$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b02f073-700e-469c-bb42-6d6b0eccca40.roa File: 2b02f073-700e-469c-bb42-6d6b0eccca40.roa (raw, json) Hash identifier: qvy+a+lNR7y0bNL1jfR4s/v0M7dok4/ol8an2ogSw7o= Subject key identifier: 92:40:75:51:2A:69:C8:E9:2F:F4:B6:40:31:73:9C:CB:99:B9:40:94 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 528783995A06DA172EC02CA3DA8117BA3839CCFA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b02f073-700e-469c-bb42-6d6b0eccca40.roa Signing time: Fri 15 Aug 2025 00:41:43 +0000 ROA not before: Fri 15 Aug 2025 00:41:43 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:6080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:87:83:99:5a:06:da:17:2e:c0:2c:a3:da:81:17:ba:38:39:cc:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 15 00:41:43 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=7cf6d5b70c1f5e4f8e30c3ec7882f02f2a6cd80fef0a40bbefcd3f8ecc73841d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:8d:2b:3d:31:df:42:37:f2:86:c2:75:4d: a6:e0:44:a9:f6:68:a6:da:0c:08:6d:8d:45:d7:51: 7d:1d:fd:01:23:c0:62:5b:f1:1a:1f:d7:95:f5:72: 90:d3:dc:11:49:c6:10:65:f7:3d:9a:5e:67:12:0c: 75:48:8c:d6:04:32:c1:c9:84:b4:f4:39:71:ed:07: aa:5b:6e:e7:80:56:04:70:f5:0a:cd:51:79:1b:db: 22:56:43:ee:1c:a4:41:35:80:dd:43:22:88:9f:99: 35:33:d4:b6:23:1c:7c:0d:d1:3b:c9:6d:71:a8:57: 6f:28:96:14:94:08:33:c0:79:d2:44:0b:1c:05:19: 54:f7:49:8e:0b:4f:a9:ac:2c:04:b1:37:53:49:84: d6:fc:a2:dc:4e:8f:d6:ed:94:72:5e:5d:ee:8a:eb: 95:03:0e:72:c9:f0:d3:4b:35:13:bd:74:4a:0b:6a: 1f:45:d8:27:d7:3b:76:12:20:d3:16:16:31:13:06: 13:76:84:71:f8:b7:20:b4:ae:dd:7b:58:22:b8:81: b8:e3:4b:92:d1:05:1e:6c:ea:99:3b:5a:1f:50:a0: 31:19:40:d9:f6:78:70:7e:b8:31:df:6a:0a:8c:ce: ba:f3:eb:73:db:7e:80:db:bf:40:25:78:61:3b:83: c4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:40:75:51:2A:69:C8:E9:2F:F4:B6:40:31:73:9C:CB:99:B9:40:94 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b02f073-700e-469c-bb42-6d6b0eccca40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:6080::/46 Signature Algorithm: sha256WithRSAEncryption a1:c5:8f:b6:b8:dd:5f:b1:a9:c3:01:b6:26:34:0a:bd:24:d1: 5a:93:d7:e6:26:2c:02:77:e3:ab:ba:96:88:af:ad:15:30:a2: e1:e2:5c:38:fd:2c:6f:b4:5f:76:d8:d4:b7:3b:dc:0e:ce:1f: 4a:32:d0:2e:80:75:ed:3b:4f:a0:5d:af:7f:56:f4:cc:8f:12: 01:fa:25:c1:c5:5d:02:bd:6e:4a:42:8e:24:dc:68:1c:2e:d0: 7d:c0:c1:ac:31:5a:95:d4:3c:8b:f3:62:db:50:ae:16:60:bc: 99:49:47:40:1c:d1:aa:c5:29:de:98:2c:a9:05:a5:83:89:f6: db:24:9e:88:81:88:89:b0:71:b6:65:f5:1c:fa:1c:51:a2:fc: 30:8a:7f:65:03:49:3c:e9:3f:0f:30:38:c6:e8:af:a5:13:50: a1:21:dd:45:b3:fe:86:bd:68:46:8b:47:be:4f:e2:15:15:13: 5a:7f:8e:1d:30:6c:a1:a7:bf:22:69:45:cb:73:ec:8b:f2:4b: 45:7d:bf:ba:ed:32:20:63:00:b1:f3:4a:0b:ef:ad:7f:62:7c: b8:43:ab:12:19:ee:62:cc:a1:e4:b1:ff:57:39:7f:1f:b7:37: 54:c9:7b:34:f7:e0:3b:99:2d:ad:cb:e4:ca:f7:86:8e:77:e7: 3b:d9:ba:20 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUoeDmVoG2hcuwCyj2oEXujg5zPowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE1MDA0MTQzWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2Y2ZDViNzBjMWY1ZTRmOGUzMGMzZWM3ODgyZjAyZjJh NmNkODBmZWYwYTQwYmJlZmNkM2Y4ZWNjNzM4NDFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpAo0rPTHfQjfyhsJ1TabgRKn2aKbaDAhtjUXXUX0d/QEj wGJb8Rof15X1cpDT3BFJxhBl9z2aXmcSDHVIjNYEMsHJhLT0OXHtB6pbbueAVgRw 9QrNUXkb2yJWQ+4cpEE1gN1DIoifmTUz1LYjHHwN0TvJbXGoV28olhSUCDPAedJE CxwFGVT3SY4LT6msLASxN1NJhNb8otxOj9btlHJeXe6K65UDDnLJ8NNLNRO9dEoL ah9F2CfXO3YSINMWFjETBhN2hHH4tyC0rt17WCK4gbjjS5LRBR5s6pk7Wh9QoDEZ QNn2eHB+uDHfagqMzrrz63PbfoDbv0AleGE7g8QzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkkB1USppyOkv9LZAMXOcy5m5QJQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiMDJmMDczLTcwMGUtNDY5Yy1iYjQyLTZkNmIwZWNjY2E0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zYIAwDQYJKoZIhvcNAQELBQADggEBAKHFj7a43V+xqcMBtiY0Cr0k 0VqT1+YmLAJ346u6loivrRUwouHiXDj9LG+0X3bY1Lc73A7OH0oy0C6Ade07T6Bd r39W9MyPEgH6JcHFXQK9bkpCjiTcaBwu0H3AwawxWpXUPIvzYttQrhZgvJlJR0Ac 0arFKd6YLKkFpYOJ9tsknoiBiImwcbZl9Rz6HFGi/DCKf2UDSTzpPw8wOMbor6UT UKEh3UWz/oa9aEaLR75P4hUVE1p/jh0wbKGnvyJpRctz7IvyS0V9v7rtMiBjALHz SgvvrX9ifLhDqxIZ7mLMoeSx/1c5fx+3N1TJezT34DuZLa3L5Mr3ho535zvZuiA= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:09 2025 by rpki-client