$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4e70d1f-2dd0-4123-83c9-f2b2b95f2268.roa File: e4e70d1f-2dd0-4123-83c9-f2b2b95f2268.roa (raw, json) Hash identifier: xtgPEw+GU9jdJVBUjypTyfCKuyj8lF5XP76EkP27nW0= Subject key identifier: 7F:B8:C2:18:03:EB:8E:91:4E:24:91:0F:90:68:67:21:19:2A:62:05 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 08898D5A3CB245904AB6CC2D578A79020CEF069C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4e70d1f-2dd0-4123-83c9-f2b2b95f2268.roa Signing time: Wed 13 Aug 2025 00:11:11 +0000 ROA not before: Wed 13 Aug 2025 00:11:11 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f32:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:89:8d:5a:3c:b2:45:90:4a:b6:cc:2d:57:8a:79:02:0c:ef:06:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:11:11 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=2120d896cb848f64b793d41de64252ffa307431f8944fff5bf7a0f71d18d9307, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c2:3c:41:11:7d:cc:70:1d:2f:ed:1b:4e:91: 14:b6:89:31:2e:88:94:2d:e0:7c:b0:2e:b8:9a:f8: d0:63:3f:df:4c:4c:b8:f4:4c:e6:67:55:fe:69:60: ef:3d:1d:72:2f:a3:6d:49:59:23:b3:c4:5a:c1:2f: 8c:73:cc:ce:2c:51:50:7b:40:78:d3:0d:15:5c:ec: 0d:a3:81:c4:17:e6:a7:b9:1d:b2:6a:df:25:4e:12: 1a:ba:4f:fd:de:7f:50:d7:1f:72:49:0f:a0:9b:12: 5e:44:9d:b1:3f:57:bf:92:2a:ef:c9:17:4d:13:d7: cd:03:b2:5c:99:33:d7:0a:89:3c:5f:e8:11:bb:1a: 27:5e:aa:5f:b3:1a:23:bd:7d:64:92:b5:d4:7b:a6: e1:8b:28:bd:f5:9b:ef:f9:9f:ee:35:24:2d:7b:b5: 7d:93:eb:5b:5b:26:6e:d5:27:cd:af:67:98:2a:08: dc:95:09:f9:61:8e:05:f6:1d:b7:8f:2c:06:f1:b5: 44:4a:3b:74:9f:fc:7a:a2:f6:ea:ef:23:8a:da:65: 81:f2:4a:d2:2f:a9:16:86:b4:f2:c1:d8:15:f0:fc: 24:86:c6:33:f9:a8:5a:1e:44:65:71:3d:11:62:a3: 45:96:8e:a6:8c:ad:fa:56:5c:06:56:b1:f0:fc:c5: 69:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B8:C2:18:03:EB:8E:91:4E:24:91:0F:90:68:67:21:19:2A:62:05 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4e70d1f-2dd0-4123-83c9-f2b2b95f2268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f32:2000::/40 Signature Algorithm: sha256WithRSAEncryption 4f:e7:0e:71:81:35:7c:dd:0f:79:db:d1:3e:fd:1f:a2:34:8c: 3c:c3:b6:34:d3:dd:bf:6f:92:0f:f0:11:50:ed:27:05:33:cc: 2a:9b:93:b1:5b:7e:2a:18:e3:a6:42:c6:33:83:ce:87:4e:bf: 29:da:dd:aa:46:7b:97:98:f9:e4:1d:98:d8:54:ef:eb:b1:74: a7:5d:26:33:0e:67:08:fe:61:6f:fa:0c:ed:f9:81:6e:5c:ff: 10:2d:0d:cc:62:8b:60:ce:37:bc:15:88:14:a8:51:17:bc:8d: 1a:c9:d8:76:27:d5:6f:cb:96:95:e1:f7:fc:7d:b3:0a:4a:01: 87:00:1f:9e:5d:18:f8:67:87:c7:d0:c4:55:c7:5c:cd:cc:50: 5f:47:e3:66:aa:b7:43:10:3f:bb:ec:ed:f1:96:36:14:0d:07: fa:66:d6:82:6c:45:31:91:b8:07:16:84:64:aa:36:cf:68:6a: 11:8b:b6:d5:03:a9:28:64:25:c7:73:d2:87:fc:09:a4:f3:6b: fc:4c:78:9f:87:ef:f2:f1:ad:cd:11:5e:4b:a1:d3:74:81:5c: 9b:82:47:63:dd:c2:bd:31:11:6b:e6:62:f3:98:99:0a:cd:0b: 82:96:92:58:a6:d6:03:d5:c2:f6:a9:b1:27:52:74:96:d3:a6: 80:dd:fd:a1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCImNWjyyRZBKtswtV4p5AgzvBpwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAxMTExWhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTIwZDg5NmNiODQ4ZjY0Yjc5M2Q0MWRlNjQyNTJmZmEz MDc0MzFmODk0NGZmZjViZjdhMGY3MWQxOGQ5MzA3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfwjxBEX3McB0v7RtOkRS2iTEuiJQt4HywLria+NBjP99M TLj0TOZnVf5pYO89HXIvo21JWSOzxFrBL4xzzM4sUVB7QHjTDRVc7A2jgcQX5qe5 HbJq3yVOEhq6T/3ef1DXH3JJD6CbEl5EnbE/V7+SKu/JF00T180DslyZM9cKiTxf 6BG7Gideql+zGiO9fWSStdR7puGLKL31m+/5n+41JC17tX2T61tbJm7VJ82vZ5gq CNyVCflhjgX2HbePLAbxtURKO3Sf/Hqi9urvI4raZYHyStIvqRaGtPLB2BXw/CSG xjP5qFoeRGVxPRFio0WWjqaMrfpWXAZWsfD8xWkjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUf7jCGAPrjpFOJJEPkGhnIRkqYgUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U0ZTcwZDFmLTJkZDAtNDEyMy04M2M5LWYyYjJiOTVmMjI2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8yIDANBgkqhkiG9w0BAQsFAAOCAQEAT+cOcYE1fN0PedvRPv0fojSM PMO2NNPdv2+SD/ARUO0nBTPMKpuTsVt+KhjjpkLGM4POh06/KdrdqkZ7l5j55B2Y 2FTv67F0p10mMw5nCP5hb/oM7fmBblz/EC0NzGKLYM43vBWIFKhRF7yNGsnYdifV b8uWleH3/H2zCkoBhwAfnl0Y+GeHx9DEVcdczcxQX0fjZqq3QxA/u+zt8ZY2FA0H +mbWgmxFMZG4BxaEZKo2z2hqEYu21QOpKGQlx3PSh/wJpPNr/Ex4n4fv8vGtzRFe S6HTdIFcm4JHY93CvTERa+Zi85iZCs0LgpaSWKbWA9XC9qmxJ1J0ltOmgN39oQ== -----END CERTIFICATE-----Generated at Sat Aug 23 08:14:37 2025 by rpki-client