$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a671fe1-235f-4059-aaa3-935ef59dcd6d.roa File: 5a671fe1-235f-4059-aaa3-935ef59dcd6d.roa (raw, json) Hash identifier: EgVfPlcVL/GBy48fMTEpScUm5XB149hmXn6Y7SO5IGY= Subject key identifier: 5C:77:78:9D:6A:41:4D:D3:09:E9:0F:17:34:8B:2A:CD:F6:02:CF:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5240EB0A3BE52C579A7F59A5A1B674D4D26E7632 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a671fe1-235f-4059-aaa3-935ef59dcd6d.roa Signing time: Mon 04 Aug 2025 17:00:20 +0000 ROA not before: Mon 04 Aug 2025 17:00:20 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f29:4000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:40:eb:0a:3b:e5:2c:57:9a:7f:59:a5:a1:b6:74:d4:d2:6e:76:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:00:20 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=d54e0bec2235825debd1ecfd7d8d3d908c3d56779dbb31fbdbb438468c7bbdd1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:ff:c2:19:fd:16:d5:1c:d4:77:df:ed:96: bd:c4:7a:fc:0e:3e:a2:1c:b7:f8:c1:08:14:45:9d: 32:42:e7:a9:b2:c1:71:67:4f:52:80:84:28:93:1c: 70:b0:c1:2b:d3:54:51:ca:1f:7a:a3:98:c0:c0:95: 0a:99:45:86:79:d7:0a:7c:cd:ce:9e:ce:73:9d:0e: b2:78:39:a7:49:91:20:75:6d:1c:8f:13:90:e1:39: 3f:dd:5b:2c:fa:4c:4f:3a:ec:5c:97:60:5a:5f:99: e6:1b:14:a6:91:b0:c9:25:7a:60:ea:8f:d5:ff:77: 2b:27:48:fb:1c:f6:cd:65:b2:0e:64:4a:72:3c:10: 8e:94:55:18:f1:b9:43:0f:46:31:30:cb:78:5e:18: c0:6d:43:59:44:07:ce:fd:55:c1:4f:fe:c6:58:e7: 5b:5c:25:fd:17:59:83:56:de:95:6f:9a:e3:23:eb: 38:ba:6b:f9:9c:0f:4c:63:38:83:e4:83:ef:6d:e8: 49:36:d9:ec:78:64:0d:24:d2:e6:69:3b:4d:37:3a: f4:7d:f1:49:ef:7d:cf:ef:06:1e:2c:91:a6:3b:7a: ce:45:2d:7e:fa:97:d6:4f:5e:d2:7e:f0:7b:a0:21: 72:69:1e:dd:2b:c5:73:8b:0f:ca:f8:34:77:91:05: b7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:77:78:9D:6A:41:4D:D3:09:E9:0F:17:34:8B:2A:CD:F6:02:CF:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a671fe1-235f-4059-aaa3-935ef59dcd6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f29:4000::/37 Signature Algorithm: sha256WithRSAEncryption be:af:f8:5e:10:bf:8a:b9:47:e0:1b:10:23:1c:6a:50:ce:25: ec:d5:63:04:2c:00:ba:76:35:b3:5e:82:81:c1:7c:e5:cd:a1: ce:c8:a8:79:97:d1:fa:e2:fa:d8:2f:c9:d4:6a:4a:4e:e4:6e: 9d:73:34:1a:a7:23:20:34:52:ce:78:3a:8f:16:a1:49:d0:d1: d0:1e:e1:52:88:4e:a1:a1:d6:4b:fe:9c:08:04:85:40:e4:f5: 36:47:b6:bc:b0:c1:73:3f:9f:f7:cc:a9:b7:dc:58:ff:c6:54: 20:cb:9e:bf:0b:3f:54:35:d3:65:25:70:fd:2a:43:fe:cb:60: 1e:b3:40:02:36:e4:86:57:d0:f9:26:8b:33:7d:08:51:e7:00: d3:99:49:32:49:9a:bf:96:72:0e:fb:24:02:35:ba:68:ea:28: 69:f7:53:ab:9d:38:2c:15:cf:20:e8:a3:ef:d4:67:2d:9d:9d: 31:b0:2b:f8:90:8a:91:06:a6:4d:a7:71:16:23:03:37:02:bc: b2:ff:65:df:7a:7f:ef:d1:59:71:3c:85:10:3d:aa:6d:9a:16: 36:3c:24:1f:c9:81:a0:58:fe:3f:38:9b:48:48:cf:e7:33:1a: c8:8f:a5:e6:e8:69:48:32:6f:90:05:50:56:6a:f4:7e:79:26: c2:21:3e:8b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUkDrCjvlLFeaf1mlobZ01NJudjIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTcwMDIwWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTRlMGJlYzIyMzU4MjVkZWJkMWVjZmQ3ZDhkM2Q5MDhj M2Q1Njc3OWRiYjMxZmJkYmI0Mzg0NjhjN2JiZGQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEi//CGf0W1RzUd9/tlr3EevwOPqIct/jBCBRFnTJC56my wXFnT1KAhCiTHHCwwSvTVFHKH3qjmMDAlQqZRYZ51wp8zc6eznOdDrJ4OadJkSB1 bRyPE5DhOT/dWyz6TE867FyXYFpfmeYbFKaRsMklemDqj9X/dysnSPsc9s1lsg5k SnI8EI6UVRjxuUMPRjEwy3heGMBtQ1lEB879VcFP/sZY51tcJf0XWYNW3pVvmuMj 6zi6a/mcD0xjOIPkg+9t6Ek22ex4ZA0k0uZpO003OvR98Unvfc/vBh4skaY7es5F LX76l9ZPXtJ+8HugIXJpHt0rxXOLD8r4NHeRBbcLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUXHd4nWpBTdMJ6Q8XNIsqzfYCz80wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVhNjcxZmUxLTIzNWYtNDA1OS1hYWEzLTkzNWVmNTlkY2Q2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8pQDANBgkqhkiG9w0BAQsFAAOCAQEAvq/4XhC/irlH4BsQIxxqUM4l 7NVjBCwAunY1s16CgcF85c2hzsioeZfR+uL62C/J1GpKTuRunXM0GqcjIDRSzng6 jxahSdDR0B7hUohOoaHWS/6cCASFQOT1Nke2vLDBcz+f98ypt9xY/8ZUIMuevws/ VDXTZSVw/SpD/stgHrNAAjbkhlfQ+SaLM30IUecA05lJMkmav5ZyDvskAjW6aOoo afdTq504LBXPIOij79RnLZ2dMbAr+JCKkQamTadxFiMDNwK8sv9l33p/79FZcTyF ED2qbZoWNjwkH8mBoFj+PzibSEjP5zMayI+l5uhpSDJvkAVQVmr0fnkmwiE+iw== -----END CERTIFICATE-----Generated at Wed Aug 6 11:21:11 2025 by rpki-client