$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20835921-52a1-4298-9dfe-c6c9d7802f1c.roa File: 20835921-52a1-4298-9dfe-c6c9d7802f1c.roa (raw, json) Hash identifier: qVoTpH9E91n/ZFA39JmBAWme3AJI4L7KuIwKC/nRQOg= Subject key identifier: AF:A4:FE:A1:11:5F:9C:CE:EA:E1:E9:2E:FC:04:9D:36:1C:42:D3:BF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54FC2544E8DB479C7D5292288E9F381A96D941D8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20835921-52a1-4298-9dfe-c6c9d7802f1c.roa Signing time: Fri 01 Aug 2025 15:50:59 +0000 ROA not before: Fri 01 Aug 2025 15:50:59 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff2:8060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:fc:25:44:e8:db:47:9c:7d:52:92:28:8e:9f:38:1a:96:d9:41:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:50:59 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=b7eb3450642b5243e25476709456429cdcd3d7c150714e33159844444dfbc5b0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:d5:54:a1:50:92:01:72:56:11:49:63:16: 6a:0f:bf:d7:f8:cc:fa:76:a7:aa:f0:c7:73:93:1e: 88:7f:bf:1d:5f:77:02:d8:83:14:c8:b7:04:11:c9: 77:20:92:4a:e1:6e:3b:0e:bb:fe:b9:61:25:7b:39: ff:6d:b0:9c:dd:d7:36:fc:0a:32:1f:36:05:8f:34: 15:55:c0:81:71:8f:15:07:44:ed:07:e9:69:f0:d0: ab:96:42:e6:46:59:80:64:af:0b:56:4a:47:06:53: 41:fe:d9:3d:97:42:14:f2:31:17:58:5a:10:60:a5: 50:ce:9a:a1:69:bb:d5:98:8a:7e:69:05:36:3a:ff: 74:a6:d1:61:e5:c6:ba:2c:52:ec:16:df:6b:bf:ff: c5:12:cf:f1:06:48:5e:33:60:65:41:94:8e:0e:9a: be:80:9c:85:61:6c:12:57:c1:9a:ab:4d:b0:92:53: f9:24:92:d6:f3:f2:7b:57:dd:a7:44:d3:93:4e:5f: 59:b1:9c:6c:25:0d:b3:ec:5d:ca:f8:1c:a7:70:86: ff:96:eb:17:c2:55:56:e3:fb:70:56:7f:7e:3c:e6: 14:4b:bf:3c:4c:6a:63:90:e8:ac:bb:4b:4b:f8:fc: 20:53:d1:e1:73:98:f7:d1:b7:31:71:b0:38:ca:4d: 67:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A4:FE:A1:11:5F:9C:CE:EA:E1:E9:2E:FC:04:9D:36:1C:42:D3:BF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20835921-52a1-4298-9dfe-c6c9d7802f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:8060::/48 Signature Algorithm: sha256WithRSAEncryption 0f:04:cc:d5:6b:73:24:4e:f0:ba:d9:e5:89:dd:18:e3:24:b5: 1a:fb:08:72:5e:97:05:3f:57:b8:43:91:9a:37:fe:c6:ce:ce: 47:1a:88:54:5c:5d:66:36:be:14:44:de:69:1a:e7:bd:af:a7: a9:d6:06:54:3c:22:7e:0b:a0:89:54:1f:5a:20:da:37:d7:bb: 88:98:9c:14:42:1f:b6:0b:fb:76:bb:7c:79:36:b8:e2:d3:97: 86:27:10:09:74:9e:14:1c:4b:aa:d1:95:c2:de:3d:28:60:5b: b4:c4:5f:f4:de:f4:71:ab:6a:24:63:32:a3:61:50:16:93:c9: 95:58:43:b7:ac:04:b6:9f:e9:c0:75:7d:89:f0:d2:8c:f5:d3: 39:8d:0c:5a:33:ca:01:16:f7:83:56:c0:23:a7:57:9c:a2:27: 52:ee:d1:4e:ca:1f:01:5e:2d:bf:27:f4:c4:42:e3:60:53:cc: da:8f:fd:68:97:9d:50:92:50:b2:e6:82:dc:27:85:ad:a2:bc: e7:a2:51:89:d0:bc:d4:b5:f5:fb:55:74:b1:57:5a:11:14:63: 04:57:ba:2d:ce:c1:35:75:73:e2:59:0c:67:27:a0:75:43:78: 73:c7:8f:26:5d:4b:d9:2b:3c:01:6e:0b:f7:3e:03:05:9c:89: 08:cc:23:38 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVPwlROjbR5x9UpIojp84GpbZQdgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTU1MDU5WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2ViMzQ1MDY0MmI1MjQzZTI1NDc2NzA5NDU2NDI5Y2Rj ZDNkN2MxNTA3MTRlMzMxNTk4NDQ0NDRkZmJjNWIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvvdVUoVCSAXJWEUljFmoPv9f4zPp2p6rwx3OTHoh/vx1f dwLYgxTItwQRyXcgkkrhbjsOu/65YSV7Of9tsJzd1zb8CjIfNgWPNBVVwIFxjxUH RO0H6Wnw0KuWQuZGWYBkrwtWSkcGU0H+2T2XQhTyMRdYWhBgpVDOmqFpu9WYin5p BTY6/3Sm0WHlxrosUuwW32u//8USz/EGSF4zYGVBlI4Omr6AnIVhbBJXwZqrTbCS U/kkktbz8ntX3adE05NOX1mxnGwlDbPsXcr4HKdwhv+W6xfCVVbj+3BWf3485hRL vzxMamOQ6Ky7S0v4/CBT0eFzmPfRtzFxsDjKTWePAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUr6T+oRFfnM7q4eku/ASdNhxC078wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwODM1OTIxLTUyYTEtNDI5OC05ZGZlLWM2YzlkNzgwMmYxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ygGAwDQYJKoZIhvcNAQELBQADggEBAA8EzNVrcyRO8LrZ5YndGOMk tRr7CHJelwU/V7hDkZo3/sbOzkcaiFRcXWY2vhRE3mka572vp6nWBlQ8In4LoIlU H1og2jfXu4iYnBRCH7YL+3a7fHk2uOLTl4YnEAl0nhQcS6rRlcLePShgW7TEX/Te 9HGraiRjMqNhUBaTyZVYQ7esBLaf6cB1fYnw0oz10zmNDFozygEW94NWwCOnV5yi J1Lu0U7KHwFeLb8n9MRC42BTzNqP/WiXnVCSULLmgtwnha2ivOeiUYnQvNS19ftV dLFXWhEUYwRXui3OwTV1c+JZDGcnoHVDeHPHjyZdS9krPAFuC/c+AwWciQjMIzg= -----END CERTIFICATE-----Generated at Sat Aug 23 06:53:38 2025 by rpki-client