$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd1c8944-1621-4da7-9c93-1eab516bb822.roa File: fd1c8944-1621-4da7-9c93-1eab516bb822.roa (raw, json) Hash identifier: bq38Eq1f2YkvAdaQP1lsV06tKFnxLMq2//ygqgBhD9c= Subject key identifier: 96:05:1F:90:B3:98:D1:CA:99:56:38:57:2E:D5:CC:51:1D:E9:29:44 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6883923DB62F950696DA47B045FBE4BE890FE460 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd1c8944-1621-4da7-9c93-1eab516bb822.roa Signing time: Mon 04 Aug 2025 16:50:31 +0000 ROA not before: Mon 04 Aug 2025 16:50:31 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f14:1000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:83:92:3d:b6:2f:95:06:96:da:47:b0:45:fb:e4:be:89:0f:e4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:50:31 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=197cae46a75820ae22feb20e3c3e0b61613f69e570bea4554b6a54aab3ed6a05, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:49:ef:ad:1f:58:81:a4:8b:12:5d:a9:e8: 06:33:9f:3e:1f:a7:ec:ee:14:95:b1:d9:47:c6:d9: a8:bf:1a:f0:6f:9c:c9:46:f6:44:26:e6:7c:00:75: b0:40:4b:6c:58:d4:bf:71:d1:72:c5:fa:eb:66:47: 9f:ee:4a:7d:ca:7d:0a:24:c1:1e:62:58:a6:1d:3b: 5a:9c:19:88:11:a0:f9:bc:7e:3d:ba:7a:6e:b0:79: 3e:5f:e9:f5:06:f2:30:79:67:ed:94:9a:64:f7:bc: a4:e6:b6:f6:01:3b:ff:52:76:da:f0:e1:dc:af:65: 28:d1:ff:af:62:87:25:24:6a:9e:49:9b:a9:41:d1: 89:9f:6a:ba:f4:41:94:fe:c2:d4:4b:ef:9c:d8:8b: 07:41:86:d5:ce:59:12:9c:e5:8a:eb:6d:7a:15:47: 6e:15:c2:b7:e8:1a:c4:fb:84:a6:b0:48:e1:1f:e0: 33:1a:1c:14:e5:b0:d6:9a:ae:c7:91:c0:0a:1d:2e: db:c5:32:c8:99:91:d0:8f:de:17:46:ec:65:15:4e: 93:43:2b:cc:89:71:23:66:02:06:0e:fb:aa:8a:f2: 89:9b:15:3d:96:26:0f:1c:64:28:42:f9:89:45:b3: 63:d5:2c:94:b6:a3:d6:0e:d9:39:25:36:c1:82:ed: a5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:05:1F:90:B3:98:D1:CA:99:56:38:57:2E:D5:CC:51:1D:E9:29:44 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd1c8944-1621-4da7-9c93-1eab516bb822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f14:1000::/37 Signature Algorithm: sha256WithRSAEncryption 41:a3:4c:fe:e3:29:5d:58:98:3e:74:d1:2b:6c:54:ed:aa:c7: c7:96:1f:b1:02:e0:ab:79:ae:38:8a:50:34:a6:bb:b1:88:d3: 4b:36:65:98:af:08:7c:38:2f:b4:da:a9:77:5d:58:be:25:ff: c2:f0:8e:dc:be:b1:26:a1:3e:52:79:f7:bf:d7:85:75:35:b8: e7:17:03:1e:46:21:17:c2:d2:2f:f0:c7:16:d1:55:20:d3:b8: df:f5:a2:be:4f:bf:20:43:cf:2d:02:3d:ed:30:d8:d9:a0:42: 83:4a:34:5a:bd:ea:15:9f:05:e1:18:a4:ef:9f:87:e9:5c:a8: cf:51:89:22:77:af:24:0e:ec:11:d1:2f:7a:d5:43:25:f4:ec: 66:ba:4f:90:bf:3b:95:7f:69:7d:28:23:09:57:4c:d2:98:c2: 74:ce:a8:aa:e5:c8:08:e1:2f:2d:1e:d4:e2:6c:c1:cc:09:96: 7f:85:f7:4c:e0:3a:c0:22:b9:56:56:b6:52:77:e7:f5:f7:d6: 44:16:1c:26:f9:42:dc:dc:7a:95:dc:e9:40:8d:4d:1a:27:d5: ea:f8:10:50:58:f7:75:fa:a5:00:48:26:85:8c:63:ae:0e:f8: 86:5a:34:2c:4f:b2:60:de:b4:f7:65:48:ea:2c:8d:5f:e8:88: 94:50:0f:f6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaIOSPbYvlQaW2kewRfvkvokP5GAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTY1MDMxWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTdjYWU0NmE3NTgyMGFlMjJmZWIyMGUzYzNlMGI2MTYx M2Y2OWU1NzBiZWE0NTU0YjZhNTRhYWIzZWQ2YTA1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeeUnvrR9YgaSLEl2p6AYznz4fp+zuFJWx2UfG2ai/GvBv nMlG9kQm5nwAdbBAS2xY1L9x0XLF+utmR5/uSn3KfQokwR5iWKYdO1qcGYgRoPm8 fj26em6weT5f6fUG8jB5Z+2UmmT3vKTmtvYBO/9Sdtrw4dyvZSjR/69ihyUkap5J m6lB0Ymfarr0QZT+wtRL75zYiwdBhtXOWRKc5YrrbXoVR24VwrfoGsT7hKawSOEf 4DMaHBTlsNaarseRwAodLtvFMsiZkdCP3hdG7GUVTpNDK8yJcSNmAgYO+6qK8omb FT2WJg8cZChC+YlFs2PVLJS2o9YO2TklNsGC7aXrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUlgUfkLOY0cqZVjhXLtXMUR3pKUQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZkMWM4OTQ0LTE2MjEtNGRhNy05YzkzLTFlYWI1MTZiYjgyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8UEDANBgkqhkiG9w0BAQsFAAOCAQEAQaNM/uMpXViYPnTRK2xU7arH x5YfsQLgq3muOIpQNKa7sYjTSzZlmK8IfDgvtNqpd11YviX/wvCO3L6xJqE+Unn3 v9eFdTW45xcDHkYhF8LSL/DHFtFVINO43/Wivk+/IEPPLQI97TDY2aBCg0o0Wr3q FZ8F4Rik75+H6Vyoz1GJInevJA7sEdEvetVDJfTsZrpPkL87lX9pfSgjCVdM0pjC dM6oquXICOEvLR7U4mzBzAmWf4X3TOA6wCK5Vla2Unfn9ffWRBYcJvlC3Nx6ldzp QI1NGifV6vgQUFj3dfqlAEgmhYxjrg74hlo0LE+yYN6092VI6iyNX+iIlFAP9g== -----END CERTIFICATE-----Generated at Fri Aug 8 00:45:43 2025 by rpki-client