$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa File: 7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa (raw, json) Hash identifier: hci2zPns3HXYGVBJJE3BgB6W1r5EMf+LOe4NYw6D5L0= Subject key identifier: E9:04:A1:64:33:B9:45:BD:47:C6:24:6F:81:D6:6B:85:7D:F1:F3:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66885D754FC539BD84C82E5D5974700EE55BABB8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa Signing time: Tue 12 Aug 2025 00:22:02 +0000 ROA not before: Tue 12 Aug 2025 00:22:02 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff1:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:88:5d:75:4f:c5:39:bd:84:c8:2e:5d:59:74:70:0e:e5:5b:ab:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:22:02 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=a3e95a6c4635663940e006bb6b1a4a554ab72a76fa000a3010b342256e64e2d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:e1:e3:86:d2:1d:f3:cd:bd:25:4e:5a:e1: cf:b2:e6:82:26:b1:1f:f1:2e:a8:da:db:de:db:98: a6:f8:36:5c:39:c9:cc:1c:de:9d:5d:6c:f1:92:56: 88:bc:b5:4d:48:64:90:c1:11:b1:89:e9:c7:ea:58: 0e:97:96:a5:54:2d:21:b8:ca:0b:5f:34:ac:66:76: 63:10:1d:8d:b1:5e:81:95:bb:f5:be:a3:5a:cd:eb: 20:bf:95:69:43:5b:2c:ce:73:71:59:24:62:86:f2: 71:10:7f:14:b6:ea:54:ad:68:24:15:32:44:94:c0: 12:61:73:bf:20:e4:6b:d5:d0:32:e1:3a:55:5a:ce: 87:76:67:5a:84:e2:48:28:47:ad:ca:0d:f8:1b:c6: 81:32:26:3a:93:ec:d1:dd:6e:b6:fd:b0:9d:c1:51: bd:96:84:61:09:72:59:9d:36:2e:8c:89:6b:bf:09: 19:21:92:48:12:c9:5e:84:03:ba:e5:a7:de:13:7d: d6:7a:c4:f1:30:0e:04:de:a6:db:df:ec:43:b4:a3: aa:45:8d:f3:62:4f:4b:25:58:73:a0:8e:51:fe:32: 54:87:b1:fe:36:4c:ac:5b:66:e3:e0:1f:6c:c4:45: 6c:6b:a5:7c:c3:ef:d7:e3:54:94:4a:85:56:5c:3d: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:04:A1:64:33:B9:45:BD:47:C6:24:6F:81:D6:6B:85:7D:F1:F3:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:c000::/40 Signature Algorithm: sha256WithRSAEncryption 70:e6:6d:44:2c:db:16:0b:a9:50:48:3a:16:a3:84:37:86:58: ad:57:1c:58:f0:38:93:a2:f0:a3:72:41:89:86:b0:69:e2:9f: e5:00:c8:e3:27:ba:f6:f9:4b:49:22:1d:b3:d3:fc:00:d4:20: de:58:cf:42:8a:c4:a3:e9:0f:d6:86:3c:05:a1:59:fb:6d:db: 7a:82:fb:02:d3:4d:66:fe:06:f8:fb:5f:b2:c1:8f:15:d6:e7: 79:fd:57:43:4a:84:c3:a1:98:b2:9a:71:88:e7:46:4f:7c:c1: b0:05:2b:0f:5a:26:10:73:71:46:04:c4:34:a8:13:42:31:ed: 62:e8:f8:bd:50:d6:f0:a0:90:0a:08:0e:8e:82:34:ab:fa:3a: df:e2:bf:50:81:4b:e7:2e:b4:2f:67:02:a3:f3:76:14:b2:18: 80:03:00:a0:a3:83:eb:56:70:c1:87:e2:a4:05:e5:d5:df:7b: f9:07:1e:dd:33:f3:13:f1:f3:f0:bd:06:c5:0b:42:70:ff:29: 37:86:fa:a1:13:b0:d0:4b:1a:4a:e8:81:b1:95:6b:fa:8b:c8: 23:59:5a:06:69:8c:71:5e:f4:e1:24:4d:fc:46:6d:04:e6:16: 90:0a:10:7d:b3:35:c6:8d:d0:14:83:25:d4:3b:b7:d4:03:f3: d9:78:f4:bb -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZohddU/FOb2EyC5dWXRwDuVbq7gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDAyMjAyWhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhM2U5NWE2YzQ2MzU2NjM5NDBlMDA2YmI2YjFhNGE1NTRh YjcyYTc2ZmEwMDBhMzAxMGIzNDIyNTZlNjRlMmQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDI+HjhtId8829JU5a4c+y5oImsR/xLqja297bmKb4Nlw5 ycwc3p1dbPGSVoi8tU1IZJDBEbGJ6cfqWA6XlqVULSG4ygtfNKxmdmMQHY2xXoGV u/W+o1rN6yC/lWlDWyzOc3FZJGKG8nEQfxS26lStaCQVMkSUwBJhc78g5GvV0DLh OlVazod2Z1qE4kgoR63KDfgbxoEyJjqT7NHdbrb9sJ3BUb2WhGEJclmdNi6MiWu/ CRkhkkgSyV6EA7rlp94TfdZ6xPEwDgTeptvf7EO0o6pFjfNiT0slWHOgjlH+MlSH sf42TKxbZuPgH2zERWxrpXzD79fjVJRKhVZcPYG1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU6QShZDO5Rb1HxiRvgdZrhX3x86QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc0ODhkMzZjLTExYTEtNGI3Zi1hZDllLTcxYWY2YjFmYThiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/xwDANBgkqhkiG9w0BAQsFAAOCAQEAcOZtRCzbFgupUEg6FqOEN4ZY rVccWPA4k6Lwo3JBiYawaeKf5QDI4ye69vlLSSIds9P8ANQg3ljPQorEo+kP1oY8 BaFZ+23beoL7AtNNZv4G+PtfssGPFdbnef1XQ0qEw6GYsppxiOdGT3zBsAUrD1om EHNxRgTENKgTQjHtYuj4vVDW8KCQCggOjoI0q/o63+K/UIFL5y60L2cCo/N2FLIY gAMAoKOD61ZwwYfipAXl1d97+Qce3TPzE/Hz8L0GxQtCcP8pN4b6oROw0EsaSuiB sZVr+ovII1laBmmMcV704SRN/EZtBOYWkAoQfbM1xo3QFIMl1Du31APz2Xj0uw== -----END CERTIFICATE-----Generated at Sat Aug 23 12:01:16 2025 by rpki-client