$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f08968f-7dae-4e98-9a63-6c8a03f3a558.roa File: 6f08968f-7dae-4e98-9a63-6c8a03f3a558.roa (raw, json) Hash identifier: f94+Wi2SrDhb42uTPEE8pXB/CklmuiFUquZUL1DU2go= Subject key identifier: 29:4B:6F:79:BC:5C:63:01:32:C0:1D:33:75:A3:A4:6F:67:7F:98:F1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 09E2896D75D9B4F8C01EF76AEF382B2B6ABBDCE8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f08968f-7dae-4e98-9a63-6c8a03f3a558.roa Signing time: Fri 01 Aug 2025 15:41:17 +0000 ROA not before: Fri 01 Aug 2025 15:41:17 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fff:5040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e2:89:6d:75:d9:b4:f8:c0:1e:f7:6a:ef:38:2b:2b:6a:bb:dc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:41:17 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=429f07efe464aef09e2b50da5882b0db530d8867b13378e6aa3bd15cb89b7231, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:46:4c:16:61:b8:4a:93:41:68:62:11:bf:5f: a1:8c:49:d7:28:0d:d9:b2:c2:06:cc:cb:7e:76:03: 4f:78:3d:ad:51:a0:31:9b:e7:fc:2b:25:23:30:b9: 16:73:12:97:e0:5a:52:00:df:19:83:17:ac:d8:e6: db:07:ba:7d:09:cf:5a:5c:19:fd:b1:c1:ec:6d:b3: 73:19:52:99:ad:95:b4:92:8e:1b:34:ab:18:82:b5: b7:47:25:f2:b2:5f:ec:2d:9d:8a:72:6c:ef:ff:e2: 59:f9:49:10:74:a8:13:c6:42:ce:55:dd:a0:49:e8: 52:02:de:f1:14:9f:cd:62:a2:52:f4:ac:0a:8c:5f: c9:16:65:85:f4:7e:65:36:01:01:af:7f:77:ca:bd: 5d:65:e6:32:6f:61:18:e2:78:fa:6c:d8:35:3f:35: a7:35:7f:ab:9c:ff:82:bc:e7:eb:4d:bd:8d:32:a7: a0:74:0f:cf:86:72:db:00:ba:a8:b4:8a:53:9c:2b: 1a:f4:3f:19:5b:6c:9f:31:40:f1:2b:c0:ab:12:67: ad:83:00:ba:8e:f1:09:f2:6e:8d:2e:f4:b6:e8:c9: d9:cf:1e:48:6f:33:9f:ef:13:44:00:87:23:00:f6: 38:95:61:f9:b3:38:e2:34:4e:29:3e:0b:a4:0d:da: bd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4B:6F:79:BC:5C:63:01:32:C0:1D:33:75:A3:A4:6F:67:7F:98:F1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f08968f-7dae-4e98-9a63-6c8a03f3a558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:5040::/48 Signature Algorithm: sha256WithRSAEncryption 44:5d:43:36:db:60:43:f8:e0:2c:30:b3:30:1d:60:dd:22:10: 3d:53:38:e1:2b:eb:bb:7b:4a:24:9f:30:e3:0a:4f:ea:0f:eb: 60:f3:a9:af:a5:2a:44:e4:77:cf:cc:be:6e:6b:fd:b1:64:70: 9b:9c:8e:5a:12:9a:cb:8b:81:54:b3:30:4f:50:ff:5c:05:6c: 26:e6:cd:06:f1:bc:c0:48:f7:af:78:4f:13:11:45:13:c4:f1: e7:c3:00:3c:2e:88:81:52:61:ca:be:10:f8:d4:c9:6c:a4:c9: b0:fb:de:6e:2b:cb:4d:e8:3f:65:b0:b8:15:73:3a:18:a7:db: 0c:1b:ec:6c:89:b5:a9:69:c2:0c:ef:0d:e4:af:5b:f6:e5:21: a4:ab:52:28:80:4f:d1:83:ab:9b:57:44:5d:21:ff:18:85:68: 12:44:84:fe:eb:8d:58:f2:8a:48:ff:79:43:79:e1:0a:84:bb: 2a:c4:8b:9f:b7:70:ca:63:b5:7f:49:eb:e1:78:b7:1e:37:61: e9:b4:b2:db:1a:43:2b:e4:db:18:04:22:f2:a6:bb:87:10:c1: ab:f7:bb:86:09:1d:e6:90:0a:d5:a8:3f:77:f2:0d:87:d1:eb: ec:5c:dc:ae:3b:43:fa:03:1e:a0:1f:e7:26:11:eb:ee:b4:cb: bf:a6:fb:8d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCeKJbXXZtPjAHvdq7zgrK2q73OgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTU0MTE3WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjlmMDdlZmU0NjRhZWYwOWUyYjUwZGE1ODgyYjBkYjUz MGQ4ODY3YjEzMzc4ZTZhYTNiZDE1Y2I4OWI3MjMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWRkwWYbhKk0FoYhG/X6GMSdcoDdmywgbMy352A094Pa1R oDGb5/wrJSMwuRZzEpfgWlIA3xmDF6zY5tsHun0Jz1pcGf2xwexts3MZUpmtlbSS jhs0qxiCtbdHJfKyX+wtnYpybO//4ln5SRB0qBPGQs5V3aBJ6FIC3vEUn81iolL0 rAqMX8kWZYX0fmU2AQGvf3fKvV1l5jJvYRjiePps2DU/Nac1f6uc/4K85+tNvY0y p6B0D8+GctsAuqi0ilOcKxr0PxlbbJ8xQPErwKsSZ62DALqO8Qnybo0u9LboydnP HkhvM5/vE0QAhyMA9jiVYfmzOOI0Tik+C6QN2r1FAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKUtvebxcYwEywB0zdaOkb2d/mPEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZmMDg5NjhmLTdkYWUtNGU5OC05YTYzLTZjOGEwM2YzYTU1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//UEAwDQYJKoZIhvcNAQELBQADggEBAERdQzbbYEP44CwwszAdYN0i ED1TOOEr67t7SiSfMOMKT+oP62Dzqa+lKkTkd8/Mvm5r/bFkcJucjloSmsuLgVSz ME9Q/1wFbCbmzQbxvMBI9694TxMRRRPE8efDADwuiIFSYcq+EPjUyWykybD73m4r y03oP2WwuBVzOhin2wwb7GyJtalpwgzvDeSvW/blIaSrUiiAT9GDq5tXRF0h/xiF aBJEhP7rjVjyikj/eUN54QqEuyrEi5+3cMpjtX9J6+F4tx43Yem0stsaQyvk2xgE IvKmu4cQwav3u4YJHeaQCtWoP3fyDYfR6+xc3K47Q/oDHqAf5yYR6+60y7+m+40= -----END CERTIFICATE-----Generated at Thu Aug 7 02:04:34 2025 by rpki-client