$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de9bdf2a-267d-4f5c-96cd-099837a4a762.roa File: de9bdf2a-267d-4f5c-96cd-099837a4a762.roa (raw, json) Hash identifier: fqg0TQBF8+V1YCKVEoyWHBQx1GGG35Iqu0IdPvcONGc= Subject key identifier: 71:AA:C6:39:3E:F8:B4:77:42:2D:89:DB:9F:7C:C3:7C:AC:65:78:15 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1683B7D90D3DAD5767E026F6BE54DBEE8790B1C7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de9bdf2a-267d-4f5c-96cd-099837a4a762.roa Signing time: Fri 01 Aug 2025 15:31:21 +0000 ROA not before: Fri 01 Aug 2025 15:31:21 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f38:50c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:83:b7:d9:0d:3d:ad:57:67:e0:26:f6:be:54:db:ee:87:90:b1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:31:21 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=82888f9d55467dd36916c458e649769567659f443575d5e87b7d2092cf098a31, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1d:c2:a7:3c:cd:a6:2f:87:5e:49:6d:3c:48: 6d:f4:d8:cc:13:3e:06:fe:30:95:4d:ce:30:89:c7: 40:fc:a2:5c:05:48:8e:e4:e5:ff:c4:9a:36:96:0e: 93:8b:fa:9e:ee:6c:5d:05:3f:ef:eb:ac:f5:f6:2e: 47:e8:7e:fd:5c:c3:92:0c:af:68:e2:49:38:08:6e: 8a:3a:89:d1:17:68:2d:9c:cd:f6:4f:bb:62:cc:af: 43:98:46:93:90:2e:d4:72:18:b2:e8:8a:19:a1:60: 8d:35:c4:d4:c0:3b:d3:ae:0b:1e:4b:05:1b:5d:aa: e2:98:50:40:ec:2f:a9:4a:5e:ba:1f:1b:ea:51:8d: 0d:96:ba:85:bd:7c:09:54:e5:c1:f5:a3:4b:e5:f6: 26:c9:c0:eb:19:67:54:2c:b5:17:3b:84:f6:82:b4: fc:e2:0e:13:a0:e1:b7:e8:31:8b:28:dd:89:a2:96: c9:9b:b9:8e:e2:2b:80:9f:53:7b:2d:43:2f:69:b6: cb:ef:ae:df:16:10:38:dd:5b:67:9b:ea:f6:29:4d: a9:51:85:0a:bd:04:83:4c:80:87:80:e7:39:a6:87: 24:9a:56:65:77:a6:99:6d:f7:5a:e1:a1:49:99:eb: ac:ee:d4:1c:1b:e6:d0:1f:d4:e8:4d:f5:22:b7:82: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AA:C6:39:3E:F8:B4:77:42:2D:89:DB:9F:7C:C3:7C:AC:65:78:15 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de9bdf2a-267d-4f5c-96cd-099837a4a762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:50c0::/48 Signature Algorithm: sha256WithRSAEncryption d8:53:ed:d1:93:3a:2e:d3:d5:f5:22:0b:7f:30:25:7b:16:5d: 2d:b3:32:69:05:08:0e:7c:fd:37:14:01:3f:4b:1c:0a:17:32: 05:9f:aa:f3:a4:f3:20:b1:e0:d8:fa:a8:91:7a:30:97:cd:78: 57:c5:49:9a:74:cd:36:73:77:f3:ea:e9:a6:ae:b1:fd:35:75: c1:9f:dc:13:73:c2:fe:d4:6d:36:7a:27:d4:b5:dc:60:4a:95: a9:16:cc:74:5e:fa:0e:a7:13:1a:09:c1:b3:13:c5:fc:2b:da: 09:bf:2f:79:16:74:1c:05:80:bf:02:0a:9e:5d:6a:a8:ea:e6: 65:ec:e5:58:ac:8a:12:47:76:bb:f3:28:3a:6d:7d:4f:ae:fe: f4:d6:e3:bd:d1:cc:45:8f:08:51:2b:46:f5:df:42:e6:06:33: b3:25:47:83:41:fa:9a:39:7e:d1:9b:8f:8f:6e:0d:ed:38:83: a7:34:71:ac:81:9e:0b:26:64:be:95:07:f6:0f:74:88:67:72: 87:ca:1e:4c:5d:69:cf:5d:74:ef:fb:63:f0:e3:57:66:77:41: 07:fa:c7:ca:59:e6:c3:f4:6f:e0:fe:4c:a3:6c:f9:90:c7:ed: d0:7e:ca:28:ec:25:b5:53:70:46:86:3b:c5:c4:9b:9a:5b:d7: cb:85:74:38 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFoO32Q09rVdn4Cb2vlTb7oeQsccwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTUzMTIxWhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Mjg4OGY5ZDU1NDY3ZGQzNjkxNmM0NThlNjQ5NzY5NTY3 NjU5ZjQ0MzU3NWQ1ZTg3YjdkMjA5MmNmMDk4YTMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtHcKnPM2mL4deSW08SG302MwTPgb+MJVNzjCJx0D8olwF SI7k5f/EmjaWDpOL+p7ubF0FP+/rrPX2Lkfofv1cw5IMr2jiSTgIboo6idEXaC2c zfZPu2LMr0OYRpOQLtRyGLLoihmhYI01xNTAO9OuCx5LBRtdquKYUEDsL6lKXrof G+pRjQ2WuoW9fAlU5cH1o0vl9ibJwOsZZ1QstRc7hPaCtPziDhOg4bfoMYso3Ymi lsmbuY7iK4CfU3stQy9ptsvvrt8WEDjdW2eb6vYpTalRhQq9BINMgIeA5zmmhySa VmV3pplt91rhoUmZ66zu1Bwb5tAf1OhN9SK3grxjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcarGOT74tHdCLYnbn3zDfKxleBUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RlOWJkZjJhLTI2N2QtNGY1Yy05NmNkLTA5OTgzN2E0YTc2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84UMAwDQYJKoZIhvcNAQELBQADggEBANhT7dGTOi7T1fUiC38wJXsW XS2zMmkFCA58/TcUAT9LHAoXMgWfqvOk8yCx4Nj6qJF6MJfNeFfFSZp0zTZzd/Pq 6aausf01dcGf3BNzwv7UbTZ6J9S13GBKlakWzHRe+g6nExoJwbMTxfwr2gm/L3kW dBwFgL8CCp5daqjq5mXs5VisihJHdrvzKDptfU+u/vTW473RzEWPCFErRvXfQuYG M7MlR4NB+po5ftGbj49uDe04g6c0cayBngsmZL6VB/YPdIhncofKHkxdac9ddO/7 Y/DjV2Z3QQf6x8pZ5sP0b+D+TKNs+ZDH7dB+yijsJbVTcEaGO8XEm5pb18uFdDg= -----END CERTIFICATE-----Generated at Fri Aug 8 10:15:29 2025 by rpki-client