$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511316c5-7f81-42d6-945f-f6431a4a029c.roa File: 511316c5-7f81-42d6-945f-f6431a4a029c.roa (raw, json) Hash identifier: Jgf38IzDP/mFAwzuUErPlHgoF3+MVenBiZLv0Fq/GV8= Subject key identifier: A4:A4:07:14:D3:77:6F:83:23:1C:FA:BC:95:FE:34:51:1E:00:64:BB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D55AC496E2D88E32AF48EBB34B5DEE5989884CC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511316c5-7f81-42d6-945f-f6431a4a029c.roa Signing time: Tue 05 Aug 2025 00:12:02 +0000 ROA not before: Tue 05 Aug 2025 00:12:02 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff3:80a0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:55:ac:49:6e:2d:88:e3:2a:f4:8e:bb:34:b5:de:e5:98:98:84:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:12:02 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=f365defe72fc4cf9ecf130fa295c76ec7b30f55b26c1b903721615c3ec8881da, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f4:1c:03:2a:97:93:ec:b8:06:50:a0:b1:d9: f4:ab:ce:42:20:6a:14:46:3e:e5:34:ce:17:3b:c6: 52:b9:b1:76:a4:15:08:94:79:75:d9:d5:44:e5:80: 66:3d:85:41:12:f6:0b:a9:5e:7c:c6:b9:52:74:c1: 18:3c:eb:a5:4c:94:b6:d6:29:81:83:16:a0:8e:4a: 6b:e8:ee:4d:3b:d6:9b:11:08:8b:22:42:07:ad:8b: 02:2f:40:eb:41:30:2f:44:6a:16:20:e4:41:b2:6e: cb:07:5a:1d:7c:4a:03:d5:3e:1f:9d:e5:fc:d7:e5: 27:0f:de:03:fc:0d:b0:cc:2f:9d:df:23:e1:dd:b6: 44:6e:88:22:9c:e8:10:a7:e2:4f:ce:1c:5f:24:34: 4f:b8:eb:97:16:8f:34:0d:c9:9b:95:53:47:d3:aa: 9f:16:db:1f:f7:1a:e4:7e:7d:cb:70:77:49:c7:a9: 50:c5:7e:8b:9a:2d:05:52:23:ba:09:f6:96:84:1e: af:7a:c2:c6:d2:7c:7f:72:4d:83:8f:58:f7:29:62: f6:44:65:64:1e:15:49:ec:71:11:bc:06:57:2a:4d: 52:39:bf:38:88:0b:92:f6:d2:b9:21:77:5a:15:0e: fb:bb:95:9c:ea:22:e7:b9:e3:be:33:07:4d:b4:18: b5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A4:07:14:D3:77:6F:83:23:1C:FA:BC:95:FE:34:51:1E:00:64:BB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511316c5-7f81-42d6-945f-f6431a4a029c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:80a0::/46 Signature Algorithm: sha256WithRSAEncryption 85:69:a7:05:4e:61:4b:b5:9e:76:c7:77:55:5d:e1:2e:4f:ab: 42:af:a9:2a:8f:d1:40:a7:2e:52:ba:de:97:f2:bd:89:6c:69: 5c:84:56:a8:6f:c9:d2:de:ee:14:21:c6:d0:3c:b5:77:1a:d3: cf:b5:95:f0:44:95:fe:74:70:7c:09:8b:25:ec:e0:c9:77:54: e1:f4:4b:31:3b:2e:34:80:2d:a6:89:a6:5b:c5:48:f5:e1:11: 1f:96:49:1b:d0:8e:ef:be:57:04:ba:cc:09:f4:52:27:01:72: a5:00:c0:fe:7a:29:c8:4d:2b:21:7c:6c:c1:ce:09:d0:cb:4c: ce:e0:4a:14:d9:a2:17:56:2e:f8:a3:30:29:ee:b8:6c:d1:d7: 93:9f:a2:da:29:72:50:9f:38:88:8b:ba:b7:8c:23:a2:1b:fa: 34:63:43:ca:fb:17:01:92:4d:08:b7:9a:03:2d:2e:a1:7e:7e: cf:a0:b1:6d:90:96:07:eb:dc:42:2a:2c:35:23:b5:0b:d0:b9: 77:6d:e9:4f:3d:01:25:13:29:f6:5d:f6:d4:dc:08:ba:ba:bb: ed:35:11:29:00:08:5c:af:31:d4:0f:ce:b2:89:a1:77:2b:c6: 48:81:57:4d:9d:83:eb:df:af:10:02:fe:ea:29:5b:e1:86:ca: 09:e2:9a:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHVWsSW4tiOMq9I67NLXe5ZiYhMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAxMjAyWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzY1ZGVmZTcyZmM0Y2Y5ZWNmMTMwZmEyOTVjNzZlYzdi MzBmNTViMjZjMWI5MDM3MjE2MTVjM2VjODg4MWRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDr9BwDKpeT7LgGUKCx2fSrzkIgahRGPuU0zhc7xlK5sXak FQiUeXXZ1UTlgGY9hUES9gupXnzGuVJ0wRg866VMlLbWKYGDFqCOSmvo7k071psR CIsiQgetiwIvQOtBMC9EahYg5EGybssHWh18SgPVPh+d5fzX5ScP3gP8DbDML53f I+HdtkRuiCKc6BCn4k/OHF8kNE+465cWjzQNyZuVU0fTqp8W2x/3GuR+fctwd0nH qVDFfouaLQVSI7oJ9paEHq96wsbSfH9yTYOPWPcpYvZEZWQeFUnscRG8BlcqTVI5 vziIC5L20rkhd1oVDvu7lZzqIue5474zB020GLWvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpKQHFNN3b4MjHPq8lf40UR4AZLswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUxMTMxNmM1LTdmODEtNDJkNi05NDVmLWY2NDMxYTRhMDI5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zgKAwDQYJKoZIhvcNAQELBQADggEBAIVppwVOYUu1nnbHd1Vd4S5P q0KvqSqP0UCnLlK63pfyvYlsaVyEVqhvydLe7hQhxtA8tXca08+1lfBElf50cHwJ iyXs4Ml3VOH0SzE7LjSALaaJplvFSPXhER+WSRvQju++VwS6zAn0UicBcqUAwP56 KchNKyF8bMHOCdDLTM7gShTZohdWLvijMCnuuGzR15OfotopclCfOIiLureMI6Ib +jRjQ8r7FwGSTQi3mgMtLqF+fs+gsW2Qlgfr3EIqLDUjtQvQuXdt6U89ASUTKfZd 9tTcCLq6u+01ESkACFyvMdQPzrKJoXcrxkiBV02dg+vfrxAC/uopW+GGygnimi4= -----END CERTIFICATE-----Generated at Sat Aug 23 06:42:44 2025 by rpki-client