$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c1a805c-d068-478c-9e6b-378bde6fc1c0.roa File: 5c1a805c-d068-478c-9e6b-378bde6fc1c0.roa (raw, json) Hash identifier: K0UFaOvzmjvDdBtc7AfOobkZPLob+zunQ/h+42/RYZg= Subject key identifier: E1:63:1C:5A:38:4B:00:AC:24:4F:8B:0C:7D:1C:4E:C5:EF:42:CA:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17638F8DF8CB367E826271E462408582A98115FF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c1a805c-d068-478c-9e6b-378bde6fc1c0.roa Signing time: Fri 01 Aug 2025 16:30:33 +0000 ROA not before: Fri 01 Aug 2025 16:30:33 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:40b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:63:8f:8d:f8:cb:36:7e:82:62:71:e4:62:40:85:82:a9:81:15:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 16:30:33 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=5689be965da7f1020d825d3d4c3ba6534ed9415a7086c7ba6bd12bc77753ff0d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:8b:a9:ce:79:57:0f:47:6b:0b:b8:49:94: 18:15:93:78:92:83:6c:a7:c2:8d:bd:c0:84:07:07: 02:80:6f:63:b2:6c:e9:5c:cd:99:6e:22:73:bc:98: ab:e6:4f:a3:af:6e:c3:9b:d0:83:cd:fc:e0:dd:96: 2b:5f:d7:46:94:70:fa:8e:55:1d:f9:57:11:86:54: 00:a5:4e:39:4a:d2:8a:a3:db:79:b1:6a:3e:fe:f1: f0:5c:64:5c:56:29:80:47:0c:5a:b3:52:79:3b:1a: 87:0a:f6:b6:6b:81:c0:9f:9e:91:bd:e2:12:c1:5c: e0:6c:3e:0c:b6:0a:8d:33:62:6c:12:f1:d9:2e:16: 04:00:61:b0:cb:a4:54:2f:a7:a7:e3:28:17:5e:95: 84:a0:31:83:59:22:87:fa:bb:5c:e9:33:4b:d9:5f: a7:f5:46:83:5a:8e:1a:e8:cd:94:38:b1:8c:09:87: 8e:c8:e8:9e:40:28:4e:57:db:b3:1c:bc:db:f5:87: f2:88:dd:6d:8f:f1:e7:b2:a3:80:99:b9:59:40:02: 3f:60:27:7d:19:55:8c:7e:f9:25:37:d9:f7:7f:2b: cc:d6:3d:5e:1c:f8:54:d8:fe:f0:73:9d:10:eb:c6: 04:3f:0f:80:ac:42:83:72:12:37:39:76:66:f9:25: e4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:63:1C:5A:38:4B:00:AC:24:4F:8B:0C:7D:1C:4E:C5:EF:42:CA:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c1a805c-d068-478c-9e6b-378bde6fc1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:40b0::/48 Signature Algorithm: sha256WithRSAEncryption 47:44:85:84:9c:19:48:f2:f2:3f:cb:ee:fc:45:17:c0:54:52: 1b:c4:cc:d7:e6:43:26:62:0c:f6:8c:f1:77:67:81:cd:51:44: 34:46:f9:4e:a0:a6:6e:a9:10:44:c1:33:c8:3e:bb:c3:0e:48: 3a:e4:57:91:9d:2d:7c:99:67:84:28:2b:cc:89:48:24:82:94: 6c:36:87:87:c2:f4:bd:0a:87:d1:99:7c:51:d6:06:ed:d1:30: 51:a1:7b:31:6d:6c:be:fd:11:76:71:92:f8:fa:69:5c:b8:85: 7d:7e:59:69:61:d5:fc:3a:68:54:f5:5d:59:ac:8a:a4:a6:02: db:18:29:0e:84:8f:ba:df:f0:ee:a6:9a:f3:f7:1c:6a:40:e2: df:01:43:50:fb:62:58:52:94:53:f4:e5:f8:60:4d:c9:e6:e7: f5:e2:fa:ef:14:87:3b:37:f6:db:71:c1:50:07:05:6a:07:df: 53:52:3c:58:51:6f:11:5a:e3:58:76:10:4e:8b:01:83:43:8a: 45:02:6b:c0:8f:3a:92:19:55:5a:9f:82:b3:bd:99:bb:d6:43: 86:04:d9:fb:6b:8f:ca:86:fd:ab:22:e5:7b:31:66:05:9c:86: 0b:d1:94:80:6a:3b:8c:24:5d:66:54:fc:d0:a8:fc:18:68:ef: b6:91:38:01 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUF2OPjfjLNn6CYnHkYkCFgqmBFf8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTYzMDMzWhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Njg5YmU5NjVkYTdmMTAyMGQ4MjVkM2Q0YzNiYTY1MzRl ZDk0MTVhNzA4NmM3YmE2YmQxMmJjNzc3NTNmZjBkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgGYupznlXD0drC7hJlBgVk3iSg2ynwo29wIQHBwKAb2Oy bOlczZluInO8mKvmT6OvbsOb0IPN/ODdlitf10aUcPqOVR35VxGGVAClTjlK0oqj 23mxaj7+8fBcZFxWKYBHDFqzUnk7GocK9rZrgcCfnpG94hLBXOBsPgy2Co0zYmwS 8dkuFgQAYbDLpFQvp6fjKBdelYSgMYNZIof6u1zpM0vZX6f1RoNajhrozZQ4sYwJ h47I6J5AKE5X27McvNv1h/KI3W2P8eeyo4CZuVlAAj9gJ30ZVYx++SU32fd/K8zW PV4c+FTY/vBznRDrxgQ/D4CsQoNyEjc5dmb5JeRTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4WMcWjhLAKwkT4sMfRxOxe9CyqkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjMWE4MDVjLWQwNjgtNDc4Yy05ZTZiLTM3OGJkZTZmYzFjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AQLAwDQYJKoZIhvcNAQELBQADggEBAEdEhYScGUjy8j/L7vxFF8BU UhvEzNfmQyZiDPaM8Xdngc1RRDRG+U6gpm6pEETBM8g+u8MOSDrkV5GdLXyZZ4Qo K8yJSCSClGw2h4fC9L0Kh9GZfFHWBu3RMFGhezFtbL79EXZxkvj6aVy4hX1+WWlh 1fw6aFT1XVmsiqSmAtsYKQ6Ej7rf8O6mmvP3HGpA4t8BQ1D7YlhSlFP05fhgTcnm 5/Xi+u8Uhzs39ttxwVAHBWoH31NSPFhRbxFa41h2EE6LAYNDikUCa8CPOpIZVVqf grO9mbvWQ4YE2ftrj8qG/asi5XsxZgWchgvRlIBqO4wkXWZU/NCo/Bho77aROAE= -----END CERTIFICATE-----Generated at Tue Aug 5 16:52:47 2025 by rpki-client