$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa File: 3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa (raw, json) Hash identifier: hxhyhDrl1DIrv3fLsHo/6GxJ3hyyT1MwrgTyLLv9z+Y= Subject key identifier: 1D:FB:ED:18:6B:2A:9E:5B:57:E0:2F:E5:0A:0B:B1:AC:68:EC:43:CF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E2297C41E3B4FC75A64EFC44CB944A4357AF62A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa Signing time: Mon 04 Aug 2025 15:40:26 +0000 ROA not before: Mon 04 Aug 2025 15:40:26 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f36:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:22:97:c4:1e:3b:4f:c7:5a:64:ef:c4:4c:b9:44:a4:35:7a:f6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 15:40:26 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=d35aa6faa7de372c854f42aeadb075b969c06884f45115903250ba97551d9d17, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:50:4d:9e:af:21:04:16:97:51:e9:90:88:a9: db:6a:a3:f2:cd:15:ba:6f:41:8e:f7:16:dd:7b:29: c9:b3:1d:07:64:f4:60:4c:bd:40:83:c8:53:16:3c: 9c:51:1e:e9:33:9e:06:8f:a0:6a:06:08:ab:6a:59: 78:66:a4:f0:f4:9c:77:83:90:c2:1e:2d:ac:0b:49: e9:d2:a2:ec:9e:d5:f2:e1:90:97:08:dd:37:d2:6f: e4:13:9f:b9:52:97:25:21:be:48:55:f4:39:93:57: 76:24:fb:cd:0a:cd:fb:28:ee:11:de:b2:b4:b8:3c: ac:26:f5:f4:29:92:50:63:22:57:9e:e8:41:99:b7: bc:e3:f9:2c:11:08:99:ad:84:1d:03:8e:5b:99:d7: 06:be:c0:fa:75:f3:7a:97:70:f1:88:87:29:46:2f: 19:81:b7:38:90:c2:0a:c7:2c:29:ff:8e:29:c5:9a: d7:dc:51:61:34:0f:1c:2e:cd:e9:9a:f0:21:ee:90: bf:c0:96:31:29:13:fd:78:cb:44:48:fa:0c:15:e8: 74:33:40:af:b8:ed:83:74:86:8b:f0:cb:82:83:30: a0:8d:b5:dc:53:d4:ba:35:d8:90:7b:e8:e6:06:a2: ed:bd:94:89:a2:74:d3:e5:cb:52:96:8b:ab:f5:fb: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FB:ED:18:6B:2A:9E:5B:57:E0:2F:E5:0A:0B:B1:AC:68:EC:43:CF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f36:c000::/40 Signature Algorithm: sha256WithRSAEncryption bd:df:db:70:0b:40:77:5e:7b:19:8c:77:60:a4:d4:3e:76:11: 48:20:42:70:09:17:d0:55:df:5b:81:30:e1:e8:19:ac:ed:49: f4:0f:71:7a:2a:ea:40:de:f5:a5:1c:ee:dd:8c:9a:6d:5b:c9: 3a:2c:2c:99:9a:1d:e5:4c:8e:66:16:43:1a:0f:f9:8d:d7:2e: 1b:33:59:a2:b7:c7:13:68:ac:98:04:d5:dd:2c:01:10:25:ec: c0:f6:ae:0e:74:ef:d8:e3:21:3e:5b:82:88:9e:73:81:05:a0: 5f:bb:12:03:04:51:9f:c0:80:35:e9:25:1c:95:a2:f5:51:d1: 5d:5e:4d:0a:1f:91:27:01:62:64:50:8b:f1:38:eb:56:cd:bd: 4b:61:43:90:b1:bf:c7:c8:96:89:18:71:8b:68:0f:5f:2d:b8: 3d:cb:89:62:e1:06:f0:64:83:60:69:3a:97:c8:20:70:07:11: 68:12:3b:7d:d4:db:61:48:8e:c7:7c:55:cc:07:52:fb:ac:0e: 43:e6:bc:05:50:ef:cf:c7:fe:46:71:4d:9e:c1:c9:ca:32:01: 21:4d:67:b8:b4:4a:3e:a1:aa:ac:aa:b8:ef:4f:ae:d0:f5:a7: 19:fc:03:04:4d:4c:72:5d:c0:30:6b:81:1b:4b:9a:de:f3:35: b2:cf:d2:19 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDiKXxB47T8daZO/ETLlEpDV69iowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTU0MDI2WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzVhYTZmYWE3ZGUzNzJjODU0ZjQyYWVhZGIwNzViOTY5 YzA2ODg0ZjQ1MTE1OTAzMjUwYmE5NzU1MWQ5ZDE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCUE2eryEEFpdR6ZCIqdtqo/LNFbpvQY73Ft17KcmzHQdk 9GBMvUCDyFMWPJxRHukzngaPoGoGCKtqWXhmpPD0nHeDkMIeLawLSenSouye1fLh kJcI3TfSb+QTn7lSlyUhvkhV9DmTV3Yk+80Kzfso7hHesrS4PKwm9fQpklBjIlee 6EGZt7zj+SwRCJmthB0DjluZ1wa+wPp183qXcPGIhylGLxmBtziQwgrHLCn/jinF mtfcUWE0Dxwuzema8CHukL/AljEpE/14y0RI+gwV6HQzQK+47YN0hovwy4KDMKCN tdxT1Lo12JB76OYGou29lImidNPly1KWi6v1+1xVAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHfvtGGsqnltX4C/lCguxrGjsQ88wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMxNjRiNjViLWNlODgtNDY1ZS1hNGY1LTkzMmQ0OGJjYjhkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB82wDANBgkqhkiG9w0BAQsFAAOCAQEAvd/bcAtAd157GYx3YKTUPnYR SCBCcAkX0FXfW4Ew4egZrO1J9A9xeirqQN71pRzu3YyabVvJOiwsmZod5UyOZhZD Gg/5jdcuGzNZorfHE2ismATV3SwBECXswPauDnTv2OMhPluCiJ5zgQWgX7sSAwRR n8CANeklHJWi9VHRXV5NCh+RJwFiZFCL8TjrVs29S2FDkLG/x8iWiRhxi2gPXy24 PcuJYuEG8GSDYGk6l8ggcAcRaBI7fdTbYUiOx3xVzAdS+6wOQ+a8BVDvz8f+RnFN nsHJyjIBIU1nuLRKPqGqrKq470+u0PWnGfwDBE1Mcl3AMGuBG0ua3vM1ss/SGQ== -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:50 2025 by rpki-client