$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6ebb8c6-6336-4504-b3c9-32d5891ea889.roa File: b6ebb8c6-6336-4504-b3c9-32d5891ea889.roa (raw, json) Hash identifier: JSYCKr2/mWLUIFwNeu2Rn50sfG2sHTtu/82VIhE1T1I= Subject key identifier: D2:9D:98:7A:3D:D4:19:B4:5D:68:AC:C3:4C:43:0E:68:12:1C:9D:49 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 435FBD0AF06B71BE3BAA4FC4E0638667505A1E86 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6ebb8c6-6336-4504-b3c9-32d5891ea889.roa Signing time: Mon 21 Jul 2025 15:30:26 +0000 ROA not before: Mon 21 Jul 2025 15:30:26 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:8010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5f:bd:0a:f0:6b:71:be:3b:aa:4f:c4:e0:63:86:67:50:5a:1e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 15:30:26 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=13579747f0f28f268e702deb801d7854b6fea6ad50aa440bbcb15d46a1a4b3c1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e7:1c:6f:1e:5f:c2:b2:31:51:af:bd:78:94: 8d:13:50:19:c5:70:2a:c6:d8:96:b5:18:53:7d:19: 9a:0b:15:f8:86:ed:df:5b:d6:2e:b2:f9:2f:2f:eb: 63:b6:ae:aa:e4:22:d6:00:29:bc:c2:ea:74:d2:6c: eb:ee:06:ea:6b:6c:b1:5a:f2:58:8d:66:a4:9a:8a: b1:ba:b8:d2:b9:69:70:3b:e2:57:1c:46:13:73:c9: 00:24:bb:72:5e:05:58:5d:60:bb:94:fd:fe:db:8b: 44:30:cc:95:1b:ed:2e:53:85:d1:3b:13:79:90:8e: f9:25:2a:73:d1:d3:66:d1:f7:1a:1f:d6:37:4a:cc: e1:e1:26:c2:be:ab:8b:2b:5d:e7:3b:8f:4f:62:6f: 62:34:be:59:47:a2:8e:1f:4a:cd:28:fc:f9:c4:2c: 2a:f6:1c:45:b8:df:33:d8:eb:98:71:74:47:a8:0e: a9:ea:81:f9:28:b0:f3:43:f5:a2:58:bc:20:f4:66: ca:e0:dd:87:22:49:41:d2:1b:b5:61:1b:2e:88:fa: bb:ae:63:8f:63:a4:85:47:1b:f4:c5:fe:26:89:b4: 67:fc:6b:1a:19:31:bc:58:dd:f1:50:38:82:d7:15: eb:00:6e:ed:6e:4f:29:ad:4d:ee:5b:43:01:e2:d9: 5b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9D:98:7A:3D:D4:19:B4:5D:68:AC:C3:4C:43:0E:68:12:1C:9D:49 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6ebb8c6-6336-4504-b3c9-32d5891ea889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:8010::/48 Signature Algorithm: sha256WithRSAEncryption 8d:78:e3:b8:7a:58:1f:d1:0a:24:82:56:42:d2:e0:44:5d:86: 9f:bd:a1:05:44:b9:46:ac:7a:fe:08:b4:06:1a:d4:f2:0d:71: b9:3b:69:ac:50:78:00:6a:99:87:ad:b5:38:ba:73:9c:b8:c2: 47:b9:51:df:52:48:36:cc:d7:c0:54:a1:2e:e2:11:92:2d:f8: 53:05:ae:a1:c7:29:be:b8:13:f4:b4:c2:66:16:a3:fc:ed:37: 3f:88:28:a2:98:e0:b9:5a:e8:ad:2a:a3:eb:39:9e:7c:3f:3d: da:4a:27:c2:3e:33:dd:88:07:f5:1b:be:5d:4c:7d:21:28:58: dc:51:b3:80:63:1c:3a:d6:be:ce:1b:fc:9a:70:82:28:ab:65: c4:18:e9:45:c3:5a:92:0f:2a:b8:41:c1:6c:fd:17:1d:19:04: 0f:7a:07:df:dc:f5:90:bd:85:79:14:82:90:7f:f7:8a:7b:05: b8:42:eb:c5:74:41:5e:0e:9d:6d:06:4e:d2:8f:70:67:c6:0a: 6c:c1:32:ec:30:b1:67:83:d2:e9:dc:79:ef:ae:79:8a:d7:f4: 86:01:c4:85:28:55:c3:07:02:8a:61:e4:4a:cd:37:58:72:96: 79:3d:23:6d:b6:57:f4:96:3f:c1:b0:f5:8a:50:49:ca:4e:4b: 38:71:61:3a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQ1+9CvBrcb47qk/E4GOGZ1BaHoYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIxMTUzMDI2WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzU3OTc0N2YwZjI4ZjI2OGU3MDJkZWI4MDFkNzg1NGI2 ZmVhNmFkNTBhYTQ0MGJiY2IxNWQ0NmExYTRiM2MxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV5xxvHl/CsjFRr714lI0TUBnFcCrG2Ja1GFN9GZoLFfiG 7d9b1i6y+S8v62O2rqrkItYAKbzC6nTSbOvuBuprbLFa8liNZqSairG6uNK5aXA7 4lccRhNzyQAku3JeBVhdYLuU/f7bi0QwzJUb7S5ThdE7E3mQjvklKnPR02bR9xof 1jdKzOHhJsK+q4srXec7j09ib2I0vllHoo4fSs0o/PnELCr2HEW43zPY65hxdEeo DqnqgfkosPND9aJYvCD0Zsrg3YciSUHSG7VhGy6I+ruuY49jpIVHG/TF/iaJtGf8 axoZMbxY3fFQOILXFesAbu1uTymtTe5bQwHi2VulAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0p2Yej3UGbRdaKzDTEMOaBIcnUkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I2ZWJiOGM2LTYzMzYtNDUwNC1iM2M5LTMyZDU4OTFlYTg4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hgBAwDQYJKoZIhvcNAQELBQADggEBAI1447h6WB/RCiSCVkLS4ERd hp+9oQVEuUasev4ItAYa1PINcbk7aaxQeABqmYettTi6c5y4wke5Ud9SSDbM18BU oS7iEZIt+FMFrqHHKb64E/S0wmYWo/ztNz+IKKKY4Lla6K0qo+s5nnw/PdpKJ8I+ M92IB/Ubvl1MfSEoWNxRs4BjHDrWvs4b/JpwgiirZcQY6UXDWpIPKrhBwWz9Fx0Z BA96B9/c9ZC9hXkUgpB/94p7BbhC68V0QV4OnW0GTtKPcGfGCmzBMuwwsWeD0unc ee+ueYrX9IYBxIUoVcMHAoph5ErNN1hylnk9I222V/SWP8Gw9YpQScpOSzhxYTo= -----END CERTIFICATE-----Generated at Fri Aug 8 19:36:41 2025 by rpki-client