$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a6a9cde-4097-41e7-b371-fbd2675c3ba1.roa File: 1a6a9cde-4097-41e7-b371-fbd2675c3ba1.roa (raw, json) Hash identifier: tA9+k01/pYTKjP9St6h/3l5E++pSHw8p7+Z38yM4E7Y= Subject key identifier: 08:BA:9A:0B:72:3E:BE:0D:E6:83:D2:31:F3:72:8F:69:33:8E:78:33 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 09BD4CECFA946B6491FE9B76B7E2362F2BAC2235 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a6a9cde-4097-41e7-b371-fbd2675c3ba1.roa Signing time: Mon 21 Jul 2025 15:50:21 +0000 ROA not before: Mon 21 Jul 2025 15:50:21 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:1080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:bd:4c:ec:fa:94:6b:64:91:fe:9b:76:b7:e2:36:2f:2b:ac:22:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 15:50:21 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=a9aab1d3fa344dc60d9df1c228c7c25469cad7a28dd39f89ae652a5c00cca373, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:50:bc:bd:3c:94:8f:ad:50:d2:10:bf:af: 6f:02:a7:3c:ce:1d:de:d7:fb:f0:86:6b:99:88:6b: 60:6a:d3:a0:54:8f:81:e7:1b:fc:e3:40:7b:df:44: 93:8c:75:9f:3d:2d:be:9a:71:f1:0b:7a:3d:74:b1: d8:98:9f:ed:03:7c:c8:f5:71:14:7a:17:4b:b4:ac: bc:11:94:98:bb:36:20:a8:30:32:28:66:e3:0b:cf: ba:5b:06:13:99:93:35:77:1e:9a:9d:6e:04:dd:b2: ae:d1:93:09:f5:81:99:00:fb:82:ab:2c:4a:35:4e: db:5d:b4:79:fe:bb:d3:d0:e1:9b:de:59:43:13:3a: 11:53:b0:a3:b8:b8:5f:3e:2d:cd:ae:e0:c0:d7:07: 97:5b:a9:cd:86:7e:0b:35:8f:d6:18:b4:da:92:fb: 0f:aa:c5:cb:3d:ba:38:11:ae:a8:4b:8d:69:6b:11: fc:aa:cc:13:a5:0f:74:d9:ac:50:f4:b4:4d:bf:6f: 85:40:21:9a:42:05:68:02:fe:33:c5:96:15:64:96: dd:0d:c2:c3:58:30:96:8a:d1:3e:6a:61:42:1f:fb: 07:ad:9a:04:6a:cb:20:11:86:3e:56:85:89:b4:3b: 56:64:c1:ee:56:a2:b2:ae:ce:11:71:0e:fc:7d:5a: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BA:9A:0B:72:3E:BE:0D:E6:83:D2:31:F3:72:8F:69:33:8E:78:33 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a6a9cde-4097-41e7-b371-fbd2675c3ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:1080::/46 Signature Algorithm: sha256WithRSAEncryption c9:f8:ad:15:86:6b:b9:29:5e:68:47:44:9a:a4:3d:98:f1:f2: 5f:a8:65:78:3d:9c:5a:eb:f8:5e:49:b4:75:f4:e6:c4:62:81: c5:de:c7:3e:3a:ca:53:e2:59:44:26:b4:d9:46:7e:69:c2:29: 09:a7:b9:cc:ad:22:5b:b3:e9:84:3d:ec:30:de:61:62:a3:27: f3:d8:95:5a:96:e5:78:f7:f4:6f:1f:cf:b2:4b:97:7f:37:a3: 97:e8:c6:da:29:01:bc:91:1b:e1:4f:b2:c8:4d:5d:f0:3c:ab: 02:c6:45:5e:b7:63:f7:7c:8a:fc:3e:76:0c:67:b3:99:c8:cf: 6d:03:f9:53:b0:32:06:8b:63:f5:c0:aa:07:59:87:00:45:35: 17:12:fd:e3:13:d1:4e:85:7b:94:bb:ab:64:c4:ce:db:7b:04: 17:be:47:c6:79:cc:92:bb:b0:ed:7f:35:0a:cc:29:9c:6f:ea: 81:a7:84:68:c1:1f:c9:1f:6c:fa:8a:70:51:bf:19:87:76:c8: a8:68:7c:2e:b3:3d:1e:e6:73:92:3b:7c:51:b9:7d:6f:94:c0: 29:1e:af:c0:db:40:d2:5a:33:57:ae:31:62:a5:4a:c5:4b:eb: 8f:8d:b5:99:7f:ff:64:9f:40:cc:7e:2b:0e:57:5e:9f:12:a2: 91:04:22:24 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCb1M7PqUa2SR/pt2t+I2LyusIjUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIxMTU1MDIxWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWFhYjFkM2ZhMzQ0ZGM2MGQ5ZGYxYzIyOGM3YzI1NDY5 Y2FkN2EyOGRkMzlmODlhZTY1MmE1YzAwY2NhMzczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw2FC8vTyUj61Q0hC/r28CpzzOHd7X+/CGa5mIa2Bq06BU j4HnG/zjQHvfRJOMdZ89Lb6acfELej10sdiYn+0DfMj1cRR6F0u0rLwRlJi7NiCo MDIoZuMLz7pbBhOZkzV3HpqdbgTdsq7Rkwn1gZkA+4KrLEo1TttdtHn+u9PQ4Zve WUMTOhFTsKO4uF8+Lc2u4MDXB5dbqc2Gfgs1j9YYtNqS+w+qxcs9ujgRrqhLjWlr EfyqzBOlD3TZrFD0tE2/b4VAIZpCBWgC/jPFlhVklt0NwsNYMJaK0T5qYUIf+wet mgRqyyARhj5WhYm0O1Zkwe5WorKuzhFxDvx9WprNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCLqaC3I+vg3mg9Ix83KPaTOOeDMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFhNmE5Y2RlLTQwOTctNDFlNy1iMzcxLWZiZDI2NzVjM2JhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zEIAwDQYJKoZIhvcNAQELBQADggEBAMn4rRWGa7kpXmhHRJqkPZjx 8l+oZXg9nFrr+F5JtHX05sRigcXexz46ylPiWUQmtNlGfmnCKQmnucytIluz6YQ9 7DDeYWKjJ/PYlVqW5Xj39G8fz7JLl383o5foxtopAbyRG+FPsshNXfA8qwLGRV63 Y/d8ivw+dgxns5nIz20D+VOwMgaLY/XAqgdZhwBFNRcS/eMT0U6Fe5S7q2TEztt7 BBe+R8Z5zJK7sO1/NQrMKZxv6oGnhGjBH8kfbPqKcFG/GYd2yKhofC6zPR7mc5I7 fFG5fW+UwCker8DbQNJaM1euMWKlSsVL64+NtZl//2SfQMx+Kw5XXp8SopEEIiQ= -----END CERTIFICATE-----Generated at Wed Aug 6 05:57:54 2025 by rpki-client