$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa File: 6c921a1b-c5be-4c53-9918-5f35190b51a3.roa (raw, json) Hash identifier: PszpSC0vmQ5FZ0dIi57tIWi+FcXwPey7BQCM5L6q9dw= Subject key identifier: D9:6F:8B:C3:E4:EA:B2:FE:64:A6:10:2A:E5:49:43:CD:BE:68:8E:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5EC2C08BFC1AA386F0F889C11C7E4DCC516C7A61 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa Signing time: Mon 04 Aug 2025 15:31:33 +0000 ROA not before: Mon 04 Aug 2025 15:31:33 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c2:c0:8b:fc:1a:a3:86:f0:f8:89:c1:1c:7e:4d:cc:51:6c:7a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 15:31:33 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=b17f23c082d0b1eeb91220c9035ed152c4c7ddf6f24f1b2f867f32e19db57c7c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:79:ee:0f:83:cc:e8:9f:41:38:61:69:38: 2e:91:9e:36:1f:fb:11:98:2a:4a:71:dc:88:a6:61: 2e:35:7e:89:e0:d6:67:54:37:d6:88:08:d0:a1:76: 03:37:be:77:e9:39:3c:4f:0d:c0:ab:f1:cb:9c:bc: eb:e9:2a:73:1b:1d:43:8d:b7:a7:77:48:a0:75:bd: a9:02:1f:00:c7:72:e1:b4:5f:03:b3:7e:6e:a0:63: eb:1f:d2:6a:3c:1b:2a:7c:2b:01:b8:88:02:39:a8: b4:e8:94:14:fa:6f:49:dc:4d:4b:28:97:7c:a4:a6: 16:aa:f1:c4:50:dc:9a:07:0e:c7:1c:6f:eb:a2:a7: 68:d1:05:83:66:e3:43:b0:80:26:3d:8f:95:a1:44: 81:a4:da:84:ce:18:5e:82:ee:72:ae:c7:9c:50:83: fc:3c:34:7c:ce:97:f5:3d:2a:7d:55:ec:92:64:49: b7:1f:01:86:2a:47:2a:87:1e:76:cd:7e:ee:63:8b: b2:46:96:ec:6d:93:f7:54:96:38:0a:a7:b8:78:04: 15:fe:d7:e4:c8:a3:ee:cd:c1:3f:0c:78:d5:87:9f: 15:a7:d7:d2:10:b6:5a:39:9f:5e:78:cb:96:a6:15: 18:a7:a1:df:84:59:b3:7e:b8:12:78:71:43:cd:de: 32:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6F:8B:C3:E4:EA:B2:FE:64:A6:10:2A:E5:49:43:CD:BE:68:8E:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:3400::/40 Signature Algorithm: sha256WithRSAEncryption 45:06:bb:bc:5f:d9:e6:97:1e:d7:95:4e:89:9d:15:d4:66:54: e3:c1:f8:cf:98:d8:90:90:d1:fe:4d:e0:06:02:55:ef:a4:91: 69:8e:30:b6:43:a0:b1:2e:9e:90:68:6a:50:a8:7c:43:91:0c: 3f:33:58:03:ff:86:11:e1:59:a0:b4:be:66:5d:0d:b6:42:54: a3:4e:55:d9:0c:3f:58:8c:13:3a:c0:2a:ff:72:70:52:00:e0: 61:6c:13:c3:d5:c2:54:9d:c4:5c:74:c5:4a:89:5f:8a:4f:2f: c1:48:4f:1b:ed:e2:4e:56:a6:34:b4:27:de:06:04:a6:5c:3a: 0e:cc:75:50:98:9d:f0:cf:62:0e:f1:26:d5:de:95:fc:95:2e: 00:11:09:4b:f4:7d:63:3c:0c:38:88:d8:df:5e:28:cf:6f:ad: 9c:e7:1e:bb:9f:92:a7:6b:42:46:e1:92:f6:a4:a5:15:7c:3b: b5:33:a5:cb:29:05:f6:5d:ef:ae:20:92:2f:d5:4e:0e:bb:1b: ac:44:d8:88:c7:23:ea:f0:01:0f:9b:00:cf:da:a9:57:9e:62: 25:25:e1:b5:fa:c7:3a:0f:6d:63:3f:ac:c8:00:cb:e6:ba:eb: 4b:4a:ed:6f:99:f5:f3:15:c1:1d:0f:88:06:65:36:7a:49:96: db:9f:84:d4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXsLAi/wao4bw+InBHH5NzFFsemEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTUzMTMzWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTdmMjNjMDgyZDBiMWVlYjkxMjIwYzkwMzVlZDE1MmM0 YzdkZGY2ZjI0ZjFiMmY4NjdmMzJlMTlkYjU3YzdjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwdnnuD4PM6J9BOGFpOC6RnjYf+xGYKkpx3IimYS41fong 1mdUN9aICNChdgM3vnfpOTxPDcCr8cucvOvpKnMbHUONt6d3SKB1vakCHwDHcuG0 XwOzfm6gY+sf0mo8Gyp8KwG4iAI5qLTolBT6b0ncTUsol3ykphaq8cRQ3JoHDscc b+uip2jRBYNm40OwgCY9j5WhRIGk2oTOGF6C7nKux5xQg/w8NHzOl/U9Kn1V7JJk SbcfAYYqRyqHHnbNfu5ji7JGluxtk/dUljgKp7h4BBX+1+TIo+7NwT8MeNWHnxWn 19IQtlo5n154y5amFRinod+EWbN+uBJ4cUPN3jIzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2W+Lw+Tqsv5kphAq5UlDzb5ojtYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjOTIxYTFiLWM1YmUtNGM1My05OTE4LTVmMzUxOTBiNTFhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8ANDANBgkqhkiG9w0BAQsFAAOCAQEARQa7vF/Z5pce15VOiZ0V1GZU 48H4z5jYkJDR/k3gBgJV76SRaY4wtkOgsS6ekGhqUKh8Q5EMPzNYA/+GEeFZoLS+ Zl0NtkJUo05V2Qw/WIwTOsAq/3JwUgDgYWwTw9XCVJ3EXHTFSolfik8vwUhPG+3i TlamNLQn3gYEplw6Dsx1UJid8M9iDvEm1d6V/JUuABEJS/R9YzwMOIjY314oz2+t nOceu5+Sp2tCRuGS9qSlFXw7tTOlyykF9l3vriCSL9VODrsbrETYiMcj6vABD5sA z9qpV55iJSXhtfrHOg9tYz+syADL5rrrS0rtb5n18xXBHQ+IBmU2ekmW25+E1A== -----END CERTIFICATE-----Generated at Mon Aug 4 21:34:41 2025 by rpki-client