$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3c5934c-7d31-4f75-8305-e287807d8cf5.roa File: d3c5934c-7d31-4f75-8305-e287807d8cf5.roa (raw, json) Hash identifier: 6YLNVdtGQ/tbLZuFT3hxxwgGywq2tcMHKUctfcZMVjE= Subject key identifier: 5B:08:C0:37:CC:EF:A9:58:58:DF:15:04:44:F0:1E:52:32:BE:84:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40875A5C6D11DC9863C3CB82D7E5073EF65777C1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3c5934c-7d31-4f75-8305-e287807d8cf5.roa Signing time: Fri 01 Aug 2025 17:02:12 +0000 ROA not before: Fri 01 Aug 2025 17:02:12 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff6:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:87:5a:5c:6d:11:dc:98:63:c3:cb:82:d7:e5:07:3e:f6:57:77:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 17:02:12 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=b8aa25eeccf537ff7a842029a1d61e5feaafe0a0f3c4f07b0dad4d49e265b901, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3c:45:d9:a8:fc:a9:85:ec:77:87:af:ee:df: 74:89:c6:af:e2:08:a7:7b:52:97:6f:7d:64:ed:4d: fe:9a:46:dc:6b:fd:9a:a7:fa:30:29:0e:22:a5:5c: 33:db:ef:c1:31:32:90:21:a1:bd:e2:1b:b5:d3:88: 48:73:60:58:97:93:02:26:e6:07:51:a3:56:f1:cb: 64:8b:86:a8:60:6d:f9:2d:26:17:14:bb:83:6d:ec: 71:0a:8d:d9:3b:1c:7e:3c:3e:23:e0:2e:e3:f5:45: d0:39:55:0c:0b:99:ee:a7:fd:40:86:3a:a4:00:1e: 0d:36:3b:6d:c4:62:ce:c9:15:ef:45:58:ca:54:d1: f9:af:fb:5e:3c:de:61:5e:e1:4c:e9:7e:a6:57:0a: a5:5b:41:cb:61:08:5a:56:b0:6f:6f:1b:d6:10:a8: 6d:42:15:73:25:64:48:a8:af:89:45:06:bc:30:d4: fa:23:7f:f9:7a:23:4d:77:86:78:bc:e3:1f:07:b2: 5f:37:9b:a6:26:55:dd:9e:76:7f:cc:e7:0d:40:e8: 5a:33:e6:55:67:32:cf:a6:70:24:15:97:8b:6b:33: e0:6f:2c:51:cd:0c:0d:09:60:44:87:07:84:a3:fc: 33:e2:44:e3:b1:c1:ca:6e:a1:76:3f:49:89:57:d5: f4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:08:C0:37:CC:EF:A9:58:58:DF:15:04:44:F0:1E:52:32:BE:84:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3c5934c-7d31-4f75-8305-e287807d8cf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6:8000::/48 Signature Algorithm: sha256WithRSAEncryption 7a:6e:71:c7:1f:b6:3e:f0:f1:f9:21:fb:a4:40:eb:ad:25:b8: 79:05:6f:81:d9:6b:ac:93:1b:3b:93:95:58:6e:59:89:98:40: fb:e0:5a:6c:a0:4d:0f:73:67:1c:00:db:c7:6b:ac:79:1c:5b: 9a:ab:d6:11:3a:60:33:a9:a4:fc:fb:17:62:a6:1c:92:4d:a1: f1:15:88:db:a4:8b:78:e3:03:da:fc:dc:83:3b:d2:8a:d4:d3: 52:c8:77:82:4b:0a:ee:c3:95:1b:01:cd:d3:31:58:84:c0:9b: 6d:79:d9:17:f7:e3:27:90:e2:79:cb:29:bf:87:7c:22:5e:7a: 51:5c:1d:52:8f:d8:f8:9c:f2:7e:14:c6:97:23:40:55:ca:fb: ac:ba:76:06:f1:db:08:28:cc:6a:10:85:74:ca:dd:4d:88:8e: 2d:9c:d2:73:bc:46:51:be:63:b2:59:74:8b:18:f9:43:e5:42: b3:4b:c7:e3:a6:68:aa:1e:6b:d6:36:60:7a:09:2e:06:87:76: 22:23:0b:c7:d9:42:d2:0a:d5:cd:4b:dc:9d:95:11:71:fb:25: a7:fe:e2:93:5b:e5:cd:e3:52:87:28:97:36:99:c6:91:bf:8f: 12:2b:e6:d0:61:86:ed:3a:2f:da:53:4e:73:61:19:db:1d:64: 31:fa:aa:d4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQIdaXG0R3Jhjw8uC1+UHPvZXd8EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTcwMjEyWhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOGFhMjVlZWNjZjUzN2ZmN2E4NDIwMjlhMWQ2MWU1ZmVh YWZlMGEwZjNjNGYwN2IwZGFkNGQ0OWUyNjViOTAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSPEXZqPyphex3h6/u33SJxq/iCKd7UpdvfWTtTf6aRtxr /Zqn+jApDiKlXDPb78ExMpAhob3iG7XTiEhzYFiXkwIm5gdRo1bxy2SLhqhgbfkt JhcUu4Nt7HEKjdk7HH48PiPgLuP1RdA5VQwLme6n/UCGOqQAHg02O23EYs7JFe9F WMpU0fmv+1483mFe4UzpfqZXCqVbQcthCFpWsG9vG9YQqG1CFXMlZEior4lFBrww 1Pojf/l6I013hni84x8Hsl83m6YmVd2edn/M5w1A6Foz5lVnMs+mcCQVl4trM+Bv LFHNDA0JYESHB4Sj/DPiROOxwcpuoXY/SYlX1fRbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWwjAN8zvqVhY3xUERPAeUjK+hEEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QzYzU5MzRjLTdkMzEtNGY3NS04MzA1LWUyODc4MDdkOGNmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/2gAAwDQYJKoZIhvcNAQELBQADggEBAHpucccftj7w8fkh+6RA660l uHkFb4HZa6yTGzuTlVhuWYmYQPvgWmygTQ9zZxwA28drrHkcW5qr1hE6YDOppPz7 F2KmHJJNofEViNuki3jjA9r83IM70orU01LId4JLCu7DlRsBzdMxWITAm2152Rf3 4yeQ4nnLKb+HfCJeelFcHVKP2Pic8n4UxpcjQFXK+6y6dgbx2wgozGoQhXTK3U2I ji2c0nO8RlG+Y7JZdIsY+UPlQrNLx+OmaKoea9Y2YHoJLgaHdiIjC8fZQtIK1c1L 3J2VEXH7Jaf+4pNb5c3jUocolzaZxpG/jxIr5tBhhu06L9pTTnNhGdsdZDH6qtQ= -----END CERTIFICATE-----Generated at Thu Aug 7 04:39:00 2025 by rpki-client