$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5bc265a-1827-411f-8fbb-6affb77e57cd.roa File: a5bc265a-1827-411f-8fbb-6affb77e57cd.roa (raw, json) Hash identifier: Fe/3uTEdPP1OHOLP7qUEiSOccInLeJXWel5HGKX78wE= Subject key identifier: 52:2D:11:5C:FA:E9:53:B6:1C:72:F4:1E:F7:FF:18:22:1F:A9:67:5D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4D15B4D6A97E2A2BB37E30A77670391F2454ACBD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5bc265a-1827-411f-8fbb-6affb77e57cd.roa Signing time: Tue 05 Aug 2025 00:22:23 +0000 ROA not before: Tue 05 Aug 2025 00:22:23 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:15:b4:d6:a9:7e:2a:2b:b3:7e:30:a7:76:70:39:1f:24:54:ac:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:22:23 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=1c835423d49e2cec8fd2b9185dcf98a2816f32d6690e4c1f79b6b02a32be3c56, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:67:35:e1:92:15:8e:2d:d6:37:9c:9e:d0: 6e:c2:74:b1:10:fb:a2:70:8f:c7:f0:49:68:23:80: f4:e7:2e:74:d8:f8:18:bb:a4:f0:0f:a1:b5:c0:d6: 3c:dc:6e:e7:6e:1d:ca:ef:bb:b7:c4:21:75:2e:fe: 63:0f:02:75:d5:a5:2e:16:c4:e1:3a:55:c8:6a:7f: 19:68:66:61:97:2c:1c:34:93:41:6c:7f:ee:20:57: 03:71:da:bc:94:61:ec:d7:fc:53:63:50:01:c7:b5: 0b:af:4a:c3:9a:14:91:06:95:89:8f:5f:19:8c:a1: ed:ef:59:aa:e8:c8:21:04:37:4c:7f:5b:4a:98:8c: 15:93:ad:a4:cd:0e:9a:30:41:26:0a:72:e1:1a:58: 51:15:10:94:66:ac:5c:62:be:3a:ce:53:40:9f:f1: 23:f9:38:61:46:49:a3:c4:2c:56:28:90:f0:83:ba: 8e:b0:19:92:d9:b6:62:5a:a4:de:80:43:d7:d1:11: 34:16:2f:a8:84:99:29:cf:8e:fc:27:d7:bf:1e:67: 39:9c:1c:c4:30:b1:1e:bb:8c:46:b7:61:ec:07:96: 56:d6:cd:4d:d2:36:9b:9c:de:58:80:10:16:e7:ab: d8:63:33:ab:f9:ab:c9:47:20:c8:e2:fa:09:9e:15: 25:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2D:11:5C:FA:E9:53:B6:1C:72:F4:1E:F7:FF:18:22:1F:A9:67:5D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5bc265a-1827-411f-8fbb-6affb77e57cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:5000::/40 Signature Algorithm: sha256WithRSAEncryption 54:38:55:d3:75:61:48:9a:77:18:c6:c2:f3:ea:8d:15:b0:96: 10:95:59:99:7f:ab:39:d1:02:37:7e:f1:43:8b:9b:bc:fe:08: b3:0e:9d:0f:33:c2:1b:55:b9:9a:ad:fb:bc:68:34:71:4c:d6: c6:23:d5:61:2d:b2:ae:29:bc:99:f9:87:d7:5e:b8:87:2d:82: af:3d:cf:2f:e9:45:ff:65:d1:33:c4:e3:53:3c:81:14:5a:0c: 47:d4:aa:c5:8e:4c:78:18:f8:6b:70:b7:1a:e6:44:04:bf:a8: 47:fc:95:ab:de:ff:9f:01:8d:7c:9b:93:e9:e5:d8:85:0a:e7: f1:e9:f0:b4:21:06:97:2b:ed:94:c4:58:f6:54:88:78:c5:ab: fd:33:90:50:67:08:f3:8a:dc:56:bf:8f:fd:b9:17:b3:46:8b: 74:dc:0f:83:2b:a0:85:60:f4:79:7c:31:0c:e4:ea:1b:2e:9b: 81:ee:85:96:49:a5:7a:dd:9e:b6:13:e0:84:a1:73:fa:70:87: e6:76:03:74:a9:3d:04:02:60:40:aa:19:db:04:ea:5f:ba:e4: 24:99:15:cd:fd:27:9c:98:33:a6:b6:6d:d1:23:58:24:8d:0f: 9e:00:28:cd:f1:67:22:e6:e7:3a:e1:a5:e1:da:6d:8f:f1:e6: 69:d3:b1:a6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTRW01ql+KiuzfjCndnA5HyRUrL0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAyMjIzWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzgzNTQyM2Q0OWUyY2VjOGZkMmI5MTg1ZGNmOThhMjgx NmYzMmQ2NjkwZTRjMWY3OWI2YjAyYTMyYmUzYzU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu9Gc14ZIVji3WN5ye0G7CdLEQ+6Jwj8fwSWgjgPTnLnTY +Bi7pPAPobXA1jzcbuduHcrvu7fEIXUu/mMPAnXVpS4WxOE6VchqfxloZmGXLBw0 k0Fsf+4gVwNx2ryUYezX/FNjUAHHtQuvSsOaFJEGlYmPXxmMoe3vWaroyCEEN0x/ W0qYjBWTraTNDpowQSYKcuEaWFEVEJRmrFxivjrOU0Cf8SP5OGFGSaPELFYokPCD uo6wGZLZtmJapN6AQ9fRETQWL6iEmSnPjvwn178eZzmcHMQwsR67jEa3YewHllbW zU3SNpuc3liAEBbnq9hjM6v5q8lHIMji+gmeFSUbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUUi0RXPrpU7YccvQe9/8YIh+pZ10wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1YmMyNjVhLTE4MjctNDExZi04ZmJiLTZhZmZiNzdlNTdjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4UDANBgkqhkiG9w0BAQsFAAOCAQEAVDhV03VhSJp3GMbC8+qNFbCW EJVZmX+rOdECN37xQ4ubvP4Isw6dDzPCG1W5mq37vGg0cUzWxiPVYS2yrim8mfmH 1164hy2Crz3PL+lF/2XRM8TjUzyBFFoMR9SqxY5MeBj4a3C3GuZEBL+oR/yVq97/ nwGNfJuT6eXYhQrn8enwtCEGlyvtlMRY9lSIeMWr/TOQUGcI84rcVr+P/bkXs0aL dNwPgyughWD0eXwxDOTqGy6bge6Flkmlet2ethPghKFz+nCH5nYDdKk9BAJgQKoZ 2wTqX7rkJJkVzf0nnJgzprZt0SNYJI0PngAozfFnIubnOuGl4dptj/HmadOxpg== -----END CERTIFICATE-----Generated at Sat Aug 9 23:21:39 2025 by rpki-client