$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a394da0-b9e1-4544-b143-d3b9d73fe845.roa File: 1a394da0-b9e1-4544-b143-d3b9d73fe845.roa (raw, json) Hash identifier: IvYC5RsiZYCN4OT//3+fCCBDpmS56f+yCuvUaoP+too= Subject key identifier: 8E:6C:2F:57:9D:8B:58:D6:85:A7:F5:86:B4:76:93:37:67:F3:55:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CD83E03CBCB2C4D70681210B13C72228832D382 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a394da0-b9e1-4544-b143-d3b9d73fe845.roa Signing time: Mon 04 Aug 2025 16:11:25 +0000 ROA not before: Mon 04 Aug 2025 16:11:25 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f68:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d8:3e:03:cb:cb:2c:4d:70:68:12:10:b1:3c:72:22:88:32:d3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:11:25 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=d5076577fbc0d6334da8adefe8332cfd6748075a9fe3a632364955b4cc1daf70, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:0d:91:09:b0:cc:72:39:53:c8:0f:73:de: 02:29:27:ac:22:67:53:a6:93:ef:10:d3:11:3b:0e: 6f:e0:f8:4e:67:8c:52:2c:82:f9:9e:87:ec:36:de: 2d:97:9b:42:84:ce:e1:cd:04:70:58:93:de:5c:cf: e9:09:da:47:71:5c:7e:9b:80:d5:b9:95:d4:58:64: 13:75:19:41:5b:67:f2:b6:9a:83:5f:ae:04:69:3c: 83:6b:03:ce:60:33:83:1e:10:75:f2:9e:4e:81:ae: 85:a0:cf:36:78:62:42:2d:26:1c:8c:3c:90:4e:14: 38:d6:ec:56:ab:fd:b5:2b:43:f8:6a:0c:80:78:4a: e6:c1:93:18:8d:2f:f5:58:e0:ce:98:3b:3b:53:d9: 4a:ee:eb:fc:2c:b9:1d:58:bb:20:c1:04:cb:de:6d: 7c:73:f8:c8:51:24:a5:a9:dd:8c:55:6a:50:eb:09: 2d:38:e8:2c:de:17:b4:76:8f:e5:82:8c:97:e0:84: 0c:29:eb:b4:98:73:cc:9f:d2:1a:4f:b7:c2:21:e2: 9a:6e:45:bb:1b:41:27:06:c3:6f:21:12:93:64:c9: c3:9c:95:2a:df:f6:47:14:bd:5c:4f:75:fd:c1:de: e7:2b:06:db:95:3e:a1:0e:43:f8:b7:f6:ad:f7:28: 18:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6C:2F:57:9D:8B:58:D6:85:A7:F5:86:B4:76:93:37:67:F3:55:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a394da0-b9e1-4544-b143-d3b9d73fe845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:e000::/40 Signature Algorithm: sha256WithRSAEncryption c9:e3:81:ec:8f:18:09:ec:26:cf:68:af:a2:c2:81:ba:d5:95: de:b2:38:5d:43:7c:43:94:1e:ee:89:d2:d4:b4:59:08:47:0b: cb:77:e8:e0:74:40:aa:31:bd:2c:12:b6:d6:92:fa:a4:27:f7: 33:93:5c:bf:04:f4:24:22:f4:e8:a1:41:6a:d6:1a:f2:39:86: 93:6b:74:73:c1:ed:7c:d5:4d:49:d3:d3:50:d4:7c:92:d8:98: 16:4c:ce:53:6d:ef:df:42:21:59:0e:89:db:53:79:fd:f7:80: 72:15:3b:74:45:fd:d7:38:e7:b8:97:43:4c:59:4b:04:d9:19: cd:a7:f0:a9:52:98:5b:05:c5:e3:e3:a8:60:25:12:61:8d:9a: c4:37:96:c2:f9:34:65:7a:37:04:ef:47:20:51:32:71:04:53: ec:94:86:d7:99:d1:ff:a2:16:e1:1a:f9:62:00:52:b2:8d:8d: 21:f3:e7:ce:6f:f1:6e:2a:a1:b7:7b:7e:e6:d6:f6:8c:9f:d4: 7d:a7:c8:29:6c:80:97:fc:84:b1:0f:64:e9:7e:e5:86:18:1a: 36:bc:2b:6a:4e:90:20:35:c9:41:0b:32:47:f6:22:cf:5d:99: c3:60:86:c8:bc:7d:6e:d8:02:22:ba:a6:a5:bc:de:ea:7e:34: 57:a9:fe:14 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPNg+A8vLLE1waBIQsTxyIogy04IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTYxMTI1WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTA3NjU3N2ZiYzBkNjMzNGRhOGFkZWZlODMzMmNmZDY3 NDgwNzVhOWZlM2E2MzIzNjQ5NTViNGNjMWRhZjcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpYQ2RCbDMcjlTyA9z3gIpJ6wiZ1Omk+8Q0xE7Dm/g+E5n jFIsgvmeh+w23i2Xm0KEzuHNBHBYk95cz+kJ2kdxXH6bgNW5ldRYZBN1GUFbZ/K2 moNfrgRpPINrA85gM4MeEHXynk6BroWgzzZ4YkItJhyMPJBOFDjW7Far/bUrQ/hq DIB4SubBkxiNL/VY4M6YOztT2Uru6/wsuR1YuyDBBMvebXxz+MhRJKWp3YxValDr CS046CzeF7R2j+WCjJfghAwp67SYc8yf0hpPt8Ih4ppuRbsbQScGw28hEpNkycOc lSrf9kcUvVxPdf3B3ucrBtuVPqEOQ/i39q33KBgRAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUjmwvV52LWNaFp/WGtHaTN2fzVekwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFhMzk0ZGEwLWI5ZTEtNDU0NC1iMTQzLWQzYjlkNzNmZTg0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9o4DANBgkqhkiG9w0BAQsFAAOCAQEAyeOB7I8YCewmz2ivosKButWV 3rI4XUN8Q5Qe7onS1LRZCEcLy3fo4HRAqjG9LBK21pL6pCf3M5NcvwT0JCL06KFB atYa8jmGk2t0c8HtfNVNSdPTUNR8ktiYFkzOU23v30IhWQ6J21N5/feAchU7dEX9 1zjnuJdDTFlLBNkZzafwqVKYWwXF4+OoYCUSYY2axDeWwvk0ZXo3BO9HIFEycQRT 7JSG15nR/6IW4Rr5YgBSso2NIfPnzm/xbiqht3t+5tb2jJ/UfafIKWyAl/yEsQ9k 6X7lhhgaNrwrak6QIDXJQQsyR/Yiz12Zw2CGyLx9btgCIrqmpbze6n40V6n+FA== -----END CERTIFICATE-----Generated at Sat Aug 9 10:43:58 2025 by rpki-client