$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3aba416-3bf5-4040-835d-289573b08e84.roa File: e3aba416-3bf5-4040-835d-289573b08e84.roa (raw, json) Hash identifier: BdIBRy3uRgKa7i2CQI4haJTaT3VlQwqXjx3olKxx8h8= Subject key identifier: BB:2E:B0:57:E6:42:C4:AA:D3:98:F7:8F:76:54:17:03:49:B5:41:83 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 601CA137244A10192199A648313DE500C3F72D6B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3aba416-3bf5-4040-835d-289573b08e84.roa Signing time: Wed 06 Aug 2025 00:31:07 +0000 ROA not before: Wed 06 Aug 2025 00:31:07 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2a:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:1c:a1:37:24:4a:10:19:21:99:a6:48:31:3d:e5:00:c3:f7:2d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 00:31:07 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=50e595c0c63d28aa05e4a97fa7d019912f8134e6d4bec2ae569ca99a03bc766f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:91:d5:98:a4:70:00:de:09:f3:6d:1b:e0:3b: 87:46:24:92:0b:4c:c9:c2:e3:84:ec:14:07:e3:8c: 7a:8d:79:09:47:ad:46:a4:6a:02:04:2d:b2:d8:d3: 95:07:88:a3:07:7c:fb:41:22:38:99:65:d7:9e:37: a7:88:12:80:fd:02:da:44:f3:da:cb:b5:08:b0:9c: 45:6a:f5:68:30:57:91:65:38:75:a8:97:17:19:2e: ed:5f:e8:98:08:7c:5b:8d:e5:b7:37:19:85:25:cb: fa:0e:f2:7c:1b:a2:97:eb:f1:41:70:18:0d:51:fd: 60:62:74:25:64:7f:c1:5c:da:7e:03:32:ae:37:c9: a7:b4:84:8a:4a:dd:13:66:d2:e0:e6:ae:07:c4:5a: 28:0a:47:d4:3d:13:a4:e7:2a:b8:fc:e3:21:89:63: e1:7b:27:3c:61:f0:e1:9a:61:c7:38:e0:28:49:f4: 86:6d:b4:61:ae:e9:d9:c5:aa:23:44:f6:04:30:09: 56:33:86:2e:c7:80:eb:ed:45:3a:bd:f8:57:7b:40: 8f:e1:2d:77:a6:90:4b:af:f8:cc:5f:78:48:e4:46: 0a:8c:0d:7e:7f:49:4c:d8:73:e7:d0:b6:e2:3d:f3: cf:9b:97:fc:4b:bf:c2:ed:09:24:47:f1:91:27:6e: 99:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2E:B0:57:E6:42:C4:AA:D3:98:F7:8F:76:54:17:03:49:B5:41:83 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3aba416-3bf5-4040-835d-289573b08e84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2a:c800::/37 Signature Algorithm: sha256WithRSAEncryption 85:29:9b:d1:62:8f:6d:55:2d:2e:d7:0e:b4:25:26:c7:df:30: 66:fc:bf:ca:b6:76:ed:93:13:ce:3d:14:d5:f8:d3:48:63:fc: 3a:f0:ff:69:d8:2d:54:fb:e9:3a:49:45:2b:9d:10:db:27:30: d5:7e:5b:43:ee:62:bd:56:34:5c:8a:af:93:68:ce:c5:ca:33: 9d:04:c0:19:0c:68:4d:d8:a1:b8:d8:27:ff:85:3f:11:da:5b: a6:16:c6:1e:5e:69:c8:5d:c6:bf:ce:66:49:54:de:bc:06:1f: 81:6c:ef:9e:3b:ef:f1:2c:e6:53:97:cc:43:21:1e:68:e8:46: ec:ef:c2:ac:57:83:49:a2:1a:7c:b4:5a:6b:26:5e:97:00:05: 09:a0:7d:08:4d:af:19:70:2a:93:91:1b:47:26:74:38:fa:d5: d8:0a:d0:a7:89:da:e7:15:56:85:c0:9f:91:22:5d:7d:8b:6f: 9f:70:9b:ac:9d:97:85:bd:85:39:67:2d:c3:a5:3e:46:03:10: e7:c1:24:70:1e:83:27:7c:b3:34:f6:e9:ac:9d:fd:49:ed:f3: 39:a2:60:b1:6e:f4:4f:fb:e5:62:91:80:59:c8:61:05:bf:08: e3:82:23:ea:0d:89:98:5e:8f:a4:ee:45:37:41:ca:9e:bf:c9: 72:bc:d6:36 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYByhNyRKEBkhmaZIMT3lAMP3LWswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDAzMTA3WhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGU1OTVjMGM2M2QyOGFhMDVlNGE5N2ZhN2QwMTk5MTJm ODEzNGU2ZDRiZWMyYWU1NjljYTk5YTAzYmM3NjZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFkdWYpHAA3gnzbRvgO4dGJJILTMnC44TsFAfjjHqNeQlH rUakagIELbLY05UHiKMHfPtBIjiZZdeeN6eIEoD9AtpE89rLtQiwnEVq9WgwV5Fl OHWolxcZLu1f6JgIfFuN5bc3GYUly/oO8nwbopfr8UFwGA1R/WBidCVkf8Fc2n4D Mq43yae0hIpK3RNm0uDmrgfEWigKR9Q9E6TnKrj84yGJY+F7Jzxh8OGaYcc44ChJ 9IZttGGu6dnFqiNE9gQwCVYzhi7HgOvtRTq9+Fd7QI/hLXemkEuv+MxfeEjkRgqM DX5/SUzYc+fQtuI988+bl/xLv8LtCSRH8ZEnbpn3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUuy6wV+ZCxKrTmPePdlQXA0m1QYMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UzYWJhNDE2LTNiZjUtNDA0MC04MzVkLTI4OTU3M2IwOGU4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8qyDANBgkqhkiG9w0BAQsFAAOCAQEAhSmb0WKPbVUtLtcOtCUmx98w Zvy/yrZ27ZMTzj0U1fjTSGP8OvD/adgtVPvpOklFK50Q2ycw1X5bQ+5ivVY0XIqv k2jOxcoznQTAGQxoTdihuNgn/4U/EdpbphbGHl5pyF3Gv85mSVTevAYfgWzvnjvv 8SzmU5fMQyEeaOhG7O/CrFeDSaIafLRaayZelwAFCaB9CE2vGXAqk5EbRyZ0OPrV 2ArQp4na5xVWhcCfkSJdfYtvn3CbrJ2Xhb2FOWctw6U+RgMQ58EkcB6DJ3yzNPbp rJ39Se3zOaJgsW70T/vlYpGAWchhBb8I44Ij6g2JmF6PpO5FN0HKnr/JcrzWNg== -----END CERTIFICATE-----Generated at Sat Aug 9 23:08:41 2025 by rpki-client