$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c69b414-0671-4127-8e7b-ea9ad439df05.roa File: 8c69b414-0671-4127-8e7b-ea9ad439df05.roa (raw, json) Hash identifier: kSoS8++uGZRPC+4dO7kpQlXr/CjjhgVcLCgavrzt6do= Subject key identifier: 9F:70:47:51:43:02:40:8A:3E:3D:1F:3C:FE:BF:8B:DA:A5:67:6A:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 15A1FA675AD095EA4A9A713E01EC0D8239AF816B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c69b414-0671-4127-8e7b-ea9ad439df05.roa Signing time: Mon 04 Aug 2025 16:21:17 +0000 ROA not before: Mon 04 Aug 2025 16:21:17 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1a:4800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:a1:fa:67:5a:d0:95:ea:4a:9a:71:3e:01:ec:0d:82:39:af:81:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:21:17 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=2a265088e1dfc29ab54b0d93da8ebd7f5c1ef9dec2a97e61f30780c1b459632f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:08:cd:a1:3b:aa:17:be:28:d0:d2:c0:55:7a: 3c:ae:04:69:ac:f6:3a:cd:ae:49:4a:10:4b:78:7f: 31:07:1e:1b:a0:4f:41:7e:c9:fd:76:84:c8:08:f9: 1b:03:32:2a:5e:b5:34:71:9d:66:17:d5:9a:0c:6d: e0:af:a3:4f:08:86:30:5a:df:10:63:58:dc:80:f6: 7a:8c:09:70:ac:36:27:8e:e3:86:56:31:28:91:1e: 29:aa:dd:4d:bc:f6:38:b3:c3:8f:0f:d3:93:b6:4f: f1:a5:ad:45:be:00:04:d6:c4:2c:af:9a:98:a3:ed: 66:aa:74:f7:89:56:ec:90:43:dc:36:71:05:c0:4d: 14:4f:b6:46:2f:9e:df:72:72:5f:7d:fa:02:ac:f3: 19:35:bf:80:37:9a:2d:87:87:ea:f3:4b:67:c0:f9: 39:7c:0b:7f:07:3a:64:88:b2:45:ae:97:0f:2f:4a: 7d:2d:b8:bd:eb:ac:ac:7e:33:ee:68:47:7a:ab:42: f1:35:4e:cc:f0:41:c0:68:c8:71:d3:32:38:83:57: 03:b3:54:39:5f:f3:0b:70:b4:c3:ee:87:98:2d:0f: 4b:69:75:2b:63:d4:59:df:30:f6:9d:30:cc:b2:50: d5:e0:c6:d9:0e:09:fa:8d:5d:09:27:02:d5:40:ae: c6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:70:47:51:43:02:40:8A:3E:3D:1F:3C:FE:BF:8B:DA:A5:67:6A:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c69b414-0671-4127-8e7b-ea9ad439df05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1a:4800::/38 Signature Algorithm: sha256WithRSAEncryption a0:cc:ad:29:cc:bb:85:a8:cf:c4:91:d3:4d:e5:2b:09:98:1d: 78:af:9a:5e:da:ae:3d:d6:c3:83:c3:f9:4f:55:a8:1a:65:df: 8c:ee:c4:12:08:b4:80:43:79:91:48:80:db:52:88:ec:af:ff: 16:7c:d7:46:f9:0f:f7:ae:cd:5d:8d:75:73:72:18:83:28:e4: 5a:c0:9e:31:e1:13:b4:72:7a:a8:b2:3e:e4:59:ef:e6:34:c7: 43:6a:b2:dd:82:bb:e9:58:9c:fe:d0:9f:cf:78:25:cc:18:98: 12:c1:ce:fc:46:7d:ab:77:9d:ce:7a:9b:d5:f9:e8:f7:a3:1e: 4d:6b:3e:ea:cd:61:be:4e:e7:b5:30:a4:c6:7a:2c:9b:9d:b9: 0f:b3:3d:cd:97:9e:ab:15:7b:94:7f:1b:2e:4f:04:59:8e:a0: 06:05:5f:e1:d5:7a:c7:18:17:7e:a1:bc:7f:6b:e7:8c:3c:a9: f0:cf:aa:37:1f:a2:a6:76:6d:28:18:39:65:b2:14:7b:71:98: 57:55:d6:85:97:8b:3f:68:d8:24:42:f4:b6:1c:88:e2:26:de: 67:87:8d:f1:2e:40:15:b8:f8:cb:fa:cc:09:18:f8:11:fb:7b: 1c:0e:72:66:02:9c:0d:35:bb:81:de:2d:8e:a4:3c:b8:d4:a0: 7a:da:ec:ed -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFaH6Z1rQlepKmnE+AewNgjmvgWswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTYyMTE3WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTI2NTA4OGUxZGZjMjlhYjU0YjBkOTNkYThlYmQ3ZjVj MWVmOWRlYzJhOTdlNjFmMzA3ODBjMWI0NTk2MzJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZCM2hO6oXvijQ0sBVejyuBGms9jrNrklKEEt4fzEHHhug T0F+yf12hMgI+RsDMipetTRxnWYX1ZoMbeCvo08IhjBa3xBjWNyA9nqMCXCsNieO 44ZWMSiRHimq3U289jizw48P05O2T/GlrUW+AATWxCyvmpij7WaqdPeJVuyQQ9w2 cQXATRRPtkYvnt9ycl99+gKs8xk1v4A3mi2Hh+rzS2fA+Tl8C38HOmSIskWulw8v Sn0tuL3rrKx+M+5oR3qrQvE1TszwQcBoyHHTMjiDVwOzVDlf8wtwtMPuh5gtD0tp dStj1FnfMPadMMyyUNXgxtkOCfqNXQknAtVArsbPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUn3BHUUMCQIo+PR88/r+L2qVnal8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhjNjliNDE0LTA2NzEtNDEyNy04ZTdiLWVhOWFkNDM5ZGYwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8aSDANBgkqhkiG9w0BAQsFAAOCAQEAoMytKcy7hajPxJHTTeUrCZgd eK+aXtquPdbDg8P5T1WoGmXfjO7EEgi0gEN5kUiA21KI7K//FnzXRvkP967NXY11 c3IYgyjkWsCeMeETtHJ6qLI+5Fnv5jTHQ2qy3YK76Vic/tCfz3glzBiYEsHO/EZ9 q3edznqb1fno96MeTWs+6s1hvk7ntTCkxnosm525D7M9zZeeqxV7lH8bLk8EWY6g BgVf4dV6xxgXfqG8f2vnjDyp8M+qNx+ipnZtKBg5ZbIUe3GYV1XWhZeLP2jYJEL0 thyI4ibeZ4eN8S5AFbj4y/rMCRj4Eft7HA5yZgKcDTW7gd4tjqQ8uNSgetrs7Q== -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:19 2025 by rpki-client