$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed50b42-bf94-40d7-9054-a87b81e66319.roa File: aed50b42-bf94-40d7-9054-a87b81e66319.roa (raw, json) Hash identifier: DB+0zYPprE8McjIYCXbSOdKJd+8BYiiygXRddahPaSE= Subject key identifier: B0:ED:D3:56:B6:80:68:1A:03:C0:90:BD:52:FC:3F:8E:CD:8F:36:34 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 192FDBD5AAD3255E12B4A7167C966530FD5856A9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed50b42-bf94-40d7-9054-a87b81e66319.roa Signing time: Tue 05 Aug 2025 00:22:24 +0000 ROA not before: Tue 05 Aug 2025 00:22:24 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fb8:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:2f:db:d5:aa:d3:25:5e:12:b4:a7:16:7c:96:65:30:fd:58:56:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:22:24 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=c39ea5aa072dc9cca5392a2ab80767aaed21fbaf45ff296ef5121c82ba9f7456, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e6:3f:46:0f:18:cc:b7:24:97:46:7d:b0:6d: e0:9d:c2:ba:6c:c5:4b:58:c2:2a:e3:5b:fb:a1:72: 6e:52:e4:5f:9e:3e:25:be:89:ab:d8:cf:23:5a:6f: 7d:bf:ee:9d:cb:ab:4d:3c:73:f3:a9:22:9e:6f:d5: 09:60:95:c0:8e:6d:68:68:ea:e0:21:d3:a6:c7:a3: 49:77:94:49:16:dd:84:06:72:28:d9:4c:68:a9:85: 5c:00:9d:5b:7f:c8:86:8c:bd:09:84:62:33:72:9d: 7d:78:da:54:bf:0a:07:2c:a3:19:8f:49:c4:7c:c2: b6:a1:47:81:7b:ad:11:af:e4:fb:bc:03:96:f3:18: 48:c6:cd:c8:ef:85:1c:ca:da:51:d0:0c:d2:32:04: 49:b5:bd:0d:e9:7e:cf:00:44:88:0c:80:3a:f0:72: 55:52:35:04:5a:db:a6:04:d6:3f:11:88:8f:f5:3c: b6:6e:09:35:16:32:1d:af:66:fc:de:54:a9:7d:66: c3:de:9c:2c:03:81:4c:c0:f3:ab:a9:8d:ca:74:bc: 3c:7d:61:44:23:30:f9:1a:27:ab:3b:4f:59:11:4a: 19:e8:42:fa:22:26:59:13:00:11:1a:bb:1d:b6:d8: 64:68:cd:2b:f8:5b:ce:f4:b7:02:f3:ef:68:f6:e4: 86:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:ED:D3:56:B6:80:68:1A:03:C0:90:BD:52:FC:3F:8E:CD:8F:36:34 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed50b42-bf94-40d7-9054-a87b81e66319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:5000::/40 Signature Algorithm: sha256WithRSAEncryption 7f:49:60:02:46:39:ff:b0:c8:d7:cb:74:dc:29:46:79:f4:93: f7:1c:80:db:97:eb:a1:1a:e1:01:c0:0f:a9:90:c6:d0:41:17: 72:40:4f:96:16:70:37:99:47:29:af:6e:a0:0b:27:03:b6:4e: 17:25:d4:eb:44:60:29:49:1c:66:37:4e:2f:c3:02:9f:9e:dd: 56:85:6e:ec:95:5b:ce:4c:3c:66:ed:f2:31:87:80:27:74:49: 80:b4:66:ff:5b:80:25:99:34:1e:01:c9:4b:9a:c8:95:c3:11: 4c:c7:a6:fa:99:78:c8:b1:8e:54:65:98:5d:45:da:c4:6b:46: 5d:a4:21:56:9e:b5:5d:3e:24:38:a0:38:c9:6b:1a:a3:5e:f9: 69:0f:f8:44:5d:95:9d:9d:7c:20:28:43:a4:ad:70:fe:cf:b2: d0:d3:10:78:9c:08:1c:4e:d1:91:b6:96:2c:18:fa:be:b1:6b: c8:0c:25:9c:0c:02:e1:d9:47:97:78:6e:d1:1a:d7:4d:16:e2: f0:e0:2d:2c:4d:47:ee:0f:0d:c7:76:89:c5:60:ca:19:9e:10: b2:56:3d:aa:3e:64:67:7f:13:8f:9a:7a:af:3d:7e:12:43:6f: 9f:5c:f6:a1:7a:ed:1c:42:53:0f:90:92:61:74:24:41:e4:5b: fc:c6:61:6f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUGS/b1arTJV4StKcWfJZlMP1YVqkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAyMjI0WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzllYTVhYTA3MmRjOWNjYTUzOTJhMmFiODA3NjdhYWVk MjFmYmFmNDVmZjI5NmVmNTEyMWM4MmJhOWY3NDU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt5j9GDxjMtySXRn2wbeCdwrpsxUtYwirjW/uhcm5S5F+e PiW+iavYzyNab32/7p3Lq008c/OpIp5v1QlglcCObWho6uAh06bHo0l3lEkW3YQG cijZTGiphVwAnVt/yIaMvQmEYjNynX142lS/CgcsoxmPScR8wrahR4F7rRGv5Pu8 A5bzGEjGzcjvhRzK2lHQDNIyBEm1vQ3pfs8ARIgMgDrwclVSNQRa26YE1j8RiI/1 PLZuCTUWMh2vZvzeVKl9ZsPenCwDgUzA86upjcp0vDx9YUQjMPkaJ6s7T1kRShno QvoiJlkTABEaux222GRozSv4W870twLz72j25IblAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUsO3TVraAaBoDwJC9Uvw/js2PNjQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlZDUwYjQyLWJmOTQtNDBkNy05MDU0LWE4N2I4MWU2NjMxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4UDANBgkqhkiG9w0BAQsFAAOCAQEAf0lgAkY5/7DI18t03ClGefST 9xyA25froRrhAcAPqZDG0EEXckBPlhZwN5lHKa9uoAsnA7ZOFyXU60RgKUkcZjdO L8MCn57dVoVu7JVbzkw8Zu3yMYeAJ3RJgLRm/1uAJZk0HgHJS5rIlcMRTMem+pl4 yLGOVGWYXUXaxGtGXaQhVp61XT4kOKA4yWsao175aQ/4RF2VnZ18IChDpK1w/s+y 0NMQeJwIHE7RkbaWLBj6vrFryAwlnAwC4dlHl3hu0RrXTRbi8OAtLE1H7g8Nx3aJ xWDKGZ4QslY9qj5kZ38Tj5p6rz1+EkNvn1z2oXrtHEJTD5CSYXQkQeRb/MZhbw== -----END CERTIFICATE-----Generated at Wed Aug 6 05:25:02 2025 by rpki-client