$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6fc4b5-684e-4b51-8a8b-002e83881325.roa File: 1c6fc4b5-684e-4b51-8a8b-002e83881325.roa (raw, json) Hash identifier: /4VtYtRrQIQKajPaqNO1Sld/3DoLqdhCJFWX49hXQGk= Subject key identifier: 23:05:AC:90:F2:51:8F:A9:02:D4:8F:35:35:87:55:10:02:65:C5:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1029864A7CA1BEE5F15CFB16A50D1C2F812DDEC8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6fc4b5-684e-4b51-8a8b-002e83881325.roa Signing time: Mon 25 Aug 2025 16:53:53 +0000 ROA not before: Mon 25 Aug 2025 16:53:53 +0000 ROA not after: Mon 29 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fec:8800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:29:86:4a:7c:a1:be:e5:f1:5c:fb:16:a5:0d:1c:2f:81:2d:de:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 16:53:53 2025 GMT Not After : Sep 29 23:59:59 2025 GMT Subject: serialNumber=54625d996274744cf89af8295614950c71aa80e162cf3f459cc80351ef8c2e0c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:d2:63:61:95:cc:63:91:12:9a:d5:0b:52: fc:7b:d8:7b:c9:d2:2c:01:bb:51:95:07:9e:08:da: c5:d9:5c:a1:9f:c3:32:c3:75:c7:e0:47:f2:01:97: c4:58:1c:a4:0d:16:c0:88:aa:74:7c:00:6d:e8:7d: 8f:1e:02:23:fc:73:7b:cf:f3:b7:d1:51:13:f4:f7: 51:b6:d1:47:a6:aa:7e:cb:eb:cc:de:b9:9d:4d:ad: c9:8e:41:6e:8a:d5:94:c4:ff:c1:52:15:47:4b:dc: 27:5a:eb:f4:92:e7:84:50:1a:60:75:bd:ec:43:41: b7:66:71:08:3b:b5:cc:72:be:dc:fb:c7:1c:7d:36: 37:0f:0b:2c:02:b8:c9:8c:3b:60:3f:02:bd:5f:16: f4:b5:49:f0:aa:44:b3:3b:0a:df:37:2c:2e:78:1c: 67:34:7f:aa:cc:08:1b:b7:de:60:a3:cc:70:4c:8e: 33:53:07:2d:76:d1:97:75:6f:e4:1c:4c:d0:81:62: 81:9d:19:39:91:60:b1:03:0e:e2:32:b6:51:8f:f2: d2:56:52:09:9b:4b:84:fe:37:f8:72:6c:57:82:ea: 01:2c:e0:df:ea:64:9d:71:4d:83:f5:cd:b3:7d:93: ca:f6:7a:b6:b4:59:06:c0:e6:6b:7b:bc:4f:39:be: db:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:05:AC:90:F2:51:8F:A9:02:D4:8F:35:35:87:55:10:02:65:C5:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6fc4b5-684e-4b51-8a8b-002e83881325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:8800::/48 Signature Algorithm: sha256WithRSAEncryption cc:7a:52:f1:95:7b:97:25:39:6f:26:54:23:f0:76:df:d2:12: 71:2b:8c:d0:18:90:a5:8f:57:c1:ec:e7:fa:c6:ab:84:75:98: 75:dd:c2:b9:88:f6:02:a1:2b:31:38:c2:31:ff:27:64:9f:9a: 57:6f:fb:52:e9:6e:58:96:a6:8f:a5:6e:b4:99:2c:02:e3:1a: 82:3f:4b:b4:e8:a2:35:ca:f5:bc:20:0c:de:61:9c:97:b2:e5: 60:ec:00:2e:9c:5a:ca:ca:0a:38:02:61:f9:94:06:3b:3b:a3: 9d:12:8a:24:61:e1:7a:f7:1c:84:45:a9:61:24:7a:e9:d0:94: 5e:bb:a6:af:30:b4:f7:ae:de:ff:0a:40:7a:27:b1:ce:45:05: 15:52:b9:57:f5:cd:80:a3:05:55:c1:3e:a5:ab:6d:5a:8f:8d: 37:a5:32:62:37:9b:83:4b:5e:d9:49:47:4c:7a:68:26:15:30: 3e:a1:20:df:37:b9:0c:fa:eb:38:50:44:9f:9a:4e:9c:d6:6c: a4:4e:3e:2d:14:e6:cf:1b:4a:68:c5:3c:bc:ec:ef:da:49:10: b2:09:67:e8:01:16:8e:5e:b4:2b:6d:2d:ef:32:af:45:8b:65: bb:77:f4:d6:46:12:a5:60:02:72:e3:70:9f:fa:09:c4:cb:69: a0:4a:bd:fc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUECmGSnyhvuXxXPsWpQ0cL4Et3sgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI1MTY1MzUzWhcNMjUwOTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDYyNWQ5OTYyNzQ3NDRjZjg5YWY4Mjk1NjE0OTUwYzcx YWE4MGUxNjJjZjNmNDU5Y2M4MDM1MWVmOGMyZTBjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLD9JjYZXMY5ESmtULUvx72HvJ0iwBu1GVB54I2sXZXKGf wzLDdcfgR/IBl8RYHKQNFsCIqnR8AG3ofY8eAiP8c3vP87fRURP091G20Uemqn7L 68zeuZ1NrcmOQW6K1ZTE/8FSFUdL3Cda6/SS54RQGmB1vexDQbdmcQg7tcxyvtz7 xxx9NjcPCywCuMmMO2A/Ar1fFvS1SfCqRLM7Ct83LC54HGc0f6rMCBu33mCjzHBM jjNTBy120Zd1b+QcTNCBYoGdGTmRYLEDDuIytlGP8tJWUgmbS4T+N/hybFeC6gEs 4N/qZJ1xTYP1zbN9k8r2era0WQbA5mt7vE85vtszAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIwWskPJRj6kC1I81NYdVEAJlxW0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFjNmZjNGI1LTY4NGUtNGI1MS04YThiLTAwMmU4Mzg4MTMyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/siAAwDQYJKoZIhvcNAQELBQADggEBAMx6UvGVe5clOW8mVCPwdt/S EnErjNAYkKWPV8Hs5/rGq4R1mHXdwrmI9gKhKzE4wjH/J2Sfmldv+1LpbliWpo+l brSZLALjGoI/S7ToojXK9bwgDN5hnJey5WDsAC6cWsrKCjgCYfmUBjs7o50SiiRh 4Xr3HIRFqWEkeunQlF67pq8wtPeu3v8KQHonsc5FBRVSuVf1zYCjBVXBPqWrbVqP jTelMmI3m4NLXtlJR0x6aCYVMD6hIN83uQz66zhQRJ+aTpzWbKROPi0U5s8bSmjF PLzs79pJELIJZ+gBFo5etCttLe8yr0WLZbt39NZGEqVgAnLjcJ/6CcTLaaBKvfw= -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:32 2025 by rpki-client