$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bdf5b12-cbb7-4451-87ff-07eb721afd85.roa File: 8bdf5b12-cbb7-4451-87ff-07eb721afd85.roa (raw, json) Hash identifier: hii8gpk6J3qPUBOXiuYbXKwCso8ZGjTbH/95RXqNbNw= Subject key identifier: 00:5F:6C:D5:F1:2B:79:80:36:E1:72:A6:63:87:57:A4:43:06:D5:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 020A143495737BE9CB6776B83BE75A21EDB5D1D3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bdf5b12-cbb7-4451-87ff-07eb721afd85.roa Signing time: Fri 13 Jun 2025 15:22:21 +0000 ROA not before: Fri 13 Jun 2025 15:22:21 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:4080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0a:14:34:95:73:7b:e9:cb:67:76:b8:3b:e7:5a:21:ed:b5:d1:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 15:22:21 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=1486a8e90a5adb1b32dd08bb0752d1d395ebd2b3c8d1b8f868568fe35b94e11e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:08:43:02:f7:4f:80:84:21:76:34:d1:1f: 51:de:01:34:3a:9d:b9:a9:99:09:36:77:0c:e8:d7: 98:e5:e7:33:70:23:e2:74:9b:b7:60:88:23:03:fb: 6e:c8:81:6a:01:50:9f:31:d9:7b:cb:a5:38:ab:7d: 2f:52:b6:fe:aa:cf:b1:32:b8:6c:8c:e9:c7:3a:a7: 65:87:61:76:f4:a5:12:d4:75:07:74:23:7a:13:77: 33:72:cd:f9:ce:f8:6d:1f:73:68:4e:5f:78:f8:b6: b8:48:dd:7b:ce:e3:7b:3b:e4:c9:25:46:0d:a8:ad: 8f:30:c4:6a:eb:a5:26:3f:89:a4:b7:b6:53:28:a5: 8a:68:9a:00:8c:52:3b:6e:18:5f:24:87:ba:69:35: a9:b5:d3:e4:27:71:f2:c5:99:88:a8:02:3e:5d:49: f8:1a:d8:f0:e9:5c:d6:8d:01:3e:6d:b3:7c:c7:5c: 5f:f9:e6:65:79:4a:13:02:56:13:99:c9:0b:5e:10: 33:3c:db:81:35:71:38:15:b4:fa:4d:29:68:ef:32: 5e:da:ce:97:70:1c:54:21:e8:8e:01:e5:d6:bf:88: 1e:4b:a8:8f:6d:c7:66:d7:3a:ab:fd:9a:1c:8a:29: 64:b1:61:27:32:4a:a3:68:d1:72:be:28:12:0d:5f: 8d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5F:6C:D5:F1:2B:79:80:36:E1:72:A6:63:87:57:A4:43:06:D5:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bdf5b12-cbb7-4451-87ff-07eb721afd85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:4080::/46 Signature Algorithm: sha256WithRSAEncryption 56:f6:ec:3f:5c:87:24:a3:8d:b4:ca:f4:59:07:df:5a:1b:f0: 9e:53:88:f1:1c:a1:a5:8b:ae:18:41:89:7b:f1:a7:b7:70:7d: ab:a5:b7:c5:77:d3:36:ad:a3:12:7a:87:d7:6d:0b:09:76:59: 3a:4d:a6:74:7f:d4:53:c2:fa:8d:25:d3:7d:e1:b1:98:62:26: 72:c5:57:e4:ce:42:f8:12:d6:c3:01:28:59:f5:67:bc:64:df: ec:10:9a:bb:da:a7:28:24:9e:23:df:55:71:d2:1d:2b:b0:54: 3a:69:d1:8c:54:a7:8a:e7:db:a8:24:60:e0:ec:95:9b:d3:89: 6b:f7:ee:7c:5d:94:24:b6:6d:4c:b0:7b:dd:4b:cf:7b:9a:bc: c3:45:c7:7c:49:1b:af:1a:cc:b5:26:6e:1b:18:01:84:83:36: 5d:c5:7a:4d:21:be:ad:3f:ae:23:43:a6:be:b2:89:d8:6a:7b: 87:40:f1:7e:88:e5:1b:1b:1f:3f:33:21:e0:a3:32:01:c1:66: 24:47:89:68:70:3d:dc:24:c8:13:79:d4:51:1f:33:34:28:f3: e7:c4:df:b8:66:58:ff:30:73:dd:4e:26:a3:d4:51:67:38:b2: 00:3d:f0:00:96:de:ca:49:1e:84:ce:7e:e9:a9:72:84:76:71: 4b:10:a4:3b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAgoUNJVze+nLZ3a4O+daIe210dMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTUyMjIxWhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDg2YThlOTBhNWFkYjFiMzJkZDA4YmIwNzUyZDFkMzk1 ZWJkMmIzYzhkMWI4Zjg2ODU2OGZlMzViOTRlMTFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/oAhDAvdPgIQhdjTRH1HeATQ6nbmpmQk2dwzo15jl5zNw I+J0m7dgiCMD+27IgWoBUJ8x2XvLpTirfS9Stv6qz7EyuGyM6cc6p2WHYXb0pRLU dQd0I3oTdzNyzfnO+G0fc2hOX3j4trhI3XvO43s75MklRg2orY8wxGrrpSY/iaS3 tlMopYpomgCMUjtuGF8kh7ppNam10+QncfLFmYioAj5dSfga2PDpXNaNAT5ts3zH XF/55mV5ShMCVhOZyQteEDM824E1cTgVtPpNKWjvMl7azpdwHFQh6I4B5da/iB5L qI9tx2bXOqv9mhyKKWSxYScySqNo0XK+KBINX429AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAF9s1fEreYA24XKmY4dXpEMG1RQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiZGY1YjEyLWNiYjctNDQ1MS04N2ZmLTA3ZWI3MjFhZmQ4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pQIAwDQYJKoZIhvcNAQELBQADggEBAFb27D9chySjjbTK9FkH31ob 8J5TiPEcoaWLrhhBiXvxp7dwfault8V30zatoxJ6h9dtCwl2WTpNpnR/1FPC+o0l 033hsZhiJnLFV+TOQvgS1sMBKFn1Z7xk3+wQmrvapygkniPfVXHSHSuwVDpp0YxU p4rn26gkYODslZvTiWv37nxdlCS2bUywe91Lz3uavMNFx3xJG68azLUmbhsYAYSD Nl3Fek0hvq0/riNDpr6yidhqe4dA8X6I5RsbHz8zIeCjMgHBZiRHiWhwPdwkyBN5 1FEfMzQo8+fE37hmWP8wc91OJqPUUWc4sgA98ACW3spJHoTOfumpcoR2cUsQpDs= -----END CERTIFICATE-----Generated at Wed Jul 2 14:55:45 2025 by rpki-client