$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/444605dc-2977-4ec7-9e56-cff4547f75b5.roa File: 444605dc-2977-4ec7-9e56-cff4547f75b5.roa (raw, json) Hash identifier: SKAYlPFX3P465DoRgDNM+OSn06ElFzvCCeJPHINqNGg= Subject key identifier: 06:51:B4:C8:33:2B:38:C9:6F:8E:51:B3:AB:E6:FC:F5:EB:34:7C:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 13449D785EA36363042FF03A387C29DA507E2B40 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/444605dc-2977-4ec7-9e56-cff4547f75b5.roa Signing time: Fri 01 Aug 2025 15:51:13 +0000 ROA not before: Fri 01 Aug 2025 15:51:13 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8160::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:44:9d:78:5e:a3:63:63:04:2f:f0:3a:38:7c:29:da:50:7e:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:51:13 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=85f74fdbe524edf593948e9cdca1137db79156704e2322b6e17446d0cb7b94ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:d3:b5:81:4c:ac:30:61:02:bf:75:7e:5c: e1:2a:be:5d:73:53:0d:9d:be:a9:b6:90:6c:69:f0: 73:9d:80:6e:01:7e:6f:c5:68:e2:0f:aa:24:7a:54: 93:44:da:8e:c2:94:a5:73:33:9f:72:db:cd:78:2f: 8e:0d:f2:9e:5d:8b:a4:a8:ef:11:57:ac:b0:76:59: c7:12:34:c8:bf:ee:80:f1:87:52:e7:3a:b0:60:55: 41:a5:9b:c4:ac:5a:e3:99:b6:3a:9d:ac:7a:45:41: 54:95:87:6b:1a:20:df:d2:94:44:94:e1:81:25:6c: 7b:60:23:ae:06:f9:40:33:6e:95:8e:c5:7e:3e:25: 8c:8d:e1:0f:31:76:c5:48:06:a0:71:7b:59:fa:f7: a4:1d:be:f1:5f:8e:04:cd:a3:2d:af:0f:bc:91:ba: f9:90:e1:fe:e1:a9:71:97:2a:1f:d4:34:50:9d:6a: d1:fc:8d:20:1e:d8:82:c3:b5:09:73:24:05:1c:ab: 3b:c7:7b:ed:d9:c8:0e:6d:bc:f9:14:ac:59:75:b0: 06:a6:a1:f3:8a:fb:11:7e:e8:00:8b:e9:5a:25:b2: cd:e8:8c:e5:98:a5:9d:1b:58:e4:1a:dc:ef:8a:04: 78:16:10:da:01:4f:b3:74:76:a4:a2:02:f4:b5:d9: 4c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:51:B4:C8:33:2B:38:C9:6F:8E:51:B3:AB:E6:FC:F5:EB:34:7C:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/444605dc-2977-4ec7-9e56-cff4547f75b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8160::/48 Signature Algorithm: sha256WithRSAEncryption 8c:c2:5b:6e:e2:a2:82:53:a0:8b:ff:34:4e:78:1f:12:f5:f2: fb:37:b6:f4:19:5a:ca:86:db:ea:5b:3a:2b:3b:c2:e3:26:c5: 83:92:40:08:9d:9d:0d:eb:3a:41:87:82:5f:1a:47:fe:5e:5c: a2:01:6f:68:80:29:5f:d9:41:ad:dd:b7:bd:38:07:05:c4:08: 82:ea:fc:3b:72:26:c6:1a:fc:57:96:da:57:62:de:b5:bd:7f: 8a:20:ee:e8:ba:a1:e4:3e:ab:5a:cb:ec:fb:b9:73:3d:25:ad: f7:28:00:12:90:f3:fc:0d:01:8b:b2:58:2d:e1:9b:78:8c:39: 18:90:0d:fd:96:68:1b:6a:49:3c:f1:98:35:28:c4:e1:82:d0: f0:29:81:f6:32:1a:71:79:e2:bc:cf:d9:dd:33:4f:25:7e:d2: fe:3c:25:94:61:79:71:ea:90:0b:fd:db:fa:cc:2b:42:f2:2b: 2e:24:a2:4e:9d:2e:0b:bb:46:dd:ea:3d:bf:19:36:5d:3b:12: 09:cc:30:fe:5b:5e:74:9b:fb:0a:a8:9d:cc:a0:fc:e8:1d:7a: 2b:fe:4a:e8:14:e5:20:24:95:03:e0:b1:ad:57:78:a5:ad:ce: 45:65:3f:d1:f9:90:74:94:56:75:93:ed:61:92:ef:fa:3b:e4: 7a:77:8c:2a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE0SdeF6jY2MEL/A6OHwp2lB+K0AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTU1MTEzWhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NWY3NGZkYmU1MjRlZGY1OTM5NDhlOWNkY2ExMTM3ZGI3 OTE1NjcwNGUyMzIyYjZlMTc0NDZkMGNiN2I5NGFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRUNO1gUysMGECv3V+XOEqvl1zUw2dvqm2kGxp8HOdgG4B fm/FaOIPqiR6VJNE2o7ClKVzM59y2814L44N8p5di6So7xFXrLB2WccSNMi/7oDx h1LnOrBgVUGlm8SsWuOZtjqdrHpFQVSVh2saIN/SlESU4YElbHtgI64G+UAzbpWO xX4+JYyN4Q8xdsVIBqBxe1n696QdvvFfjgTNoy2vD7yRuvmQ4f7hqXGXKh/UNFCd atH8jSAe2ILDtQlzJAUcqzvHe+3ZyA5tvPkUrFl1sAamofOK+xF+6ACL6Volss3o jOWYpZ0bWOQa3O+KBHgWENoBT7N0dqSiAvS12UyLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBlG0yDMrOMlvjlGzq+b89es0fBcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ0NDYwNWRjLTI5NzctNGVjNy05ZTU2LWNmZjQ1NDdmNzViNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gWAwDQYJKoZIhvcNAQELBQADggEBAIzCW27iooJToIv/NE54HxL1 8vs3tvQZWsqG2+pbOis7wuMmxYOSQAidnQ3rOkGHgl8aR/5eXKIBb2iAKV/ZQa3d t704BwXECILq/DtyJsYa/FeW2ldi3rW9f4og7ui6oeQ+q1rL7Pu5cz0lrfcoABKQ 8/wNAYuyWC3hm3iMORiQDf2WaBtqSTzxmDUoxOGC0PApgfYyGnF54rzP2d0zTyV+ 0v48JZRheXHqkAv92/rMK0LyKy4kok6dLgu7Rt3qPb8ZNl07EgnMMP5bXnSb+wqo ncyg/Ogdeiv+SugU5SAklQPgsa1XeKWtzkVlP9H5kHSUVnWT7WGS7/o75Hp3jCo= -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:09 2025 by rpki-client