$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e1ed9fb-8049-4436-8f98-37ad5148da7f.roa File: 9e1ed9fb-8049-4436-8f98-37ad5148da7f.roa (raw, json) Hash identifier: nBGwcxymj+IaNX4zlgiJUL3ylTo0SD4dGLTHg+i0HGQ= Subject key identifier: A1:12:B3:1E:BD:30:5C:92:1C:C1:5F:D9:57:76:80:99:EC:0A:9D:23 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BEF6051C7E4AA016801FA108776DD12A094D38E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e1ed9fb-8049-4436-8f98-37ad5148da7f.roa Signing time: Fri 01 Aug 2025 16:51:24 +0000 ROA not before: Fri 01 Aug 2025 16:51:24 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ef:60:51:c7:e4:aa:01:68:01:fa:10:87:76:dd:12:a0:94:d3:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 16:51:24 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=0a93779add1157ac45bec9c45f28b5302322f5bc62d01554a19ac250904781af, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:86:fe:ed:e3:4d:ab:89:3f:88:9d:32:cb:99: 08:36:96:1a:cc:ee:71:68:9a:1d:4a:b7:97:ae:3d: 8a:f4:a3:0d:73:5d:a7:07:cf:cc:72:12:18:7e:2d: 92:9c:5e:a8:45:1b:c2:3b:94:20:c8:0f:ff:3a:90: 8e:03:c7:c2:62:64:c3:95:4f:65:e2:cb:fd:ef:e4: 41:fa:43:8e:cd:5b:6e:2c:fc:aa:5f:d0:00:ef:27: b3:58:cb:73:d7:b5:22:42:44:9f:38:4d:ae:fc:03: 46:ad:bb:46:da:5c:52:83:94:ac:9e:e7:21:44:38: 13:cc:98:c2:61:d9:f0:29:c1:6f:bb:ac:77:06:a2: f3:08:87:67:79:7e:65:02:b0:46:6b:fc:a7:41:ec: 57:e8:e5:34:99:c8:5b:60:19:9c:4e:f8:e2:21:a6: f5:2e:7b:d2:bd:75:47:ef:a9:d1:0e:1e:df:b0:af: c4:36:7f:f5:06:62:14:1a:aa:67:44:ef:58:fa:50: 72:25:1b:f0:50:bd:39:0c:03:11:f1:3a:90:5c:79: 8e:50:3a:d8:fe:ee:a5:31:c0:81:19:2f:b8:16:ee: 57:d4:91:80:9a:ec:fb:0f:04:91:c1:c2:eb:b6:f6: 25:16:33:64:b9:f7:d5:aa:b8:7d:0f:95:f1:41:7c: 8c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:12:B3:1E:BD:30:5C:92:1C:C1:5F:D9:57:76:80:99:EC:0A:9D:23 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e1ed9fb-8049-4436-8f98-37ad5148da7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:60c0::/48 Signature Algorithm: sha256WithRSAEncryption b4:b7:a9:59:1c:1f:bb:f1:c0:5d:79:13:bc:3f:a3:1e:66:b0: 02:34:ba:a9:9a:0f:b5:e1:e8:7c:ee:2b:17:59:62:e0:15:18: 60:8e:ad:1d:7e:85:bb:2d:ef:40:19:79:67:e3:ae:07:75:be: 57:cf:10:99:59:36:72:cf:49:6c:3d:91:8b:5f:5d:9b:64:53: 3e:55:85:7c:2e:07:0b:01:6a:ae:8c:86:05:6d:4e:d6:eb:09: 03:2a:aa:77:be:c9:5b:49:ba:50:23:44:0d:67:32:45:55:58: 48:b8:b9:97:63:a3:7c:78:f1:de:3a:5c:99:3b:aa:50:df:d7: df:21:5e:b7:a0:00:0a:b0:3b:03:05:0f:4f:aa:de:b7:52:93: 43:bb:fe:b6:59:e0:1d:9e:64:71:b6:41:d4:f8:1e:a0:9c:d9: e2:6c:ed:6d:ce:67:dd:a5:a0:15:47:9d:c2:a4:e5:cc:30:34: d7:70:a9:10:58:15:2a:72:63:d7:af:e4:58:f6:fe:58:6a:7a: 40:76:da:dc:09:68:4b:71:41:f2:72:01:dd:59:a1:3b:6f:99: 38:ee:56:84:83:2b:fb:a7:44:d4:37:0b:fb:02:e9:33:51:a6: 46:3b:5f:f6:a3:a0:8b:a7:15:7a:2a:b5:0d:e1:63:9f:fa:09: 89:cc:e1:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUC+9gUcfkqgFoAfoQh3bdEqCU044wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTY1MTI0WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTkzNzc5YWRkMTE1N2FjNDViZWM5YzQ1ZjI4YjUzMDIz MjJmNWJjNjJkMDE1NTRhMTlhYzI1MDkwNDc4MWFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmhv7t402riT+InTLLmQg2lhrM7nFomh1Kt5euPYr0ow1z XacHz8xyEhh+LZKcXqhFG8I7lCDID/86kI4Dx8JiZMOVT2Xiy/3v5EH6Q47NW24s /Kpf0ADvJ7NYy3PXtSJCRJ84Ta78A0atu0baXFKDlKye5yFEOBPMmMJh2fApwW+7 rHcGovMIh2d5fmUCsEZr/KdB7Ffo5TSZyFtgGZxO+OIhpvUue9K9dUfvqdEOHt+w r8Q2f/UGYhQaqmdE71j6UHIlG/BQvTkMAxHxOpBceY5QOtj+7qUxwIEZL7gW7lfU kYCa7PsPBJHBwuu29iUWM2S599WquH0PlfFBfIxRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoRKzHr0wXJIcwV/ZV3aAmewKnSMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzllMWVkOWZiLTgwNDktNDQzNi04Zjk4LTM3YWQ1MTQ4ZGE3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hYMAwDQYJKoZIhvcNAQELBQADggEBALS3qVkcH7vxwF15E7w/ox5m sAI0uqmaD7Xh6HzuKxdZYuAVGGCOrR1+hbst70AZeWfjrgd1vlfPEJlZNnLPSWw9 kYtfXZtkUz5VhXwuBwsBaq6MhgVtTtbrCQMqqne+yVtJulAjRA1nMkVVWEi4uZdj o3x48d46XJk7qlDf198hXregAAqwOwMFD0+q3rdSk0O7/rZZ4B2eZHG2QdT4HqCc 2eJs7W3OZ92loBVHncKk5cwwNNdwqRBYFSpyY9ev5Fj2/lhqekB22twJaEtxQfJy Ad1ZoTtvmTjuVoSDK/unRNQ3C/sC6TNRpkY7X/ajoIunFXoqtQ3hY5/6CYnM4eI= -----END CERTIFICATE-----Generated at Mon Aug 4 22:19:39 2025 by rpki-client