$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eefecc86-9a13-4739-98c4-e5b08bb89dac.roa File: eefecc86-9a13-4739-98c4-e5b08bb89dac.roa (raw, json) Hash identifier: 4u2qVlxvt5EByd81sL/Q9EaPZ+WlNNNgluiY5dhwmRY= Subject key identifier: 2E:89:46:8E:EA:7D:72:10:3C:A9:1D:42:0B:23:4B:C3:89:02:53:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1204CDDE309ADA4C17EDCF818D494AB63994AFE3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eefecc86-9a13-4739-98c4-e5b08bb89dac.roa Signing time: Fri 08 Aug 2025 00:10:37 +0000 ROA not before: Fri 08 Aug 2025 00:10:37 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ffc:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:04:cd:de:30:9a:da:4c:17:ed:cf:81:8d:49:4a:b6:39:94:af:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:10:37 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=970c50e75af10aacf6e22292ef547a0149072e68e64323eb46e81fe37765e5d8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ce:3b:56:0e:6c:4e:5d:b6:0f:11:99:b6:01: 74:de:fd:fe:6c:29:c2:85:15:cf:2d:5f:1b:3a:2a: 21:a1:f2:9a:b7:aa:2c:37:0d:1a:6b:91:41:c6:60: aa:84:2c:87:76:21:67:76:d7:8d:64:49:48:4a:10: 1c:27:e9:ed:b9:86:8c:fe:dd:3e:1d:ad:b2:71:81: c1:0a:7a:3c:8b:b8:bc:dd:f6:c5:8e:24:96:2f:d1: 80:b6:37:52:1b:86:7c:51:8f:2c:d6:f7:4d:b3:43: 4c:b6:24:27:66:1e:c4:71:c2:79:9f:80:82:3c:58: 5b:0f:1c:c1:17:a9:0d:32:84:b3:dd:77:58:42:16: 6e:09:d1:c9:d3:26:3e:08:41:5f:cf:6e:3c:60:32: b2:6d:2d:a8:92:34:fd:7a:a8:c9:06:74:d2:76:c8: 4d:8f:4b:d7:67:ca:4b:f0:af:d9:e1:28:61:5c:ad: 9c:7a:e6:0d:97:a1:55:f3:5b:ac:be:66:7c:81:37: ad:a3:66:ac:c5:4c:4b:29:df:ce:63:8f:58:75:07: cc:e7:f5:9f:6f:c7:a2:3f:10:17:5c:07:de:01:0d: 46:90:db:03:c3:c5:17:e6:58:8b:1b:66:56:89:d3: e5:c3:ac:5f:03:fa:58:c4:b8:07:d8:5f:98:d5:57: 45:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:89:46:8E:EA:7D:72:10:3C:A9:1D:42:0B:23:4B:C3:89:02:53:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eefecc86-9a13-4739-98c4-e5b08bb89dac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffc:5000::/40 Signature Algorithm: sha256WithRSAEncryption 12:2b:6d:c5:ea:73:a8:b8:ec:d2:06:50:c0:2b:1a:9d:35:f0: c8:5e:ac:c6:bc:ac:45:b0:ac:2e:1b:2c:5b:11:e2:81:15:dd: 2b:b5:93:20:1a:bd:79:0d:39:0e:1e:1f:6c:9b:c0:ec:07:dc: fd:3d:11:e5:ec:9d:4c:0a:3e:bc:27:e3:94:ec:b0:d7:c5:7a: 0b:b0:44:20:76:36:ca:d0:d8:7c:f3:5f:fb:5c:3c:e8:a6:4b: 7b:03:b6:51:3e:e1:5e:5c:73:af:3b:40:1b:ec:fb:00:61:62: 5a:38:f6:bd:7b:51:a4:e0:17:eb:db:91:b3:c5:57:80:bf:c2: ba:23:82:e0:75:71:5b:31:0d:13:3c:43:76:32:2c:1d:5e:79: 8e:b9:ea:57:38:a9:64:71:27:00:05:05:8b:66:b8:1c:90:8b: f5:9f:28:65:07:5c:c1:72:33:4f:0a:33:49:21:2e:97:9b:56: c4:7c:15:23:67:9f:ee:83:94:6d:ea:e6:ca:7f:29:e9:9a:0c: b1:55:aa:6c:82:3b:10:d7:31:93:6e:d6:2d:b5:08:f1:2f:de: ec:d9:e9:e9:5e:35:bc:9e:6d:12:ec:31:4f:47:ab:18:b6:f7: 14:a5:5e:48:91:16:07:90:f7:5b:98:11:51:b8:f2:05:32:4d: be:44:46:fa -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEgTN3jCa2kwX7c+BjUlKtjmUr+MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAxMDM3WhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzBjNTBlNzVhZjEwYWFjZjZlMjIyOTJlZjU0N2EwMTQ5 MDcyZTY4ZTY0MzIzZWI0NmU4MWZlMzc3NjVlNWQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYzjtWDmxOXbYPEZm2AXTe/f5sKcKFFc8tXxs6KiGh8pq3 qiw3DRprkUHGYKqELId2IWd2141kSUhKEBwn6e25hoz+3T4drbJxgcEKejyLuLzd 9sWOJJYv0YC2N1IbhnxRjyzW902zQ0y2JCdmHsRxwnmfgII8WFsPHMEXqQ0yhLPd d1hCFm4J0cnTJj4IQV/PbjxgMrJtLaiSNP16qMkGdNJ2yE2PS9dnykvwr9nhKGFc rZx65g2XoVXzW6y+ZnyBN62jZqzFTEsp385jj1h1B8zn9Z9vx6I/EBdcB94BDUaQ 2wPDxRfmWIsbZlaJ0+XDrF8D+ljEuAfYX5jVV0XPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQULolGjup9chA8qR1CCyNLw4kCUykwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VlZmVjYzg2LTlhMTMtNDczOS05OGM0LWU1YjA4YmI4OWRhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/8UDANBgkqhkiG9w0BAQsFAAOCAQEAEittxepzqLjs0gZQwCsanTXw yF6sxrysRbCsLhssWxHigRXdK7WTIBq9eQ05Dh4fbJvA7Afc/T0R5eydTAo+vCfj lOyw18V6C7BEIHY2ytDYfPNf+1w86KZLewO2UT7hXlxzrztAG+z7AGFiWjj2vXtR pOAX69uRs8VXgL/CuiOC4HVxWzENEzxDdjIsHV55jrnqVzipZHEnAAUFi2a4HJCL 9Z8oZQdcwXIzTwozSSEul5tWxHwVI2ef7oOUbermyn8p6ZoMsVWqbII7ENcxk27W LbUI8S/e7Nnp6V41vJ5tEuwxT0erGLb3FKVeSJEWB5D3W5gRUbjyBTJNvkRG+g== -----END CERTIFICATE-----Generated at Sat Aug 23 18:12:50 2025 by rpki-client