$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/954fe8c8-f86c-46da-9ad1-2cb75fee8130.roa File: 954fe8c8-f86c-46da-9ad1-2cb75fee8130.roa (raw, json) Hash identifier: PQCnnNVuVmhCvlukrneG4k6bnJARQBbpB0ay9NgTMik= Subject key identifier: 25:CE:9F:06:B7:04:0C:6E:34:69:3D:8C:B7:B0:86:96:40:30:2C:02 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39AB9EFCCDC015B9D1E369E3D57F637B8D9DAB70 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/954fe8c8-f86c-46da-9ad1-2cb75fee8130.roa Signing time: Fri 01 Aug 2025 16:10:56 +0000 ROA not before: Fri 01 Aug 2025 16:10:56 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ab:9e:fc:cd:c0:15:b9:d1:e3:69:e3:d5:7f:63:7b:8d:9d:ab:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 16:10:56 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=26a34818923616075af68df69296596b0b9a82c3bcd4f50ab3e99323aea06bdd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:23:c7:8b:a3:bf:db:23:6a:a1:92:a6:67: 27:89:07:34:8c:f2:c7:83:72:fd:68:a7:44:9e:8d: 5f:80:b5:34:fd:6d:f2:aa:09:0f:16:b7:f0:34:be: 01:6c:e4:16:26:15:37:de:e0:5b:c7:6c:4d:de:6e: 4e:39:b1:17:88:20:fc:63:52:1b:b0:39:6d:2c:6e: 28:38:96:45:5a:45:bf:99:4e:b6:3d:66:02:d2:d1: 26:5e:62:7d:61:60:7e:84:36:80:a6:ea:9b:1a:14: e6:e3:62:ab:fd:59:7d:c2:a5:fd:0b:92:51:d3:35: 49:e2:e9:6b:e6:9d:f7:d0:8f:16:43:36:72:c7:37: 19:3e:d0:0d:d3:48:73:d9:2d:88:17:a7:13:34:4c: f9:0c:0e:af:de:66:dd:b2:94:1b:a7:ef:a9:cb:46: b0:3f:5a:39:a9:90:78:3f:70:74:b8:cb:4f:31:2a: cd:e8:39:0e:a3:09:83:c8:3b:bb:49:6a:4b:c5:a9: ac:1d:c3:01:58:db:0f:f8:6b:96:53:8c:fa:2c:a3: 38:55:7f:28:6e:6b:83:36:86:f2:c7:a4:5e:ad:97: 8c:ab:ba:47:52:97:15:52:82:5b:42:43:ac:71:27: 47:84:f3:42:bf:d4:d1:9a:76:14:19:40:2a:e9:12: 1e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CE:9F:06:B7:04:0C:6E:34:69:3D:8C:B7:B0:86:96:40:30:2C:02 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/954fe8c8-f86c-46da-9ad1-2cb75fee8130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:4020::/48 Signature Algorithm: sha256WithRSAEncryption 05:17:09:a1:fe:ae:77:87:29:53:f6:4c:b3:e2:59:a2:5f:84: 30:1a:b3:4f:f7:f3:fa:c7:79:63:8d:27:d9:c0:5c:a2:36:c7: e4:8e:d3:fa:8f:39:d0:16:c7:80:85:f8:38:78:dc:dd:cb:1e: ba:f6:85:19:27:c5:bc:72:cd:99:3f:e3:dc:65:9c:2b:c4:c5: b6:16:67:a5:dc:b2:ca:d1:04:a6:51:07:ed:36:82:25:58:ef: 1f:3a:e8:55:9d:dd:22:bf:8d:35:79:70:84:5a:e3:9c:e5:9d: e8:6d:cc:77:23:d5:cd:34:69:52:87:05:df:ef:ce:2e:b5:8e: 42:7c:de:36:0b:b1:89:21:02:00:5e:23:d7:15:ff:7d:89:ac: fe:69:c5:28:97:c7:79:ef:25:29:10:37:36:f3:a4:dc:f4:a2: aa:d4:b2:c0:33:9f:2f:75:91:d8:29:68:85:ee:3e:a2:1f:c5: c4:fc:a4:c8:ac:5e:26:ca:29:f6:de:d7:ca:31:4a:9b:b8:b1: d8:ee:b3:3b:94:e2:88:33:59:34:22:e9:ed:bd:c3:96:16:02: 76:fc:61:8f:c8:05:5a:46:c7:ff:d8:53:b0:a2:e2:21:41:6e: 08:5d:89:fd:83:94:fc:d8:31:88:da:1c:2d:83:f1:c9:d4:fd: 49:69:57:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOaue/M3AFbnR42nj1X9je42dq3AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTYxMDU2WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNmEzNDgxODkyMzYxNjA3NWFmNjhkZjY5Mjk2NTk2YjBi OWE4MmMzYmNkNGY1MGFiM2U5OTMyM2FlYTA2YmRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt2iPHi6O/2yNqoZKmZyeJBzSM8seDcv1op0SejV+AtTT9 bfKqCQ8Wt/A0vgFs5BYmFTfe4FvHbE3ebk45sReIIPxjUhuwOW0sbig4lkVaRb+Z TrY9ZgLS0SZeYn1hYH6ENoCm6psaFObjYqv9WX3Cpf0LklHTNUni6WvmnffQjxZD NnLHNxk+0A3TSHPZLYgXpxM0TPkMDq/eZt2ylBun76nLRrA/WjmpkHg/cHS4y08x Ks3oOQ6jCYPIO7tJakvFqawdwwFY2w/4a5ZTjPosozhVfyhua4M2hvLHpF6tl4yr ukdSlxVSgltCQ6xxJ0eE80K/1NGadhQZQCrpEh5fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJc6fBrcEDG40aT2Mt7CGlkAwLAIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1NGZlOGM4LWY4NmMtNDZkYS05YWQxLTJjYjc1ZmVlODEzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hQCAwDQYJKoZIhvcNAQELBQADggEBAAUXCaH+rneHKVP2TLPiWaJf hDAas0/38/rHeWONJ9nAXKI2x+SO0/qPOdAWx4CF+Dh43N3LHrr2hRknxbxyzZk/ 49xlnCvExbYWZ6XcssrRBKZRB+02giVY7x866FWd3SK/jTV5cIRa45zlnehtzHcj 1c00aVKHBd/vzi61jkJ83jYLsYkhAgBeI9cV/32JrP5pxSiXx3nvJSkQNzbzpNz0 oqrUssAzny91kdgpaIXuPqIfxcT8pMisXibKKfbe18oxSpu4sdjuszuU4ogzWTQi 6e29w5YWAnb8YY/IBVpGx//YU7Ci4iFBbghdif2DlPzYMYjaHC2D8cnU/UlpV9E= -----END CERTIFICATE-----Generated at Wed Aug 6 00:34:43 2025 by rpki-client