$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c538b13e-0806-4990-a5f5-81b220e6ea95.roa File: c538b13e-0806-4990-a5f5-81b220e6ea95.roa (raw, json) Hash identifier: bO0y/rtNANahONijzsaBImGCXLppMIl2VetbBqrA568= Subject key identifier: 5D:B5:61:BA:0F:30:20:D4:9C:18:00:03:1B:C5:52:E6:C4:0E:2B:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 391EE66A53774E806ECC1B4453E5CF6AD6A59DEC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c538b13e-0806-4990-a5f5-81b220e6ea95.roa Signing time: Mon 04 Aug 2025 15:40:23 +0000 ROA not before: Mon 04 Aug 2025 15:40:23 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:1e:e6:6a:53:77:4e:80:6e:cc:1b:44:53:e5:cf:6a:d6:a5:9d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 15:40:23 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=e969667e72d76a1578427e371bf0326fc59c8089ac24697e8321cc95ca0a8d47, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1e:de:a2:53:af:28:b0:62:35:2c:65:0e:0f: cf:8e:5d:ad:01:e8:a6:df:c3:2a:1b:4d:7a:15:6c: 17:80:08:d0:db:92:e9:c3:e6:8c:e9:97:05:3b:32: 94:e7:c9:3e:11:ae:79:56:b6:01:b4:e0:d4:e0:76: d0:9c:31:db:dc:5a:3a:17:93:fb:b9:86:2d:61:fa: dd:c9:0e:55:c7:a2:14:3d:d7:b8:5f:6c:7a:9c:19: d6:34:82:75:bd:d6:a0:fc:93:cb:e5:4a:bb:1a:37: 20:46:8c:34:5c:55:b2:e3:f4:6d:c7:6b:00:ae:92: a3:3e:1f:d8:f7:7f:84:a1:f6:cf:59:0a:a7:3e:db: 16:f5:a4:6a:55:64:41:c5:37:8f:0f:5f:a3:ff:03: 68:9d:29:4f:b5:ae:fa:c8:de:8b:f3:18:fa:13:56: 5d:30:24:0f:4d:98:53:57:70:95:39:99:75:9e:5e: b0:1d:f9:22:bd:9c:50:b9:0a:65:d8:79:20:a1:88: 82:a8:6d:d0:c1:4f:2a:ae:88:96:27:31:23:f0:f4: ed:f8:46:90:17:a5:f9:ce:6b:b9:78:67:1d:3c:35: 76:d8:28:65:ff:d7:6a:c3:87:d3:87:3e:33:5a:8d: fb:fe:b9:73:e9:d9:0d:58:d6:b9:ff:37:c4:0a:3f: 35:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B5:61:BA:0F:30:20:D4:9C:18:00:03:1B:C5:52:E6:C4:0E:2B:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c538b13e-0806-4990-a5f5-81b220e6ea95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:6000::/40 Signature Algorithm: sha256WithRSAEncryption d2:da:05:31:1f:79:5b:76:cd:a9:11:42:75:07:2d:c3:a0:02: c7:1a:ac:42:a7:47:77:51:cf:25:30:da:77:88:bd:d0:9d:4c: c4:0c:bc:f3:04:a3:e1:98:93:64:58:ea:c7:d8:62:4e:61:95: 17:bf:c5:da:82:5a:24:b7:8e:74:9f:b5:47:9c:28:40:7a:a2: 9a:7d:c9:03:66:f8:60:4c:8d:a2:af:44:82:5a:d8:1b:f9:44: 95:24:1f:eb:6b:52:ea:cf:c6:08:7e:17:a4:1b:93:df:6e:33: dc:93:13:87:68:bc:d7:1f:de:75:fd:f1:64:a4:45:da:e4:80: 51:dc:e1:38:47:d1:23:d6:5a:8a:0b:07:73:98:ef:1c:de:f3: ef:54:16:f2:9a:32:9c:c7:a2:93:49:0d:c5:a5:23:49:f2:4e: 14:9c:9c:68:52:f2:df:ca:34:94:8a:1e:e1:72:c5:ab:4c:5f: 47:d2:7b:b4:5a:e3:30:ca:5c:ac:40:9e:83:92:42:23:1f:92: 40:4e:8b:46:37:a9:74:c6:9b:6a:52:4b:e8:33:ab:eb:ac:ba: 96:03:8d:ec:ab:67:8d:1b:f4:27:13:80:69:9d:5f:41:69:64: b2:01:78:92:06:5d:d2:ac:e7:28:03:d8:bd:66:d0:ee:40:4b: 38:73:46:e2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOR7malN3ToBuzBtEU+XPatalnewwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTU0MDIzWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTY5NjY3ZTcyZDc2YTE1Nzg0MjdlMzcxYmYwMzI2ZmM1 OWM4MDg5YWMyNDY5N2U4MzIxY2M5NWNhMGE4ZDQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3Ht6iU68osGI1LGUOD8+OXa0B6KbfwyobTXoVbBeACNDb kunD5ozplwU7MpTnyT4RrnlWtgG04NTgdtCcMdvcWjoXk/u5hi1h+t3JDlXHohQ9 17hfbHqcGdY0gnW91qD8k8vlSrsaNyBGjDRcVbLj9G3HawCukqM+H9j3f4Sh9s9Z Cqc+2xb1pGpVZEHFN48PX6P/A2idKU+1rvrI3ovzGPoTVl0wJA9NmFNXcJU5mXWe XrAd+SK9nFC5CmXYeSChiIKobdDBTyquiJYnMSPw9O34RpAXpfnOa7l4Zx08NXbY KGX/12rDh9OHPjNajfv+uXPp2Q1Y1rn/N8QKPzXZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUXbVhug8wINScGAADG8VS5sQOK6MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1MzhiMTNlLTA4MDYtNDk5MC1hNWY1LTgxYjIyMGU2ZWE5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9pYDANBgkqhkiG9w0BAQsFAAOCAQEA0toFMR95W3bNqRFCdQctw6AC xxqsQqdHd1HPJTDad4i90J1MxAy88wSj4ZiTZFjqx9hiTmGVF7/F2oJaJLeOdJ+1 R5woQHqimn3JA2b4YEyNoq9EglrYG/lElSQf62tS6s/GCH4XpBuT324z3JMTh2i8 1x/edf3xZKRF2uSAUdzhOEfRI9ZaigsHc5jvHN7z71QW8poynMeik0kNxaUjSfJO FJycaFLy38o0lIoe4XLFq0xfR9J7tFrjMMpcrECeg5JCIx+SQE6LRjepdMabalJL 6DOr66y6lgON7KtnjRv0JxOAaZ1fQWlksgF4kgZd0qznKAPYvWbQ7kBLOHNG4g== -----END CERTIFICATE-----Generated at Wed Aug 6 05:20:50 2025 by rpki-client