$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f80f9aac-40e2-4544-9a45-84e008aed7a3.roa File: f80f9aac-40e2-4544-9a45-84e008aed7a3.roa (raw, json) Hash identifier: 6Dn5IzeguHjBfTIL4GrV/Kw7pmt3hkBhl4JArZd/kpg= Subject key identifier: 4A:88:14:91:45:CD:D4:7E:C5:22:29:83:C1:02:95:42:D0:3E:BB:6E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E409C5F309D0F4E561DF2E35906D42DA14384BC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f80f9aac-40e2-4544-9a45-84e008aed7a3.roa Signing time: Wed 06 Aug 2025 00:20:28 +0000 ROA not before: Wed 06 Aug 2025 00:20:28 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fef:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:40:9c:5f:30:9d:0f:4e:56:1d:f2:e3:59:06:d4:2d:a1:43:84:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 00:20:28 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=d566392017b4ee0792698493da45c4d0373a329e83364958f0541392ffcff56e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c8:e8:ae:43:ed:be:1e:88:9b:3c:b3:9f:9c: b1:7b:e2:97:26:1f:0f:f6:d6:20:25:3c:46:59:d4: bd:de:be:c7:d3:5d:02:0a:4b:05:da:70:7f:b1:ea: 20:70:e3:53:85:70:b4:31:20:bd:08:21:4a:90:42: ab:f9:46:37:d0:3e:02:4a:61:1b:0a:55:32:96:f4: 3a:de:26:88:c1:4b:d6:85:0b:b7:c6:2b:77:35:77: be:31:14:85:8f:e4:f7:8b:43:73:bf:67:34:9d:bf: ed:e4:09:16:b4:67:0e:e3:24:b5:d0:7f:3b:76:e7: 41:94:5a:d0:48:2a:7a:82:07:bc:bd:a8:01:7a:a5: 0f:ce:32:c6:9b:c8:06:a7:12:b1:bd:32:ee:35:76: 76:a3:e6:34:de:32:6a:04:a1:3d:2c:7b:aa:70:b0: 38:75:81:2e:42:e9:ba:78:73:7a:5d:d3:61:d2:ce: 41:5d:77:c6:ae:84:4e:5b:51:2a:0a:32:99:eb:2f: d2:0e:f0:0c:39:bd:67:7b:0b:f5:53:e4:42:46:00: 1c:5e:95:a8:8e:d5:dc:09:c1:0e:00:39:61:1a:37: 47:ff:df:52:5f:5e:5e:b5:c8:d6:20:33:f1:dd:22: 48:4c:1c:59:21:72:2c:94:d8:97:87:2a:5a:e5:f8: cd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:88:14:91:45:CD:D4:7E:C5:22:29:83:C1:02:95:42:D0:3E:BB:6E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f80f9aac-40e2-4544-9a45-84e008aed7a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:a400::/40 Signature Algorithm: sha256WithRSAEncryption 07:f0:fe:ce:04:7c:d2:69:07:c6:cb:bd:f5:40:6d:4d:ea:cf: 7f:36:ad:c4:a5:24:3b:5d:16:6a:e7:00:d3:d5:f5:3c:85:fd: a5:7f:52:18:78:1d:b4:c7:d3:8b:6b:1c:e6:a7:a8:bb:fa:da: b0:4b:8d:a6:2d:06:84:35:97:72:4e:59:ee:03:cd:2f:06:59: 55:3a:5a:3e:af:54:fa:ee:ed:d2:c1:2f:9a:bd:e3:9e:27:ca: 57:15:bd:2b:79:ff:6f:57:39:f2:df:74:f3:e5:3d:d4:1e:e4: bd:e4:e3:f4:72:03:a9:4d:87:34:e0:7a:2e:bc:bd:8e:f9:55: d4:b1:22:43:d2:b5:3d:33:25:2c:be:dd:18:12:b0:f8:36:f8: e5:c1:13:6e:ac:a5:42:4d:78:52:77:72:a8:08:06:40:aa:2d: a5:0d:e5:8c:ab:9a:a7:24:ac:fb:87:8e:0b:76:32:0c:c2:36: 92:5e:2f:f7:33:32:35:c6:56:ef:98:c6:31:05:a9:a0:41:3d: e9:d9:33:d8:2c:67:89:2d:25:bb:e5:06:1e:0f:28:dd:b5:e9: fa:c9:5a:d2:f6:fd:af:f9:5c:38:4e:05:ef:ff:f9:39:67:9c: 07:71:e1:ac:ae:5f:b4:c9:b7:82:01:36:65:06:76:ea:62:f7: 62:0f:3d:28 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDkCcXzCdD05WHfLjWQbULaFDhLwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDAyMDI4WhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTY2MzkyMDE3YjRlZTA3OTI2OTg0OTNkYTQ1YzRkMDM3 M2EzMjllODMzNjQ5NThmMDU0MTM5MmZmY2ZmNTZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6yOiuQ+2+HoibPLOfnLF74pcmHw/21iAlPEZZ1L3evsfT XQIKSwXacH+x6iBw41OFcLQxIL0IIUqQQqv5RjfQPgJKYRsKVTKW9DreJojBS9aF C7fGK3c1d74xFIWP5PeLQ3O/ZzSdv+3kCRa0Zw7jJLXQfzt250GUWtBIKnqCB7y9 qAF6pQ/OMsabyAanErG9Mu41dnaj5jTeMmoEoT0se6pwsDh1gS5C6bp4c3pd02HS zkFdd8auhE5bUSoKMpnrL9IO8Aw5vWd7C/VT5EJGABxelaiO1dwJwQ4AOWEaN0f/ 31JfXl61yNYgM/HdIkhMHFkhciyU2JeHKlrl+M09AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSogUkUXN1H7FIimDwQKVQtA+u24wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y4MGY5YWFjLTQwZTItNDU0NC05YTQ1LTg0ZTAwOGFlZDdhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vpDANBgkqhkiG9w0BAQsFAAOCAQEAB/D+zgR80mkHxsu99UBtTerP fzatxKUkO10WaucA09X1PIX9pX9SGHgdtMfTi2sc5qeou/rasEuNpi0GhDWXck5Z 7gPNLwZZVTpaPq9U+u7t0sEvmr3jnifKVxW9K3n/b1c58t908+U91B7kveTj9HID qU2HNOB6Lry9jvlV1LEiQ9K1PTMlLL7dGBKw+Db45cETbqylQk14UndyqAgGQKot pQ3ljKuapySs+4eOC3YyDMI2kl4v9zMyNcZW75jGMQWpoEE96dkz2CxniS0lu+UG Hg8o3bXp+sla0vb9r/lcOE4F7//5OWecB3HhrK5ftMm3ggE2ZQZ26mL3Yg89KA== -----END CERTIFICATE-----Generated at Sat Aug 9 10:48:26 2025 by rpki-client