$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6695063-4f8f-4cac-a4de-3f323b178f73.roa File: a6695063-4f8f-4cac-a4de-3f323b178f73.roa (raw, json) Hash identifier: lSOZ2SUdGAi2AOjpt/z3d6RXO0NPW3BtPmAVm7gxXHs= Subject key identifier: 77:70:3F:E3:8D:39:56:B3:0C:A9:6A:50:30:B5:CF:43:07:09:E1:E8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65386782B2D65FA4DD0E1FF78E3608DE6B36A2BD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6695063-4f8f-4cac-a4de-3f323b178f73.roa Signing time: Fri 01 Aug 2025 15:51:20 +0000 ROA not before: Fri 01 Aug 2025 15:51:20 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:81c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:38:67:82:b2:d6:5f:a4:dd:0e:1f:f7:8e:36:08:de:6b:36:a2:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:51:20 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=42550a75749e9c27312c21a66e82fd8bce37839c3f522bbc72037e628ce92374, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:e5:56:e9:77:80:b6:fe:8b:96:75:95:9b: f2:dc:42:b7:f8:07:f1:64:9d:fb:ea:73:4a:32:a7: 28:2e:77:7e:7d:3f:54:3b:8d:02:0e:84:f7:60:d6: 64:23:45:3c:89:2e:aa:1c:a5:f3:fe:cd:35:fc:97: 7d:fc:99:de:92:e0:37:96:69:7e:79:86:c3:9c:12: 3e:f6:52:e0:10:e7:16:87:ba:37:fd:6c:9b:57:d9: 22:6b:11:b6:f3:9a:d3:40:73:73:da:69:0b:a9:36: 7f:e3:75:1f:9b:8b:83:98:d0:17:fb:9a:70:94:88: b0:fc:42:ab:a0:d4:08:c3:85:b7:7f:9b:d1:3f:da: 69:3f:6e:0e:d6:2e:01:64:40:d5:86:7d:19:2e:cb: ad:52:10:92:bb:4d:8d:42:79:74:b3:76:53:33:62: 55:f5:7e:70:75:83:6b:77:09:01:24:67:9e:3e:9e: 68:d5:73:e2:20:f6:a4:d6:aa:a3:36:c7:ba:33:01: 53:49:8b:fb:c1:b1:3b:e0:13:1c:b3:44:03:8f:a4: c1:a7:97:82:91:7c:d0:4a:30:5a:85:98:9e:66:fc: b2:3b:df:2c:69:50:2f:e4:0f:7f:ce:1a:eb:d8:3c: 6c:03:f1:83:f2:b6:aa:88:99:cc:64:9c:fc:77:00: bd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:70:3F:E3:8D:39:56:B3:0C:A9:6A:50:30:B5:CF:43:07:09:E1:E8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6695063-4f8f-4cac-a4de-3f323b178f73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:81c0::/48 Signature Algorithm: sha256WithRSAEncryption b7:0e:9b:f4:8f:72:42:69:2f:a2:90:66:13:b8:09:b8:4c:1e: 38:da:96:2e:75:3d:92:d3:7d:cc:71:d1:aa:38:f5:5f:02:23: 1c:67:60:76:41:7c:2f:b8:5a:8b:6b:a2:17:ba:18:52:04:f0: 11:6f:7b:17:27:55:cc:2f:5d:eb:08:a4:2c:6e:3a:0e:0a:55: 2a:61:76:c3:db:ed:46:f5:64:fb:f4:ee:a2:00:e2:00:81:03: 33:dd:63:fc:97:5a:5e:01:30:ec:06:ac:dc:7e:3b:77:35:82: eb:e1:88:39:a1:06:a1:b5:41:52:4a:a8:df:92:4f:be:56:3a: f6:4f:24:09:5a:35:76:c4:38:f8:c1:12:75:43:90:96:c2:c0: 16:63:dd:a0:1d:76:67:9f:09:01:89:cb:74:57:9c:22:4c:84: fe:32:fa:96:f5:96:23:f2:93:28:9e:9f:92:34:28:72:67:b4: 15:c3:ac:bf:ca:fa:fd:9e:d1:12:6b:ed:66:ad:98:40:27:2c: 4d:ef:51:a0:6d:e0:a4:d2:77:0b:c3:75:5c:9e:8e:38:f9:41: 4a:33:2e:e7:fe:16:45:fa:c2:52:d5:83:37:44:34:62:a9:0c: e4:c7:61:cc:15:fd:dc:34:b4:3c:c6:e5:52:ee:40:0d:6f:ef: d7:d2:a1:29 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZThngrLWX6TdDh/3jjYI3ms2or0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTU1MTIwWhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjU1MGE3NTc0OWU5YzI3MzEyYzIxYTY2ZTgyZmQ4YmNl Mzc4MzljM2Y1MjJiYmM3MjAzN2U2MjhjZTkyMzc0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3o+VW6XeAtv6LlnWVm/LcQrf4B/Fknfvqc0oypygud359 P1Q7jQIOhPdg1mQjRTyJLqocpfP+zTX8l338md6S4DeWaX55hsOcEj72UuAQ5xaH ujf9bJtX2SJrEbbzmtNAc3PaaQupNn/jdR+bi4OY0Bf7mnCUiLD8Qqug1AjDhbd/ m9E/2mk/bg7WLgFkQNWGfRkuy61SEJK7TY1CeXSzdlMzYlX1fnB1g2t3CQEkZ54+ nmjVc+Ig9qTWqqM2x7ozAVNJi/vBsTvgExyzRAOPpMGnl4KRfNBKMFqFmJ5m/LI7 3yxpUC/kD3/OGuvYPGwD8YPytqqImcxknPx3AL1bAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUd3A/4405VrMMqWpQMLXPQwcJ4egwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2Njk1MDYzLTRmOGYtNGNhYy1hNGRlLTNmMzIzYjE3OGY3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgcAwDQYJKoZIhvcNAQELBQADggEBALcOm/SPckJpL6KQZhO4CbhM Hjjali51PZLTfcxx0ao49V8CIxxnYHZBfC+4Wotrohe6GFIE8BFvexcnVcwvXesI pCxuOg4KVSphdsPb7Ub1ZPv07qIA4gCBAzPdY/yXWl4BMOwGrNx+O3c1guvhiDmh BqG1QVJKqN+ST75WOvZPJAlaNXbEOPjBEnVDkJbCwBZj3aAddmefCQGJy3RXnCJM hP4y+pb1liPykyien5I0KHJntBXDrL/K+v2e0RJr7WatmEAnLE3vUaBt4KTSdwvD dVyejjj5QUozLuf+FkX6wlLVgzdENGKpDOTHYcwV/dw0tDzG5VLuQA1v79fSoSk= -----END CERTIFICATE-----Generated at Fri Aug 8 19:37:38 2025 by rpki-client