$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1edaecfe-ad6e-465f-a249-3d5eddc9df52.roa File: 1edaecfe-ad6e-465f-a249-3d5eddc9df52.roa (raw, json) Hash identifier: 4eBsH9dC5SFwvffNOB8+Wu+uRaeObqGNFCS0hqIgnMY= Subject key identifier: 6A:C2:90:FD:1D:B8:23:32:E8:12:66:65:68:5C:1F:99:C0:3F:9D:C2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3FDC975DA0BCC576E9A04405C0355CB91F451B1F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1edaecfe-ad6e-465f-a249-3d5eddc9df52.roa Signing time: Fri 15 Aug 2025 00:32:10 +0000 ROA not before: Fri 15 Aug 2025 00:32:10 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:8010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:dc:97:5d:a0:bc:c5:76:e9:a0:44:05:c0:35:5c:b9:1f:45:1b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 15 00:32:10 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=e55dae7adf558e9e20f3825db5f6262fbfa6a04e3e19f320387b8e4a531870b3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:9c:71:70:70:7e:68:59:3a:cb:b7:98:c5: 54:33:62:eb:d3:ab:d8:4a:2f:3a:45:4f:4b:29:e9: 0f:a4:30:77:15:de:ac:dc:7f:12:02:5f:2c:b4:5e: 71:51:53:46:24:2a:38:2a:f6:57:0e:b6:00:33:7b: 92:d1:55:12:99:06:5d:6d:42:ab:35:85:ae:16:f7: 1f:95:37:63:27:47:8b:96:f6:53:7c:7f:57:89:07: 06:a3:b5:84:8e:23:c7:0d:1f:7f:04:ee:62:9c:97: e9:03:50:43:71:92:16:9c:3d:8b:52:fa:5b:75:9f: 5b:d1:a0:9f:aa:d0:e5:ea:f3:fd:e5:a0:d2:b0:1c: 12:c5:bc:20:9a:98:37:41:ce:99:71:f0:ec:45:ea: a2:d6:17:9c:ea:08:2a:9f:e2:f8:e6:30:66:fd:38: 72:32:c1:57:c3:00:b7:9a:5b:f7:cd:02:37:bc:cb: 92:a2:08:bd:5c:b2:56:34:f1:d4:57:b2:3e:33:9e: 22:45:88:ef:15:43:b3:33:fe:d3:d6:ce:ff:1a:ad: b3:4c:72:72:89:47:a1:e2:0b:4e:f8:8f:b1:55:9d: 32:55:fe:d5:5c:e9:2b:34:80:40:71:da:26:e4:2a: 4b:4a:33:78:15:fb:88:cb:1c:b3:8c:71:f6:e8:42: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C2:90:FD:1D:B8:23:32:E8:12:66:65:68:5C:1F:99:C0:3F:9D:C2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1edaecfe-ad6e-465f-a249-3d5eddc9df52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:8010::/48 Signature Algorithm: sha256WithRSAEncryption 51:dc:59:7e:24:1d:68:ee:78:36:68:2c:fc:2a:6a:38:7d:ae: 7b:d1:0c:14:f4:a7:d8:90:26:18:dd:87:05:6d:ea:9c:a8:d8: e9:d8:bf:b5:fc:d0:a6:5e:a7:6b:14:09:da:ee:34:e1:2b:6c: 27:fc:33:a1:54:ea:a2:10:45:a9:ca:b8:fe:b0:7d:ad:76:ad: 89:f7:71:19:e2:25:24:66:7e:ea:c1:cf:95:a3:09:ee:f0:6a: 80:b6:28:fd:5e:6a:24:57:f5:67:07:e9:0e:82:ee:32:95:65: c7:fa:d3:a1:4f:73:d3:39:db:52:60:5c:c0:7d:04:8d:11:26: a1:2f:4d:07:b6:20:51:da:47:a7:40:8c:e6:ca:5f:61:80:f0: 08:63:59:31:4d:98:b1:26:70:02:c7:d0:5e:89:68:89:2b:fa: 92:43:6c:c0:72:13:f6:7c:d1:fd:db:7e:eb:ec:69:44:23:d5: 9b:16:1f:86:ed:1e:3e:2a:9a:60:64:63:a1:c9:39:b8:30:f3: e7:43:e8:59:3a:db:20:5c:8e:d0:53:d3:dd:0c:a8:f4:32:8a: 04:5d:3d:e2:b5:41:31:a5:05:c5:48:31:bc:b7:d7:6a:8e:74: 1b:50:67:85:6a:4e:f5:a8:ef:65:b3:f5:7e:f8:4e:43:8d:32: 9f:d9:cd:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP9yXXaC8xXbpoEQFwDVcuR9FGx8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE1MDAzMjEwWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTVkYWU3YWRmNTU4ZTllMjBmMzgyNWRiNWY2MjYyZmJm YTZhMDRlM2UxOWYzMjAzODdiOGU0YTUzMTg3MGIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzaJxxcHB+aFk6y7eYxVQzYuvTq9hKLzpFT0sp6Q+kMHcV 3qzcfxICXyy0XnFRU0YkKjgq9lcOtgAze5LRVRKZBl1tQqs1ha4W9x+VN2MnR4uW 9lN8f1eJBwajtYSOI8cNH38E7mKcl+kDUENxkhacPYtS+lt1n1vRoJ+q0OXq8/3l oNKwHBLFvCCamDdBzplx8OxF6qLWF5zqCCqf4vjmMGb9OHIywVfDALeaW/fNAje8 y5KiCL1cslY08dRXsj4zniJFiO8VQ7Mz/tPWzv8arbNMcnKJR6HiC074j7FVnTJV /tVc6Ss0gEBx2ibkKktKM3gV+4jLHLOMcfboQqu9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUasKQ/R24IzLoEmZlaFwfmcA/ncIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFlZGFlY2ZlLWFkNmUtNDY1Zi1hMjQ5LTNkNWVkZGM5ZGY1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ygBAwDQYJKoZIhvcNAQELBQADggEBAFHcWX4kHWjueDZoLPwqajh9 rnvRDBT0p9iQJhjdhwVt6pyo2OnYv7X80KZep2sUCdruNOErbCf8M6FU6qIQRanK uP6wfa12rYn3cRniJSRmfurBz5WjCe7waoC2KP1eaiRX9WcH6Q6C7jKVZcf606FP c9M521JgXMB9BI0RJqEvTQe2IFHaR6dAjObKX2GA8AhjWTFNmLEmcALH0F6JaIkr +pJDbMByE/Z80f3bfuvsaUQj1ZsWH4btHj4qmmBkY6HJObgw8+dD6Fk62yBcjtBT 090MqPQyigRdPeK1QTGlBcVIMby312qOdBtQZ4VqTvWo72Wz9X74TkONMp/ZzdE= -----END CERTIFICATE-----Generated at Wed Aug 20 10:50:05 2025 by rpki-client