80:cd:51:31:e7:a8:f9:59:6f:f0:6c:6e:ee:3a: 6a:19:28:ff:37:c2:47:3a:71:a8:bd:0b:a1:60:70: 2e:55:31:c9:a4:a7:d7:8c:df:7b:b4:45:9d:44:e9: d0:23:e0:25:50:2a:59:87:89:fb:98:41:81:21:a0: 2b:6a:75:ba:ec:50:bf:c5:69:01:1e:7b:ad:d6:a5: 5f:b7:ec:23:bd:c2:e5:df:49:3b:e2:cd:9d:88:ec: 4b:e6:78:f3:19:b2:3b:7a:ef:ef:96:2a:21:3e:53: 67:d1:d6:f4:49:4e:88:be:40:61:a0:de:ae:7d:f7: 12:5a:1e:9e:81:90:3f:c8:ed:8a:f6:c9:62:a7:cc: 3f:79:07:ab:90:89:c6:7d:b9:80:bf:c9:60:f0:29: 20:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E0:C3:A4:0F:20:D3:B2:33:E6:4C:5E:72:C9:84:4B:D7:40:4F:2A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b07534e-bc1a-4174-b382-3a0d284bf978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:4180::/48 Signature Algorithm: sha256WithRSAEncryption 1d:43:49:31:44:d4:c0:62:40:a0:d8:7d:31:9a:0f:ae:fe:05: eb:7a:76:17:5a:32:56:80:52:d8:67:4e:e8:ee:fd:e7:cd:ea: b5:54:ac:63:e0:37:48:db:90:6a:5e:6c:61:90:16:4e:2d:f8: 4d:81:3b:f3:a9:67:63:29:11:35:82:aa:56:b3:18:4d:c9:e6: 30:ee:c6:06:71:80:0d:de:94:fe:41:4f:e4:c2:b3:06:26:9b: e4:f6:71:32:83:51:17:3a:ea:02:fb:58:d6:a2:ac:29:ed:a2: 6e:51:bf:92:84:81:e4:ac:5c:cd:74:c6:25:7d:52:f7:84:50: dd:ca:ac:be:ce:73:ac:89:f6:ca:95:ca:02:df:d6:48:1a:30: 91:27:b9:94:0f:80:e2:b0:5b:fc:cc:b4:4b:dd:dc:58:de:3b: e3:8e:a5:a2:68:10:24:f5:c0:ae:f5:f2:00:e2:ec:7a:31:30: 06:80:57:61:ee:ba:94:45:cb:86:2d:71:96:ac:e8:6a:f2:b8: 78:b3:3b:7e:3d:30:25:3c:06:3c:d9:a9:d5:f3:59:cb:79:96: 4f:82:ed:f4:b2:89:7e:89:7c:63:63:44:cc:0a:c3:f0:88:f1: e1:13:21:47:cf:89:5c:84:63:c0:9d:93:d9:aa:a8:73:35:c8: 65:da:a3:d3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFNSdwJVMfcjVhycR2yZP22ZruCQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTU1MTA0WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2IxZTQxZTQzMWZmNjQwZDVjZjFmZjg1ODcwZjJlOTU5 NDQxYmU3Y2NkNjI3MzRiODI3ZTBiOWZmZWRkOGQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQayVRI4qVSk4KUI8UFcD7KaU2vJkn1PmYqOv+D9cmkeGu rM3924DX4tvtYOvIsiU+xtp8DnvpRKsNIqJoND1BgiF51wIcuNdtJOoOezy7ma0C 2fdh2XfvzMUBrZGPYpxjSGw6biOA+iqAzVEx56j5WW/wbG7uOmoZKP83wkc6cai9 C6FgcC5VMcmkp9eM33u0RZ1E6dAj4CVQKlmHifuYQYEhoCtqdbrsUL/FaQEee63W pV+37CO9wuXfSTvizZ2I7EvmePMZsjt67++WKiE+U2fR1vRJToi+QGGg3q599xJa Hp6BkD/I7Yr2yWKnzD95B6uQicZ9uYC/yWDwKSCrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5eDDpA8g07Iz5kxecsmES9dATyowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliMDc1MzRlLWJjMWEtNDE3NC1iMzgyLTNhMGQyODRiZjk3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AQYAwDQYJKoZIhvcNAQELBQADggEBAB1DSTFE1MBiQKDYfTGaD67+ Bet6dhdaMlaAUthnTuju/efN6rVUrGPgN0jbkGpebGGQFk4t+E2BO/OpZ2MpETWC qlazGE3J5jDuxgZxgA3elP5BT+TCswYmm+T2cTKDURc66gL7WNairCntom5Rv5KE geSsXM10xiV9UveEUN3KrL7Oc6yJ9sqVygLf1kgaMJEnuZQPgOKwW/zMtEvd3Fje O+OOpaJoECT1wK718gDi7HoxMAaAV2HuupRFy4YtcZas6GryuHizO349MCU8BjzZ qdXzWct5lk+C7fSyiX6JfGNjRMwKw/CI8eETIUfPiVyEY8Cdk9mqqHM1yGXao9M= -----END CERTIFICATE-----Generated at Thu Jul 31 01:12:18 2025 by rpki-client