$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2020d046-f9b3-4986-b073-ec35b8706f74.roa File: 2020d046-f9b3-4986-b073-ec35b8706f74.roa (raw, json) Hash identifier: 8WCGmm3cQhBLFRIfTrLB3LzMRecWHU7i2DQCvCjuBhk= Subject key identifier: 20:CB:2A:BD:E1:82:9F:2D:69:D9:DF:F1:09:3E:F4:BA:CD:A6:19:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 46945AC45AD86E2E6BAB0F293AB9BCCB35B6FD9D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2020d046-f9b3-4986-b073-ec35b8706f74.roa Signing time: Mon 04 Aug 2025 16:20:29 +0000 ROA not before: Mon 04 Aug 2025 16:20:29 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f36:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:94:5a:c4:5a:d8:6e:2e:6b:ab:0f:29:3a:b9:bc:cb:35:b6:fd:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:20:29 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=68bceaf35d656f6c452f2bee274187879b8f96aa61ccf7bf9b06203b17f92678, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:4b:42:34:b3:7c:e6:38:74:a5:be:4c:8e: 36:97:6d:a7:27:9a:4d:61:c5:b2:44:19:ed:05:7a: 32:80:5c:c9:9d:0f:ea:2f:44:0c:f8:01:34:17:0d: 5f:c2:ab:25:a4:76:20:aa:37:eb:74:c4:82:6b:0c: 1e:41:53:b0:45:80:ef:55:04:69:eb:90:48:42:40: a4:87:fe:43:aa:7b:45:0e:29:a7:f2:ac:fe:fd:ac: c2:ce:c5:7a:05:39:80:0e:bc:34:00:2b:08:39:93: e5:2b:1e:f6:a0:69:74:98:ff:4a:b8:4d:98:24:02: 00:4c:ba:99:4a:73:1c:42:39:ed:b7:35:71:e8:e0: d7:38:a9:94:47:89:f8:f2:5a:28:d9:9f:7c:5d:13: 4f:5d:b7:55:c7:1d:5c:a5:10:3f:b1:8b:50:a7:b4: 63:c8:87:46:32:1d:d0:9e:75:8b:d8:07:6d:d5:b6: 6b:ed:c5:f3:3e:e2:d4:79:44:b2:01:f1:04:89:ce: 52:d8:7b:8a:c5:5a:55:23:5f:7f:af:57:eb:04:e4: ed:f7:fc:20:93:bb:53:c2:de:1b:64:e3:02:1d:9a: 48:fb:2c:55:d2:cc:f7:a0:89:79:92:d3:6c:e1:c7: 11:cb:7e:0f:95:91:2b:03:7b:d0:d4:c5:d0:0a:2f: 57:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CB:2A:BD:E1:82:9F:2D:69:D9:DF:F1:09:3E:F4:BA:CD:A6:19:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2020d046-f9b3-4986-b073-ec35b8706f74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f36:8000::/39 Signature Algorithm: sha256WithRSAEncryption a6:05:f9:a7:60:3a:e2:71:4d:07:d2:59:58:de:03:14:3b:23: 15:22:d6:c6:3c:1b:e5:08:a1:b9:f2:3a:a5:ce:6e:7f:10:3e: 0e:1d:9c:2d:54:c9:96:f1:4e:90:c2:ae:ea:4c:6b:87:fe:e0: be:aa:b8:67:6f:14:01:79:8a:09:c1:6a:d4:ac:8f:32:31:44: 89:de:03:25:31:c5:f7:76:48:28:ee:31:ff:c8:ec:56:d8:d8: fa:e0:8d:a9:58:c3:8a:96:16:3c:90:5f:eb:05:8d:fa:08:ef: f1:58:d4:a7:7a:89:4d:a3:18:7a:0f:39:4e:1c:41:33:e8:9c: a1:3e:52:74:68:56:10:df:a9:42:33:18:be:b2:ab:8f:7c:e0: 49:35:77:d3:92:6c:26:1a:96:a7:29:cb:e4:0d:fa:e7:f6:61: 2b:9a:8d:e6:c4:71:d1:fb:a1:d0:1c:c6:65:7b:fd:09:d9:5f: 93:64:54:47:a7:1d:aa:47:a2:4c:fb:68:b5:e5:9a:63:cd:48: b3:3f:84:ce:c9:c4:87:9e:85:43:29:f6:23:c6:d1:aa:5f:1d: 47:6b:28:66:e9:b0:3d:c3:bd:d7:19:53:8f:5e:16:c1:c9:1a: 07:d0:c4:9d:5a:84:51:08:b9:ae:9e:86:d3:f2:34:5c:8c:79: 6f:c9:bd:60 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURpRaxFrYbi5rqw8pOrm8yzW2/Z0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTYyMDI5WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OGJjZWFmMzVkNjU2ZjZjNDUyZjJiZWUyNzQxODc4Nzli OGY5NmFhNjFjY2Y3YmY5YjA2MjAzYjE3ZjkyNjc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg7EtCNLN85jh0pb5MjjaXbacnmk1hxbJEGe0FejKAXMmd D+ovRAz4ATQXDV/CqyWkdiCqN+t0xIJrDB5BU7BFgO9VBGnrkEhCQKSH/kOqe0UO KafyrP79rMLOxXoFOYAOvDQAKwg5k+UrHvagaXSY/0q4TZgkAgBMuplKcxxCOe23 NXHo4Nc4qZRHifjyWijZn3xdE09dt1XHHVylED+xi1CntGPIh0YyHdCedYvYB23V tmvtxfM+4tR5RLIB8QSJzlLYe4rFWlUjX3+vV+sE5O33/CCTu1PC3htk4wIdmkj7 LFXSzPegiXmS02zhxxHLfg+VkSsDe9DUxdAKL1eLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUIMsqveGCny1p2d/xCT70us2mGbcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwMjBkMDQ2LWY5YjMtNDk4Ni1iMDczLWVjMzViODcwNmY3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB82gDANBgkqhkiG9w0BAQsFAAOCAQEApgX5p2A64nFNB9JZWN4DFDsj FSLWxjwb5QihufI6pc5ufxA+Dh2cLVTJlvFOkMKu6kxrh/7gvqq4Z28UAXmKCcFq 1KyPMjFEid4DJTHF93ZIKO4x/8jsVtjY+uCNqVjDipYWPJBf6wWN+gjv8VjUp3qJ TaMYeg85ThxBM+icoT5SdGhWEN+pQjMYvrKrj3zgSTV305JsJhqWpynL5A365/Zh K5qN5sRx0fuh0BzGZXv9Cdlfk2RUR6cdqkeiTPtoteWaY81Isz+EzsnEh56FQyn2 I8bRql8dR2soZumwPcO91xlTj14WwckaB9DEnVqEUQi5rp6G0/I0XIx5b8m9YA== -----END CERTIFICATE-----Generated at Wed Aug 6 13:02:11 2025 by rpki-client