$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e75854bb-3e84-46a2-a241-2e7c3ea26faf.roa File: e75854bb-3e84-46a2-a241-2e7c3ea26faf.roa (raw, json) Hash identifier: QHfxUYzFUuT9atPRijP386aYn6toPvuWGBBDVEaHoXw= Subject key identifier: 45:94:74:42:F9:2E:77:B8:F8:87:A3:9C:F3:3A:35:AB:F0:9D:FD:CC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 480E90E3BF2D5F3191C060DC37347806199373B8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e75854bb-3e84-46a2-a241-2e7c3ea26faf.roa Signing time: Fri 01 Aug 2025 17:02:05 +0000 ROA not before: Fri 01 Aug 2025 17:02:05 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0e:90:e3:bf:2d:5f:31:91:c0:60:dc:37:34:78:06:19:93:73:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 17:02:05 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=86ffb600de3c284272be7c1d100496efbd27aea26d573b993fc7071d41f9731e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:23:a2:cb:d9:d4:ac:b2:e9:e5:59:5d:a9: b2:ef:e4:1c:7e:c3:01:3d:87:11:77:32:11:a3:b2: dd:45:86:df:f3:67:8c:40:b1:39:6f:3b:ad:37:6d: 48:20:04:c6:a7:c7:96:67:ef:b1:ed:41:31:53:ae: 9c:dc:d3:9c:d3:98:93:cb:d5:3d:94:c5:e7:4e:b9: 66:ab:e5:9f:08:5b:2c:ea:05:a0:12:59:d5:5a:ef: 3e:33:e4:cf:60:65:ce:c2:ce:48:27:42:15:53:bd: a9:88:8c:e9:91:d4:1f:42:3a:69:16:4f:6e:9e:2b: 09:e5:38:f5:18:7f:11:28:c8:c5:a0:ec:83:87:d0: 4a:90:cf:68:c2:9a:f1:30:6c:c7:5f:3f:84:79:c2: ec:45:76:06:3e:aa:e3:3e:ef:13:58:ae:e9:98:3e: 4e:c6:8c:92:48:ba:f0:1d:9e:b0:4e:89:22:29:2a: 3b:7a:44:27:b5:00:ed:c8:c6:e7:c6:7e:3f:72:db: 2c:d2:76:a3:16:1d:c2:21:37:2f:05:e5:e2:4d:fc: 7e:a1:4a:ed:c4:69:51:0f:fc:8e:c3:71:6e:2e:06: 37:14:35:b6:a6:be:77:99:06:4d:1f:75:d9:e4:fe: 9d:0d:88:64:47:1a:26:83:69:94:29:ca:c7:1d:66: e0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:94:74:42:F9:2E:77:B8:F8:87:A3:9C:F3:3A:35:AB:F0:9D:FD:CC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e75854bb-3e84-46a2-a241-2e7c3ea26faf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:3440::/48 Signature Algorithm: sha256WithRSAEncryption 1b:66:72:8f:ae:0e:2f:bc:64:70:69:2a:6b:b3:59:14:a0:26: 07:e4:d1:bd:1b:a6:b3:46:47:01:66:ec:e0:c8:17:a8:bb:bb: 64:cb:c6:f7:90:4e:d3:12:ee:ce:fd:e5:48:8d:65:2f:70:1a: 35:ac:60:67:17:7b:75:2a:8d:ab:43:c9:c7:d1:83:15:9a:7f: ec:41:e2:86:94:7e:72:7a:28:ff:d6:84:ba:fd:c6:1c:2a:c9: f8:03:8c:2b:3a:4b:74:38:34:11:88:41:95:80:01:f2:1c:73: 36:d6:d0:04:a6:9f:ec:07:c6:75:5b:e6:b0:e8:ca:11:40:ec: 79:f3:f4:8b:32:0d:eb:23:11:03:33:13:53:48:eb:ca:05:36: 12:00:db:e3:93:72:c8:ef:48:57:46:47:93:6e:1a:00:75:f5: 76:3a:9b:ed:a7:18:0d:f3:7a:3a:e4:18:01:d5:a4:44:37:bf: 50:ee:b0:2c:9b:f0:11:d7:c6:49:09:14:6a:31:31:b6:02:17: 87:6a:c7:a8:ef:ea:90:d8:f3:9d:3d:e3:cb:b2:e6:3e:13:ca: 5c:dd:e5:fe:fe:98:88:58:38:ae:f3:e9:9e:ec:5b:36:32:c3: 18:e3:3d:5a:f6:a7:cd:73:81:1c:8a:77:00:81:a1:a8:52:3c: 5a:2a:4a:da -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSA6Q478tXzGRwGDcNzR4BhmTc7gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTcwMjA1WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmZmYjYwMGRlM2MyODQyNzJiZTdjMWQxMDA0OTZlZmJk MjdhZWEyNmQ1NzNiOTkzZmM3MDcxZDQxZjk3MzFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8qyOiy9nUrLLp5VldqbLv5Bx+wwE9hxF3MhGjst1Fht/z Z4xAsTlvO603bUggBManx5Zn77HtQTFTrpzc05zTmJPL1T2UxedOuWar5Z8IWyzq BaASWdVa7z4z5M9gZc7CzkgnQhVTvamIjOmR1B9COmkWT26eKwnlOPUYfxEoyMWg 7IOH0EqQz2jCmvEwbMdfP4R5wuxFdgY+quM+7xNYrumYPk7GjJJIuvAdnrBOiSIp Kjt6RCe1AO3IxufGfj9y2yzSdqMWHcIhNy8F5eJN/H6hSu3EaVEP/I7DcW4uBjcU NbamvneZBk0fddnk/p0NiGRHGiaDaZQpyscdZuB3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURZR0Qvkud7j4h6Oc8zo1q/Cd/cwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U3NTg1NGJiLTNlODQtNDZhMi1hMjQxLTJlN2MzZWEyNmZhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yNEAwDQYJKoZIhvcNAQELBQADggEBABtmco+uDi+8ZHBpKmuzWRSg Jgfk0b0bprNGRwFm7ODIF6i7u2TLxveQTtMS7s795UiNZS9wGjWsYGcXe3UqjatD ycfRgxWaf+xB4oaUfnJ6KP/WhLr9xhwqyfgDjCs6S3Q4NBGIQZWAAfIcczbW0ASm n+wHxnVb5rDoyhFA7Hnz9IsyDesjEQMzE1NI68oFNhIA2+OTcsjvSFdGR5NuGgB1 9XY6m+2nGA3zejrkGAHVpEQ3v1DusCyb8BHXxkkJFGoxMbYCF4dqx6jv6pDY8509 48uy5j4Tylzd5f7+mIhYOK7z6Z7sWzYywxjjPVr2p81zgRyKdwCBoahSPFoqSto= -----END CERTIFICATE-----Generated at Wed Aug 6 11:11:02 2025 by rpki-client