$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa File: 5988892c-5d54-4e98-a5b0-3a2691a42a24.roa (raw, json) Hash identifier: 7wKX6ryhKNj3PGPDPcmb60V49UwY/OjXjF0uriQBtyM= Subject key identifier: 72:0F:56:0F:2E:5A:78:D7:A8:02:4B:76:B9:8F:9A:9B:25:36:19:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 585469FDD063F55C9FCD4AAF3AD11A60C1BF423C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa Signing time: Fri 01 Aug 2025 16:51:56 +0000 ROA not before: Fri 01 Aug 2025 16:51:56 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:74c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:54:69:fd:d0:63:f5:5c:9f:cd:4a:af:3a:d1:1a:60:c1:bf:42:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 16:51:56 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=344f5d521c29760947f1bbdf32578e43f506f6e39cb182c0bc17867da2459861, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:c7:a7:43:75:74:3c:00:53:8a:d0:29:1d: 27:02:60:cc:94:db:5e:1d:8e:bf:a6:59:5b:94:d3: 54:86:99:4f:28:70:42:8e:c6:6b:0c:08:af:32:cd: 60:2e:4b:dc:54:c1:4a:9a:d6:f3:7b:c1:7d:c6:d2: 71:eb:5a:72:1e:f8:38:83:96:60:61:43:66:44:88: 02:4d:0b:ce:c0:5f:29:a5:36:ff:6f:51:cf:c6:f7: d6:61:4d:7a:af:9f:5b:15:c0:44:3e:b2:70:38:cf: a1:4a:df:96:bd:f9:2f:76:2d:aa:52:ce:db:4a:19: ac:45:41:13:3e:f5:f3:e0:26:46:fd:40:ef:20:1c: 47:1b:1d:b2:14:88:cf:da:74:c4:ce:8c:e8:e1:90: 46:10:3c:3f:71:e7:e7:09:6b:34:9f:10:b6:0c:59: 70:d6:07:11:22:17:23:75:7b:1a:f9:da:2f:52:52: ac:49:a4:54:64:c6:e4:94:98:03:35:08:34:a3:9a: 8c:29:51:a0:67:ad:e1:e7:0e:bb:80:88:22:e9:58: 3f:30:4a:21:ef:cc:c0:7a:1a:b5:ad:4d:bc:01:b2: 28:f4:2f:80:56:28:98:9a:54:51:6a:94:89:03:2c: 1a:fd:31:38:f3:de:7b:65:92:e2:b2:e9:2f:e2:2a: 1b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0F:56:0F:2E:5A:78:D7:A8:02:4B:76:B9:8F:9A:9B:25:36:19:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:74c0::/48 Signature Algorithm: sha256WithRSAEncryption 55:b8:c5:c8:a4:9c:69:4c:74:89:c8:22:8e:e0:23:85:a9:2e: 4b:9c:f0:09:ed:2a:72:b8:94:bf:2a:bb:bf:95:ca:d0:6b:bc: 5e:54:05:0d:f3:39:bc:e1:c1:62:a6:fb:0d:38:ba:c5:ed:66: 7c:d5:92:1c:35:46:10:64:57:7a:22:cd:09:1e:6e:84:0f:04: 0e:d4:a3:24:58:bd:55:63:1c:45:67:62:5a:8e:93:af:53:a9: ea:7d:e5:c1:05:0d:34:07:39:4f:35:ea:98:e9:6a:8b:4f:9d: 2c:38:fa:60:ed:59:23:ac:81:ff:2b:d3:4b:d1:50:40:86:a3: af:ab:b9:f3:08:62:ad:33:c6:3d:d0:bc:a2:e7:15:1a:bd:15: f2:4b:f2:22:4e:f9:84:19:4b:b6:16:8a:8d:3c:08:47:d3:69: 36:e3:87:bb:05:e1:72:ac:01:7f:93:84:5a:48:6a:ef:67:58: 21:97:a2:c9:bd:85:73:5d:f4:d5:36:e3:cc:74:79:5c:62:66: 91:90:c3:77:b2:03:1a:89:78:25:a1:ac:6e:69:49:fc:70:71: 45:8d:98:82:e4:ce:72:25:df:19:c0:69:90:0a:60:c0:fc:75: 6e:15:4f:4b:21:dc:5e:1a:c8:d0:e4:a3:25:9b:77:b3:09:8a: 67:4f:d4:08 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWFRp/dBj9VyfzUqvOtEaYMG/QjwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTY1MTU2WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDRmNWQ1MjFjMjk3NjA5NDdmMWJiZGYzMjU3OGU0M2Y1 MDZmNmUzOWNiMTgyYzBiYzE3ODY3ZGEyNDU5ODYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjsMenQ3V0PABTitApHScCYMyU214djr+mWVuU01SGmU8o cEKOxmsMCK8yzWAuS9xUwUqa1vN7wX3G0nHrWnIe+DiDlmBhQ2ZEiAJNC87AXyml Nv9vUc/G99ZhTXqvn1sVwEQ+snA4z6FK35a9+S92LapSzttKGaxFQRM+9fPgJkb9 QO8gHEcbHbIUiM/adMTOjOjhkEYQPD9x5+cJazSfELYMWXDWBxEiFyN1exr52i9S UqxJpFRkxuSUmAM1CDSjmowpUaBnreHnDruAiCLpWD8wSiHvzMB6GrWtTbwBsij0 L4BWKJiaVFFqlIkDLBr9MTjz3ntlkuKy6S/iKhujAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcg9WDy5aeNeoAkt2uY+amyU2GYEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5ODg4OTJjLTVkNTQtNGU5OC1hNWIwLTNhMjY5MWE0MmEyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AdMAwDQYJKoZIhvcNAQELBQADggEBAFW4xciknGlMdInIIo7gI4Wp Lkuc8AntKnK4lL8qu7+VytBrvF5UBQ3zObzhwWKm+w04usXtZnzVkhw1RhBkV3oi zQkeboQPBA7UoyRYvVVjHEVnYlqOk69Tqep95cEFDTQHOU816pjpaotPnSw4+mDt WSOsgf8r00vRUECGo6+rufMIYq0zxj3QvKLnFRq9FfJL8iJO+YQZS7YWio08CEfT aTbjh7sF4XKsAX+ThFpIau9nWCGXosm9hXNd9NU248x0eVxiZpGQw3eyAxqJeCWh rG5pSfxwcUWNmILkznIl3xnAaZAKYMD8dW4VT0sh3F4ayNDkoyWbd7MJimdP1Ag= -----END CERTIFICATE-----Generated at Tue Aug 5 16:52:33 2025 by rpki-client