$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3070339a-26b7-42fb-aa24-853f76e9020a.roa File: 3070339a-26b7-42fb-aa24-853f76e9020a.roa (raw, json) Hash identifier: ySHyg9j3F6l/BKBaXSdWi0Ebm1i1DPi9iEmIoeX/xnI= Subject key identifier: 8F:2D:D6:B8:53:81:E6:FD:15:7B:82:61:0A:E2:D0:E4:7D:C4:67:08 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F8B4BEBB46A2F878F1358BCE74730E518994B18 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3070339a-26b7-42fb-aa24-853f76e9020a.roa Signing time: Tue 19 Aug 2025 00:10:26 +0000 ROA not before: Tue 19 Aug 2025 00:10:26 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f32::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8b:4b:eb:b4:6a:2f:87:8f:13:58:bc:e7:47:30:e5:18:99:4b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:10:26 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=78ffc21352fbc243ffdb09026bbc48b031c982ed3c862edfe695ced70a8b496d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:75:36:d0:7f:f2:f0:d6:ff:dc:b6:5a:d6: 84:7e:0f:3a:20:04:59:9a:d6:8a:fd:c3:97:77:1c: d9:72:cd:cb:f8:a5:56:29:89:89:55:5f:4b:13:e9: 62:21:28:72:e7:a7:86:c6:87:b7:d6:0d:a2:11:f5: cd:42:29:c0:11:82:1f:69:a0:02:21:38:ed:3c:a8: 12:c9:14:79:0b:bc:4a:05:4e:f8:31:d3:c0:3b:35: 2a:96:4d:71:46:35:81:b8:d6:c0:5d:17:49:52:df: e3:46:c7:72:cf:7b:06:c9:9b:a7:08:e1:21:34:3b: 05:d9:2b:53:64:41:1c:07:58:c5:6f:37:bd:3f:00: f4:ea:76:46:10:04:4b:71:44:d2:9c:b4:79:b7:7f: dc:42:66:c2:dc:25:94:29:78:a8:1d:5c:8a:49:14: d5:ae:6a:14:fe:59:56:bf:d8:45:d2:d6:a4:80:24: 3a:d2:d6:c0:53:1e:2e:e1:e8:fb:16:48:f5:d3:57: b5:a7:35:5a:48:39:08:c4:fa:eb:c2:08:89:12:17: 44:04:12:d0:60:65:c3:77:c2:b0:bd:55:59:91:91: c2:3f:10:29:c0:82:f3:ed:e7:9b:8a:34:ce:81:bd: e2:a7:45:ed:e8:59:0a:9c:52:f6:08:9b:55:86:ca: 75:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2D:D6:B8:53:81:E6:FD:15:7B:82:61:0A:E2:D0:E4:7D:C4:67:08 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3070339a-26b7-42fb-aa24-853f76e9020a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f32::/32 Signature Algorithm: sha256WithRSAEncryption 42:a8:0d:f1:a4:96:09:e3:2a:30:ec:6c:2a:53:dc:e6:74:40: c1:c8:e1:d1:44:8d:c2:35:c0:69:89:a5:55:fc:e9:62:65:a5: 06:16:65:a2:b3:86:a9:b6:2d:e4:3f:67:ca:38:04:85:67:fc: 78:e1:9f:c2:21:c2:a4:bb:03:9a:d6:2f:ce:1e:72:58:84:74: 17:4c:67:8b:20:43:98:73:16:be:0a:a2:e0:8f:25:8c:44:01: c2:cb:1d:79:73:8e:6c:51:7e:2b:ea:d2:5c:91:02:b1:90:44: 84:c1:cc:70:79:2a:8b:79:93:d0:8e:fc:ae:dc:de:91:fc:f3: 50:c7:b2:1f:4a:50:a2:46:d6:25:7a:45:3e:9e:2e:36:e0:5d: ad:e7:58:74:16:1f:4c:46:03:bd:bb:0d:24:38:c4:b5:42:1e: 64:c1:9a:de:22:69:af:bf:ca:32:9d:40:fb:c6:2a:c3:cd:fd: 4c:64:ae:36:e5:64:c1:05:13:27:e1:a4:ee:f4:ff:b5:95:1b: 4d:2a:e3:59:30:2f:50:39:41:f5:b0:04:cd:ac:35:0a:da:fb: 1c:8e:d4:88:ae:cc:55:1a:ed:70:ed:32:cc:fd:18:c2:bf:33: 98:39:8f:90:e1:c1:ca:14:80:8c:78:ab:b3:d5:8a:a0:2a:28: bf:2e:11:a2 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUT4tL67RqL4ePE1i850cw5RiZSxgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAxMDI2WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGZmYzIxMzUyZmJjMjQzZmZkYjA5MDI2YmJjNDhiMDMx Yzk4MmVkM2M4NjJlZGZlNjk1Y2VkNzBhOGI0OTZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2kXU20H/y8Nb/3LZa1oR+DzogBFma1or9w5d3HNlyzcv4 pVYpiYlVX0sT6WIhKHLnp4bGh7fWDaIR9c1CKcARgh9poAIhOO08qBLJFHkLvEoF Tvgx08A7NSqWTXFGNYG41sBdF0lS3+NGx3LPewbJm6cI4SE0OwXZK1NkQRwHWMVv N70/APTqdkYQBEtxRNKctHm3f9xCZsLcJZQpeKgdXIpJFNWuahT+WVa/2EXS1qSA JDrS1sBTHi7h6PsWSPXTV7WnNVpIOQjE+uvCCIkSF0QEEtBgZcN3wrC9VVmRkcI/ ECnAgvPt55uKNM6BveKnRe3oWQqcUvYIm1WGynXHAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUjy3WuFOB5v0Ve4JhCuLQ5H3EZwgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMwNzAzMzlhLTI2YjctNDJmYi1hYTI0LTg1M2Y3NmU5MDIwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB8yMA0GCSqGSIb3DQEBCwUAA4IBAQBCqA3xpJYJ4yow7GwqU9zmdEDB yOHRRI3CNcBpiaVV/OliZaUGFmWis4apti3kP2fKOASFZ/x44Z/CIcKkuwOa1i/O HnJYhHQXTGeLIEOYcxa+CqLgjyWMRAHCyx15c45sUX4r6tJckQKxkESEwcxweSqL eZPQjvyu3N6R/PNQx7IfSlCiRtYlekU+ni424F2t51h0Fh9MRgO9uw0kOMS1Qh5k wZreImmvv8oynUD7xirDzf1MZK425WTBBRMn4aTu9P+1lRtNKuNZMC9QOUH1sATN rDUK2vscjtSIrsxVGu1w7TLM/RjCvzOYOY+Q4cHKFICMeKuz1YqgKii/LhGi -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:18 2025 by rpki-client