$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa File: 36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa (raw, json) Hash identifier: yR4gk8cwtyUWbQgks7THFq7dqTN291A6onMzx4abjLQ= Subject key identifier: 4B:7E:3B:3E:B9:98:47:91:40:F3:5C:A8:FF:65:9D:9F:58:DD:5C:F2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F2F00148ECE757C65036D2E2391471E81791F72 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa Signing time: Fri 15 Aug 2025 00:41:11 +0000 ROA not before: Fri 15 Aug 2025 00:41:11 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:10c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2f:00:14:8e:ce:75:7c:65:03:6d:2e:23:91:47:1e:81:79:1f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 15 00:41:11 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=8e23caf985470e9d6b1265cab0f3038901495d96931f2589dca425ba719ca208, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:1d:50:f0:79:3b:dc:48:28:50:e4:49:74: bb:7d:a2:1e:92:10:c2:32:98:ad:27:3a:e9:81:26: dc:4c:45:12:3e:51:5a:fc:2d:83:a7:62:eb:b4:fc: 75:b9:e5:4b:f0:94:9b:f6:66:b5:43:1d:e1:20:57: 94:42:69:64:ed:9e:29:a0:59:d1:9c:27:e4:13:d4: 1b:33:90:ae:1a:cd:78:e8:4b:18:72:a5:a1:e6:d2: 25:48:b2:75:85:ae:c3:06:39:32:9b:68:e1:a4:09: 74:0d:94:41:03:17:c4:df:19:49:7a:c8:46:2d:9b: 43:5c:ce:31:12:88:c4:4a:69:12:a3:af:84:83:8a: 69:19:75:9c:d8:8f:4a:78:8d:bf:ac:06:6e:cf:b3: 0d:bc:cd:fd:ce:72:9a:90:ec:59:18:af:1e:c6:9a: 94:11:ff:41:a2:9f:25:90:19:13:5d:66:98:66:de: c7:e2:78:94:bb:0c:4b:ac:41:15:0c:e8:b4:b6:00: ed:ce:17:6a:2e:1e:25:6c:13:73:88:92:75:12:69: 1c:2f:7b:54:77:d3:f0:84:99:8d:13:54:fd:45:f1: 13:38:bf:ab:68:f9:50:48:82:35:3d:2d:78:3a:c7: 25:f0:0a:eb:2b:77:b1:26:5b:4c:1b:37:d1:a0:c8: b4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7E:3B:3E:B9:98:47:91:40:F3:5C:A8:FF:65:9D:9F:58:DD:5C:F2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:10c0::/46 Signature Algorithm: sha256WithRSAEncryption 1a:b2:84:3f:1d:77:af:6d:9a:e4:46:56:c6:db:42:ec:24:03: e7:ba:0c:23:a1:88:8f:03:c6:82:47:5b:b3:e9:93:1a:42:85: 6d:5b:96:cb:fe:65:ef:e0:c6:e8:3e:06:d1:50:c5:bb:e9:ab: 51:11:cc:54:f3:8f:7d:53:28:3c:b2:48:94:d2:b0:fc:07:3d: f6:d0:3d:41:eb:c6:f8:ef:5c:b3:38:fd:85:c2:9d:2c:8f:d6: e2:0e:e0:60:94:d5:bf:50:68:5b:3f:82:10:ff:a4:6b:ed:7b: ca:02:f3:42:6b:84:d0:b7:f1:50:a9:a3:ec:f8:ee:76:7c:20: e8:7f:e1:4e:f1:cb:ec:af:35:24:e8:da:40:f1:40:3c:28:e6: 20:c4:24:97:87:52:df:c9:e9:c4:35:b7:64:1f:e8:6d:8c:03: 7b:15:7d:72:b6:10:65:14:9e:c9:ef:90:a4:62:23:aa:99:bd: 56:51:83:ca:1e:a5:ec:30:dd:a8:b3:bd:3d:a0:b7:54:45:1e: 14:c1:01:70:05:14:aa:41:65:ce:a1:b6:a1:e3:ec:7e:7c:be: c7:60:d0:70:25:ed:5c:7a:17:59:57:f6:29:cd:cd:31:01:c2: 29:fc:eb:ea:ac:b3:4c:34:13:07:29:b7:64:a4:89:8d:8e:5f: 07:fa:9a:46 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXy8AFI7OdXxlA20uI5FHHoF5H3IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE1MDA0MTExWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTIzY2FmOTg1NDcwZTlkNmIxMjY1Y2FiMGYzMDM4OTAx NDk1ZDk2OTMxZjI1ODlkY2E0MjViYTcxOWNhMjA4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPWR1Q8Hk73EgoUORJdLt9oh6SEMIymK0nOumBJtxMRRI+ UVr8LYOnYuu0/HW55UvwlJv2ZrVDHeEgV5RCaWTtnimgWdGcJ+QT1BszkK4azXjo SxhypaHm0iVIsnWFrsMGOTKbaOGkCXQNlEEDF8TfGUl6yEYtm0NczjESiMRKaRKj r4SDimkZdZzYj0p4jb+sBm7Psw28zf3OcpqQ7FkYrx7GmpQR/0GinyWQGRNdZphm 3sfieJS7DEusQRUM6LS2AO3OF2ouHiVsE3OIknUSaRwve1R30/CEmY0TVP1F8RM4 v6to+VBIgjU9LXg6xyXwCusrd7EmW0wbN9GgyLQFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUS347PrmYR5FA81yo/2Wdn1jdXPIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM2ZmNjMGUzLTNiY2YtNGM4NC04YTgxLTcyYWViYmUzNmZjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zEMAwDQYJKoZIhvcNAQELBQADggEBABqyhD8dd69tmuRGVsbbQuwk A+e6DCOhiI8DxoJHW7PpkxpChW1blsv+Ze/gxug+BtFQxbvpq1ERzFTzj31TKDyy SJTSsPwHPfbQPUHrxvjvXLM4/YXCnSyP1uIO4GCU1b9QaFs/ghD/pGvte8oC80Jr hNC38VCpo+z47nZ8IOh/4U7xy+yvNSTo2kDxQDwo5iDEJJeHUt/J6cQ1t2Qf6G2M A3sVfXK2EGUUnsnvkKRiI6qZvVZRg8oepeww3aizvT2gt1RFHhTBAXAFFKpBZc6h tqHj7H58vsdg0HAl7Vx6F1lX9inNzTEBwin86+qss0w0Ewcpt2SkiY2OXwf6mkY= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:45 2025 by rpki-client