$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa819602-1206-4fd0-9abc-526fb9b408b8.roa File: aa819602-1206-4fd0-9abc-526fb9b408b8.roa (raw, json) Hash identifier: 3Z9+V37gwxI8f8maqwbqQQzezAOy7pQ3zYY8+BMOT5Y= Subject key identifier: DC:28:E2:22:05:53:C4:00:60:B5:21:C2:3C:F7:DC:65:CC:40:C4:8D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48870093EB1229586E34363B96CDBA8E4E8C3F2F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa819602-1206-4fd0-9abc-526fb9b408b8.roa Signing time: Sat 19 Jul 2025 00:21:13 +0000 ROA not before: Sat 19 Jul 2025 00:21:13 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f24:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:87:00:93:eb:12:29:58:6e:34:36:3b:96:cd:ba:8e:4e:8c:3f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:21:13 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=e6a88d03d25858f3f3fd9ed07011eabcf7004c14c85440af8e72550f1a4c8eea, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:bf:b4:31:86:fd:6a:64:5c:8a:99:dc:cc: e0:fa:59:36:06:be:63:3f:a2:79:b5:44:02:87:02: b5:07:7d:b8:5d:53:ef:d3:dd:e1:d6:4b:f2:8e:bd: 4c:29:3a:c5:76:9c:9a:9c:62:65:88:49:ab:72:89: 07:1a:ba:ed:28:4d:b6:d8:20:96:d0:71:da:50:5d: 9d:9a:b3:7c:90:8e:82:ea:78:96:af:4e:58:0e:cd: c6:9b:0d:4d:b3:c2:fc:1f:ab:34:66:19:7e:ee:14: 02:13:17:62:01:c5:62:ba:e0:f2:fa:44:ea:e6:b3: a9:97:15:a0:eb:a6:cb:64:d9:e3:db:5d:d9:ff:fe: 11:8a:54:54:2b:27:2d:38:0a:41:47:b5:b3:f6:dd: 26:7d:c4:43:9e:f9:a7:1e:d1:05:af:6b:a2:1c:1a: bc:86:3a:0a:de:23:11:d9:1b:b2:47:ab:dd:c2:21: 1d:c5:ce:d1:10:2a:c8:35:ec:c3:33:fd:ae:e2:69: 1d:d8:41:de:10:50:f8:7c:cb:90:c4:7d:e7:f5:0a: 1d:93:4a:ed:75:01:22:8f:02:20:3d:e4:88:26:64: 82:31:33:1e:66:17:45:86:c2:d1:7d:00:23:88:00: a6:e6:77:40:08:3a:8b:47:e1:63:ed:09:ca:cd:cb: 7b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:28:E2:22:05:53:C4:00:60:B5:21:C2:3C:F7:DC:65:CC:40:C4:8D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa819602-1206-4fd0-9abc-526fb9b408b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f24:8000::/36 Signature Algorithm: sha256WithRSAEncryption 52:ab:2c:06:1f:64:d0:a8:51:c3:93:5b:35:24:c8:9d:b7:16: ab:3e:09:75:bb:0a:f3:66:71:bf:72:45:00:10:1c:88:1e:0d: 23:9b:c1:94:96:60:bd:8b:50:93:8d:ac:bc:0c:50:cc:bb:fd: c8:74:13:a3:5a:33:77:fd:d1:3d:b2:16:11:da:7e:5a:ed:c4: 89:69:c3:97:95:21:c3:c1:b3:a9:ba:cb:42:b7:58:2b:78:d9: ac:7b:67:90:ce:68:2d:69:2c:ff:f2:87:d9:29:0e:5d:5c:7d: df:75:5a:78:67:7a:84:b3:d0:5f:95:ee:fc:4a:92:c2:f7:ad: cd:b8:48:de:6a:92:bf:f0:f3:3c:0b:cf:c9:34:73:43:96:30: 08:a4:42:b0:80:2a:62:99:43:64:c2:31:96:93:f8:d9:30:95: 55:5c:04:da:6c:9b:eb:7c:77:38:94:4a:ba:d6:1e:3f:37:e0: 8d:55:13:98:01:01:f2:00:85:e0:b1:15:32:3d:02:d7:58:3b: 03:c4:f1:1e:0e:18:3a:bd:bf:3e:53:1b:c5:f1:ed:cf:16:b0: 2f:3a:ff:60:ac:21:f1:df:7f:f6:84:9a:7f:cf:41:c9:f4:48: d6:37:76:0c:ff:29:f7:e3:31:96:26:d2:dc:7a:c9:cc:73:a9: 0c:99:02:a6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSIcAk+sSKVhuNDY7ls26jk6MPy8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAyMTEzWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmE4OGQwM2QyNTg1OGYzZjNmZDllZDA3MDExZWFiY2Y3 MDA0YzE0Yzg1NDQwYWY4ZTcyNTUwZjFhNGM4ZWVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC34r+0MYb9amRcipnczOD6WTYGvmM/onm1RAKHArUHfbhd U+/T3eHWS/KOvUwpOsV2nJqcYmWISatyiQcauu0oTbbYIJbQcdpQXZ2as3yQjoLq eJavTlgOzcabDU2zwvwfqzRmGX7uFAITF2IBxWK64PL6ROrms6mXFaDrpstk2ePb Xdn//hGKVFQrJy04CkFHtbP23SZ9xEOe+ace0QWva6IcGryGOgreIxHZG7JHq93C IR3FztEQKsg17MMz/a7iaR3YQd4QUPh8y5DEfef1Ch2TSu11ASKPAiA95IgmZIIx Mx5mF0WGwtF9ACOIAKbmd0AIOotH4WPtCcrNy3tfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU3CjiIgVTxABgtSHCPPfcZcxAxI0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhODE5NjAyLTEyMDYtNGZkMC05YWJjLTUyNmZiOWI0MDhiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8kgDANBgkqhkiG9w0BAQsFAAOCAQEAUqssBh9k0KhRw5NbNSTInbcW qz4JdbsK82Zxv3JFABAciB4NI5vBlJZgvYtQk42svAxQzLv9yHQTo1ozd/3RPbIW Edp+Wu3EiWnDl5Uhw8GzqbrLQrdYK3jZrHtnkM5oLWks//KH2SkOXVx933VaeGd6 hLPQX5Xu/EqSwvetzbhI3mqSv/DzPAvPyTRzQ5YwCKRCsIAqYplDZMIxlpP42TCV VVwE2myb63x3OJRKutYePzfgjVUTmAEB8gCF4LEVMj0C11g7A8TxHg4YOr2/PlMb xfHtzxawLzr/YKwh8d9/9oSaf89ByfRI1jd2DP8p9+MxlibS3HrJzHOpDJkCpg== -----END CERTIFICATE-----Generated at Sat Aug 9 14:32:24 2025 by rpki-client