$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/866a68a9-989e-463b-be1d-493465d7a0ab.roa File: 866a68a9-989e-463b-be1d-493465d7a0ab.roa (raw, json) Hash identifier: uuMtBaTpTm+DnKvotw421zUtAIQ8BCjtCYY+eTqU9xs= Subject key identifier: 7A:38:50:BC:BC:22:1F:9A:A9:80:4D:4D:54:1E:1C:5F:C5:B3:4C:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 699EB2ECFC5925C182FAFA344E74653D0AC5A232 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/866a68a9-989e-463b-be1d-493465d7a0ab.roa Signing time: Tue 12 Aug 2025 00:21:57 +0000 ROA not before: Tue 12 Aug 2025 00:21:57 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ffa:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9e:b2:ec:fc:59:25:c1:82:fa:fa:34:4e:74:65:3d:0a:c5:a2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:21:57 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=7532aa51226b48df8275e44479b96a4ba98987d0442072c2e76329fc7da1361b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:19:0a:3b:34:7d:f5:d7:09:fb:05:f0:00:59: ce:fc:79:ef:60:02:d3:60:09:31:37:13:ca:cb:31: bc:be:51:e9:84:66:6c:56:4a:9a:43:30:a0:57:14: 9b:ff:b7:72:d9:f4:6c:6a:d2:7e:c7:7f:de:5b:80: f1:43:9a:59:a9:e0:07:b0:11:c7:44:ba:ab:f7:03: 41:95:65:89:23:cd:3a:d1:dc:7e:b6:fc:51:cc:6e: 10:e1:f1:99:2c:4a:4c:76:89:f5:c6:b1:d2:c7:b7: 46:28:78:cb:cc:e7:38:cb:c7:bb:af:5d:65:0b:81: 99:53:61:96:de:6d:66:bc:1e:9f:3c:eb:8a:fd:76: 9e:be:90:5f:f4:9a:ef:21:aa:ee:d7:14:a7:cb:a0: c0:c0:4b:e8:91:eb:94:e6:4a:cf:2c:93:a3:37:37: 97:44:0e:c7:f9:29:57:8e:ea:2e:0c:2b:b5:53:cc: 09:2c:2f:82:4d:e1:d6:16:c5:b8:7b:30:38:27:c2: 9d:72:eb:24:a5:7c:85:d9:ec:d3:6c:61:d6:6d:a7: 7a:21:be:62:59:72:14:75:60:6e:46:7d:58:55:37: b4:d5:98:cd:f2:53:ee:b7:e4:38:09:9f:68:cf:16: b5:00:08:06:06:bc:b9:48:6a:28:d4:37:8c:df:a9: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:38:50:BC:BC:22:1F:9A:A9:80:4D:4D:54:1E:1C:5F:C5:B3:4C:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/866a68a9-989e-463b-be1d-493465d7a0ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffa:2000::/40 Signature Algorithm: sha256WithRSAEncryption 5f:46:f2:76:ba:4a:9a:26:85:6c:cb:82:4e:94:0c:ef:55:d3: 3e:aa:50:73:c6:7b:61:6c:d6:59:ab:05:a2:fa:4e:b5:64:1e: e1:02:2e:be:65:22:e0:4b:07:87:81:e2:2b:32:09:09:d7:5c: a1:24:22:b0:38:ab:4c:31:2a:4b:19:b7:01:a6:b4:2e:03:92: 66:3a:4f:2e:71:42:64:0c:22:2e:e7:c4:46:4f:ca:47:00:ea: 31:ae:2c:45:4e:9b:3a:db:17:5e:5a:78:90:c2:d2:3c:60:9e: 94:33:a7:21:69:ef:0a:70:41:6d:1f:7d:fb:29:d4:42:a9:e9: a8:4e:df:e6:c9:05:05:20:f1:72:56:41:c1:c8:24:6c:34:40: e0:ca:c6:ad:b7:6a:39:6e:6f:3b:25:59:3b:04:b7:40:00:d3: 3b:e1:2f:e2:15:a9:5d:46:1c:58:ed:4b:96:78:54:ca:81:80: ac:35:09:59:68:82:38:b3:e6:7e:6d:a2:83:38:c8:50:c7:bd: 3d:34:8d:46:63:91:20:48:3f:f0:a3:a6:df:a6:8f:54:f5:c2: dc:77:f3:32:ed:98:b8:df:09:62:78:41:37:18:63:5f:97:12: 58:b7:3d:73:82:d4:f6:d2:22:22:52:a9:f4:17:df:25:2a:d4: 59:45:5a:12 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaZ6y7PxZJcGC+vo0TnRlPQrFojIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDAyMTU3WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTMyYWE1MTIyNmI0OGRmODI3NWU0NDQ3OWI5NmE0YmE5 ODk4N2QwNDQyMDcyYzJlNzYzMjlmYzdkYTEzNjFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsGQo7NH311wn7BfAAWc78ee9gAtNgCTE3E8rLMby+UemE ZmxWSppDMKBXFJv/t3LZ9Gxq0n7Hf95bgPFDmlmp4AewEcdEuqv3A0GVZYkjzTrR 3H62/FHMbhDh8ZksSkx2ifXGsdLHt0YoeMvM5zjLx7uvXWULgZlTYZbebWa8Hp88 64r9dp6+kF/0mu8hqu7XFKfLoMDAS+iR65TmSs8sk6M3N5dEDsf5KVeO6i4MK7VT zAksL4JN4dYWxbh7MDgnwp1y6ySlfIXZ7NNsYdZtp3ohvmJZchR1YG5GfVhVN7TV mM3yU+635DgJn2jPFrUACAYGvLlIaijUN4zfqZo/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUejhQvLwiH5qpgE1NVB4cX8WzTG0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg2NmE2OGE5LTk4OWUtNDYzYi1iZTFkLTQ5MzQ2NWQ3YTBhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/6IDANBgkqhkiG9w0BAQsFAAOCAQEAX0bydrpKmiaFbMuCTpQM71XT PqpQc8Z7YWzWWasFovpOtWQe4QIuvmUi4EsHh4HiKzIJCddcoSQisDirTDEqSxm3 Aaa0LgOSZjpPLnFCZAwiLufERk/KRwDqMa4sRU6bOtsXXlp4kMLSPGCelDOnIWnv CnBBbR99+ynUQqnpqE7f5skFBSDxclZBwcgkbDRA4MrGrbdqOW5vOyVZOwS3QADT O+Ev4hWpXUYcWO1LlnhUyoGArDUJWWiCOLPmfm2igzjIUMe9PTSNRmORIEg/8KOm 36aPVPXC3HfzMu2YuN8JYnhBNxhjX5cSWLc9c4LU9tIiIlKp9BffJSrUWUVaEg== -----END CERTIFICATE-----Generated at Sat Aug 23 18:15:13 2025 by rpki-client