$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d21d2b11-198a-4187-babe-5e898f2a1576.roa File: d21d2b11-198a-4187-babe-5e898f2a1576.roa (raw, json) Hash identifier: 46kSzEsjw5+Pyp0RXOwmRnw50+P6bgaag8mmFJwuKOQ= Subject key identifier: E9:D3:82:BB:CC:67:48:E3:5F:5A:8C:79:57:C8:24:E6:38:89:F1:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6989648DA107B146BBB45077D7969037DC4DCD19 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d21d2b11-198a-4187-babe-5e898f2a1576.roa Signing time: Sat 19 Jul 2025 00:21:02 +0000 ROA not before: Sat 19 Jul 2025 00:21:02 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:89:64:8d:a1:07:b1:46:bb:b4:50:77:d7:96:90:37:dc:4d:cd:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:21:02 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=af8653011fe169974867ba05826dfa114aec2d4ff40cf6935ce4be1d4f378d9c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b0:50:e9:04:d8:eb:c5:b3:b4:16:89:c8:d8: b2:eb:b5:a1:8b:82:e8:65:bc:49:b1:6c:37:e8:47: e3:cd:8a:40:7e:dd:dc:68:74:22:fd:4e:00:e8:54: 3b:d6:19:b3:1d:53:f0:d1:ac:a8:2f:7c:e2:5b:22: 93:64:e1:95:4a:dd:5d:b4:56:47:3d:68:74:f0:4f: a2:46:d7:d9:52:77:ee:ec:b0:86:9a:f2:1e:bd:da: 34:67:1d:5b:26:35:ec:b0:d6:98:c8:cc:b2:5e:03: 90:59:6a:64:60:1c:37:db:ae:27:28:99:1a:92:90: 6d:f3:ca:d0:84:07:e3:dd:bc:66:8c:89:54:02:52: c8:34:21:17:c5:76:cd:67:59:5d:c5:18:39:85:20: 78:dc:ff:70:f5:c1:2a:68:60:8f:f3:44:f9:93:01: 4e:05:6b:c8:dd:d7:23:17:9e:94:29:08:f8:2f:74: 17:8a:f3:fe:ce:57:14:39:15:c9:99:6f:24:5e:2f: ec:e0:ec:11:25:e5:83:7b:b6:ad:45:a8:a4:5e:06: fe:52:4d:70:82:76:d6:5c:7b:5d:04:95:ce:75:d8: 85:2d:b9:80:d4:08:1b:52:91:02:a1:c9:d3:d3:a5: 31:b1:de:d4:08:30:59:f5:eb:e4:76:61:f2:40:e4: 2f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D3:82:BB:CC:67:48:E3:5F:5A:8C:79:57:C8:24:E6:38:89:F1:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d21d2b11-198a-4187-babe-5e898f2a1576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:8000::/39 Signature Algorithm: sha256WithRSAEncryption 16:e1:97:a0:75:99:6a:e2:d1:7a:21:55:42:24:a5:25:96:84: a3:53:1e:5b:d4:38:8c:cc:fd:b0:9e:be:9f:92:f3:f7:ae:34: 36:39:37:51:8e:fb:30:cc:8b:e9:80:36:e7:85:e7:54:6e:0b: 7a:9f:b0:bf:8d:7e:f9:0d:48:02:f2:e4:60:81:97:f7:3f:b2: 22:1f:35:bb:28:88:2e:a9:af:14:ac:c7:59:a3:11:d2:db:b1: 16:e6:8b:3c:a2:84:2c:de:e2:0f:d9:cd:a4:b4:42:d9:de:1e: 16:21:e1:a3:89:d9:43:80:60:bf:09:cc:ea:7a:08:df:86:a2: ea:b4:bf:c8:00:3e:83:f5:ce:6a:45:c5:82:6c:2f:0e:48:e6: 23:20:f0:f4:9d:a6:5f:73:cd:ff:9c:71:5e:7b:9c:1a:b6:e1: e1:ca:e7:bb:05:a4:cd:ec:c0:8b:3d:3f:fd:17:00:e3:31:93: 84:e7:c0:32:12:91:67:8f:50:35:99:64:64:ee:eb:08:e6:54: 74:df:8c:50:c3:21:bb:33:3c:6a:b5:25:6e:e1:f8:d2:d5:2d: c1:9e:d9:40:17:a7:7a:fc:a3:05:05:ba:e9:a0:7f:3a:89:ca: c7:41:8b:92:b8:9b:13:ce:6a:c7:96:0c:6e:04:ce:9f:d5:66: c1:fa:da:0d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaYlkjaEHsUa7tFB315aQN9xNzRkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAyMTAyWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjg2NTMwMTFmZTE2OTk3NDg2N2JhMDU4MjZkZmExMTRh ZWMyZDRmZjQwY2Y2OTM1Y2U0YmUxZDRmMzc4ZDljMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxsFDpBNjrxbO0FonI2LLrtaGLguhlvEmxbDfoR+PNikB+ 3dxodCL9TgDoVDvWGbMdU/DRrKgvfOJbIpNk4ZVK3V20Vkc9aHTwT6JG19lSd+7s sIaa8h692jRnHVsmNeyw1pjIzLJeA5BZamRgHDfbricomRqSkG3zytCEB+PdvGaM iVQCUsg0IRfFds1nWV3FGDmFIHjc/3D1wSpoYI/zRPmTAU4Fa8jd1yMXnpQpCPgv dBeK8/7OVxQ5FcmZbyReL+zg7BEl5YN7tq1FqKReBv5STXCCdtZce10Elc512IUt uYDUCBtSkQKhydPTpTGx3tQIMFn16+R2YfJA5C/jAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU6dOCu8xnSONfWox5V8gk5jiJ8fgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QyMWQyYjExLTE5OGEtNDE4Ny1iYWJlLTVlODk4ZjJhMTU3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB+ggDANBgkqhkiG9w0BAQsFAAOCAQEAFuGXoHWZauLReiFVQiSlJZaE o1MeW9Q4jMz9sJ6+n5Lz9640Njk3UY77MMyL6YA254XnVG4Lep+wv41++Q1IAvLk YIGX9z+yIh81uyiILqmvFKzHWaMR0tuxFuaLPKKELN7iD9nNpLRC2d4eFiHho4nZ Q4BgvwnM6noI34ai6rS/yAA+g/XOakXFgmwvDkjmIyDw9J2mX3PN/5xxXnucGrbh 4crnuwWkzezAiz0//RcA4zGThOfAMhKRZ49QNZlkZO7rCOZUdN+MUMMhuzM8arUl buH40tUtwZ7ZQBenevyjBQW66aB/OonKx0GLkribE85qx5YMbgTOn9VmwfraDQ== -----END CERTIFICATE-----Generated at Sat Aug 9 23:14:11 2025 by rpki-client