$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff6a3224-997f-47ea-bd39-71765a1fb276.roa File: ff6a3224-997f-47ea-bd39-71765a1fb276.roa (raw, json) Hash identifier: r01IsoMCudb8d1rQanuqEtOO4RGbXocB2z1jLzmvS84= Subject key identifier: 82:10:09:A1:3D:07:47:6E:6E:87:93:EA:F5:6F:36:69:71:0C:86:F4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D84311A6D4B5F4E3916895F6A8F5F5E70BBB3A9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff6a3224-997f-47ea-bd39-71765a1fb276.roa Signing time: Mon 04 Aug 2025 17:11:15 +0000 ROA not before: Mon 04 Aug 2025 17:11:15 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f24:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:84:31:1a:6d:4b:5f:4e:39:16:89:5f:6a:8f:5f:5e:70:bb:b3:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:11:15 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=d80e75b0441f752232a292a40a671621d7ae2a6a5d9b370886e4cae440af45df, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fb:9f:b7:be:11:33:8b:f7:9f:04:9e:35:79: 44:89:b7:0b:d8:df:64:d0:26:d2:67:99:fa:32:e8: a8:68:70:2e:09:80:97:bd:3b:8e:6e:82:b5:08:81: 3b:bc:9c:6d:6b:eb:23:8f:42:0d:ab:a7:66:c9:c5: 37:cc:81:fc:bf:73:f6:18:76:5a:ee:12:4f:0d:fa: 76:2c:a1:3d:e5:77:d1:a9:0d:bf:1f:14:c7:c0:4c: de:c7:03:4d:ee:8d:fd:55:52:6b:19:ac:e3:3c:22: 5b:c7:70:02:e2:97:32:4d:61:38:5a:5f:2d:3d:8a: 5d:15:23:b3:be:7b:65:65:b9:ac:7a:5c:bd:c8:92: 47:3b:9f:fc:34:a7:df:1f:0e:40:9d:e4:57:87:e7: 77:92:5f:e9:60:1f:30:b8:3f:4f:4a:15:5f:d7:ab: fa:08:93:ed:19:00:07:b2:bc:c0:92:49:57:7a:60: 90:c4:b8:99:7e:fa:4d:f9:83:c7:38:65:aa:a2:38: c5:2c:8f:da:e4:63:b1:5c:22:4b:ab:10:5b:ad:26: ac:73:c8:9c:24:2d:59:b9:58:54:27:9d:d3:88:c3: cb:39:04:1e:e3:3f:0e:b6:17:86:59:61:30:8d:85: e2:f5:ef:83:a7:20:54:ff:30:c5:6f:54:db:f8:50: b0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:10:09:A1:3D:07:47:6E:6E:87:93:EA:F5:6F:36:69:71:0C:86:F4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff6a3224-997f-47ea-bd39-71765a1fb276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f24:c800::/37 Signature Algorithm: sha256WithRSAEncryption a6:84:0a:41:01:46:f2:2c:07:a6:71:a0:14:4a:59:84:95:b6: ac:e8:02:e2:c0:b3:fe:fc:85:b5:3b:a4:9a:3e:a9:1a:2c:05: e7:f5:05:93:39:cb:b8:9c:6d:a6:3d:23:77:f9:76:3e:2f:92: 70:9f:52:50:18:94:39:ff:43:ac:73:b2:86:fb:6b:85:dd:8f: 78:b7:52:2f:d6:8b:4e:3f:d8:a1:9a:f0:44:e5:91:17:f1:5b: f0:bc:9b:ff:f3:b9:94:ae:bc:ac:4a:68:79:c5:52:2b:6a:c6: 5f:79:d5:c2:2d:54:70:e9:35:ed:9e:43:a9:14:73:fe:2f:40: 15:ab:83:a8:62:bc:ef:83:be:60:eb:cf:f7:aa:db:1d:fb:b3: 27:ee:9b:ca:38:5d:73:d2:6d:c4:10:58:88:c9:50:0f:ee:d1: e1:56:90:59:ef:1f:7e:66:56:f8:56:6b:5f:d7:e0:73:0e:e6: 89:05:9c:ca:09:69:ef:c4:0b:d7:e0:6a:a0:a7:62:99:21:66: 48:e2:72:a5:4e:09:90:85:b7:ad:86:3f:bd:89:29:89:2c:82: a6:2f:5c:ae:49:72:5a:1a:58:9e:fe:fe:c4:d0:5b:21:82:93: 11:d9:75:06:d2:1c:d8:ff:c6:ba:22:30:3c:70:cf:10:08:10: 3c:f3:d0:d5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPYQxGm1LX045Folfao9fXnC7s6kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTcxMTE1WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODBlNzViMDQ0MWY3NTIyMzJhMjkyYTQwYTY3MTYyMWQ3 YWUyYTZhNWQ5YjM3MDg4NmU0Y2FlNDQwYWY0NWRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF+5+3vhEzi/efBJ41eUSJtwvY32TQJtJnmfoy6KhocC4J gJe9O45ugrUIgTu8nG1r6yOPQg2rp2bJxTfMgfy/c/YYdlruEk8N+nYsoT3ld9Gp Db8fFMfATN7HA03ujf1VUmsZrOM8IlvHcALilzJNYThaXy09il0VI7O+e2Vluax6 XL3Ikkc7n/w0p98fDkCd5FeH53eSX+lgHzC4P09KFV/Xq/oIk+0ZAAeyvMCSSVd6 YJDEuJl++k35g8c4ZaqiOMUsj9rkY7FcIkurEFutJqxzyJwkLVm5WFQnndOIw8s5 BB7jPw62F4ZZYTCNheL174OnIFT/MMVvVNv4ULDzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUghAJoT0HR25uh5Pq9W82aXEMhvQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmNmEzMjI0LTk5N2YtNDdlYS1iZDM5LTcxNzY1YTFmYjI3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8kyDANBgkqhkiG9w0BAQsFAAOCAQEApoQKQQFG8iwHpnGgFEpZhJW2 rOgC4sCz/vyFtTukmj6pGiwF5/UFkznLuJxtpj0jd/l2Pi+ScJ9SUBiUOf9DrHOy hvtrhd2PeLdSL9aLTj/YoZrwROWRF/Fb8Lyb//O5lK68rEpoecVSK2rGX3nVwi1U cOk17Z5DqRRz/i9AFauDqGK874O+YOvP96rbHfuzJ+6byjhdc9JtxBBYiMlQD+7R 4VaQWe8ffmZW+FZrX9fgcw7miQWcyglp78QL1+BqoKdimSFmSOJypU4JkIW3rYY/ vYkpiSyCpi9crklyWhpYnv7+xNBbIYKTEdl1BtIc2P/GuiIwPHDPEAgQPPPQ1Q== -----END CERTIFICATE-----Generated at Wed Aug 6 16:05:05 2025 by rpki-client