$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/160933c3-b761-41a9-87a6-9e744a40b1ba.roa File: 160933c3-b761-41a9-87a6-9e744a40b1ba.roa (raw, json) Hash identifier: SADizaxHsFiD56xzcXBLrtIu3MFnJHzwspa8qkZYP/U= Subject key identifier: 70:99:C4:54:AF:DF:B9:08:0C:DF:72:7B:CD:BF:6C:96:8A:CA:F5:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0CA0AA253081ADFB37A81D9F6F26CEC4C2A54D21 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/160933c3-b761-41a9-87a6-9e744a40b1ba.roa Signing time: Fri 15 Aug 2025 00:51:03 +0000 ROA not before: Fri 15 Aug 2025 00:51:03 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a0:aa:25:30:81:ad:fb:37:a8:1d:9f:6f:26:ce:c4:c2:a5:4d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 15 00:51:03 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=7496c81ad2b8e41bc45fd7295ff09801e5cc54f3d25d76368646fe5ae25cfcf2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:df:81:40:9e:51:17:41:e6:ee:e0:8e:26: 4d:df:cd:6e:f6:32:86:50:63:53:e8:2e:18:04:00: bb:dc:d2:23:8b:a6:b1:17:7b:82:42:d6:f8:b2:65: 38:30:ce:77:3f:c9:97:e9:fe:70:22:e3:6b:a5:42: f7:81:54:22:2b:94:48:35:6e:7b:e2:66:53:40:c5: 66:20:bf:b3:b6:f5:82:56:e4:4e:85:80:5d:df:de: c2:34:c0:ee:64:09:6e:07:2d:87:e9:f6:f5:30:4e: 05:60:4b:c5:ac:07:a8:0b:6b:ec:0e:dd:3a:27:1d: bd:30:7d:4f:90:f0:39:aa:a9:d6:bf:de:d7:d4:18: 6b:0d:e7:5e:a6:e0:9e:cb:10:c2:3d:44:c9:ff:f3: 45:bf:b3:b7:e3:2c:97:da:c1:d8:45:80:16:6d:4b: c6:87:c9:87:ac:bf:10:6b:5e:50:a6:f5:39:d4:36: 52:d0:3d:c7:de:7a:b7:1f:7c:43:60:74:23:50:ea: f1:68:bf:ec:4c:26:8e:5a:3d:79:42:2b:46:67:ba: 76:e7:88:fe:0c:e0:78:62:da:68:ab:6c:5c:44:ed: 65:55:56:c6:db:f8:7a:56:a5:ab:d1:2a:57:1e:9d: 06:b9:81:86:80:69:b4:42:7c:ae:c3:f2:8d:b2:64: de:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:99:C4:54:AF:DF:B9:08:0C:DF:72:7B:CD:BF:6C:96:8A:CA:F5:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/160933c3-b761-41a9-87a6-9e744a40b1ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:1000::/40 Signature Algorithm: sha256WithRSAEncryption 3b:eb:bf:0c:2f:5b:ac:40:00:58:4e:a1:df:67:8d:16:a9:e2: fe:5c:61:19:96:0c:51:5f:d7:a1:46:eb:0a:90:7f:7d:ab:49: 20:f2:66:b4:94:7c:af:56:c9:2a:a7:7e:66:1b:d3:31:35:89: 56:b4:3c:1e:9c:c9:1f:7a:0c:a3:7b:ca:28:04:dd:39:39:f9: c9:72:b8:e3:de:55:45:19:84:e7:53:50:b8:c5:3e:5e:87:fc: 1d:e8:c3:e5:11:71:32:31:93:c4:6c:02:dc:ba:8c:bf:e4:7c: 7b:6b:3e:2a:82:ba:02:82:dc:c1:b0:80:07:b0:79:ef:0e:9d: f9:2a:30:71:78:60:7a:08:1f:a6:e4:3d:d6:35:a7:63:b4:1e: f4:9b:0a:c0:ba:f3:ad:16:f0:26:50:4c:51:9f:12:a0:52:d9: 78:0d:f0:da:3a:61:3f:3b:ef:2f:fc:ed:5b:7d:b5:37:2e:7e: 71:d6:5d:c2:51:b7:1c:1f:cb:41:7e:81:c7:a2:56:33:2e:6d: fc:ed:96:ca:df:c1:d1:28:3b:55:bc:db:6f:70:9d:5f:2b:43: 2c:4a:31:00:b9:7a:8f:0c:a3:4b:68:74:75:65:53:25:ff:57: ad:1d:62:5d:d1:f0:ca:69:16:95:78:34:a9:7f:f1:2c:b3:27: e6:50:ca:4e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDKCqJTCBrfs3qB2fbybOxMKlTSEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE1MDA1MTAzWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDk2YzgxYWQyYjhlNDFiYzQ1ZmQ3Mjk1ZmYwOTgwMWU1 Y2M1NGYzZDI1ZDc2MzY4NjQ2ZmU1YWUyNWNmY2YyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC30d+BQJ5RF0Hm7uCOJk3fzW72MoZQY1PoLhgEALvc0iOL prEXe4JC1viyZTgwznc/yZfp/nAi42ulQveBVCIrlEg1bnviZlNAxWYgv7O29YJW 5E6FgF3f3sI0wO5kCW4HLYfp9vUwTgVgS8WsB6gLa+wO3TonHb0wfU+Q8Dmqqda/ 3tfUGGsN516m4J7LEMI9RMn/80W/s7fjLJfawdhFgBZtS8aHyYesvxBrXlCm9TnU NlLQPcfeercffENgdCNQ6vFov+xMJo5aPXlCK0ZnunbniP4M4Hhi2mirbFxE7WVV Vsbb+HpWpavRKlcenQa5gYaAabRCfK7D8o2yZN5rAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUcJnEVK/fuQgM33J7zb9slorK9fswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE2MDkzM2MzLWI3NjEtNDFhOS04N2E2LTllNzQ0YTQwYjFiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4EDANBgkqhkiG9w0BAQsFAAOCAQEAO+u/DC9brEAAWE6h32eNFqni /lxhGZYMUV/XoUbrCpB/fatJIPJmtJR8r1bJKqd+ZhvTMTWJVrQ8HpzJH3oMo3vK KATdOTn5yXK4495VRRmE51NQuMU+Xof8HejD5RFxMjGTxGwC3LqMv+R8e2s+KoK6 AoLcwbCAB7B57w6d+SowcXhgeggfpuQ91jWnY7Qe9JsKwLrzrRbwJlBMUZ8SoFLZ eA3w2jphPzvvL/ztW321Ny5+cdZdwlG3HB/LQX6Bx6JWMy5t/O2Wyt/B0Sg7Vbzb b3CdXytDLEoxALl6jwyjS2h0dWVTJf9XrR1iXdHwymkWlXg0qX/xLLMn5lDKTg== -----END CERTIFICATE-----Generated at Sat Aug 23 06:43:47 2025 by rpki-client