$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72f4c8f5-76de-4b97-8d34-e2db17f35ee4.roa File: 72f4c8f5-76de-4b97-8d34-e2db17f35ee4.roa (raw, json) Hash identifier: UFq1BXVuR2dZRpDx+HtXZ6ht7CeAI05hBfbEoCmVTDU= Subject key identifier: 37:FC:09:A0:81:30:3B:AE:9A:95:C5:C7:87:D5:79:8E:47:EA:82:C9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04EFDFC98B9775091CA7441EA2BA88F53551B56A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72f4c8f5-76de-4b97-8d34-e2db17f35ee4.roa Signing time: Mon 18 Aug 2025 15:31:22 +0000 ROA not before: Mon 18 Aug 2025 15:31:22 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:8170::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ef:df:c9:8b:97:75:09:1c:a7:44:1e:a2:ba:88:f5:35:51:b5:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:31:22 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=38c1f713c9b5ef017e5eddd0d779413b22296217a273ea1ff50333ddf940d099, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a5:66:0d:6a:f0:dc:dd:ae:6f:35:a2:05:f7: aa:6b:9c:41:89:50:7d:aa:9b:f0:6a:b0:a0:92:ab: c5:a3:f4:0b:2c:b8:88:c8:1b:01:a1:f0:f6:1e:93: 99:7c:68:bb:60:ce:34:04:7f:bb:63:b4:da:40:9f: 92:92:e7:e8:54:e4:b8:33:f7:ae:22:f1:53:8d:98: 33:e7:5c:e9:4e:e9:0c:bd:14:a8:f7:6c:11:6f:74: 6e:c7:39:9e:7b:40:00:fb:b7:86:f9:fe:ca:18:89: d8:94:e4:ec:b4:07:c7:fc:45:21:98:d5:dd:14:9b: d0:3e:36:f2:61:9e:8b:6a:30:8d:ad:0e:98:98:de: 62:3b:88:dc:ec:fc:54:27:40:4b:54:6a:6e:68:6c: 99:d2:04:50:2a:06:2b:91:ee:23:71:9d:5c:6e:b0: b5:2c:fb:d8:e1:41:db:03:71:bc:8d:09:20:5c:e6: ec:57:21:80:97:98:da:aa:b5:9f:37:1e:08:b7:dd: 7f:6e:8d:fd:7d:5e:3e:75:37:1e:9c:62:da:b8:58: 1d:f7:d6:30:75:b2:ed:93:42:bb:05:fe:a6:85:9a: 6c:8e:09:f8:29:28:68:37:24:c4:4d:90:7d:ac:ff: 90:56:95:14:9b:1d:09:d9:7e:07:4d:90:8e:68:36: a4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FC:09:A0:81:30:3B:AE:9A:95:C5:C7:87:D5:79:8E:47:EA:82:C9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72f4c8f5-76de-4b97-8d34-e2db17f35ee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8170::/48 Signature Algorithm: sha256WithRSAEncryption 02:60:fe:cc:7a:1e:5f:c5:6d:ea:c4:44:58:53:19:fb:ef:a6: 7e:92:c0:1f:e5:f0:c4:2e:2b:73:47:8d:14:e9:b0:79:18:d5: ff:4f:c7:a2:7c:15:4a:0e:83:78:f5:ef:27:84:00:97:c0:2d: 02:af:68:b9:b8:4f:4b:24:59:ea:77:cb:e4:a1:e8:fe:38:11: ee:e5:a2:1d:c2:a4:7d:8f:a1:5d:fc:0e:c2:ad:43:16:6e:55: a5:ca:88:51:18:ef:5c:16:bc:c9:d5:e0:8a:ad:04:68:77:e7: c8:47:db:87:1f:0d:6f:e7:c0:ee:0b:02:44:79:40:b7:bf:d5: 43:2d:5d:71:c8:63:cd:63:03:1c:55:ce:a5:e8:c2:1a:c0:fe: 27:ad:8f:eb:22:ac:3d:fd:5b:65:bc:20:7b:50:be:8e:80:b5: fc:9f:3d:47:19:e2:2d:f2:81:30:52:5b:fb:c0:e6:94:a4:77: 2e:21:e0:a2:49:35:a0:13:69:53:e4:fd:24:59:19:75:26:ab: 7b:02:62:98:52:14:e9:f6:50:d0:09:53:c6:6d:e8:04:89:3b: 93:34:94:0e:fe:95:22:3b:e5:f6:1d:eb:7e:a4:c0:41:b4:d7: 8d:b7:f7:c2:12:3c:ee:da:5f:18:f1:b7:9a:a4:d4:d7:e4:cc: 15:15:e6:f3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBO/fyYuXdQkcp0QeorqI9TVRtWowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUzMTIyWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOGMxZjcxM2M5YjVlZjAxN2U1ZWRkZDBkNzc5NDEzYjIy Mjk2MjE3YTI3M2VhMWZmNTAzMzNkZGY5NDBkMDk5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRpWYNavDc3a5vNaIF96prnEGJUH2qm/BqsKCSq8Wj9Ass uIjIGwGh8PYek5l8aLtgzjQEf7tjtNpAn5KS5+hU5Lgz964i8VONmDPnXOlO6Qy9 FKj3bBFvdG7HOZ57QAD7t4b5/soYidiU5Oy0B8f8RSGY1d0Um9A+NvJhnotqMI2t DpiY3mI7iNzs/FQnQEtUam5obJnSBFAqBiuR7iNxnVxusLUs+9jhQdsDcbyNCSBc 5uxXIYCXmNqqtZ83Hgi33X9ujf19Xj51Nx6cYtq4WB331jB1su2TQrsF/qaFmmyO CfgpKGg3JMRNkH2s/5BWlRSbHQnZfgdNkI5oNqSxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUN/wJoIEwO66alcXHh9V5jkfqgskwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcyZjRjOGY1LTc2ZGUtNGI5Ny04ZDM0LWUyZGIxN2YzNWVlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgXAwDQYJKoZIhvcNAQELBQADggEBAAJg/sx6Hl/FberERFhTGfvv pn6SwB/l8MQuK3NHjRTpsHkY1f9Px6J8FUoOg3j17yeEAJfALQKvaLm4T0skWep3 y+Sh6P44Ee7loh3CpH2PoV38DsKtQxZuVaXKiFEY71wWvMnV4IqtBGh358hH24cf DW/nwO4LAkR5QLe/1UMtXXHIY81jAxxVzqXowhrA/ietj+sirD39W2W8IHtQvo6A tfyfPUcZ4i3ygTBSW/vA5pSkdy4h4KJJNaATaVPk/SRZGXUmq3sCYphSFOn2UNAJ U8Zt6ASJO5M0lA7+lSI75fYd636kwEG0142398ISPO7aXxjxt5qk1NfkzBUV5vM= -----END CERTIFICATE-----Generated at Sat Aug 23 08:16:58 2025 by rpki-client