$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a36bf8b9-52fd-4dde-a02c-b08a420e83f3.roa File: a36bf8b9-52fd-4dde-a02c-b08a420e83f3.roa (raw, json) Hash identifier: +XX9olH1QtUK6xZiCepXXm0biHiZcfKNaFwJIZGPCws= Subject key identifier: 31:52:4C:ED:8E:12:22:19:70:5B:4F:F8:6B:A3:B1:47:97:57:E8:E2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A9540F65EA4BB4309A45708A3A8663382A993E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a36bf8b9-52fd-4dde-a02c-b08a420e83f3.roa Signing time: Mon 04 Aug 2025 17:01:12 +0000 ROA not before: Mon 04 Aug 2025 17:01:12 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f11:4000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:95:40:f6:5e:a4:bb:43:09:a4:57:08:a3:a8:66:33:82:a9:93:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:01:12 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=cf15a67bb1c1447688ed8efaa608668fcabf4a7b1d25b680ac54927b53a9d09e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:56:1b:8e:00:e9:eb:f2:1e:43:c5:90:f2: b5:59:4d:96:81:a9:d7:05:eb:5d:08:f0:e3:3a:7c: 59:7b:4a:c3:2f:2e:ee:71:02:70:9c:60:82:b8:81: 51:74:38:08:e4:29:73:06:d4:c5:cd:47:42:1c:e6: b6:ca:e3:b0:19:19:db:a3:48:7b:f9:a1:b2:b9:21: c7:ac:a1:4e:31:31:24:51:2d:eb:ea:d1:6f:30:01: fd:8c:95:a7:37:dd:85:79:2f:f5:39:d2:ce:ad:de: ce:ce:f4:43:0f:5c:ab:00:a0:46:8c:01:4f:b0:68: 22:31:1d:1e:b7:5b:21:53:2e:ac:00:35:a2:ee:91: 06:d3:0a:24:1d:7e:23:eb:1c:37:cb:32:94:67:ab: 32:78:20:3a:b9:78:44:36:51:dc:53:04:a1:50:da: d9:1d:a7:fa:5c:ff:87:51:3c:b9:7b:b6:95:57:4d: 4b:e6:10:61:fc:a0:1e:38:15:11:ff:09:c6:23:34: b8:26:1a:00:aa:18:32:13:5f:28:2b:54:98:82:83: f5:5c:2e:69:87:88:2e:17:a8:67:a3:7b:de:ec:c8: 41:26:6a:f1:21:e9:2a:4a:40:d0:24:c1:05:a6:a0: 5e:11:4f:79:78:9e:b4:35:e4:b4:ab:0f:69:26:16: 97:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:52:4C:ED:8E:12:22:19:70:5B:4F:F8:6B:A3:B1:47:97:57:E8:E2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a36bf8b9-52fd-4dde-a02c-b08a420e83f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f11:4000::/37 Signature Algorithm: sha256WithRSAEncryption c3:b0:ee:ae:d3:91:e4:9d:01:7a:56:56:ef:74:fc:f3:7e:a2: 4e:c7:fc:56:2f:71:13:dc:11:dc:da:8d:cc:a9:e8:d1:7d:77: 4c:0d:5f:6e:9d:f8:48:f0:2c:69:1f:05:0c:bb:15:97:b2:50: de:fb:bf:2a:21:58:e6:dc:9a:e1:1c:89:73:cf:1c:e6:bd:45: 15:ef:75:fc:b7:10:ae:2a:09:08:c8:3e:ab:f8:3d:55:9b:6b: e3:eb:2d:15:8f:b9:00:fd:73:51:a2:ef:1d:b5:9b:67:01:be: 6e:90:28:62:e7:f7:3c:f3:40:66:14:d6:8b:f7:74:df:d2:df: 48:28:79:fd:36:3c:07:87:aa:ed:bd:aa:91:2f:f3:32:01:07: ab:9c:c4:8c:ad:62:ab:94:c2:b0:36:2c:9d:8d:7f:a7:30:98: 9b:74:7a:6b:b2:e0:bd:53:1d:3a:63:70:d7:e8:25:b5:c9:37: 30:12:88:11:fd:ea:4c:0c:7c:b2:38:2f:4c:bf:d9:2a:df:f9: fc:90:da:ce:62:5d:ca:07:9f:9d:65:76:d3:7c:b3:04:ce:27: 80:99:8f:05:59:b2:16:f7:3a:4c:6b:a3:ae:3a:75:1e:de:57: 77:f5:fc:9d:3d:87:70:03:1d:ef:cf:ea:8a:c8:24:64:72:b4: a9:d8:6b:7d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWpVA9l6ku0MJpFcIo6hmM4Kpk+kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTcwMTEyWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjE1YTY3YmIxYzE0NDc2ODhlZDhlZmFhNjA4NjY4ZmNh YmY0YTdiMWQyNWI2ODBhYzU0OTI3YjUzYTlkMDllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzW1YbjgDp6/IeQ8WQ8rVZTZaBqdcF610I8OM6fFl7SsMv Lu5xAnCcYIK4gVF0OAjkKXMG1MXNR0Ic5rbK47AZGdujSHv5obK5IcesoU4xMSRR Levq0W8wAf2Mlac33YV5L/U50s6t3s7O9EMPXKsAoEaMAU+waCIxHR63WyFTLqwA NaLukQbTCiQdfiPrHDfLMpRnqzJ4IDq5eEQ2UdxTBKFQ2tkdp/pc/4dRPLl7tpVX TUvmEGH8oB44FRH/CcYjNLgmGgCqGDITXygrVJiCg/VcLmmHiC4XqGeje97syEEm avEh6SpKQNAkwQWmoF4RT3l4nrQ15LSrD2kmFpenAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUMVJM7Y4SIhlwW0/4a6OxR5dX6OIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzNmJmOGI5LTUyZmQtNGRkZS1hMDJjLWIwOGE0MjBlODNmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8RQDANBgkqhkiG9w0BAQsFAAOCAQEAw7DurtOR5J0BelZW73T8836i Tsf8Vi9xE9wR3NqNzKno0X13TA1fbp34SPAsaR8FDLsVl7JQ3vu/KiFY5tya4RyJ c88c5r1FFe91/LcQrioJCMg+q/g9VZtr4+stFY+5AP1zUaLvHbWbZwG+bpAoYuf3 PPNAZhTWi/d039LfSCh5/TY8B4eq7b2qkS/zMgEHq5zEjK1iq5TCsDYsnY1/pzCY m3R6a7LgvVMdOmNw1+gltck3MBKIEf3qTAx8sjgvTL/ZKt/5/JDazmJdygefnWV2 03yzBM4ngJmPBVmyFvc6TGujrjp1Ht5Xd/X8nT2HcAMd78/qisgkZHK0qdhrfQ== -----END CERTIFICATE-----Generated at Sat Aug 23 08:11:41 2025 by rpki-client