$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa File: 5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa (raw, json) Hash identifier: 0hc/WvSfZewiVZz9gRxD/8HaDgPaYJAVaeYU1iEt3dA= Subject key identifier: 24:FB:C0:22:44:61:C8:3C:BD:2A:19:BA:A0:56:CB:08:24:5B:53:BB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6DD5505B26CCBFA273BED6A84B69A49266D29313 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa Signing time: Fri 08 Aug 2025 00:10:29 +0000 ROA not before: Fri 08 Aug 2025 00:10:29 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:84af::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d5:50:5b:26:cc:bf:a2:73:be:d6:a8:4b:69:a4:92:66:d2:93:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:10:29 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=fd8611a15eafab94d598593b8f70e3eff539955bcc6fbb87aafde0bcb85b5665, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5f:ad:bc:b6:8d:76:d7:3a:18:fe:db:c1:af: 1a:22:76:f9:a8:77:30:d1:20:7b:4f:35:6c:cd:2d: 6b:79:be:75:56:aa:23:89:b5:f4:19:af:a3:bd:b6: b7:d1:55:4a:e1:54:1d:fa:c8:27:65:8f:29:9d:be: 14:65:36:fd:89:c5:f9:f6:d6:2a:ed:ca:fc:0e:79: cb:33:6f:cd:64:77:98:a0:0b:aa:d8:e2:e6:70:49: 25:dc:d1:51:22:43:d5:ed:ce:81:0f:06:a7:9b:2b: fe:e2:e2:e5:27:59:4d:ca:d9:65:18:e6:72:69:eb: f1:c4:b2:7b:fc:74:e1:4d:f4:84:c2:88:29:c9:18: 61:d3:05:e3:72:4f:fb:8e:da:01:8b:10:12:5f:de: 1e:13:d6:28:59:02:3f:4f:ce:73:59:fa:4e:ec:42: 1b:54:e7:eb:13:05:35:21:68:d9:a0:67:a9:8a:26: 1c:c7:44:a1:16:dc:08:4c:54:03:98:41:a0:ff:92: e1:86:db:36:a2:21:b7:0b:e3:9c:67:f9:f1:0e:a3: a1:04:27:82:74:ea:cb:08:de:56:8e:73:67:23:18: b0:1f:ee:78:83:c9:78:52:54:64:bc:eb:17:17:08: 60:71:ec:fd:09:2e:f9:47:c0:a9:2b:da:ee:ff:7d: a9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FB:C0:22:44:61:C8:3C:BD:2A:19:BA:A0:56:CB:08:24:5B:53:BB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:84af::/48 Signature Algorithm: sha256WithRSAEncryption 8f:57:f7:c0:81:98:f6:c6:d5:e4:a3:b5:77:51:25:19:67:93: 24:00:03:c7:0f:39:bf:29:23:19:63:c4:88:c2:39:6d:a6:90: 0a:83:19:e4:3d:de:4e:0f:d2:f1:7c:66:3c:44:ad:0f:aa:40: c4:38:e2:c8:74:db:42:c5:1c:a1:c0:7a:10:20:b9:8e:f7:f0: f7:2f:2a:f4:e9:f1:26:10:f3:ac:f0:d7:25:48:42:c9:35:ef: f0:54:4d:e4:a3:d4:36:50:a4:07:5a:a2:e3:03:2a:e3:da:88: a5:86:40:9b:f8:88:34:8e:f6:31:35:eb:a2:c1:2b:01:1a:21: 0e:4f:47:0d:5e:3c:e6:29:6e:ac:dd:9d:ae:f8:83:6b:49:46: 46:39:89:5d:e0:82:06:89:18:a9:52:94:07:b9:14:a1:1a:23: 85:58:1a:a2:32:68:5c:0f:1a:4f:53:90:41:4b:8a:59:93:d5: ab:1d:12:6c:34:e0:04:02:6a:3a:43:b2:4c:ec:f2:2f:aa:57: b8:bb:32:0c:83:cd:9e:e2:68:62:51:48:e0:29:1e:c4:58:b8: bf:2f:29:bb:59:d4:73:15:b5:9e:d6:4b:dd:24:9a:24:3b:02: 76:00:15:7d:60:a8:09:2c:64:e4:31:63:99:23:44:b3:fd:20: 6e:b4:fd:8d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbdVQWybMv6JzvtaoS2mkkmbSkxMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAxMDI5WhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDg2MTFhMTVlYWZhYjk0ZDU5ODU5M2I4ZjcwZTNlZmY1 Mzk5NTViY2M2ZmJiODdhYWZkZTBiY2I4NWI1NjY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTX628to121zoY/tvBrxoidvmodzDRIHtPNWzNLWt5vnVW qiOJtfQZr6O9trfRVUrhVB36yCdljymdvhRlNv2Jxfn21irtyvwOecszb81kd5ig C6rY4uZwSSXc0VEiQ9XtzoEPBqebK/7i4uUnWU3K2WUY5nJp6/HEsnv8dOFN9ITC iCnJGGHTBeNyT/uO2gGLEBJf3h4T1ihZAj9PznNZ+k7sQhtU5+sTBTUhaNmgZ6mK JhzHRKEW3AhMVAOYQaD/kuGG2zaiIbcL45xn+fEOo6EEJ4J06ssI3laOc2cjGLAf 7niDyXhSVGS86xcXCGBx7P0JLvlHwKkr2u7/famdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJPvAIkRhyDy9Khm6oFbLCCRbU7swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkNzJkYmJlLTJiODgtNDhhMS04MWY1LWI1NTA4MmFhODk0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9hK8wDQYJKoZIhvcNAQELBQADggEBAI9X98CBmPbG1eSjtXdRJRln kyQAA8cPOb8pIxljxIjCOW2mkAqDGeQ93k4P0vF8ZjxErQ+qQMQ44sh020LFHKHA ehAguY738PcvKvTp8SYQ86zw1yVIQsk17/BUTeSj1DZQpAdaouMDKuPaiKWGQJv4 iDSO9jE166LBKwEaIQ5PRw1ePOYpbqzdna74g2tJRkY5iV3gggaJGKlSlAe5FKEa I4VYGqIyaFwPGk9TkEFLilmT1asdEmw04AQCajpDskzs8i+qV7i7MgyDzZ7iaGJR SOApHsRYuL8vKbtZ1HMVtZ7WS90kmiQ7AnYAFX1gqAksZOQxY5kjRLP9IG60/Y0= -----END CERTIFICATE-----Generated at Sat Aug 9 02:52:35 2025 by rpki-client