$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e69802-5856-4fad-bed7-454a20dc6b2a.roa File: 42e69802-5856-4fad-bed7-454a20dc6b2a.roa (raw, json) Hash identifier: lMEA77g2pp4Z49OFTv4uV7sSaEcMBUdpA5s4PsYfmRM= Subject key identifier: DF:36:A6:39:4E:A8:F1:D7:9A:CA:FF:05:31:44:22:EF:16:FF:DB:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 23511F285C777BAE48E4C3D45F14817FED55A2FC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e69802-5856-4fad-bed7-454a20dc6b2a.roa Signing time: Mon 04 Aug 2025 17:11:24 +0000 ROA not before: Mon 04 Aug 2025 17:11:24 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f14:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:51:1f:28:5c:77:7b:ae:48:e4:c3:d4:5f:14:81:7f:ed:55:a2:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:11:24 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=ceb248293eb627a8d121b469ba90074952637750381d4b18cd965b576d904b05, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f7:19:82:60:06:a3:b7:2c:81:ef:3e:ef:7e: a5:86:ae:bd:22:e1:d3:69:12:bf:25:b7:65:5a:4f: 4f:5d:bc:59:ab:c1:ad:e5:7d:20:ad:31:68:2f:a5: c5:39:da:54:47:a8:e5:ed:97:0f:5f:e9:b5:d5:f5: a9:5e:bc:4f:65:88:d9:df:50:1f:7f:66:13:2a:5a: f3:96:62:24:bd:8e:9a:ab:47:d6:2e:34:c5:e0:b9: 3f:bd:13:e6:08:03:6f:64:db:50:14:8e:58:be:95: 53:05:eb:82:f2:d5:b7:9b:ff:c3:a8:ee:df:e2:23: d3:54:49:64:65:a9:a5:f9:b5:b1:6d:8e:71:a4:3c: 06:51:89:f5:2a:7e:29:5f:b2:4f:cc:3b:e1:95:5d: 72:43:35:1f:20:75:78:e4:2b:e3:8a:32:45:a6:d6: f0:21:51:f7:2c:6e:f0:d5:ee:95:e4:56:e0:19:3a: bf:f2:f9:42:62:04:47:86:6e:e9:1d:ea:2b:cc:55: 13:09:ad:99:af:04:c6:ae:7d:21:11:b5:e0:51:b3: 99:48:c6:10:ca:8b:9a:79:76:7c:c3:6a:d7:a5:15: 74:2e:a1:8c:14:1b:09:2b:3d:1f:9a:6f:56:4e:f8: ef:e6:1e:f9:6e:28:38:96:d2:70:75:66:2a:18:2f: d7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:36:A6:39:4E:A8:F1:D7:9A:CA:FF:05:31:44:22:EF:16:FF:DB:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e69802-5856-4fad-bed7-454a20dc6b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f14:4000::/36 Signature Algorithm: sha256WithRSAEncryption 1f:8c:ee:a1:bd:6d:89:4b:68:94:ed:51:53:0b:f3:f3:f9:13: 36:75:66:4b:cd:7a:8b:2f:3c:bd:27:58:f9:7c:4c:a2:70:44: 89:ef:9e:63:28:d1:c5:e6:fc:e3:57:8b:2e:d4:83:2e:e8:4d: 0a:28:dd:cb:4d:3f:dd:a3:42:42:0f:0d:7b:cd:3b:47:29:65: 8b:ef:81:1f:3e:11:4e:04:8c:3a:a9:51:64:94:51:76:f8:46: d7:53:f5:b8:52:4e:bd:8d:d6:4e:99:55:df:0c:3c:75:7d:e4: 29:e5:a6:d8:9c:40:6d:1d:f0:dc:d4:a3:d7:40:70:6b:4f:9b: 96:ad:44:bc:93:7d:12:91:e5:0c:f7:ed:6d:1a:1f:94:08:53: fb:54:5b:08:93:2a:08:08:33:16:0c:86:75:96:4d:a5:60:21: 39:e7:fa:ea:ba:f0:18:82:b9:3f:f2:f2:31:13:12:28:3a:3b: 01:60:1e:f8:e6:17:2d:3b:16:a9:3f:8d:71:8c:55:6e:f7:25: e3:8e:b5:d2:e1:ba:c6:58:21:ae:04:4d:cf:b3:23:8e:64:68: 1f:7c:54:28:df:e7:48:54:23:96:e9:66:c5:80:95:a1:ce:ca: 4a:d8:81:d7:50:1d:f4:7a:fe:d6:5d:41:1f:18:23:23:6c:35: 63:45:e2:b6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUI1EfKFx3e65I5MPUXxSBf+1VovwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTcxMTI0WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWIyNDgyOTNlYjYyN2E4ZDEyMWI0NjliYTkwMDc0OTUy NjM3NzUwMzgxZDRiMThjZDk2NWI1NzZkOTA0YjA1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi9xmCYAajtyyB7z7vfqWGrr0i4dNpEr8lt2VaT09dvFmr wa3lfSCtMWgvpcU52lRHqOXtlw9f6bXV9alevE9liNnfUB9/ZhMqWvOWYiS9jpqr R9YuNMXguT+9E+YIA29k21AUjli+lVMF64Ly1beb/8Oo7t/iI9NUSWRlqaX5tbFt jnGkPAZRifUqfilfsk/MO+GVXXJDNR8gdXjkK+OKMkWm1vAhUfcsbvDV7pXkVuAZ Or/y+UJiBEeGbukd6ivMVRMJrZmvBMaufSERteBRs5lIxhDKi5p5dnzDatelFXQu oYwUGwkrPR+ab1ZO+O/mHvluKDiW0nB1ZioYL9ehAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU3zamOU6o8deayv8FMUQi7xb/260wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyZTY5ODAyLTU4NTYtNGZhZC1iZWQ3LTQ1NGEyMGRjNmIyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8UQDANBgkqhkiG9w0BAQsFAAOCAQEAH4zuob1tiUtolO1RUwvz8/kT NnVmS816iy88vSdY+XxMonBEie+eYyjRxeb841eLLtSDLuhNCijdy00/3aNCQg8N e807Rylli++BHz4RTgSMOqlRZJRRdvhG11P1uFJOvY3WTplV3ww8dX3kKeWm2JxA bR3w3NSj10Bwa0+blq1EvJN9EpHlDPftbRoflAhT+1RbCJMqCAgzFgyGdZZNpWAh Oef66rrwGIK5P/LyMRMSKDo7AWAe+OYXLTsWqT+NcYxVbvcl44610uG6xlghrgRN z7MjjmRoH3xUKN/nSFQjlulmxYCVoc7KStiB11Ad9Hr+1l1BHxgjI2w1Y0Xitg== -----END CERTIFICATE-----Generated at Sun Aug 10 04:21:19 2025 by rpki-client