$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aefe6c81-632c-40a2-8e1a-da305750174d.roa File: aefe6c81-632c-40a2-8e1a-da305750174d.roa (raw, json) Hash identifier: dqBoeSQC1LPnLKZ5y5CwV3egV8To44UMUdPwkZO4ScM= Subject key identifier: 7F:E5:26:BF:CF:37:EE:8A:13:60:96:47:10:F2:47:50:52:FA:7E:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D2E4E5167FF65F8ACB81B729B406B21B22A1F6C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aefe6c81-632c-40a2-8e1a-da305750174d.roa Signing time: Fri 01 Aug 2025 16:50:13 +0000 ROA not before: Fri 01 Aug 2025 16:50:13 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:4090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2e:4e:51:67:ff:65:f8:ac:b8:1b:72:9b:40:6b:21:b2:2a:1f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 16:50:13 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=ae0c70ac8af5cb7eb40c857324200e53427a895b5c747f6c1e55ef8c54b80fd9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6d:8f:08:5a:32:20:c0:30:ec:cb:27:9d:bd: 93:6b:f0:83:18:4b:ea:3b:33:76:d3:44:a1:5b:ab: 9f:31:ac:80:ae:aa:28:af:f0:f0:ed:cc:39:65:69: 38:08:a3:dc:3e:86:58:6a:54:aa:e4:2d:e5:1a:c9: 17:ea:eb:7a:9a:7a:2d:51:6c:cc:c1:86:71:ff:34: fd:59:d9:64:1b:72:5f:43:81:70:85:8d:06:4f:af: 09:e2:73:3e:5a:97:3b:18:53:d6:0a:9a:94:45:79: b0:99:e2:3e:bd:85:aa:15:27:d2:ec:1f:c5:6c:b4: a6:7c:24:5d:bc:2f:ba:07:e6:77:0a:1b:46:f0:80: cc:38:82:8c:ef:05:58:7c:42:de:32:19:3a:99:25: 15:ca:ba:0c:5a:95:32:25:0c:20:bd:fa:91:05:58: 1d:75:75:ee:dc:aa:0b:56:2d:2f:c8:88:f4:13:82: f3:2e:01:4a:f1:e4:62:51:91:58:2c:48:54:55:bb: 90:73:73:2c:ed:90:4b:58:87:4c:ea:b4:62:b2:4d: 1f:b0:75:cb:5c:b4:fd:61:d6:ab:d9:4a:ca:65:dc: 3a:98:9a:34:c7:2a:57:6d:bc:1a:12:75:84:0e:3d: f6:ef:f5:c9:65:34:e2:28:3c:6f:0b:36:92:38:48: 3b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E5:26:BF:CF:37:EE:8A:13:60:96:47:10:F2:47:50:52:FA:7E:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aefe6c81-632c-40a2-8e1a-da305750174d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:4090::/48 Signature Algorithm: sha256WithRSAEncryption 4e:83:2a:e6:79:a8:0a:22:7f:f3:a4:14:f9:a2:73:72:20:6c: 8e:6a:c3:9b:c9:11:66:4d:6a:73:ef:db:0e:e5:91:46:8b:f0: 80:d4:e2:af:b0:40:37:f3:cf:65:7c:a1:84:b4:22:ec:e7:6d: a1:a6:d5:67:c1:11:13:b3:03:f2:31:6c:20:ce:7d:66:94:98: b9:4c:93:eb:d8:99:a3:84:85:57:8a:1f:91:b4:8b:90:3d:95: 21:77:2e:37:d6:a7:c8:16:19:0c:c8:e8:69:6c:72:b8:b9:7c: 7e:2e:95:f8:25:29:e2:14:c2:9e:56:6c:73:0f:bb:72:e9:c7: fe:e0:1a:6c:ba:ce:ae:fe:5b:21:75:c8:6b:96:e7:05:11:13: 2a:8d:e3:b6:33:d3:cb:6a:5d:19:7b:3d:b3:de:4b:9c:d3:1d: e1:7d:6f:90:7e:e0:2c:6a:e0:30:4f:40:01:25:31:ba:01:c5: f3:e9:6f:9e:99:a8:66:95:fa:41:30:7e:48:c4:79:19:44:a0: 49:1c:f4:25:00:f0:27:13:cd:13:25:bf:56:98:96:0e:84:7f: f6:f4:29:7f:46:f7:78:97:de:b9:98:ac:07:15:38:96:c7:7a: ef:f6:b0:cd:46:fc:b2:79:41:2a:e4:51:e5:14:ec:a9:a8:7f: 93:ef:79:ef -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHS5OUWf/ZfisuBtym0BrIbIqH2wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTY1MDEzWhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTBjNzBhYzhhZjVjYjdlYjQwYzg1NzMyNDIwMGU1MzQy N2E4OTViNWM3NDdmNmMxZTU1ZWY4YzU0YjgwZmQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDabY8IWjIgwDDsyyedvZNr8IMYS+o7M3bTRKFbq58xrICu qiiv8PDtzDllaTgIo9w+hlhqVKrkLeUayRfq63qaei1RbMzBhnH/NP1Z2WQbcl9D gXCFjQZPrwnicz5alzsYU9YKmpRFebCZ4j69haoVJ9LsH8VstKZ8JF28L7oH5ncK G0bwgMw4gozvBVh8Qt4yGTqZJRXKugxalTIlDCC9+pEFWB11de7cqgtWLS/IiPQT gvMuAUrx5GJRkVgsSFRVu5BzcyztkEtYh0zqtGKyTR+wdctctP1h1qvZSspl3DqY mjTHKldtvBoSdYQOPfbv9cllNOIoPG8LNpI4SDtJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUf+Umv8837ooTYJZHEPJHUFL6fpUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlZmU2YzgxLTYzMmMtNDBhMi04ZTFhLWRhMzA1NzUwMTc0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//QJAwDQYJKoZIhvcNAQELBQADggEBAE6DKuZ5qAoif/OkFPmic3Ig bI5qw5vJEWZNanPv2w7lkUaL8IDU4q+wQDfzz2V8oYS0IuznbaGm1WfBEROzA/Ix bCDOfWaUmLlMk+vYmaOEhVeKH5G0i5A9lSF3LjfWp8gWGQzI6Glscri5fH4ulfgl KeIUwp5WbHMPu3Lpx/7gGmy6zq7+WyF1yGuW5wUREyqN47Yz08tqXRl7PbPeS5zT HeF9b5B+4Cxq4DBPQAElMboBxfPpb56ZqGaV+kEwfkjEeRlEoEkc9CUA8CcTzRMl v1aYlg6Ef/b0KX9G93iX3rmYrAcVOJbHeu/2sM1G/LJ5QSrkUeUU7Kmof5Pvee8= -----END CERTIFICATE-----Generated at Wed Aug 6 10:06:18 2025 by rpki-client