$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b82094ce-0b12-48a0-b623-334c153ef9e2.roa File: b82094ce-0b12-48a0-b623-334c153ef9e2.roa (raw, json) Hash identifier: 9YxWBFsL5XII6SsCV9+7e3J/y5raBjEdbkBuOZ6Ev4Q= Subject key identifier: E2:C5:DA:AD:07:93:CD:AA:55:0A:01:FE:CB:98:C3:93:EC:2B:41:6E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 544BF3AE6D79907004F597B50B7BC67C38B68AB5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b82094ce-0b12-48a0-b623-334c153ef9e2.roa Signing time: Fri 01 Aug 2025 16:40:15 +0000 ROA not before: Fri 01 Aug 2025 16:40:15 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8070::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:4b:f3:ae:6d:79:90:70:04:f5:97:b5:0b:7b:c6:7c:38:b6:8a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 16:40:15 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=dacf5dcf7fc76ede3e04443d7182618933671b121e7db47e17b920b9ccc24a6a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:12:b6:ba:59:b5:02:97:55:2a:4f:47:8b:68: 57:ce:0b:4f:d9:cc:29:b7:d7:e9:bb:9d:0b:e7:7c: 3e:96:7a:8a:95:57:58:10:99:78:e8:16:55:a3:da: 40:fc:65:15:6f:71:2f:ce:15:84:49:68:64:08:c8: 36:2d:a1:6b:ff:4f:02:e0:1b:d6:30:68:ce:c8:a3: 1c:8d:86:3c:a2:c1:27:8f:8c:78:eb:d6:87:58:a3: 57:a1:15:36:32:93:b0:19:c9:07:5b:4b:7f:66:30: a3:5d:d7:95:e8:f6:98:f3:53:36:a0:4d:5f:1f:3b: 03:95:5a:68:65:d6:58:69:dc:55:4c:78:69:05:22: 08:62:e8:21:93:09:9e:66:ea:ed:fa:4c:ea:c6:81: e6:ce:6d:05:ba:f3:ef:24:87:65:9c:b6:9a:1e:3c: 00:df:2e:55:a0:34:5b:1f:e9:35:2d:a0:03:d3:66: d4:60:75:fc:0d:30:f3:b7:54:3f:5e:55:0e:7c:f2: 72:f9:13:30:48:1d:2c:2e:ef:b4:f9:7d:72:2a:93: db:28:7f:ee:5f:3e:6a:bb:89:71:f0:de:48:ee:9b: ee:6e:2c:e6:9e:c5:5c:be:d5:1c:fa:59:fa:92:d0: db:b3:ca:19:6c:ae:ed:34:1c:26:d9:86:c8:8c:be: 35:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C5:DA:AD:07:93:CD:AA:55:0A:01:FE:CB:98:C3:93:EC:2B:41:6E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b82094ce-0b12-48a0-b623-334c153ef9e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8070::/48 Signature Algorithm: sha256WithRSAEncryption 06:5c:70:1f:7a:ac:fb:51:81:a0:af:5a:b7:3e:e4:cb:59:f0: d6:2f:b3:7f:25:ce:16:b1:a6:ea:b1:66:42:73:6e:38:96:e9: 3e:d7:e9:02:ef:f9:fd:3a:58:36:3c:9c:ba:ce:f7:c0:d7:3d: 26:54:42:cd:c0:e6:ee:43:44:6a:e3:55:ca:46:0e:06:45:27: 92:06:b4:3f:d0:2e:c0:a5:83:7d:71:8b:c3:95:64:d7:c7:94: 84:2d:30:bf:e0:fe:d8:ce:f3:3d:87:50:01:30:a0:11:8f:ca: 3e:3e:a1:f8:03:6a:17:67:5c:0a:3c:4e:a6:d1:ec:7b:58:96: eb:47:82:2b:8b:92:e1:ec:21:9c:e5:b6:c6:e0:80:46:89:6f: 15:fb:dd:ac:ec:a9:02:8c:b0:19:3b:fc:1c:63:9f:4e:fc:91: 45:d0:b6:a1:d3:5c:4f:24:fd:f0:90:78:8c:73:de:6b:b9:bf: 0b:02:8e:b1:49:f6:be:81:2b:67:2f:ab:39:a9:c2:85:e5:4d: 04:42:29:9e:69:e8:03:3b:3b:f1:85:c0:49:9a:34:1e:ca:6d: aa:3b:77:86:62:2c:90:8d:25:ee:d5:29:41:e0:83:af:97:1e: 5b:08:67:46:08:65:3d:31:11:a2:f1:c0:a3:86:95:f2:23:c6: a2:be:8f:e7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVEvzrm15kHAE9Ze1C3vGfDi2irUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTY0MDE1WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWNmNWRjZjdmYzc2ZWRlM2UwNDQ0M2Q3MTgyNjE4OTMz NjcxYjEyMWU3ZGI0N2UxN2I5MjBiOWNjYzI0YTZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmEra6WbUCl1UqT0eLaFfOC0/ZzCm31+m7nQvnfD6WeoqV V1gQmXjoFlWj2kD8ZRVvcS/OFYRJaGQIyDYtoWv/TwLgG9YwaM7IoxyNhjyiwSeP jHjr1odYo1ehFTYyk7AZyQdbS39mMKNd15Xo9pjzUzagTV8fOwOVWmhl1lhp3FVM eGkFIghi6CGTCZ5m6u36TOrGgebObQW68+8kh2WctpoePADfLlWgNFsf6TUtoAPT ZtRgdfwNMPO3VD9eVQ588nL5EzBIHSwu77T5fXIqk9sof+5fPmq7iXHw3kjum+5u LOaexVy+1Rz6WfqS0Nuzyhlsru00HCbZhsiMvjWfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4sXarQeTzapVCgH+y5jDk+wrQW4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4MjA5NGNlLTBiMTItNDhhMC1iNjIzLTMzNGMxNTNlZjllMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gHAwDQYJKoZIhvcNAQELBQADggEBAAZccB96rPtRgaCvWrc+5MtZ 8NYvs38lzhaxpuqxZkJzbjiW6T7X6QLv+f06WDY8nLrO98DXPSZUQs3A5u5DRGrj VcpGDgZFJ5IGtD/QLsClg31xi8OVZNfHlIQtML/g/tjO8z2HUAEwoBGPyj4+ofgD ahdnXAo8TqbR7HtYlutHgiuLkuHsIZzltsbggEaJbxX73azsqQKMsBk7/Bxjn078 kUXQtqHTXE8k/fCQeIxz3mu5vwsCjrFJ9r6BK2cvqzmpwoXlTQRCKZ5p6AM7O/GF wEmaNB7Kbao7d4ZiLJCNJe7VKUHgg6+XHlsIZ0YIZT0xEaLxwKOGlfIjxqK+j+c= -----END CERTIFICATE-----Generated at Fri Aug 8 20:57:58 2025 by rpki-client