$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e51f458-5964-401f-be39-fd2f3a2a3705.roa File: 4e51f458-5964-401f-be39-fd2f3a2a3705.roa (raw, json) Hash identifier: qLJuh1gwUN8lhkn76J2dyeNpm8OmfJPpXY0wJl0+9yM= Subject key identifier: CD:5E:CA:52:D5:2F:68:AC:8E:C2:28:C3:8B:8B:6D:1D:8B:D8:20:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DCC91F5AB0D035AA172EAA0D329F188D275A88C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e51f458-5964-401f-be39-fd2f3a2a3705.roa Signing time: Fri 01 Aug 2025 15:20:28 +0000 ROA not before: Fri 01 Aug 2025 15:20:28 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:8110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:cc:91:f5:ab:0d:03:5a:a1:72:ea:a0:d3:29:f1:88:d2:75:a8:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:20:28 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=ddf8bc3c2ac734e26dd58639d1b71dd895710a689009716f2aac06dcc8e047d5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6d:64:f7:b8:fb:4c:45:7e:57:e1:79:a7:43: 0e:e2:61:a0:3f:ec:cf:49:d2:b7:68:0d:5a:51:80: 43:47:1c:4b:26:3f:1e:db:7e:51:6a:a8:99:a0:6f: b2:d2:fd:ea:55:85:83:1c:71:27:6f:eb:71:c1:40: c5:f6:15:fd:b5:6e:33:cb:b6:ac:a0:e9:2b:49:12: 89:05:5f:f8:dc:6f:1b:be:53:d5:54:fa:b5:20:9b: c6:e0:b0:95:13:da:9e:39:e4:3a:de:2d:73:79:d3: 89:ec:77:47:ae:87:65:c8:b5:1a:4e:1c:f8:1e:97: bc:65:15:0b:8f:5c:9e:26:98:b1:b3:78:8b:61:dc: b8:f3:e4:02:b0:e4:b6:3f:bf:71:ff:d1:20:84:86: 67:2c:f1:48:7d:e0:10:f6:82:42:a7:e9:a7:89:6f: 59:24:6c:69:be:fd:71:d2:e6:53:b8:44:4e:3e:91: c1:3a:f2:5b:51:53:ea:55:5a:13:4f:75:23:d3:d0: 08:4e:ca:d2:78:83:b4:c0:3d:3f:9b:50:36:0f:fe: 9e:9c:ea:73:67:97:16:cd:d6:91:7f:ce:c0:ac:42: ce:8d:f0:ca:09:9c:61:c5:be:d9:4d:9b:e4:5c:36: 69:31:93:45:09:48:cf:e3:71:85:4c:7f:6e:49:e4: 87:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:CA:52:D5:2F:68:AC:8E:C2:28:C3:8B:8B:6D:1D:8B:D8:20:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e51f458-5964-401f-be39-fd2f3a2a3705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8110::/48 Signature Algorithm: sha256WithRSAEncryption 01:3b:84:e1:62:b4:b1:bc:41:77:f0:8e:ee:8a:e8:84:e3:b7: e0:0a:7e:63:62:b6:48:f8:1d:55:6f:bf:cf:13:f5:2e:c3:9f: ba:df:80:94:db:31:3c:c7:de:5a:15:eb:9c:83:fe:69:d7:20: aa:be:b1:90:50:73:03:9e:5a:87:33:d2:4c:0e:d1:f2:4d:6d: 18:64:ec:dd:e8:31:5c:72:c8:88:2b:65:79:b7:2f:11:15:03: b6:d1:a0:11:e1:5f:f4:7e:d4:da:ea:64:01:22:29:4b:f5:43: 79:67:65:c5:5e:e1:10:47:31:fe:57:7c:1c:ff:4e:70:f2:a2: 5c:a7:d7:3a:aa:af:81:47:86:f9:18:50:42:20:e6:ac:da:04: 13:69:6f:ed:33:07:78:61:65:8b:d8:48:e1:4c:a5:35:46:97: f7:d6:f1:b3:89:a5:31:f7:de:94:88:64:59:2d:81:25:3c:96: 8a:d7:33:a5:d7:1a:48:40:34:81:74:a2:9a:43:04:d6:df:c5: 06:9a:8a:e7:ba:29:d8:a4:ba:81:b1:28:87:b3:91:c5:8e:28: f4:1a:3c:ea:25:ce:08:fc:58:01:6c:27:74:a6:7d:0c:4b:a6: 69:bd:f0:a4:d1:7e:85:86:b9:1e:98:04:96:d9:93:7d:13:a6: c2:e9:35:bc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDcyR9asNA1qhcuqg0ynxiNJ1qIwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTUyMDI4WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGY4YmMzYzJhYzczNGUyNmRkNTg2MzlkMWI3MWRkODk1 NzEwYTY4OTAwOTcxNmYyYWFjMDZkY2M4ZTA0N2Q1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgbWT3uPtMRX5X4XmnQw7iYaA/7M9J0rdoDVpRgENHHEsm Px7bflFqqJmgb7LS/epVhYMccSdv63HBQMX2Ff21bjPLtqyg6StJEokFX/jcbxu+ U9VU+rUgm8bgsJUT2p455DreLXN504nsd0euh2XItRpOHPgel7xlFQuPXJ4mmLGz eIth3Ljz5AKw5LY/v3H/0SCEhmcs8Uh94BD2gkKn6aeJb1kkbGm+/XHS5lO4RE4+ kcE68ltRU+pVWhNPdSPT0AhOytJ4g7TAPT+bUDYP/p6c6nNnlxbN1pF/zsCsQs6N 8MoJnGHFvtlNm+RcNmkxk0UJSM/jcYVMf25J5IfdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzV7KUtUvaKyOwijDi4ttHYvYICQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRlNTFmNDU4LTU5NjQtNDAxZi1iZTM5LWZkMmYzYTJhMzcwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgRAwDQYJKoZIhvcNAQELBQADggEBAAE7hOFitLG8QXfwju6K6ITj t+AKfmNitkj4HVVvv88T9S7Dn7rfgJTbMTzH3loV65yD/mnXIKq+sZBQcwOeWocz 0kwO0fJNbRhk7N3oMVxyyIgrZXm3LxEVA7bRoBHhX/R+1NrqZAEiKUv1Q3lnZcVe 4RBHMf5XfBz/TnDyolyn1zqqr4FHhvkYUEIg5qzaBBNpb+0zB3hhZYvYSOFMpTVG l/fW8bOJpTH33pSIZFktgSU8lorXM6XXGkhANIF0oppDBNbfxQaaiue6KdikuoGx KIezkcWOKPQaPOolzgj8WAFsJ3SmfQxLpmm98KTRfoWGuR6YBJbZk30TpsLpNbw= -----END CERTIFICATE-----Generated at Wed Aug 6 05:25:27 2025 by rpki-client