$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddbe11ef-0576-467f-971e-c7af8a31af5a.roa File: ddbe11ef-0576-467f-971e-c7af8a31af5a.roa (raw, json) Hash identifier: StyaBsXDjERpgznaFbNG6AXMAIGHfkwCQHk7M2KTaU4= Subject key identifier: 35:AB:B3:CD:55:51:D4:F8:38:80:F1:E1:E7:FB:0E:21:79:D7:38:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0889926D43FC2459D1F61F62D182E0C244C4DC64 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddbe11ef-0576-467f-971e-c7af8a31af5a.roa Signing time: Fri 01 Aug 2025 16:20:36 +0000 ROA not before: Fri 01 Aug 2025 16:20:36 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f00:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:89:92:6d:43:fc:24:59:d1:f6:1f:62:d1:82:e0:c2:44:c4:dc:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 16:20:36 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=6785e3f15c0a2f8a59d8e3a14eaa8f0e372d85d22d1b9a5611e8cdef92274301, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:d3:d4:5d:07:f3:bf:d0:be:45:6b:d7:bc: a9:8a:dd:f1:a5:07:f4:3f:c1:76:23:24:6d:12:96: ef:62:1c:b8:4e:ab:08:e6:d9:60:09:88:42:c1:98: 35:b4:01:bf:f9:23:f5:88:98:c4:46:99:fb:71:72: 6a:27:30:6c:09:4f:a6:bb:ee:3b:81:64:c8:36:10: 5b:4e:83:74:15:39:04:fa:3b:a5:36:35:0d:59:38: da:63:45:8d:a0:55:1d:8e:80:b0:12:01:a8:a1:af: 7b:9d:4c:82:5b:8a:c5:c2:ff:c8:68:19:c0:f4:d0: 33:3f:bf:2f:95:bb:76:a5:b6:b3:77:e7:da:52:ae: b6:a9:93:ba:ef:c5:3e:b0:b5:4b:b1:9d:07:e1:ca: 26:81:14:7a:0a:06:3b:41:4f:a5:94:a6:8a:2b:96: bb:d1:4b:cd:71:36:ec:44:8c:71:b3:d3:bf:ee:d7: ed:8a:b5:25:22:a0:a5:77:5a:1b:16:49:2d:4c:4f: b8:ef:a6:47:95:1f:11:50:e2:ae:37:bd:50:f4:2b: 0c:61:31:7a:68:a1:b5:53:b0:09:3f:97:ae:8e:54: 1d:e1:79:ef:33:47:a2:36:19:c8:08:ac:43:6e:3e: 31:1b:b3:7d:d0:7f:17:70:08:f1:b6:00:bc:92:f1: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AB:B3:CD:55:51:D4:F8:38:80:F1:E1:E7:FB:0E:21:79:D7:38:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddbe11ef-0576-467f-971e-c7af8a31af5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:2040::/48 Signature Algorithm: sha256WithRSAEncryption aa:d0:51:f0:a0:d1:f9:c9:b9:d0:48:8d:77:63:be:4f:de:7c: de:e9:1e:fc:93:57:e9:64:08:c9:c1:5b:eb:19:ae:e4:83:4d: 02:b1:00:93:af:b4:f5:2c:c4:0d:11:a7:8e:55:42:37:bf:eb: 4d:8d:31:9b:4f:89:72:bd:14:31:3c:0a:32:ec:d5:c1:21:5d: 06:06:1f:36:12:e9:42:6a:4f:2b:ea:2d:94:26:fb:7b:0d:4f: a1:a3:57:a3:0e:4d:3e:d5:24:a9:85:79:80:9b:c8:b2:cc:61: 3d:04:8a:09:39:bc:a0:67:cb:c7:bc:8e:29:34:74:f9:37:9c: 9c:40:13:85:03:31:a8:50:1e:5c:1f:2e:3f:ac:5f:ad:68:23: e8:36:78:34:23:cd:b1:85:cd:48:ab:b6:94:2d:18:60:41:97: 7f:09:07:e1:eb:8e:ef:df:45:a0:16:de:1f:cb:51:7b:04:32: 3f:8c:d6:6a:0f:3b:a3:03:81:c8:a0:de:b4:e6:fb:ce:18:ca: 08:8c:65:46:3b:2b:ea:4f:d9:12:a0:08:36:7f:6d:ba:58:ca: dc:d0:aa:89:41:8c:fa:c9:09:86:f6:a3:59:bf:5b:45:9d:61: 24:8f:f3:73:a4:1e:ed:39:67:c7:97:0f:05:a2:22:9d:15:13: 33:b5:28:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCImSbUP8JFnR9h9i0YLgwkTE3GQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTYyMDM2WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2Nzg1ZTNmMTVjMGEyZjhhNTlkOGUzYTE0ZWFhOGYwZTM3 MmQ4NWQyMmQxYjlhNTYxMWU4Y2RlZjkyMjc0MzAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp+dPUXQfzv9C+RWvXvKmK3fGlB/Q/wXYjJG0Slu9iHLhO qwjm2WAJiELBmDW0Ab/5I/WImMRGmftxcmonMGwJT6a77juBZMg2EFtOg3QVOQT6 O6U2NQ1ZONpjRY2gVR2OgLASAaihr3udTIJbisXC/8hoGcD00DM/vy+Vu3altrN3 59pSrrapk7rvxT6wtUuxnQfhyiaBFHoKBjtBT6WUpoorlrvRS81xNuxEjHGz07/u 1+2KtSUioKV3WhsWSS1MT7jvpkeVHxFQ4q43vVD0KwxhMXpoobVTsAk/l66OVB3h ee8zR6I2GcgIrENuPjEbs33QfxdwCPG2ALyS8c2ZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNauzzVVR1Pg4gPHh5/sOIXnXOKkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RkYmUxMWVmLTA1NzYtNDY3Zi05NzFlLWM3YWY4YTMxYWY1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AIEAwDQYJKoZIhvcNAQELBQADggEBAKrQUfCg0fnJudBIjXdjvk/e fN7pHvyTV+lkCMnBW+sZruSDTQKxAJOvtPUsxA0Rp45VQje/602NMZtPiXK9FDE8 CjLs1cEhXQYGHzYS6UJqTyvqLZQm+3sNT6GjV6MOTT7VJKmFeYCbyLLMYT0Eigk5 vKBny8e8jik0dPk3nJxAE4UDMahQHlwfLj+sX61oI+g2eDQjzbGFzUirtpQtGGBB l38JB+Hrju/fRaAW3h/LUXsEMj+M1moPO6MDgcig3rTm+84YygiMZUY7K+pP2RKg CDZ/bbpYytzQqolBjPrJCYb2o1m/W0WdYSSP83OkHu05Z8eXDwWiIp0VEzO1KOI= -----END CERTIFICATE-----Generated at Tue Aug 5 20:17:00 2025 by rpki-client