$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c3eb8a6-89b4-4cc6-b7f2-31127da51ac8.roa File: 5c3eb8a6-89b4-4cc6-b7f2-31127da51ac8.roa (raw, json) Hash identifier: jPhSpac4IBEq9qmXF2/o+DTVV3gBgXlVmU98+9CBWnw= Subject key identifier: CF:66:A3:9B:DB:0C:5E:58:FE:55:38:33:4B:78:85:4A:4F:8B:C3:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36499280943A1E2A0C5B91B1F7021DEBFA622C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c3eb8a6-89b4-4cc6-b7f2-31127da51ac8.roa Signing time: Wed 06 Aug 2025 00:30:51 +0000 ROA not before: Wed 06 Aug 2025 00:30:51 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fef:4000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:49:92:80:94:3a:1e:2a:0c:5b:91:b1:f7:02:1d:eb:fa:62:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 00:30:51 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=3071c1da2bb12dad5153077b119661542f02af6b5e1ad225448bb6223390418d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:31:01:eb:b5:37:41:7d:88:2f:f3:84:f2:d4: 85:1e:33:7e:2e:6a:b5:d1:9a:3e:6b:b0:26:99:cd: 0f:b8:a8:5e:d9:98:c0:fe:2b:8b:2e:92:29:4a:98: a0:19:22:ed:c9:61:b1:5d:1d:69:17:ee:ac:17:c1: 69:86:e9:e6:8d:09:82:dd:c1:4f:b9:72:0f:65:1c: ea:52:db:87:55:a3:9c:b1:fb:b2:16:e6:e0:a8:71: 20:f0:5f:a9:a1:29:ca:69:98:79:5c:cd:82:6a:5f: 99:ec:9a:74:da:14:ff:67:5d:7c:cd:cd:52:a3:b6: 53:ab:5f:77:62:5b:b2:f7:ec:bc:aa:ca:ad:16:89: 96:75:66:b1:6f:05:8b:e1:9f:cf:2b:65:d1:6d:f2: 80:ec:46:11:36:c6:29:3b:65:0c:39:ad:c9:52:85: 37:c5:de:33:12:3b:a0:c1:b2:40:cc:73:70:d2:ab: 3d:79:71:a1:20:82:cf:78:39:e4:52:32:e8:87:89: 75:08:0a:1c:b5:8a:0a:94:e6:9f:93:2a:00:89:63: 42:06:7f:8d:a9:83:c7:4f:bd:17:87:80:6b:c2:b2: f7:42:7d:b6:c2:78:3a:1c:e4:19:19:71:1e:37:bc: 15:49:c2:51:dd:0e:96:a2:d7:15:e3:dd:6b:74:f4: 9e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:66:A3:9B:DB:0C:5E:58:FE:55:38:33:4B:78:85:4A:4F:8B:C3:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c3eb8a6-89b4-4cc6-b7f2-31127da51ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:4000::/39 Signature Algorithm: sha256WithRSAEncryption 51:0a:17:9c:30:8f:02:f4:ab:b0:c1:45:05:a7:01:70:70:7f: f7:3b:6a:52:05:be:bc:1c:3e:50:e8:32:7c:fc:fc:af:0a:b7: 85:04:e0:42:78:ec:84:67:02:ee:61:ca:90:2c:e9:a1:96:87: 0f:3c:68:c9:ff:58:d3:2b:40:3a:45:3a:65:65:6d:70:05:42: d3:08:48:c2:a6:7a:9a:d3:af:02:ea:63:8f:f8:4d:0c:c9:e1: 61:e9:e9:72:78:19:1e:95:33:3c:bd:4c:89:73:05:7e:38:9c: b2:cb:f1:66:d5:d6:2a:07:58:7f:1e:a5:bb:cd:44:34:4a:60: 58:7b:d6:45:01:a9:e9:4e:2e:26:c0:f8:3f:25:a8:56:7e:3f: 44:62:ea:d4:88:3a:ff:32:ae:55:f1:2f:ca:0c:93:cf:bb:4a: 48:cd:ce:3b:4d:0a:a0:01:ba:34:4f:6a:36:e7:a1:ee:88:8d: 1d:54:4e:ee:34:60:8d:a0:4c:80:dd:79:2f:42:ab:86:da:bb: 68:cb:c0:b3:0c:1f:02:80:14:25:ca:4d:97:f0:5e:90:ca:f5: 1d:d8:c3:04:aa:bf:01:be:31:a4:20:95:e7:d1:2e:29:4c:9b: 3d:3d:69:17:53:85:1f:6f:8b:72:b9:90:86:c5:28:ce:9b:eb: 03:4a:29:83 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITNkmSgJQ6HioMW5Gx9wId6/piLDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA4MDYwMDMwNTFaFw0yNTA5MTAyMzU5NTla MHoxSTBHBgNVBAUTQDMwNzFjMWRhMmJiMTJkYWQ1MTUzMDc3YjExOTY2MTU0MmYw MmFmNmI1ZTFhZDIyNTQ0OGJiNjIyMzM5MDQxOGQxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKUxAeu1N0F9iC/zhPLUhR4zfi5qtdGaPmuwJpnND7ioXtmY wP4riy6SKUqYoBki7clhsV0daRfurBfBaYbp5o0Jgt3BT7lyD2Uc6lLbh1WjnLH7 shbm4KhxIPBfqaEpymmYeVzNgmpfmeyadNoU/2ddfM3NUqO2U6tfd2JbsvfsvKrK rRaJlnVmsW8Fi+Gfzytl0W3ygOxGETbGKTtlDDmtyVKFN8XeMxI7oMGyQMxzcNKr PXlxoSCCz3g55FIy6IeJdQgKHLWKCpTmn5MqAIljQgZ/jamDx0+9F4eAa8Ky90J9 tsJ4OhzkGRlxHje8FUnCUd0OlqLXFePda3T0ntsCAwEAAaOCArMwggKvMB0GA1Ud DgQWBBTPZqOb2wxeWP5VODNLeIVKT4vDojAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNWMzZWI4YTYtODliNC00Y2M2LWI3ZjItMzExMjdkYTUxYWM4LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGASYAH+9AMA0GCSqGSIb3DQEBCwUAA4IBAQBRChecMI8C9KuwwUUFpwFwcH/3 O2pSBb68HD5Q6DJ8/PyvCreFBOBCeOyEZwLuYcqQLOmhlocPPGjJ/1jTK0A6RTpl ZW1wBULTCEjCpnqa068C6mOP+E0MyeFh6elyeBkelTM8vUyJcwV+OJyyy/Fm1dYq B1h/HqW7zUQ0SmBYe9ZFAanpTi4mwPg/JahWfj9EYurUiDr/Mq5V8S/KDJPPu0pI zc47TQqgAbo0T2o256HuiI0dVE7uNGCNoEyA3XkvQquG2rtoy8CzDB8CgBQlyk2X 8F6QyvUd2MMEqr8BvjGkIJXn0S4pTJs9PWkXU4Ufb4tyuZCGxSjOm+sDSimD -----END CERTIFICATE-----Generated at Sat Aug 9 10:48:21 2025 by rpki-client