$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56fe47fc-547d-4db9-b648-5dbc8a66d2d0.roa File: 56fe47fc-547d-4db9-b648-5dbc8a66d2d0.roa (raw, json) Hash identifier: VkRUq+oS9nzoIunCCOUUTixr1ldEhS21TzRmzb2Xn/o= Subject key identifier: 34:19:B1:7E:48:C1:0C:4E:9E:14:25:FD:C0:E7:2A:62:53:5C:EE:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 53BF5E76A042652B4314A573770EA68849D6447B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56fe47fc-547d-4db9-b648-5dbc8a66d2d0.roa Signing time: Mon 21 Jul 2025 15:51:03 +0000 ROA not before: Mon 21 Jul 2025 15:51:03 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:5080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:bf:5e:76:a0:42:65:2b:43:14:a5:73:77:0e:a6:88:49:d6:44:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 15:51:03 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=2477645bf3ea94f01805b18f1b6aa534f98f574cd402d5faaeb9f1df5ee490c4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9c:cf:5b:14:26:ec:ac:68:87:b3:3d:b4:23: 6b:8e:ef:3b:71:b5:5a:94:c2:f9:4c:ca:76:35:77: 08:34:3e:3f:9e:ed:fa:ae:20:44:3f:5d:6e:14:b0: f2:5e:79:f1:51:3b:a4:21:4b:a2:a7:86:17:83:2f: 87:60:93:5d:ab:7e:63:83:30:94:80:ae:c5:a0:0b: 03:9a:43:9a:71:27:5f:e6:e6:9d:87:5e:7e:50:09: 32:87:36:f8:ca:aa:81:55:fe:9b:a3:18:89:95:07: cb:6d:82:dd:8d:11:98:49:c7:b3:2c:ae:76:1b:c1: 52:8a:4d:71:67:52:30:d8:68:21:ee:d9:b6:56:6f: 6a:ae:09:0b:e0:95:09:2d:29:fb:2c:c6:73:7c:22: 89:52:37:0c:bb:dc:cf:98:fa:1a:86:07:68:36:3f: 8a:90:9d:3c:db:e2:8d:89:a0:76:26:78:24:ff:a9: 74:34:93:b5:6b:f9:ab:87:bd:0d:94:e2:29:8d:d6: af:47:ec:45:9c:dd:d9:41:d3:3d:37:50:c8:98:51: 3d:bb:9e:48:49:30:96:e4:b0:53:b4:12:4b:60:b2: 73:8e:30:7a:0c:67:00:50:7c:10:7f:91:1e:4e:88: 1b:b0:80:e3:9a:df:49:31:ac:24:fd:2f:62:ba:bf: 84:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:19:B1:7E:48:C1:0C:4E:9E:14:25:FD:C0:E7:2A:62:53:5C:EE:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56fe47fc-547d-4db9-b648-5dbc8a66d2d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:5080::/46 Signature Algorithm: sha256WithRSAEncryption 23:4a:80:28:a5:98:a4:1e:f3:63:6a:08:0b:df:e7:32:59:35: 6a:57:a2:0b:8c:51:72:f6:b7:cc:26:26:0e:11:0d:e2:9a:27: 26:4d:88:d1:4d:ee:bd:c6:08:7f:42:66:30:cd:8a:55:54:c2: c9:be:47:f4:c0:e5:1f:1c:0c:16:db:fa:09:2a:65:2d:d7:b4: e3:de:07:0f:a2:90:2f:8d:d4:e9:4b:5c:60:df:95:39:f4:19: fb:f3:f3:34:33:57:63:06:32:ed:56:29:12:43:bc:34:9a:6f: 76:b6:55:96:2f:d3:27:55:ca:23:dd:d4:0d:d2:13:0d:2e:42: 9d:2a:7d:c4:84:77:e5:4b:04:d7:6f:db:04:65:4e:4f:0f:2d: 08:b6:0e:98:d9:00:9e:58:89:c2:3f:08:b9:e5:ad:e4:ff:dd: da:85:28:dc:dc:20:14:51:68:30:61:d4:e4:de:5f:c1:da:06: 64:e1:ae:57:85:af:b8:34:f5:3b:da:2f:4b:83:d2:ef:dd:19: c2:c9:cb:0c:64:39:fd:fc:f5:13:a3:46:f6:46:15:26:aa:40: 38:4c:b1:a6:24:0a:48:6b:1f:b2:8e:57:7f:dc:91:00:4b:3f: 0c:3f:00:25:86:78:ee:be:21:08:48:08:59:6b:39:48:58:47: dc:b4:b3:8b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUU79edqBCZStDFKVzdw6miEnWRHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIxMTU1MTAzWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDc3NjQ1YmYzZWE5NGYwMTgwNWIxOGYxYjZhYTUzNGY5 OGY1NzRjZDQwMmQ1ZmFhZWI5ZjFkZjVlZTQ5MGM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYnM9bFCbsrGiHsz20I2uO7ztxtVqUwvlMynY1dwg0Pj+e 7fquIEQ/XW4UsPJeefFRO6QhS6KnhheDL4dgk12rfmODMJSArsWgCwOaQ5pxJ1/m 5p2HXn5QCTKHNvjKqoFV/pujGImVB8ttgt2NEZhJx7MsrnYbwVKKTXFnUjDYaCHu 2bZWb2quCQvglQktKfssxnN8IolSNwy73M+Y+hqGB2g2P4qQnTzb4o2JoHYmeCT/ qXQ0k7Vr+auHvQ2U4imN1q9H7EWc3dlB0z03UMiYUT27nkhJMJbksFO0EktgsnOO MHoMZwBQfBB/kR5OiBuwgOOa30kxrCT9L2K6v4TlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNBmxfkjBDE6eFCX9wOcqYlNc7nMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2ZmU0N2ZjLTU0N2QtNGRiOS1iNjQ4LTVkYmM4YTY2ZDJkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zUIAwDQYJKoZIhvcNAQELBQADggEBACNKgCilmKQe82NqCAvf5zJZ NWpXoguMUXL2t8wmJg4RDeKaJyZNiNFN7r3GCH9CZjDNilVUwsm+R/TA5R8cDBbb +gkqZS3XtOPeBw+ikC+N1OlLXGDflTn0Gfvz8zQzV2MGMu1WKRJDvDSab3a2VZYv 0ydVyiPd1A3SEw0uQp0qfcSEd+VLBNdv2wRlTk8PLQi2DpjZAJ5YicI/CLnlreT/ 3dqFKNzcIBRRaDBh1OTeX8HaBmThrleFr7g09TvaL0uD0u/dGcLJywxkOf389ROj RvZGFSaqQDhMsaYkCkhrH7KOV3/ckQBLPww/ACWGeO6+IQhICFlrOUhYR9y0s4s= -----END CERTIFICATE-----Generated at Wed Aug 6 10:07:57 2025 by rpki-client