$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa File: aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa (raw, json) Hash identifier: vGI6sGUTubnnVc5oB+XxwKpFLLaQBiO0eeSSVMJ/RGg= Subject key identifier: 2D:68:98:71:63:C6:A9:5A:2E:5B:7C:2E:70:42:76:4C:C9:5A:F5:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07A109CFD70E4DF0EBFBCFF4C3E9DBF5CC2F7FDD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa Signing time: Fri 01 Aug 2025 16:40:24 +0000 ROA not before: Fri 01 Aug 2025 16:40:24 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 7224 IP address blocks: 2600:1ffd:1008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a1:09:cf:d7:0e:4d:f0:eb:fb:cf:f4:c3:e9:db:f5:cc:2f:7f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 16:40:24 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=ee53ff8b33994aa92d71e6415296f469f5277821bd585fd3fa1d0c1c1c0cc3e4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:85:dd:b9:b5:47:72:a8:a4:5b:4c:3f:5c: 6b:15:f1:25:c9:f4:cd:15:e3:86:b8:eb:f3:42:b1: 0f:c5:0d:2a:81:f5:64:35:ed:1a:6c:94:8e:ad:54: 2c:da:68:bb:d9:9e:57:64:b4:0a:67:52:55:4b:3f: b0:81:39:d5:d0:b9:23:ea:6d:a8:6b:1d:69:e5:f2: 65:d0:46:17:84:6e:ca:8b:f1:d1:42:c8:0c:3a:8f: 89:6c:05:04:e9:7d:75:e7:82:aa:9e:50:6c:f7:f9: 03:78:80:7e:fd:1f:aa:15:91:7c:6c:14:5c:1d:dd: 8d:05:7c:92:39:b0:aa:8b:d5:52:6b:15:40:86:52: fd:bb:2f:7b:91:40:87:c8:32:8e:7a:e3:95:88:45: 96:14:ba:28:b9:1b:3d:2d:a0:16:6b:06:a6:2c:2e: fa:7b:1f:ee:0e:45:40:a5:04:4b:3b:c0:61:d6:7e: 8f:bf:2e:47:34:4d:5d:24:57:7b:16:55:41:c3:6d: ff:c5:3e:ff:86:98:1b:da:52:a3:c4:d2:ac:11:dd: 52:d6:da:68:ee:31:75:53:df:59:6f:d8:4b:37:62: 0f:97:c1:a0:5d:7f:20:1e:ce:b2:fd:b8:b8:b3:a0: f4:39:69:c7:61:86:94:50:8f:8e:11:13:23:03:0f: f1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:68:98:71:63:C6:A9:5A:2E:5B:7C:2E:70:42:76:4C:C9:5A:F5:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:1008::/48 Signature Algorithm: sha256WithRSAEncryption bf:e8:45:0f:4c:d7:8d:b5:7c:8f:5e:90:0f:18:c7:27:67:aa: 41:ae:c0:27:b1:32:a4:2f:b5:7b:0e:7c:fb:5c:ed:23:81:bf: 79:20:8a:62:5e:f4:c8:c7:1a:e7:b2:fc:cc:c0:f2:7c:d4:ab: 46:18:0a:fd:a1:bc:b9:4f:f2:18:39:2b:e5:be:9a:6c:62:08: 72:2f:3b:e1:1f:da:1a:42:d8:fb:9d:ba:8e:af:c4:0c:6a:8a: bd:5b:29:8f:f8:c0:9e:91:a4:f9:51:fd:4e:5a:43:e7:32:34: 55:85:51:67:37:f8:4c:6c:64:8d:8b:8b:db:7c:87:20:65:58: 8b:e2:07:6d:f6:3d:40:8e:ab:e3:a4:63:7f:96:6e:6a:1d:07: e3:1c:db:ed:6d:5b:a4:cf:06:c6:5d:e1:83:af:03:5d:1b:2e: fc:40:aa:d7:1a:d1:cf:eb:bf:4b:74:23:25:70:9c:1c:c8:3c: eb:04:d3:59:b4:cf:fa:9d:44:9e:38:22:fd:c9:2e:47:9a:85: 9d:b6:08:7b:d6:ed:08:fa:ae:6e:45:36:7d:21:14:10:77:4e: 60:05:de:ed:f9:44:05:0b:40:76:f7:9d:77:0b:df:85:c3:76: 01:f3:42:ac:99:02:9c:83:65:54:04:59:56:df:f2:f3:ce:b4: 16:c8:4b:50 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB6EJz9cOTfDr+8/0w+nb9cwvf90wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTY0MDI0WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTUzZmY4YjMzOTk0YWE5MmQ3MWU2NDE1Mjk2ZjQ2OWY1 Mjc3ODIxYmQ1ODVmZDNmYTFkMGMxYzFjMGNjM2U0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEAYXdubVHcqikW0w/XGsV8SXJ9M0V44a46/NCsQ/FDSqB 9WQ17RpslI6tVCzaaLvZnldktApnUlVLP7CBOdXQuSPqbahrHWnl8mXQRheEbsqL 8dFCyAw6j4lsBQTpfXXngqqeUGz3+QN4gH79H6oVkXxsFFwd3Y0FfJI5sKqL1VJr FUCGUv27L3uRQIfIMo5645WIRZYUuii5Gz0toBZrBqYsLvp7H+4ORUClBEs7wGHW fo+/Lkc0TV0kV3sWVUHDbf/FPv+GmBvaUqPE0qwR3VLW2mjuMXVT31lv2Es3Yg+X waBdfyAezrL9uLizoPQ5acdhhpRQj44REyMDD/HBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULWiYcWPGqVouW3wucEJ2TMla9QEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhNGI5M2M0LTUxMjMtNGQyZi1hMmU0LWRkOThhYmMxOWU3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9EAgwDQYJKoZIhvcNAQELBQADggEBAL/oRQ9M1421fI9ekA8Yxydn qkGuwCexMqQvtXsOfPtc7SOBv3kgimJe9MjHGuey/MzA8nzUq0YYCv2hvLlP8hg5 K+W+mmxiCHIvO+Ef2hpC2Puduo6vxAxqir1bKY/4wJ6RpPlR/U5aQ+cyNFWFUWc3 +ExsZI2Li9t8hyBlWIviB232PUCOq+OkY3+WbmodB+Mc2+1tW6TPBsZd4YOvA10b LvxAqtca0c/rv0t0IyVwnBzIPOsE01m0z/qdRJ44Iv3JLkeahZ22CHvW7Qj6rm5F Nn0hFBB3TmAF3u35RAULQHb3nXcL34XDdgHzQqyZApyDZVQEWVbf8vPOtBbIS1A= -----END CERTIFICATE-----Generated at Mon Aug 4 22:15:50 2025 by rpki-client