$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/639d1eb6-41be-4551-8f7d-17ca4586ed5f.roa File: 639d1eb6-41be-4551-8f7d-17ca4586ed5f.roa (raw, json) Hash identifier: 0MbaNO1uYjiRaK6e7xTz2wXrJRI0SRtIWOB+mJA93AE= Subject key identifier: 43:99:F2:DE:CF:36:85:16:05:BB:E9:FD:D4:7D:CC:24:67:76:EF:A5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5BB46B0A5947FDD84699F30CF9C272EF42CDBF30 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/639d1eb6-41be-4551-8f7d-17ca4586ed5f.roa Signing time: Mon 18 Aug 2025 15:32:38 +0000 ROA not before: Mon 18 Aug 2025 15:32:38 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:41a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b4:6b:0a:59:47:fd:d8:46:99:f3:0c:f9:c2:72:ef:42:cd:bf:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:32:38 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=2b65f652eb799b92c2c32541c36e647773934fc7515d3d0474628e500bdaac8f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:5d:84:d8:3d:01:ea:41:89:9f:43:e5:d9: 59:2a:cb:a3:ef:3d:c4:bb:42:f7:a7:b9:62:28:7b: 27:98:ea:a0:dd:35:b9:86:ae:38:d6:02:cc:ba:45: 85:d7:8e:97:9b:62:4b:43:1f:44:db:48:db:9e:1c: e7:ad:99:a8:35:56:e7:e8:33:96:55:f7:d3:c6:8d: 2c:c1:50:91:bf:f0:fd:e7:fe:fc:3f:09:58:0e:b6: e0:bf:15:d9:7e:ab:92:e6:8e:db:52:0f:05:6c:e6: d1:4c:9e:09:41:06:aa:95:e5:52:a9:ea:b0:0f:00: b9:8c:9c:f6:84:38:bf:5d:e2:d5:43:81:26:f6:b5: 7a:c9:a4:2f:5a:28:78:a4:03:48:a0:78:eb:35:5d: c5:85:df:d1:7b:b4:ff:7d:f7:78:77:e1:90:3f:42: 3f:12:97:c2:89:ec:4e:69:cc:f9:c6:6c:70:be:2e: 72:86:1b:03:92:a6:77:7c:31:1d:a7:ae:92:50:38: 53:46:5d:38:9d:64:08:7d:50:ac:1f:dd:c0:4a:9b: 3e:e9:55:c2:7a:7b:ab:43:34:e3:77:23:1d:ac:04: 3e:fe:3e:36:34:8d:0c:14:74:08:e6:28:5a:3a:cd: 68:0f:d9:18:3f:b0:28:ca:1e:04:80:0f:cd:7e:c7: 2a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:99:F2:DE:CF:36:85:16:05:BB:E9:FD:D4:7D:CC:24:67:76:EF:A5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/639d1eb6-41be-4551-8f7d-17ca4586ed5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:41a0::/48 Signature Algorithm: sha256WithRSAEncryption b5:01:af:79:03:69:2f:d3:60:a7:52:01:11:5f:08:77:8d:2b: 40:51:5c:56:08:41:6d:62:08:19:ba:9b:1e:d1:d3:cd:75:51: 98:ab:e7:fd:f4:16:cc:1c:a9:32:b2:ca:e3:80:5a:16:93:17: 36:b5:40:58:3d:11:7b:1a:76:13:3b:d1:9b:4a:4b:1a:98:69: bc:68:a9:eb:b5:2b:91:ea:da:bb:63:54:9c:ae:5b:59:1e:cf: 28:5f:ce:4b:1e:41:ae:8b:ea:c4:3b:7b:4b:51:4c:c0:8d:85: ed:1b:bd:74:03:4d:a2:b7:c2:82:b1:f7:83:2e:ff:ee:94:8c: 6f:1b:12:d5:4b:66:ba:dd:e1:a0:a4:10:6b:16:c2:5b:8b:0d: e3:4e:60:0a:7b:f4:0f:05:13:43:67:05:5c:22:92:23:cb:fc: 7e:b4:e3:c9:e5:f6:1f:3f:31:e7:30:87:ea:dd:ea:75:ab:0b: 3b:79:fb:99:1d:21:26:3d:cc:ff:ef:09:c6:f5:43:05:09:ac: fc:a6:3a:40:fd:fd:1a:33:b8:af:65:af:71:23:aa:76:03:f7: 99:47:b3:48:9a:1f:02:e4:86:38:bc:51:b4:88:30:3d:56:cd: b4:d5:80:47:12:4e:45:65:55:54:16:0b:93:4d:8f:06:9d:74: c8:23:13:24 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUW7RrCllH/dhGmfMM+cJy70LNvzAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUzMjM4WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjY1ZjY1MmViNzk5YjkyYzJjMzI1NDFjMzZlNjQ3Nzcz OTM0ZmM3NTE1ZDNkMDQ3NDYyOGU1MDBiZGFhYzhmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHJl2E2D0B6kGJn0Pl2Vkqy6PvPcS7QvenuWIoeyeY6qDd NbmGrjjWAsy6RYXXjpebYktDH0TbSNueHOetmag1VufoM5ZV99PGjSzBUJG/8P3n /vw/CVgOtuC/Fdl+q5LmjttSDwVs5tFMnglBBqqV5VKp6rAPALmMnPaEOL9d4tVD gSb2tXrJpC9aKHikA0igeOs1XcWF39F7tP9993h34ZA/Qj8Sl8KJ7E5pzPnGbHC+ LnKGGwOSpnd8MR2nrpJQOFNGXTidZAh9UKwf3cBKmz7pVcJ6e6tDNON3Ix2sBD7+ PjY0jQwUdAjmKFo6zWgP2Rg/sCjKHgSAD81+xyrtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQ5ny3s82hRYFu+n91H3MJGd276UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYzOWQxZWI2LTQxYmUtNDU1MS04ZjdkLTE3Y2E0NTg2ZWQ1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//QaAwDQYJKoZIhvcNAQELBQADggEBALUBr3kDaS/TYKdSARFfCHeN K0BRXFYIQW1iCBm6mx7R0811UZir5/30FswcqTKyyuOAWhaTFza1QFg9EXsadhM7 0ZtKSxqYabxoqeu1K5Hq2rtjVJyuW1kezyhfzkseQa6L6sQ7e0tRTMCNhe0bvXQD TaK3woKx94Mu/+6UjG8bEtVLZrrd4aCkEGsWwluLDeNOYAp79A8FE0NnBVwikiPL /H6048nl9h8/Mecwh+rd6nWrCzt5+5kdISY9zP/vCcb1QwUJrPymOkD9/RozuK9l r3EjqnYD95lHs0iaHwLkhji8UbSIMD1WzbTVgEcSTkVlVVQWC5NNjwaddMgjEyQ= -----END CERTIFICATE-----Generated at Sat Aug 23 06:53:44 2025 by rpki-client