$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b61501-4505-4056-a7c1-935daabf5a4e.roa File: 24b61501-4505-4056-a7c1-935daabf5a4e.roa (raw, json) Hash identifier: ujF6b1K7aeqjTGJwl7wxKl42GTFPpQI4qUKwS89sGiw= Subject key identifier: D3:37:3C:5E:31:38:9F:A0:BE:BC:FC:D7:81:FF:F4:95:EA:92:0F:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3194C1651EDC925E6FF1C48ED36EC96298B390FC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b61501-4505-4056-a7c1-935daabf5a4e.roa Signing time: Fri 18 Jul 2025 00:22:03 +0000 ROA not before: Fri 18 Jul 2025 00:22:03 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:94:c1:65:1e:dc:92:5e:6f:f1:c4:8e:d3:6e:c9:62:98:b3:90:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:22:03 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=8ed65006d12ab6be6c07094f562532778b1b95f0449540125804d16d850d6aaa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bf:c7:91:0a:12:b8:e9:be:f8:c6:61:ab:e3: 53:1c:0c:ae:77:f2:4e:2b:ee:67:b1:1e:ac:fc:06: 13:b9:3f:4c:25:92:63:c8:cc:3e:f5:08:1b:db:0d: df:3c:4e:00:84:cc:98:46:f3:8c:e0:5f:61:cf:2e: f3:d2:7a:f8:29:57:5b:d7:49:99:f8:fe:ce:12:d3: 77:b6:16:37:71:f1:a5:a3:22:1a:0e:67:8a:ee:ee: ef:dd:9e:f1:9f:0c:fa:98:f2:e5:e4:37:1d:e3:03: e6:94:41:23:6b:54:84:cb:34:31:9f:cd:e9:50:29: 36:66:52:fa:ae:86:dc:32:85:e4:b8:75:fc:e1:9b: af:d9:cb:44:35:4c:e9:1a:36:94:6e:70:5c:15:d2: ac:ce:0b:59:26:82:ff:4a:38:0c:17:ff:70:9e:58: dc:2e:d8:2e:71:d3:5e:85:1b:fc:a5:8e:18:ce:50: eb:77:5c:5e:f0:a8:0c:89:0e:4e:54:01:cf:5d:35: 09:47:4e:e5:e6:6d:3a:ec:f7:75:b0:cc:8b:34:5b: 69:3d:2a:58:a0:a8:e5:46:38:96:2d:ff:0b:ac:c2: 82:b1:71:02:80:fe:78:c0:6e:a1:84:92:cc:52:cd: 60:5f:b2:a0:0e:54:73:c2:53:5f:02:74:ec:35:4d: c0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:37:3C:5E:31:38:9F:A0:BE:BC:FC:D7:81:FF:F4:95:EA:92:0F:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b61501-4505-4056-a7c1-935daabf5a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:6000::/40 Signature Algorithm: sha256WithRSAEncryption be:7f:14:f2:ed:18:ec:b6:7c:32:54:08:d3:b0:2b:4b:9b:96: 3b:00:dd:d6:d3:08:d0:13:db:76:d5:59:10:06:43:4a:b7:99: 2b:86:70:65:6d:3d:fe:85:41:9b:ed:c0:5a:19:da:19:f1:40: 96:de:16:24:ba:c2:af:86:ee:bb:81:a0:fd:7c:0f:15:1a:71: da:ce:8c:6f:59:e0:ca:6c:49:8e:c4:84:05:6c:96:82:be:7a: 77:1f:3b:fa:77:c5:b5:13:93:ec:fd:c0:79:3e:26:a3:77:6e: 61:08:c6:1b:33:ff:d1:6e:f0:a9:e0:96:71:9c:6f:f3:5d:ba: 1d:7e:cc:ee:44:44:d5:fb:0e:e2:66:a6:4c:63:d2:95:5b:ea: 01:93:eb:86:1f:4a:e2:2f:87:90:c7:ce:bc:79:ed:07:54:15: 69:2a:46:33:ff:bd:ee:f9:0c:6e:88:4f:2d:7c:b4:f2:db:94: 5e:c6:39:0c:bc:e8:38:e6:35:d2:8b:48:60:fc:6b:62:34:b3: db:e3:01:d0:61:30:e4:ce:c7:f7:88:f8:ab:ab:9c:c9:9f:67: 1c:51:d3:3d:ac:da:0e:5c:c0:dd:99:3c:62:88:a7:c6:df:79: 81:19:39:7a:26:ca:4e:7f:af:d1:0b:3e:44:a8:23:77:f0:bf: a2:4e:0a:97 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMZTBZR7ckl5v8cSO027JYpizkPwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAyMjAzWhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZWQ2NTAwNmQxMmFiNmJlNmMwNzA5NGY1NjI1MzI3Nzhi MWI5NWYwNDQ5NTQwMTI1ODA0ZDE2ZDg1MGQ2YWFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQv8eRChK46b74xmGr41McDK538k4r7mexHqz8BhO5P0wl kmPIzD71CBvbDd88TgCEzJhG84zgX2HPLvPSevgpV1vXSZn4/s4S03e2Fjdx8aWj IhoOZ4ru7u/dnvGfDPqY8uXkNx3jA+aUQSNrVITLNDGfzelQKTZmUvquhtwyheS4 dfzhm6/Zy0Q1TOkaNpRucFwV0qzOC1kmgv9KOAwX/3CeWNwu2C5x016FG/yljhjO UOt3XF7wqAyJDk5UAc9dNQlHTuXmbTrs93WwzIs0W2k9KligqOVGOJYt/wuswoKx cQKA/njAbqGEksxSzWBfsqAOVHPCU18CdOw1TcA5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU0zc8XjE4n6C+vPzXgf/0leqSD0IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0YjYxNTAxLTQ1MDUtNDA1Ni1hN2MxLTkzNWRhYWJmNWE0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+gYDANBgkqhkiG9w0BAQsFAAOCAQEAvn8U8u0Y7LZ8MlQI07ArS5uW OwDd1tMI0BPbdtVZEAZDSreZK4ZwZW09/oVBm+3AWhnaGfFAlt4WJLrCr4buu4Gg /XwPFRpx2s6Mb1ngymxJjsSEBWyWgr56dx87+nfFtROT7P3AeT4mo3duYQjGGzP/ 0W7wqeCWcZxv8126HX7M7kRE1fsO4mamTGPSlVvqAZPrhh9K4i+HkMfOvHntB1QV aSpGM/+97vkMbohPLXy08tuUXsY5DLzoOOY10otIYPxrYjSz2+MB0GEw5M7H94j4 q6ucyZ9nHFHTPazaDlzA3Zk8Yoinxt95gRk5eibKTn+v0Qs+RKgjd/C/ok4Klw== -----END CERTIFICATE-----Generated at Thu Aug 7 05:14:35 2025 by rpki-client