$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af08ff69-fda0-4866-ab7d-98df40c42aa9.roa File: af08ff69-fda0-4866-ab7d-98df40c42aa9.roa (raw, json) Hash identifier: Ecqqo7iYi4o5pElgEtA36GvUY3lYyTUYEIFdDP/BVRI= Subject key identifier: D4:52:49:48:53:97:E3:03:77:B1:59:10:82:83:4F:A6:5D:DE:C5:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65202BDF3C69A0C815077E14210CD747B3D6C598 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af08ff69-fda0-4866-ab7d-98df40c42aa9.roa Signing time: Mon 18 Aug 2025 15:41:40 +0000 ROA not before: Mon 18 Aug 2025 15:41:40 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb9:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:20:2b:df:3c:69:a0:c8:15:07:7e:14:21:0c:d7:47:b3:d6:c5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:41:40 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=23dda278e568612b06bbb91126a7bcf1f5d8e681770d30b74f9b4e7cf134e8ee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bd:bf:29:90:64:a9:ff:9f:15:6b:81:46:ee: a4:24:7f:06:6f:a8:b8:19:1f:5f:4f:2f:cc:97:00: 86:97:64:0a:4c:79:74:f4:fa:46:b8:93:16:62:d7: 27:91:e0:31:6d:0b:92:60:71:e0:75:64:72:eb:49: 57:2b:85:8d:9b:a8:27:89:03:12:cc:ee:19:d8:c2: ed:aa:8f:0b:c3:7c:9f:1c:8a:65:d4:3f:c2:35:f2: f4:5c:6d:75:ff:5a:8a:65:af:29:2c:df:5b:e0:ca: 59:61:e7:7c:00:a3:db:92:41:78:79:2f:2e:12:d0: cc:9d:4b:b7:58:04:d3:cc:24:95:92:36:4d:0c:6a: cd:9c:a7:64:e5:d7:64:7e:a1:b9:19:43:a9:17:da: 0d:04:dc:bd:06:ab:25:d4:a1:be:ab:b6:cd:47:0c: 23:76:a3:63:1b:f8:66:3a:16:76:02:09:bb:95:b1: 71:e6:04:c5:3a:dc:90:d9:46:f0:92:cc:15:bb:30: 41:62:75:06:b3:67:03:7c:58:a9:39:ba:38:64:d1: 3c:e9:b2:8e:b0:95:ed:e2:b1:d5:1d:8b:7d:f8:26: c5:f6:ac:22:e9:3b:6e:74:ea:44:b3:76:b6:f3:fe: 91:df:f8:7c:83:33:06:84:fe:f4:c4:a6:3f:64:dc: 70:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:52:49:48:53:97:E3:03:77:B1:59:10:82:83:4F:A6:5D:DE:C5:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af08ff69-fda0-4866-ab7d-98df40c42aa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb9:3400::/40 Signature Algorithm: sha256WithRSAEncryption 3f:ef:af:36:77:b7:6b:56:93:e4:93:ca:9c:17:4c:83:df:6c: 31:fd:be:d7:dd:94:b9:c7:c5:83:b9:6d:c4:e5:80:a5:0e:2d: df:05:b1:75:4e:fb:c6:0a:1d:8d:94:8c:66:cb:42:80:f5:a0: c0:dd:af:26:04:1d:f3:e8:78:b7:dd:25:ba:41:37:a7:b9:1e: 3c:c8:cb:f4:b0:c9:8b:68:65:14:93:23:95:5f:2c:d6:61:b9: c4:e3:6d:af:12:f7:c6:97:fd:6f:fd:43:71:5a:4a:43:dd:42: d0:7e:26:48:11:2a:c2:57:84:f3:93:97:95:95:91:b7:a0:7b: f6:86:00:64:22:5b:4d:4a:f5:c0:d1:03:02:3e:6b:78:31:06: 87:e1:98:e1:06:be:52:44:43:3a:4e:3f:f6:ed:7b:11:43:49: 0a:30:55:9d:b1:71:ae:63:7e:14:df:93:c0:15:43:a7:d8:75: 6d:d7:bd:e8:d8:33:de:7e:53:ec:9e:77:00:9a:d8:df:89:fb: 78:77:e2:bd:24:58:9b:1e:e1:1f:7c:c7:bd:1b:06:25:86:48: 13:b9:6c:81:d2:3f:e7:4a:25:30:26:90:1c:d0:3a:56:0a:4e: a0:82:f6:39:60:ff:10:fb:ff:d9:9c:89:90:f1:b0:5d:1b:a6: c1:69:76:3e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZSAr3zxpoMgVB34UIQzXR7PWxZgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTU0MTQwWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2RkYTI3OGU1Njg2MTJiMDZiYmI5MTEyNmE3YmNmMWY1 ZDhlNjgxNzcwZDMwYjc0ZjliNGU3Y2YxMzRlOGVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGvb8pkGSp/58Va4FG7qQkfwZvqLgZH19PL8yXAIaXZApM eXT0+ka4kxZi1yeR4DFtC5JgceB1ZHLrSVcrhY2bqCeJAxLM7hnYwu2qjwvDfJ8c imXUP8I18vRcbXX/Woplryks31vgyllh53wAo9uSQXh5Ly4S0MydS7dYBNPMJJWS Nk0Mas2cp2Tl12R+obkZQ6kX2g0E3L0GqyXUob6rts1HDCN2o2Mb+GY6FnYCCbuV sXHmBMU63JDZRvCSzBW7MEFidQazZwN8WKk5ujhk0Tzpso6wle3isdUdi334JsX2 rCLpO2506kSzdrbz/pHf+HyDMwaE/vTEpj9k3HDdAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU1FJJSFOX4wN3sVkQgoNPpl3exXwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmMDhmZjY5LWZkYTAtNDg2Ni1hYjdkLTk4ZGY0MGM0MmFhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+5NDANBgkqhkiG9w0BAQsFAAOCAQEAP++vNne3a1aT5JPKnBdMg99s Mf2+192UucfFg7ltxOWApQ4t3wWxdU77xgodjZSMZstCgPWgwN2vJgQd8+h4t90l ukE3p7kePMjL9LDJi2hlFJMjlV8s1mG5xONtrxL3xpf9b/1DcVpKQ91C0H4mSBEq wleE85OXlZWRt6B79oYAZCJbTUr1wNEDAj5reDEGh+GY4Qa+UkRDOk4/9u17EUNJ CjBVnbFxrmN+FN+TwBVDp9h1bde96Ngz3n5T7J53AJrY34n7eHfivSRYmx7hH3zH vRsGJYZIE7lsgdI/50olMCaQHNA6VgpOoIL2OWD/EPv/2ZyJkPGwXRumwWl2Pg== -----END CERTIFICATE-----Generated at Sat Aug 23 06:52:44 2025 by rpki-client