$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a72a214c-660b-4404-9cf2-6877b6d84a40.roa File: a72a214c-660b-4404-9cf2-6877b6d84a40.roa (raw, json) Hash identifier: 6pNVTNTb38TzqJB+6kKX6ghzSOE6JB/xLzpHeBufQDw= Subject key identifier: 14:99:E8:3A:67:3B:E5:2F:A2:57:99:28:65:24:01:AD:30:FD:4D:5D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70F9480DD317A3A787C3B79A31FFE65FFB0BEE40 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a72a214c-660b-4404-9cf2-6877b6d84a40.roa Signing time: Wed 20 Aug 2025 00:11:00 +0000 ROA not before: Wed 20 Aug 2025 00:11:00 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff6:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f9:48:0d:d3:17:a3:a7:87:c3:b7:9a:31:ff:e6:5f:fb:0b:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 20 00:11:00 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=6881e79c89eba0d9614a841ebf7a718e9b4ec36ab5cf8863fc0b9a3011265e1c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d5:12:97:9f:e3:44:fb:72:5f:3f:84:d6:cf: 7d:70:b5:f8:de:ea:10:b4:8a:84:e6:39:14:ce:ce: ed:14:6a:82:13:c2:1e:b4:7d:a6:21:6f:af:22:21: 9d:a6:5d:88:3c:94:7e:e8:f4:5e:f5:ce:73:86:7a: 0f:f0:83:47:4b:8b:92:fb:55:e3:b1:b3:01:93:dd: 12:08:ef:dd:dc:18:da:62:ff:35:47:c2:a8:bf:1d: af:6e:4a:02:87:4d:44:3f:06:20:f9:2c:9f:66:53: c1:e9:1f:4c:4f:71:54:45:5b:8e:56:99:03:9d:68: cd:fe:7b:e2:75:f2:82:f4:db:d7:86:4d:9b:7d:28: be:70:29:1e:92:35:ce:45:d5:f8:6d:b8:8c:dc:f4: 20:1c:32:3d:31:8f:64:9f:a2:09:3d:2b:ef:61:56: 93:c2:55:fd:7d:31:25:70:fd:52:9f:26:cb:0e:57: 23:1c:77:33:57:fe:e5:24:e1:49:33:12:1e:95:15: f9:90:43:90:6d:4b:52:b5:ff:41:4d:02:60:1a:18: 1f:cd:d9:10:59:68:38:32:35:19:3b:ac:b7:06:e4: d0:ed:41:d0:2a:70:31:09:8c:34:b9:9a:b5:b5:59: 4c:42:20:f8:d7:48:20:b9:df:8c:b7:83:a8:e8:90: bf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:99:E8:3A:67:3B:E5:2F:A2:57:99:28:65:24:01:AD:30:FD:4D:5D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a72a214c-660b-4404-9cf2-6877b6d84a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6:c000::/48 Signature Algorithm: sha256WithRSAEncryption cc:37:4f:75:37:e2:d3:ef:d7:35:e7:8e:34:9a:94:2a:ee:35: ac:52:ea:1b:5f:3f:cc:fc:b9:58:92:20:0c:36:37:99:3e:e6: a5:44:f0:63:2e:4d:be:84:b6:0a:76:2e:a8:a0:7f:12:ac:05: af:d0:29:52:df:4f:36:90:ff:50:d4:34:6e:0e:d3:40:59:28: 0f:ac:d2:8a:9d:d4:07:48:db:24:66:f1:e5:10:2f:52:36:bd: 5b:ed:91:a9:53:5e:62:41:a6:04:08:67:11:ea:7a:ae:53:8e: 0a:7a:88:28:55:93:ae:72:2f:0e:5b:d0:f9:a6:1b:75:c7:4f: 44:5d:8b:72:58:5b:2a:b7:77:be:60:d7:ff:01:c3:ec:ef:b9: 4a:dd:7c:f0:64:5d:72:f6:36:d2:63:6b:d2:2e:4c:2a:cb:0f: 1d:81:9d:55:ea:72:c0:c4:ed:ff:0a:03:08:4d:d4:c5:74:13: 04:31:4e:c3:35:3f:80:6d:e8:c8:15:23:cf:31:90:a3:bc:14: 98:62:fc:77:91:79:39:47:41:14:67:2d:de:b2:a5:f2:67:2e: a9:b4:df:22:47:ec:3c:dd:2c:85:0e:a4:aa:53:4e:d0:03:4e: 73:df:dd:c8:f9:62:34:46:ff:29:cd:8e:71:72:5e:40:46:4c: 32:02:1e:87 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcPlIDdMXo6eHw7eaMf/mX/sL7kAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIwMDAxMTAwWhcNMjUwOTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODgxZTc5Yzg5ZWJhMGQ5NjE0YTg0MWViZjdhNzE4ZTli NGVjMzZhYjVjZjg4NjNmYzBiOWEzMDExMjY1ZTFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB1RKXn+NE+3JfP4TWz31wtfje6hC0ioTmORTOzu0UaoIT wh60faYhb68iIZ2mXYg8lH7o9F71znOGeg/wg0dLi5L7VeOxswGT3RII793cGNpi /zVHwqi/Ha9uSgKHTUQ/BiD5LJ9mU8HpH0xPcVRFW45WmQOdaM3+e+J18oL029eG TZt9KL5wKR6SNc5F1fhtuIzc9CAcMj0xj2Sfogk9K+9hVpPCVf19MSVw/VKfJssO VyMcdzNX/uUk4UkzEh6VFfmQQ5BtS1K1/0FNAmAaGB/N2RBZaDgyNRk7rLcG5NDt QdAqcDEJjDS5mrW1WUxCIPjXSCC534y3g6jokL/tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFJnoOmc75S+iV5koZSQBrTD9TV0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E3MmEyMTRjLTY2MGItNDQwNC05Y2YyLTY4NzdiNmQ4NGE0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/2wAAwDQYJKoZIhvcNAQELBQADggEBAMw3T3U34tPv1zXnjjSalCru NaxS6htfP8z8uViSIAw2N5k+5qVE8GMuTb6Etgp2LqigfxKsBa/QKVLfTzaQ/1DU NG4O00BZKA+s0oqd1AdI2yRm8eUQL1I2vVvtkalTXmJBpgQIZxHqeq5Tjgp6iChV k65yLw5b0PmmG3XHT0Rdi3JYWyq3d75g1/8Bw+zvuUrdfPBkXXL2NtJja9IuTCrL Dx2BnVXqcsDE7f8KAwhN1MV0EwQxTsM1P4Bt6MgVI88xkKO8FJhi/HeReTlHQRRn Ld6ypfJnLqm03yJH7DzdLIUOpKpTTtADTnPf3cj5YjRG/ynNjnFyXkBGTDICHoc= -----END CERTIFICATE-----Generated at Sat Aug 23 09:03:53 2025 by rpki-client