$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d02e54b-0acf-4c3b-9e5e-14842df8e352.roa File: 7d02e54b-0acf-4c3b-9e5e-14842df8e352.roa (raw, json) Hash identifier: BDp15tJxsbxtqizDdK0a83oiqHAeOSHzCAVmxMBU0ws= Subject key identifier: 0A:D7:B0:C4:EA:F1:83:C6:B7:80:1B:08:E1:3E:D5:DF:52:F4:2D:3D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71002F8585E799FF8C6179A64E100423A4389146 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d02e54b-0acf-4c3b-9e5e-14842df8e352.roa Signing time: Tue 12 Aug 2025 00:10:23 +0000 ROA not before: Tue 12 Aug 2025 00:10:23 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:80f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:00:2f:85:85:e7:99:ff:8c:61:79:a6:4e:10:04:23:a4:38:91:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:10:23 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=c0b342b6120d765dada0d8d2b604d86a818a5d4ca0796c1a3e148644b7056e30, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:96:dc:e1:b6:78:5b:82:d8:e4:a7:f1:e0:ef: c5:84:67:6e:3f:b8:f4:fb:54:9b:2a:f5:45:16:b2: 13:39:21:da:d8:4d:da:e6:47:f0:33:60:7f:51:e2: 39:55:72:3a:fe:b3:5c:c3:38:bc:5f:be:60:4f:bc: 3e:7e:50:1b:13:75:cc:99:c3:10:9b:e9:c0:f0:f9: 21:9e:02:4d:3a:70:1c:23:9a:9a:fd:cf:48:b4:86: 20:5f:4e:d5:02:f4:9d:a4:ac:ad:fd:3d:ac:bc:5d: f3:fb:5a:3f:c2:fc:32:69:b6:23:96:1e:e7:fc:6e: 42:dc:0a:30:9a:0c:22:9c:98:02:37:84:8c:e0:bd: 3e:32:d5:9f:a5:0a:34:2d:b6:01:68:97:83:85:fc: 5c:0c:b3:97:87:b5:a3:1e:f7:14:c4:44:d7:da:7b: 4b:ba:9c:79:90:5b:1b:1f:96:29:29:85:3b:6f:69: 60:c2:33:fe:d5:6c:99:c6:14:62:1c:c9:4d:6c:13: 13:4e:d4:6b:25:c7:0a:cd:b0:e7:a5:82:8a:cb:98: 0f:72:c1:7f:6c:52:f9:aa:3f:84:98:a2:c6:35:83: 98:5f:b9:0f:44:7b:48:c9:12:4f:cf:8a:c4:d7:c6: 15:27:81:68:41:fc:2d:7c:e3:0c:81:bc:64:cb:39: 75:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D7:B0:C4:EA:F1:83:C6:B7:80:1B:08:E1:3E:D5:DF:52:F4:2D:3D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d02e54b-0acf-4c3b-9e5e-14842df8e352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:80f0::/48 Signature Algorithm: sha256WithRSAEncryption 2e:19:0e:ec:1d:b2:6c:e3:ad:63:95:57:53:b1:da:8b:f1:8a: 94:bb:cb:39:c0:3a:41:62:62:4a:20:19:54:63:a3:6f:89:aa: f3:f7:3f:91:39:e2:16:5c:7e:28:d1:64:64:e8:95:ce:7d:4e: cf:31:a7:49:3e:6f:5f:75:eb:5d:06:c1:dc:f8:d3:6a:fa:6a: 48:6e:33:ab:0d:f1:53:28:7e:86:80:55:30:f5:8a:9d:67:f4: 23:01:09:92:3f:90:bb:e3:b5:d4:c6:53:d3:7f:35:fb:e2:a6: a6:cf:48:4a:ff:d5:58:35:51:4b:82:dd:98:7b:36:9b:68:5d: da:4e:96:46:18:d9:3f:81:b8:a6:92:ee:77:62:d9:5a:f3:55: fc:90:30:64:9f:01:d9:0f:ec:0b:ac:43:0d:6b:45:50:80:0f: 02:2d:97:32:9b:eb:66:a0:84:f7:6d:65:55:00:76:21:39:30: d6:b5:b0:d9:0c:90:21:cb:51:4b:3e:6f:7a:0d:96:b8:7d:23: 26:c6:d7:b7:a4:73:e2:2d:49:80:61:e7:e7:94:94:83:18:11: 9f:0b:99:23:57:7c:06:7f:54:ab:a5:46:6e:da:cc:6d:77:e8: 3e:a1:6b:d8:a1:de:86:46:d9:bc:f2:f9:51:e2:8e:b6:96:6c: bc:26:d7:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcQAvhYXnmf+MYXmmThAEI6Q4kUYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDAxMDIzWhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMGIzNDJiNjEyMGQ3NjVkYWRhMGQ4ZDJiNjA0ZDg2YTgx OGE1ZDRjYTA3OTZjMWEzZTE0ODY0NGI3MDU2ZTMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrltzhtnhbgtjkp/Hg78WEZ24/uPT7VJsq9UUWshM5IdrY TdrmR/AzYH9R4jlVcjr+s1zDOLxfvmBPvD5+UBsTdcyZwxCb6cDw+SGeAk06cBwj mpr9z0i0hiBfTtUC9J2krK39Pay8XfP7Wj/C/DJptiOWHuf8bkLcCjCaDCKcmAI3 hIzgvT4y1Z+lCjQttgFol4OF/FwMs5eHtaMe9xTERNfae0u6nHmQWxsflikphTtv aWDCM/7VbJnGFGIcyU1sExNO1GslxwrNsOelgorLmA9ywX9sUvmqP4SYosY1g5hf uQ9Ee0jJEk/PisTXxhUngWhB/C184wyBvGTLOXUbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCtewxOrxg8a3gBsI4T7V31L0LT0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkMDJlNTRiLTBhY2YtNGMzYi05ZTVlLTE0ODQyZGY4ZTM1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gPAwDQYJKoZIhvcNAQELBQADggEBAC4ZDuwdsmzjrWOVV1Ox2ovx ipS7yznAOkFiYkogGVRjo2+JqvP3P5E54hZcfijRZGTolc59Ts8xp0k+b191610G wdz402r6akhuM6sN8VMofoaAVTD1ip1n9CMBCZI/kLvjtdTGU9N/NfvipqbPSEr/ 1Vg1UUuC3Zh7NptoXdpOlkYY2T+BuKaS7ndi2VrzVfyQMGSfAdkP7AusQw1rRVCA DwItlzKb62aghPdtZVUAdiE5MNa1sNkMkCHLUUs+b3oNlrh9IybG17ekc+ItSYBh 5+eUlIMYEZ8LmSNXfAZ/VKulRm7azG136D6ha9ih3oZG2bzy+VHijraWbLwm1ws= -----END CERTIFICATE-----Generated at Sat Aug 23 08:14:43 2025 by rpki-client