$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ce31dd6-63e9-43c4-84fd-4bfdad505bc1.roa File: 3ce31dd6-63e9-43c4-84fd-4bfdad505bc1.roa (raw, json) Hash identifier: rCVs1ZJhNfZMGox9cqijChMF0dxMrNdtQMt56FYECLI= Subject key identifier: 84:9C:04:E9:92:56:4C:4F:FB:8F:39:CA:73:54:4F:99:93:98:54:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 472050E81C57FFFDE5D333B7C7E17857BB2712DE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ce31dd6-63e9-43c4-84fd-4bfdad505bc1.roa Signing time: Tue 19 Aug 2025 00:11:08 +0000 ROA not before: Tue 19 Aug 2025 00:11:08 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:20:50:e8:1c:57:ff:fd:e5:d3:33:b7:c7:e1:78:57:bb:27:12:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:11:08 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=a038295a80395841e77fc95934556d62e6fbc35ba8a02ab621e864049b15bcb0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:ca:33:ab:31:dd:1d:c8:c5:cb:c0:fa:ae: f1:a8:c9:32:f9:5c:fc:19:fc:7d:d9:44:f7:80:05: 9a:1a:2d:7a:33:4e:a5:58:99:a6:e8:19:fc:91:1a: 6a:b1:1f:74:4f:e9:ed:ef:9b:2d:70:5b:e2:20:15: 31:18:52:c0:c0:a1:d6:13:14:46:e0:9a:06:05:13: d7:36:98:09:51:1b:ec:54:f2:2b:cf:11:6d:df:c4: 59:be:cf:79:d1:c3:42:5a:76:2c:9a:30:ae:53:f9: 3f:13:32:b7:e2:f9:55:f4:f0:03:21:c0:c7:38:f7: 5d:00:87:2b:93:f1:29:a2:d3:f2:a3:4b:84:84:f1: 34:50:ac:d6:b6:f9:6c:55:1e:bf:bf:7b:98:d1:43: 65:1e:57:40:98:94:4b:4d:02:e8:e6:a0:82:79:78: 33:6a:15:4a:40:92:08:5a:0e:84:3d:5a:00:93:a8: ec:8f:e0:19:66:e0:1f:5e:aa:96:de:83:7b:44:17: b3:c3:d2:d0:e6:36:21:64:bc:7d:4b:af:3e:cf:e8: ac:ed:83:df:03:97:f2:90:94:d8:95:e1:32:b7:87: b6:2c:17:aa:01:80:16:8f:3f:20:c6:f6:d7:85:e1: 46:db:99:d5:5c:76:ed:c0:94:1c:bb:9b:dd:c4:07: cd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9C:04:E9:92:56:4C:4F:FB:8F:39:CA:73:54:4F:99:93:98:54:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ce31dd6-63e9-43c4-84fd-4bfdad505bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f60::/32 Signature Algorithm: sha256WithRSAEncryption 27:b0:ff:cb:80:ac:66:f3:2c:97:30:66:d8:b4:e6:8d:d0:64: e2:40:c1:93:76:22:0a:d9:58:42:e8:5e:b2:2c:a6:47:fd:fb: 10:5e:cc:17:61:53:bc:e8:27:e7:75:c2:7e:fc:cf:65:87:84: c7:90:c8:10:50:8a:10:5d:3e:46:9e:77:61:7e:de:9c:07:80: 11:50:f6:47:83:01:93:d8:b9:0b:e7:fe:de:92:29:0a:d6:1a: 85:a9:54:c9:47:0b:69:80:c5:c1:65:8e:df:20:ac:2e:74:0d: b3:f7:91:c5:2a:49:54:b7:71:d3:e0:a0:7e:20:38:46:24:aa: cb:69:53:78:a1:89:1b:87:c1:60:c5:1c:7a:53:f5:be:3c:e2: 36:d5:27:19:01:fe:83:5f:98:e3:2b:31:14:f1:7e:8a:93:41: 54:e8:87:93:3d:8b:a0:02:08:7b:41:5f:97:5a:3a:31:05:b6: 18:72:40:fd:3a:92:8b:68:ef:4f:88:f7:5a:fb:63:77:2a:5b: 9a:16:81:d7:1d:0c:6d:13:e9:2f:3a:cf:8c:aa:a8:b1:85:0d: 3b:a5:e7:8c:bc:e5:d4:14:12:e5:29:68:55:1b:c6:6e:ea:ae: 0e:bf:5b:8e:2a:a5:29:c6:c3:51:27:37:29:52:cb:61:72:ae: 2c:0b:92:3d -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIURyBQ6BxX//3l0zO3x+F4V7snEt4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAxMTA4WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDM4Mjk1YTgwMzk1ODQxZTc3ZmM5NTkzNDU1NmQ2MmU2 ZmJjMzViYThhMDJhYjYyMWU4NjQwNDliMTViY2IwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2HsozqzHdHcjFy8D6rvGoyTL5XPwZ/H3ZRPeABZoaLXoz TqVYmaboGfyRGmqxH3RP6e3vmy1wW+IgFTEYUsDAodYTFEbgmgYFE9c2mAlRG+xU 8ivPEW3fxFm+z3nRw0JadiyaMK5T+T8TMrfi+VX08AMhwMc4910AhyuT8Smi0/Kj S4SE8TRQrNa2+WxVHr+/e5jRQ2UeV0CYlEtNAujmoIJ5eDNqFUpAkghaDoQ9WgCT qOyP4Blm4B9eqpbeg3tEF7PD0tDmNiFkvH1Lrz7P6Kztg98Dl/KQlNiV4TK3h7Ys F6oBgBaPPyDG9teF4UbbmdVcdu3AlBy7m93EB82xAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUhJwE6ZJWTE/7jznKc1RPmZOYVDswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjZTMxZGQ2LTYzZTktNDNjNC04NGZkLTRiZmRhZDUwNWJjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB9gMA0GCSqGSIb3DQEBCwUAA4IBAQAnsP/LgKxm8yyXMGbYtOaN0GTi QMGTdiIK2VhC6F6yLKZH/fsQXswXYVO86CfndcJ+/M9lh4THkMgQUIoQXT5Gnndh ft6cB4ARUPZHgwGT2LkL5/7ekikK1hqFqVTJRwtpgMXBZY7fIKwudA2z95HFKklU t3HT4KB+IDhGJKrLaVN4oYkbh8FgxRx6U/W+POI21ScZAf6DX5jjKzEU8X6Kk0FU 6IeTPYugAgh7QV+XWjoxBbYYckD9OpKLaO9PiPda+2N3KluaFoHXHQxtE+kvOs+M qqixhQ07peeMvOXUFBLlKWhVG8Zu6q4Ov1uOKqUpxsNRJzcpUsthcq4sC5I9 -----END CERTIFICATE-----Generated at Sat Aug 23 07:01:02 2025 by rpki-client