$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97657869-6c0e-4720-b04c-260b76a75f4c.roa File: 97657869-6c0e-4720-b04c-260b76a75f4c.roa (raw, json) Hash identifier: SyZqiPhgM27KRP/bscXRcy6wXBdw1S7kUHnn6gY+MYE= Subject key identifier: 65:6C:9C:E2:3F:86:64:9D:EC:A9:C5:C3:2C:C6:41:32:35:88:7A:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48D898615BB1F6A79A9C9D9EA4A209083FB51FDC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97657869-6c0e-4720-b04c-260b76a75f4c.roa Signing time: Fri 01 Aug 2025 17:10:14 +0000 ROA not before: Fri 01 Aug 2025 17:10:14 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:8120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d8:98:61:5b:b1:f6:a7:9a:9c:9d:9e:a4:a2:09:08:3f:b5:1f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 17:10:14 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=1b8f436d1ffd18ea55df2e7da023156ea7cca99922c3c3a64caa21026e9c246a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:93:86:64:60:be:63:14:f1:e7:06:75:86: 06:cf:cc:f4:b4:ef:91:be:c5:b7:33:88:a0:85:dc: c0:63:4b:99:50:36:e2:f0:2a:9a:a2:4a:52:74:ec: a6:72:5c:c6:6b:4c:c4:f6:7a:19:52:24:1e:26:7e: 90:a1:13:fc:8a:e1:b3:be:2b:2c:76:03:4e:ed:e4: ca:8e:4a:11:bd:30:f6:3e:34:b3:dd:fd:25:d8:a9: 6b:b5:91:6b:cf:d3:64:26:e8:f6:6d:d6:eb:e6:07: 38:b0:c8:88:a9:7c:0c:ce:12:bd:59:9a:ae:8f:28: bd:c5:26:3b:ec:d5:6b:a7:b5:f9:78:69:51:f8:79: 64:e4:da:21:04:71:27:d2:9b:fc:bb:4c:c1:61:28: ec:d9:f5:b7:77:18:47:c6:83:3a:8c:c7:87:27:f7: a9:17:f8:e9:c7:0b:36:e4:28:8a:8d:33:64:87:f5: c3:e4:84:63:90:28:81:f9:bf:24:87:08:e5:15:c8: b4:29:94:75:6c:e8:bd:86:29:2e:20:32:4d:df:ba: 7f:cd:be:7c:b4:6e:77:22:da:52:b1:fc:9a:c8:92: 2c:11:81:58:54:41:28:4e:0f:f0:d7:fb:37:0b:c6: 0b:a1:fb:38:07:ef:b9:26:d7:d4:00:28:0d:c8:2f: ba:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6C:9C:E2:3F:86:64:9D:EC:A9:C5:C3:2C:C6:41:32:35:88:7A:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97657869-6c0e-4720-b04c-260b76a75f4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8120::/48 Signature Algorithm: sha256WithRSAEncryption 0d:7e:10:4e:ee:b5:29:b9:75:be:04:88:2a:99:40:07:12:b8: 8b:79:ee:8b:c5:d0:11:77:1f:ae:bb:55:88:af:f6:77:54:69: 62:57:e8:2f:08:d0:c5:90:c2:48:81:3c:42:30:83:9d:63:3a: 6b:a6:4d:28:cf:11:a5:8d:6f:48:ed:77:9c:ee:be:98:a2:f3: 8f:5a:73:e2:fe:44:c3:e3:2f:2b:b5:79:9e:71:06:d5:46:5b: c1:ac:a5:ec:09:00:e3:28:6f:e9:ed:13:ba:d9:27:d5:08:85: 4e:76:e8:47:e3:d1:04:e6:5a:41:43:83:d3:2f:f1:d6:ae:b0: fa:d3:ab:97:69:bc:00:56:aa:fe:9e:e7:cd:5b:f4:59:61:cf: e9:9a:4c:71:a2:5b:e0:2c:cb:cc:7b:b7:f4:27:56:dd:fb:85: c0:63:09:f0:a4:a7:14:99:c4:4e:cd:5d:2a:1c:c1:36:d6:a0: d8:2e:41:fb:05:f3:e6:3e:bb:95:f6:e0:2d:1c:1a:46:14:40: d2:f4:23:e9:8d:ed:49:29:99:7c:09:69:b8:d4:d1:76:f3:3d: 08:5e:ce:a2:33:1d:00:ca:55:16:41:d4:cc:02:99:97:19:c2: c7:a7:c5:26:13:2b:fd:c6:c1:1d:2d:79:b8:50:0e:96:e5:98: b5:d0:a0:d9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSNiYYVux9qeanJ2epKIJCD+1H9wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTcxMDE0WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjhmNDM2ZDFmZmQxOGVhNTVkZjJlN2RhMDIzMTU2ZWE3 Y2NhOTk5MjJjM2MzYTY0Y2FhMjEwMjZlOWMyNDZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtwJOGZGC+YxTx5wZ1hgbPzPS075G+xbcziKCF3MBjS5lQ NuLwKpqiSlJ07KZyXMZrTMT2ehlSJB4mfpChE/yK4bO+Kyx2A07t5MqOShG9MPY+ NLPd/SXYqWu1kWvP02Qm6PZt1uvmBziwyIipfAzOEr1Zmq6PKL3FJjvs1Wuntfl4 aVH4eWTk2iEEcSfSm/y7TMFhKOzZ9bd3GEfGgzqMx4cn96kX+OnHCzbkKIqNM2SH 9cPkhGOQKIH5vySHCOUVyLQplHVs6L2GKS4gMk3fun/Nvny0bnci2lKx/JrIkiwR gVhUQShOD/DX+zcLxguh+zgH77km19QAKA3IL7pDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZWyc4j+GZJ3sqcXDLMZBMjWIevYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk3NjU3ODY5LTZjMGUtNDcyMC1iMDRjLTI2MGI3NmE3NWY0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgSAwDQYJKoZIhvcNAQELBQADggEBAA1+EE7utSm5db4EiCqZQAcS uIt57ovF0BF3H667VYiv9ndUaWJX6C8I0MWQwkiBPEIwg51jOmumTSjPEaWNb0jt d5zuvpii849ac+L+RMPjLyu1eZ5xBtVGW8GspewJAOMob+ntE7rZJ9UIhU526Efj 0QTmWkFDg9Mv8dausPrTq5dpvABWqv6e581b9Flhz+maTHGiW+Asy8x7t/QnVt37 hcBjCfCkpxSZxE7NXSocwTbWoNguQfsF8+Y+u5X24C0cGkYUQNL0I+mN7UkpmXwJ abjU0XbzPQhezqIzHQDKVRZB1MwCmZcZwsenxSYTK/3GwR0tebhQDpblmLXQoNk= -----END CERTIFICATE-----Generated at Mon Aug 4 15:37:10 2025 by rpki-client