$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78869b8-e98d-457e-8d22-548597cc5303.roa File: f78869b8-e98d-457e-8d22-548597cc5303.roa (raw, json) Hash identifier: C5GV6LNa/51DGujfnToKRDgZAYw4N9YIcex+2KindwE= Subject key identifier: 3B:28:6E:7B:D9:32:69:B1:9C:28:6F:EB:6D:0E:15:1B:C8:BD:C8:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2F3E999440FF2219DE92D626337DB93A83159065 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78869b8-e98d-457e-8d22-548597cc5303.roa Signing time: Mon 18 Aug 2025 15:31:25 +0000 ROA not before: Mon 18 Aug 2025 15:31:25 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:8130::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3e:99:94:40:ff:22:19:de:92:d6:26:33:7d:b9:3a:83:15:90:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:31:25 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=9b533848974b2e2ffca0e88422e1ddd47096a94a6731ee360286c789ed2a6cbc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c7:76:7c:00:35:b3:de:41:5a:72:29:e7:71: 3b:36:39:df:35:23:ed:e7:82:47:dc:33:f2:c9:93: be:c9:70:0b:41:84:ac:3d:ad:9b:34:d4:d6:ae:ad: b5:c7:66:56:85:05:b1:1a:7b:45:f6:e4:c9:09:e0: 8d:ff:e3:7b:03:f4:f9:ae:5b:7d:63:70:a2:47:38: 41:cd:38:1a:71:8b:42:4b:2f:24:3e:21:57:fa:0f: 7e:a2:59:19:fc:21:e5:11:49:6e:56:c6:e3:cf:82: b8:18:6b:44:35:53:ef:22:24:cc:0d:71:79:90:ec: 33:2e:17:a1:9f:d5:b2:d4:93:c4:71:ab:78:6f:7b: 16:de:35:cb:da:db:be:86:9d:17:b6:a0:0e:05:f4: 9e:cb:8f:bd:1c:5a:2a:ea:52:ef:dd:13:06:fd:c0: f1:e0:09:ed:82:29:4e:50:d4:6a:a1:d0:41:87:ed: b5:f0:b4:1f:7a:fc:05:dd:0d:8c:e3:d9:16:62:6a: ca:0f:cc:02:83:19:20:9d:d1:04:e9:32:79:cf:04: 31:a1:67:b9:26:80:d0:63:f4:48:4c:c2:b9:f4:68: 2a:d0:32:13:31:41:40:78:f5:f2:7b:43:44:27:de: 81:6d:bd:e2:e6:5f:9f:a8:f1:30:59:cc:ca:f4:8a: 66:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:28:6E:7B:D9:32:69:B1:9C:28:6F:EB:6D:0E:15:1B:C8:BD:C8:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78869b8-e98d-457e-8d22-548597cc5303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8130::/48 Signature Algorithm: sha256WithRSAEncryption c0:2d:ab:e7:5d:d1:4b:af:b2:54:90:58:70:2b:a5:25:51:2c: c5:39:ed:6d:19:fe:01:d4:cc:8c:31:a4:45:84:1e:4a:d9:40: aa:3a:a2:82:f6:2c:bb:6c:9b:11:43:c5:d5:33:8c:c0:49:dc: 46:82:05:44:ee:2f:a4:6f:5c:58:56:d3:a0:e6:24:90:43:fc: 1f:27:18:bd:e0:b5:10:7f:95:d3:df:67:21:3f:32:2e:77:fa: b9:02:a8:33:ab:ef:3e:5b:be:5b:fd:07:2b:dd:67:84:aa:2e: ce:b6:18:5d:6b:61:26:fe:b1:4c:2c:cb:70:91:1b:86:81:b2: f5:f8:5d:5f:b8:a3:80:b9:71:b8:0e:2e:86:cd:8d:00:98:a5: ab:7c:3b:2d:f3:56:64:fa:30:09:2e:4d:5a:d2:61:c6:0a:8a: ef:df:fc:b1:1e:75:56:58:7a:75:22:a3:94:be:bc:cd:33:e9: 3b:b4:fd:05:3d:4e:34:af:d8:53:36:0f:ae:02:58:ef:d0:9c: 9b:33:f9:1b:f4:11:6e:d6:e4:46:4c:ff:0f:a9:cc:4c:f5:a0: e3:77:8e:c1:a6:42:e6:e1:f6:ea:b9:77:84:54:61:23:97:a9: d2:a8:57:c9:a4:ca:30:6d:19:ab:bb:c3:c6:bf:4a:e9:49:de: 17:f0:b5:ab -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULz6ZlED/IhnektYmM325OoMVkGUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUzMTI1WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjUzMzg0ODk3NGIyZTJmZmNhMGU4ODQyMmUxZGRkNDcw OTZhOTRhNjczMWVlMzYwMjg2Yzc4OWVkMmE2Y2JjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhx3Z8ADWz3kFacinncTs2Od81I+3ngkfcM/LJk77JcAtB hKw9rZs01NaurbXHZlaFBbEae0X25MkJ4I3/43sD9PmuW31jcKJHOEHNOBpxi0JL LyQ+IVf6D36iWRn8IeURSW5WxuPPgrgYa0Q1U+8iJMwNcXmQ7DMuF6Gf1bLUk8Rx q3hvexbeNcva276GnRe2oA4F9J7Lj70cWirqUu/dEwb9wPHgCe2CKU5Q1Gqh0EGH 7bXwtB96/AXdDYzj2RZiasoPzAKDGSCd0QTpMnnPBDGhZ7kmgNBj9EhMwrn0aCrQ MhMxQUB49fJ7Q0Qn3oFtveLmX5+o8TBZzMr0imZxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOyhue9kyabGcKG/rbQ4VG8i9yCYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3ODg2OWI4LWU5OGQtNDU3ZS04ZDIyLTU0ODU5N2NjNTMwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgTAwDQYJKoZIhvcNAQELBQADggEBAMAtq+dd0UuvslSQWHArpSVR LMU57W0Z/gHUzIwxpEWEHkrZQKo6ooL2LLtsmxFDxdUzjMBJ3EaCBUTuL6RvXFhW 06DmJJBD/B8nGL3gtRB/ldPfZyE/Mi53+rkCqDOr7z5bvlv9ByvdZ4SqLs62GF1r YSb+sUwsy3CRG4aBsvX4XV+4o4C5cbgOLobNjQCYpat8Oy3zVmT6MAkuTVrSYcYK iu/f/LEedVZYenUio5S+vM0z6Tu0/QU9TjSv2FM2D64CWO/QnJsz+Rv0EW7W5EZM /w+pzEz1oON3jsGmQubh9uq5d4RUYSOXqdKoV8mkyjBtGau7w8a/SulJ3hfwtas= -----END CERTIFICATE-----Generated at Sat Aug 23 08:17:31 2025 by rpki-client