$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddd7f531-58ac-44ff-acae-8c4e40bfb198.roa File: ddd7f531-58ac-44ff-acae-8c4e40bfb198.roa (raw, json) Hash identifier: h5qnT1p2hgknSdJ6/hQ7mFGVw9xz35Neg9UXT4o+1Jk= Subject key identifier: E8:3B:DC:BB:A8:D0:3A:D3:FE:9D:24:92:D9:F4:77:44:4A:CC:F3:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0552A520A7E9EF2D6686FF663C52E083231CD4B3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddd7f531-58ac-44ff-acae-8c4e40bfb198.roa Signing time: Wed 23 Jul 2025 00:40:21 +0000 ROA not before: Wed 23 Jul 2025 00:40:21 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff4:7400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:52:a5:20:a7:e9:ef:2d:66:86:ff:66:3c:52:e0:83:23:1c:d4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:40:21 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=d5346488c724466bb7f3c6a73965c8394224cc9aea1ad2d8ade04c2575878bce, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:ea:bc:44:c6:20:69:62:1f:71:80:c1:36: 78:9b:9a:a5:5b:67:5c:59:f2:07:e1:73:6e:69:8f: 44:0d:9f:ad:c7:28:5f:b7:04:9d:11:51:68:da:2c: c0:16:07:f4:84:c3:c0:57:51:7b:9f:8d:50:3f:5f: e7:65:11:06:ba:aa:11:af:0f:df:9a:8c:ad:a8:b8: d3:8f:14:b3:4d:79:b9:2c:e3:2d:ea:9c:ff:3a:ae: 25:f1:9c:80:81:62:68:52:e8:ac:f0:a5:3d:61:4d: e2:84:7d:59:0a:7f:cd:16:b9:ba:59:b0:0f:de:68: 80:8b:db:f1:16:a5:52:ce:9a:71:85:9a:ad:3b:b8: 0c:d4:8f:f9:43:4b:87:c4:a1:02:ba:f8:31:e3:45: 5c:cb:62:61:ff:bb:ee:bd:45:72:d7:3d:ca:fa:4e: 96:3e:f1:91:d1:71:36:c2:68:ff:b1:fc:78:a8:62: 09:1f:1d:0a:e0:ad:d9:29:42:d8:27:79:06:66:e1: 00:a4:0e:cf:8c:fb:b7:55:78:d2:2f:55:b3:a4:31: 17:f5:4c:fc:fe:00:23:73:a4:ff:c0:63:f5:e4:1e: 96:3b:04:97:22:ea:6f:48:a3:85:13:5d:2f:80:84: 11:2e:57:fe:38:85:d5:25:5f:ce:c2:ff:df:ee:b9: 33:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3B:DC:BB:A8:D0:3A:D3:FE:9D:24:92:D9:F4:77:44:4A:CC:F3:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddd7f531-58ac-44ff-acae-8c4e40bfb198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:7400::/40 Signature Algorithm: sha256WithRSAEncryption c1:48:15:41:7f:2b:c8:5e:e2:53:8d:42:3d:2b:7d:2a:ef:22: 23:88:7e:1e:cc:e6:a3:14:8c:e5:18:36:fe:84:80:bc:01:27: f8:c1:06:81:49:2f:89:6b:26:c5:a2:f7:94:fb:cf:89:5c:63: 25:a7:c6:f9:63:4e:2b:ee:85:38:13:c1:44:8f:9c:fa:66:ab: 50:e3:ea:5a:7a:9b:d7:8b:f2:eb:f5:f6:a1:a5:d0:23:a4:e3: fc:f1:dc:11:6a:59:b5:39:05:6d:e4:39:2a:c5:d8:3e:a2:ab: ce:48:5d:97:a4:61:ec:d2:99:3c:9a:fa:63:ac:a0:ec:19:74: 21:d8:16:fc:25:cb:13:e1:24:6c:ef:7a:3e:92:3d:3e:92:49: 4f:ac:13:cf:ea:e8:b0:47:d0:83:9b:aa:a3:23:c0:1e:e1:2c: d7:af:6e:ea:0f:19:be:7d:99:ba:e1:af:29:12:90:ad:7c:63: 36:79:ca:af:bd:e0:c7:03:e3:76:d8:03:dc:34:2f:d5:b9:07: e3:4f:af:12:39:b1:fc:18:19:e7:ff:4d:0c:e0:51:d3:64:8e: 6e:db:0c:ae:d9:75:a1:81:48:13:d9:5c:87:0c:7b:fc:2b:c3: 8c:92:b2:c1:14:6e:8b:8b:4f:b0:a3:1b:84:ee:a5:f4:79:d4: 26:9c:7e:f0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBVKlIKfp7y1mhv9mPFLggyMc1LMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDA0MDIxWhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTM0NjQ4OGM3MjQ0NjZiYjdmM2M2YTczOTY1YzgzOTQy MjRjYzlhZWExYWQyZDhhZGUwNGMyNTc1ODc4YmNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw6Oq8RMYgaWIfcYDBNnibmqVbZ1xZ8gfhc25pj0QNn63H KF+3BJ0RUWjaLMAWB/SEw8BXUXufjVA/X+dlEQa6qhGvD9+ajK2ouNOPFLNNebks 4y3qnP86riXxnICBYmhS6KzwpT1hTeKEfVkKf80WubpZsA/eaICL2/EWpVLOmnGF mq07uAzUj/lDS4fEoQK6+DHjRVzLYmH/u+69RXLXPcr6TpY+8ZHRcTbCaP+x/Hio YgkfHQrgrdkpQtgneQZm4QCkDs+M+7dVeNIvVbOkMRf1TPz+ACNzpP/AY/XkHpY7 BJci6m9Io4UTXS+AhBEuV/44hdUlX87C/9/uuTN3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU6Dvcu6jQOtP+nSSS2fR3RErM8ykwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RkZDdmNTMxLTU4YWMtNDRmZi1hY2FlLThjNGU0MGJmYjE5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/0dDANBgkqhkiG9w0BAQsFAAOCAQEAwUgVQX8ryF7iU41CPSt9Ku8i I4h+HszmoxSM5Rg2/oSAvAEn+MEGgUkviWsmxaL3lPvPiVxjJafG+WNOK+6FOBPB RI+c+marUOPqWnqb14vy6/X2oaXQI6Tj/PHcEWpZtTkFbeQ5KsXYPqKrzkhdl6Rh 7NKZPJr6Y6yg7Bl0IdgW/CXLE+EkbO96PpI9PpJJT6wTz+rosEfQg5uqoyPAHuEs 169u6g8Zvn2ZuuGvKRKQrXxjNnnKr73gxwPjdtgD3DQv1bkH40+vEjmx/BgZ5/9N DOBR02SObtsMrtl1oYFIE9lchwx7/CvDjJKywRRui4tPsKMbhO6l9HnUJpx+8A== -----END CERTIFICATE-----Generated at Thu Jul 31 01:14:49 2025 by rpki-client