$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/133cebbb-23db-42e9-b847-3ba2de1bf914.roa File: 133cebbb-23db-42e9-b847-3ba2de1bf914.roa (raw, json) Hash identifier: WoGwUnovcwtmCZz8otwLlMDcJH9ufN0RQfvwc8R/SkE= Subject key identifier: 33:00:3D:2D:76:AA:F5:26:49:59:6A:4E:46:26:69:AF:EF:D3:52:EF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A45A0303714D3905C78063A8F8B1FE33F86C054 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/133cebbb-23db-42e9-b847-3ba2de1bf914.roa Signing time: Tue 26 Aug 2025 16:00:33 +0000 ROA not before: Tue 26 Aug 2025 16:00:33 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:a4c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:45:a0:30:37:14:d3:90:5c:78:06:3a:8f:8b:1f:e3:3f:86:c0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:00:33 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=00b36f97b306b2630fabb8b7897d0c51bd7992a016920a4a02281aa5fda00f52, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:53:e8:42:80:fb:cc:74:d6:cb:83:c7:52:d3: e7:ce:b6:aa:da:bb:8d:5d:72:e0:85:0b:27:08:91: 70:d7:2e:c7:ef:cd:f8:c3:3c:7c:bd:aa:14:fd:a4: 71:5c:fd:54:fc:d7:88:87:b7:b1:64:cf:9c:5c:0b: da:3f:55:ea:0f:48:ae:d2:05:72:c0:bc:19:25:21: bd:5b:5b:b6:07:d6:5d:34:0c:6e:db:92:65:a6:ce: 77:e5:c6:18:e9:9f:79:65:0c:c5:10:82:20:ba:f4: 46:47:91:28:33:35:6a:1d:73:a9:13:6e:80:9b:22: 99:a3:58:7a:c9:c0:0e:69:39:02:44:40:fb:10:ae: 29:c9:e6:8d:e6:b1:33:78:a8:28:04:15:0a:f9:52: d8:1a:0e:83:49:cd:9c:4d:63:5c:20:30:5b:89:cf: 1b:ac:7b:5c:96:8e:16:ef:5e:e3:8f:f3:d5:15:3b: 00:6f:66:fc:25:c2:68:2f:07:6a:6a:3b:32:07:e0: d5:3d:de:fd:55:4f:c7:d0:87:82:32:bd:a3:48:d6: b6:ce:c0:86:49:d8:07:3f:b9:dd:58:26:cf:a9:80: 2e:35:2d:a0:68:34:30:5a:bf:ab:74:2d:57:bf:9a: 20:ee:eb:b6:f8:d1:b9:7b:d4:a9:23:2c:31:03:0a: 14:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:00:3D:2D:76:AA:F5:26:49:59:6A:4E:46:26:69:AF:EF:D3:52:EF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/133cebbb-23db-42e9-b847-3ba2de1bf914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:a4c0::/48 Signature Algorithm: sha256WithRSAEncryption 52:9f:c1:36:db:3f:b2:5a:61:98:12:8a:86:40:9e:3d:82:cc: b9:c6:52:47:0d:5e:05:fa:fd:60:07:4a:be:5e:2a:cf:30:ff: c5:74:fe:7e:79:9e:76:83:f5:8a:b5:b7:1c:f2:95:34:13:58: 3f:b9:87:b0:20:ad:2b:33:36:9e:5d:26:34:a9:0d:de:de:5d: 30:24:45:18:78:86:fc:a3:53:34:be:12:16:3d:f2:62:76:4e: d1:bb:d8:44:c7:44:6e:56:9a:a9:e1:65:8d:72:01:a3:cd:9a: f8:3c:04:3f:80:80:9b:4a:7f:fd:32:c4:de:e4:31:e5:31:97: 90:e2:32:28:66:53:6f:d0:a4:3a:aa:a8:3a:1c:f1:8a:fa:e9: 74:71:47:24:fb:f9:a3:66:70:71:fd:3c:4d:4e:1c:e2:2d:e8: cc:19:56:d5:42:e0:bc:cd:2d:c5:c3:9d:4e:67:fd:2c:8e:32: 87:2a:3c:c1:f5:82:bd:9f:dc:97:a3:5a:88:8e:ec:a9:4c:73: 26:4b:9b:68:f9:c8:be:da:7a:a4:28:05:0a:ef:85:1a:0f:5c: 2c:6b:04:3e:53:19:73:71:62:8b:29:85:b3:b1:4d:05:61:7d: a4:66:92:d5:25:39:17:45:ca:0e:7b:cb:59:99:9c:20:90:d1: de:20:33:3b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWkWgMDcU05BceAY6j4sf4z+GwFQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTYwMDMzWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMGIzNmY5N2IzMDZiMjYzMGZhYmI4Yjc4OTdkMGM1MWJk Nzk5MmEwMTY5MjBhNGEwMjI4MWFhNWZkYTAwZjUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBU+hCgPvMdNbLg8dS0+fOtqrau41dcuCFCycIkXDXLsfv zfjDPHy9qhT9pHFc/VT814iHt7Fkz5xcC9o/VeoPSK7SBXLAvBklIb1bW7YH1l00 DG7bkmWmznflxhjpn3llDMUQgiC69EZHkSgzNWodc6kTboCbIpmjWHrJwA5pOQJE QPsQrinJ5o3msTN4qCgEFQr5UtgaDoNJzZxNY1wgMFuJzxuse1yWjhbvXuOP89UV OwBvZvwlwmgvB2pqOzIH4NU93v1VT8fQh4IyvaNI1rbOwIZJ2Ac/ud1YJs+pgC41 LaBoNDBav6t0LVe/miDu67b40bl71KkjLDEDChQ1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMwA9LXaq9SZJWWpORiZpr+/TUu8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEzM2NlYmJiLTIzZGItNDJlOS1iODQ3LTNiYTJkZTFiZjkxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//pMAwDQYJKoZIhvcNAQELBQADggEBAFKfwTbbP7JaYZgSioZAnj2C zLnGUkcNXgX6/WAHSr5eKs8w/8V0/n55nnaD9Yq1txzylTQTWD+5h7AgrSszNp5d JjSpDd7eXTAkRRh4hvyjUzS+EhY98mJ2TtG72ETHRG5WmqnhZY1yAaPNmvg8BD+A gJtKf/0yxN7kMeUxl5DiMihmU2/QpDqqqDoc8Yr66XRxRyT7+aNmcHH9PE1OHOIt 6MwZVtVC4LzNLcXDnU5n/SyOMocqPMH1gr2f3JejWoiO7KlMcyZLm2j5yL7aeqQo BQrvhRoPXCxrBD5TGXNxYosphbOxTQVhfaRmktUlORdFyg57y1mZnCCQ0d4gMzs= -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:27 2025 by rpki-client