$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06949152-cfca-4c1f-8bc3-ddc8ebe9a3ab.roa File: 06949152-cfca-4c1f-8bc3-ddc8ebe9a3ab.roa (raw, json) Hash identifier: QFIR+ajTq9VzHBWw9SKkD9HH04XdzDcuikjz5dmD4ao= Subject key identifier: 1C:F8:95:48:68:FB:00:E3:D9:A7:19:21:C1:11:AB:50:7F:39:AC:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 554AC24F0BBA5B8D3B90FCC60CF3AD64CA96A4E1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06949152-cfca-4c1f-8bc3-ddc8ebe9a3ab.roa Signing time: Mon 04 Aug 2025 17:00:29 +0000 ROA not before: Mon 04 Aug 2025 17:00:29 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f10:c000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4a:c2:4f:0b:ba:5b:8d:3b:90:fc:c6:0c:f3:ad:64:ca:96:a4:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:00:29 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=bae77681ad06cd20788ed8042c17421b470bc2e6d4fff1af8c08efd835d0b139, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:de:69:30:e9:57:d3:25:ff:03:d0:68:f5: 5d:81:bd:ca:d3:34:62:ef:3b:e3:3a:d2:39:02:cb: 02:7c:2f:e5:7a:93:31:72:1a:97:27:92:8e:53:0a: 63:ea:eb:65:d5:4d:2e:56:f6:28:ee:90:9b:af:91: 9f:87:52:08:05:2b:99:5f:07:58:c0:52:c4:26:c8: 78:d0:c0:37:b2:e5:4b:7a:2c:21:bf:fb:e5:b0:a9: f5:f0:3e:f5:69:ee:e3:bd:ba:39:60:34:ae:98:69: 38:1f:8f:6c:ae:20:5d:64:54:78:7a:0a:18:bd:46: 17:0b:0c:f0:d4:7b:db:72:6d:71:fa:74:d2:02:31: 3d:76:81:81:12:b5:a7:6b:cc:83:6e:7e:28:82:cb: 2f:94:05:1e:4c:2d:26:d8:fe:61:6e:99:6b:c1:11: 70:7c:c3:87:74:d5:b8:4c:f5:38:97:43:2a:0d:3a: 33:8a:3f:1b:48:fb:cd:4d:13:f6:28:03:2c:2d:67: ba:53:26:58:ff:80:28:9c:57:38:58:ea:40:47:d8: 4c:31:5d:80:a4:27:38:52:8d:30:95:53:12:72:aa: 4c:cf:9e:a8:14:89:50:1e:10:0a:e3:77:b4:29:41: e2:81:58:61:f9:4a:bc:bb:98:39:b3:78:85:e3:c8: de:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F8:95:48:68:FB:00:E3:D9:A7:19:21:C1:11:AB:50:7F:39:AC:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06949152-cfca-4c1f-8bc3-ddc8ebe9a3ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f10:c000::/37 Signature Algorithm: sha256WithRSAEncryption 18:1c:8f:4c:2a:8c:e2:9b:c0:06:4e:22:f1:11:0d:a5:e3:c0: 6c:78:98:86:8b:12:56:76:96:ed:f0:7f:09:23:f2:05:be:a8: 63:77:76:53:28:86:4f:0f:fc:51:61:04:c5:f0:b5:9e:1d:1b: 7b:f1:69:6a:3e:23:2e:03:11:63:33:35:46:75:0b:31:e7:89: 79:b7:72:9a:1d:50:1e:48:3e:fd:3b:57:e0:62:17:0a:3f:41: fd:f0:1b:da:48:9d:b5:6f:77:a1:8c:13:58:a7:25:59:af:8a: ba:48:93:df:f7:22:69:4f:6a:05:a0:3d:dc:8e:36:31:e1:97: 0c:3d:fc:fb:d9:9b:b6:24:8f:51:6e:eb:bf:23:28:59:aa:87: a9:b1:5e:55:68:39:de:48:72:ef:7c:3d:e5:11:00:6d:d2:94: 6a:4e:06:6d:8d:6b:49:a1:53:c4:28:2d:c9:20:8b:44:49:08: 0d:70:e5:83:d6:58:2c:a4:c6:f4:85:89:f7:f2:5a:7d:ca:08: ae:d4:ce:ad:e9:e1:09:47:82:97:3a:42:1f:6f:fb:bf:62:1c: 35:4b:c0:ae:36:fa:6a:27:b2:0d:f9:64:4d:cd:eb:03:33:b5: bf:02:f6:2e:69:c4:ce:3b:33:84:3f:3f:2e:8e:df:5b:10:85: f2:b9:37:1e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVUrCTwu6W407kPzGDPOtZMqWpOEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTcwMDI5WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYWU3NzY4MWFkMDZjZDIwNzg4ZWQ4MDQyYzE3NDIxYjQ3 MGJjMmU2ZDRmZmYxYWY4YzA4ZWZkODM1ZDBiMTM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3P95pMOlX0yX/A9Bo9V2BvcrTNGLvO+M60jkCywJ8L+V6 kzFyGpcnko5TCmPq62XVTS5W9ijukJuvkZ+HUggFK5lfB1jAUsQmyHjQwDey5Ut6 LCG/++WwqfXwPvVp7uO9ujlgNK6YaTgfj2yuIF1kVHh6Chi9RhcLDPDUe9tybXH6 dNICMT12gYEStadrzINufiiCyy+UBR5MLSbY/mFumWvBEXB8w4d01bhM9TiXQyoN OjOKPxtI+81NE/YoAywtZ7pTJlj/gCicVzhY6kBH2EwxXYCkJzhSjTCVUxJyqkzP nqgUiVAeEArjd7QpQeKBWGH5Sry7mDmzeIXjyN7bAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHPiVSGj7AOPZpxkhwRGrUH85rCAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2OTQ5MTUyLWNmY2EtNGMxZi04YmMzLWRkYzhlYmU5YTNhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8QwDANBgkqhkiG9w0BAQsFAAOCAQEAGByPTCqM4pvABk4i8RENpePA bHiYhosSVnaW7fB/CSPyBb6oY3d2UyiGTw/8UWEExfC1nh0be/Fpaj4jLgMRYzM1 RnULMeeJebdymh1QHkg+/TtX4GIXCj9B/fAb2kidtW93oYwTWKclWa+KukiT3/ci aU9qBaA93I42MeGXDD38+9mbtiSPUW7rvyMoWaqHqbFeVWg53khy73w95REAbdKU ak4GbY1rSaFTxCgtySCLREkIDXDlg9ZYLKTG9IWJ9/JafcoIrtTOrenhCUeClzpC H2/7v2IcNUvArjb6aieyDflkTc3rAzO1vwL2LmnEzjszhD8/Lo7fWxCF8rk3Hg== -----END CERTIFICATE-----Generated at Tue Aug 5 17:23:36 2025 by rpki-client