$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a3b4fa1-bf3a-4026-b28a-1094caa018b5.roa File: 4a3b4fa1-bf3a-4026-b28a-1094caa018b5.roa (raw, json) Hash identifier: CYi/nLRgGFB1mAMZfRAh7JMlgcgYJWMV5yB6IbENUOk= Subject key identifier: 93:A3:09:23:95:10:57:41:75:D4:C6:03:1D:0B:76:EF:53:B5:57:C5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3F6021CE5ECF354A470BD465E603A1B2FCB5C073 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a3b4fa1-bf3a-4026-b28a-1094caa018b5.roa Signing time: Mon 21 Jul 2025 15:52:19 +0000 ROA not before: Mon 21 Jul 2025 15:52:19 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:c0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:60:21:ce:5e:cf:35:4a:47:0b:d4:65:e6:03:a1:b2:fc:b5:c0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 15:52:19 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=fed5c94d50a3d940c0921efb7cc28e7f65fec86479bdc11890d23fbdc34941ce, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:d4:99:f4:8d:8b:91:00:41:41:f6:ca:53: f7:07:3b:3a:88:3c:a9:75:6d:3d:27:3d:79:9d:67: 40:c7:fa:33:d2:8f:42:c6:2c:34:50:6c:39:fe:f4: 0e:1e:a9:db:bc:80:4c:57:54:af:57:70:68:5b:6d: db:4d:9f:a9:12:9c:8f:57:2c:11:27:67:6d:b8:75: 73:0d:9c:0a:93:db:fc:08:5d:8d:d6:dd:d5:a7:95: df:4e:e6:11:1b:25:84:97:c6:63:21:24:b8:89:de: d1:e6:29:f8:94:ec:e3:bc:75:b9:10:86:11:13:38: 01:fe:e0:66:b9:55:c7:1a:a0:8e:83:11:70:c3:68: 10:e5:c9:e0:8f:44:83:4c:e3:18:cd:49:ef:a6:c9: c4:80:b9:66:cb:70:4b:2e:1e:f6:34:3e:e1:57:56: f5:12:ea:79:c9:eb:0c:f4:77:dc:d5:d5:b4:36:c0: 28:03:7d:4a:a8:84:63:9c:f5:c7:bf:9c:92:5d:87: 84:5e:94:6b:15:f1:dc:0f:b0:f0:45:d4:92:92:de: 07:d7:c8:5d:15:1e:2d:8b:49:42:39:e7:3d:32:1a: fb:2b:ab:f2:90:e9:a7:4f:79:84:38:95:fc:7a:45: 5e:2e:a3:89:cb:21:9c:26:ce:46:fa:12:33:9c:c5: 2a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A3:09:23:95:10:57:41:75:D4:C6:03:1D:0B:76:EF:53:B5:57:C5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a3b4fa1-bf3a-4026-b28a-1094caa018b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:c0c0::/46 Signature Algorithm: sha256WithRSAEncryption ab:f3:6e:be:34:01:2b:f5:b5:2a:de:04:f7:9a:52:36:8e:f7: 25:bb:5b:81:15:88:ec:12:da:8d:20:28:fb:a9:e9:15:ed:2f: 1e:cf:51:3f:4b:da:c3:0a:45:00:15:54:59:82:26:4e:ed:9e: d3:28:b5:ce:dd:4e:4f:57:b5:37:ec:82:73:1c:44:43:b2:01: 3d:15:54:bb:70:34:72:ef:4a:4c:c5:55:24:c6:4e:20:de:53: a9:0a:94:7e:1d:5d:1d:b3:cb:4d:f8:ca:41:3a:32:89:93:df: cf:cb:ce:72:a5:fe:4f:e4:d3:7f:61:8f:c1:9a:d8:d2:a8:2c: da:d5:a7:c5:60:3f:63:4c:b1:47:54:4e:1a:2c:bf:7a:98:d4: 77:98:1e:49:a0:cd:8b:f4:a1:e0:92:fa:95:b2:87:22:a5:dc: 1b:f8:cb:02:a9:82:c0:e8:0c:42:e1:1a:7d:6e:fc:28:85:c8: af:12:69:92:96:f4:cf:c6:c3:67:c2:e3:76:46:b4:84:8f:cb: ea:ed:eb:bf:85:28:80:9e:4d:04:15:26:e8:ea:75:92:44:85: e4:ff:0c:77:ec:9a:1d:5d:d0:3a:10:0b:8b:58:9a:c5:46:b7: 4b:3d:78:19:d3:dc:12:45:32:df:56:1c:7c:75:e0:36:bd:e3: 3e:ab:1d:3a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP2Ahzl7PNUpHC9Rl5gOhsvy1wHMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIxMTU1MjE5WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZWQ1Yzk0ZDUwYTNkOTQwYzA5MjFlZmI3Y2MyOGU3ZjY1 ZmVjODY0NzliZGMxMTg5MGQyM2ZiZGMzNDk0MWNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiYNSZ9I2LkQBBQfbKU/cHOzqIPKl1bT0nPXmdZ0DH+jPS j0LGLDRQbDn+9A4eqdu8gExXVK9XcGhbbdtNn6kSnI9XLBEnZ224dXMNnAqT2/wI XY3W3dWnld9O5hEbJYSXxmMhJLiJ3tHmKfiU7OO8dbkQhhETOAH+4Ga5VccaoI6D EXDDaBDlyeCPRINM4xjNSe+mycSAuWbLcEsuHvY0PuFXVvUS6nnJ6wz0d9zV1bQ2 wCgDfUqohGOc9ce/nJJdh4RelGsV8dwPsPBF1JKS3gfXyF0VHi2LSUI55z0yGvsr q/KQ6adPeYQ4lfx6RV4uo4nLIZwmzkb6EjOcxSohAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUk6MJI5UQV0F11MYDHQt271O1V8UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhM2I0ZmExLWJmM2EtNDAyNi1iMjhhLTEwOTRjYWEwMThiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zwMAwDQYJKoZIhvcNAQELBQADggEBAKvzbr40ASv1tSreBPeaUjaO 9yW7W4EViOwS2o0gKPup6RXtLx7PUT9L2sMKRQAVVFmCJk7tntMotc7dTk9XtTfs gnMcREOyAT0VVLtwNHLvSkzFVSTGTiDeU6kKlH4dXR2zy034ykE6MomT38/LznKl /k/k039hj8Ga2NKoLNrVp8VgP2NMsUdUThosv3qY1HeYHkmgzYv0oeCS+pWyhyKl 3Bv4ywKpgsDoDELhGn1u/CiFyK8SaZKW9M/Gw2fC43ZGtISPy+rt67+FKICeTQQV JujqdZJEheT/DHfsmh1d0DoQC4tYmsVGt0s9eBnT3BJFMt9WHHx14Da94z6rHTo= -----END CERTIFICATE-----Generated at Wed Aug 6 00:52:37 2025 by rpki-client