$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aecb2898-1ea4-4169-a334-e907e8dc483a.roa File: aecb2898-1ea4-4169-a334-e907e8dc483a.roa (raw, json) Hash identifier: 0rz4sjcXTPJyMYRgrK/M83ucnyf/CvwfdFJPBSRDDWk= Subject key identifier: B8:61:7D:42:8F:EA:A7:0C:E8:31:AD:0E:7B:B2:FC:C0:D3:58:DE:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74E422ED275CD147FA9D1A19391D657652DD6505 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aecb2898-1ea4-4169-a334-e907e8dc483a.roa Signing time: Mon 04 Aug 2025 16:32:16 +0000 ROA not before: Mon 04 Aug 2025 16:32:16 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f17:4000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:e4:22:ed:27:5c:d1:47:fa:9d:1a:19:39:1d:65:76:52:dd:65:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:32:16 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=f316c96e8e7959675436479f9fec11aa5a6077aef619d45f0a986241fec6c322, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2f:bf:02:59:a2:ce:11:0f:aa:e9:01:98:13: 8b:d0:93:15:0e:9c:e5:95:3c:44:32:ee:1c:06:a8: b0:42:70:69:d4:7a:40:ec:04:73:65:23:81:01:e3: ad:b2:d8:8d:bc:6c:c0:8a:7e:2b:26:1f:91:25:03: 57:d2:75:27:78:53:e6:22:c6:e1:bb:0f:0a:2b:ec: 9b:2b:61:65:aa:ab:d1:be:26:70:9b:0c:4e:3e:7c: fb:12:fc:0d:69:64:cf:dc:8a:18:72:56:0b:a8:c4: 62:f5:9d:6f:27:88:b2:cf:e2:66:25:a8:97:54:b9: bb:02:48:2a:b1:3f:3c:41:94:c4:f9:75:e3:bf:42: 56:e3:ed:b4:81:e2:cc:3d:0c:72:fb:63:92:03:7b: df:62:ed:9c:86:d4:7a:19:51:32:23:62:ee:5b:41: 93:97:77:36:93:13:03:47:cc:d3:80:9b:9b:28:b7: 3f:03:00:58:f6:98:42:7f:59:73:77:de:83:1b:d1: 00:0e:4a:e7:b5:39:80:f5:8b:e0:33:da:44:fe:09: b4:f2:d8:cc:fe:00:f7:dd:fe:7f:6a:f1:a0:cf:3c: 9e:3a:2e:5a:4c:53:5e:55:8f:52:c4:fe:00:d0:c3: 5c:79:f9:92:fa:87:1c:3f:92:70:4f:63:a1:9f:3f: 72:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:61:7D:42:8F:EA:A7:0C:E8:31:AD:0E:7B:B2:FC:C0:D3:58:DE:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aecb2898-1ea4-4169-a334-e907e8dc483a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f17:4000::/38 Signature Algorithm: sha256WithRSAEncryption 98:49:b3:06:96:de:12:b8:fe:4f:da:56:84:c9:99:3c:b3:a6: 83:07:51:76:7f:d4:c8:db:21:fa:e4:f1:cf:fa:5d:3a:31:8d: 2c:4f:22:08:d9:04:a0:32:f6:1e:c8:82:d7:d3:dc:85:96:71: 6a:d1:e6:af:29:f2:5f:8a:98:14:92:7c:e7:06:b1:ff:e5:46: 56:8e:2f:3c:ed:a6:a9:65:19:b7:40:31:a2:f5:28:fa:d5:4c: 4f:86:7d:b3:dd:5f:95:bf:83:13:65:f6:16:ab:9d:85:f2:b4: d2:e9:f7:8b:4f:d7:bf:fe:95:b3:99:20:b7:36:6a:0d:1b:47: c6:0f:6f:7f:e6:ad:2a:3d:f3:b7:4a:fb:68:94:93:12:52:a6: c4:a5:c3:2a:a9:aa:d4:5a:73:92:a0:84:ae:ec:2b:a5:a7:28: 7d:4f:2a:c2:23:26:a7:f3:0e:b1:69:7a:3f:0e:ff:b8:50:76: 83:f7:6a:83:14:73:16:47:32:6e:2e:52:75:5b:5b:0d:e3:37: 89:0e:9f:76:9f:e6:33:f9:f1:92:55:94:04:ff:fd:84:77:61: fc:92:3c:9e:aa:45:1e:e5:ff:1c:9d:4e:09:c8:9a:61:ba:d1: 23:2f:c9:50:8d:7f:81:b1:b7:ed:b0:ce:43:78:4b:f5:2b:00: 56:5d:3b:bf -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdOQi7Sdc0Uf6nRoZOR1ldlLdZQUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTYzMjE2WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzE2Yzk2ZThlNzk1OTY3NTQzNjQ3OWY5ZmVjMTFhYTVh NjA3N2FlZjYxOWQ0NWYwYTk4NjI0MWZlYzZjMzIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcL78CWaLOEQ+q6QGYE4vQkxUOnOWVPEQy7hwGqLBCcGnU ekDsBHNlI4EB462y2I28bMCKfismH5ElA1fSdSd4U+YixuG7Dwor7JsrYWWqq9G+ JnCbDE4+fPsS/A1pZM/cihhyVguoxGL1nW8niLLP4mYlqJdUubsCSCqxPzxBlMT5 deO/Qlbj7bSB4sw9DHL7Y5IDe99i7ZyG1HoZUTIjYu5bQZOXdzaTEwNHzNOAm5so tz8DAFj2mEJ/WXN33oMb0QAOSue1OYD1i+Az2kT+CbTy2Mz+APfd/n9q8aDPPJ46 LlpMU15Vj1LE/gDQw1x5+ZL6hxw/knBPY6GfP3I5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUuGF9Qo/qpwzoMa0Oe7L8wNNY3ukwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlY2IyODk4LTFlYTQtNDE2OS1hMzM0LWU5MDdlOGRjNDgzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8XQDANBgkqhkiG9w0BAQsFAAOCAQEAmEmzBpbeErj+T9pWhMmZPLOm gwdRdn/UyNsh+uTxz/pdOjGNLE8iCNkEoDL2HsiC19PchZZxatHmrynyX4qYFJJ8 5wax/+VGVo4vPO2mqWUZt0AxovUo+tVMT4Z9s91flb+DE2X2FqudhfK00un3i0/X v/6Vs5kgtzZqDRtHxg9vf+atKj3zt0r7aJSTElKmxKXDKqmq1FpzkqCEruwrpaco fU8qwiMmp/MOsWl6Pw7/uFB2g/dqgxRzFkcybi5SdVtbDeM3iQ6fdp/mM/nxklWU BP/9hHdh/JI8nqpFHuX/HJ1OCciaYbrRIy/JUI1/gbG37bDOQ3hL9SsAVl07vw== -----END CERTIFICATE-----Generated at Fri Aug 8 19:22:20 2025 by rpki-client