$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa File: 5988892c-5d54-4e98-a5b0-3a2691a42a24.roa (raw, json) Hash identifier: Ei2oZWo/cqrUmC1zszlAdM0hBnL59amrh8GNBZBJvg0= Subject key identifier: BA:D7:47:A8:10:C7:F9:DF:79:A2:63:21:C5:FB:7C:D1:22:37:5D:33 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 671572DF7C2EBF9FDC49020BCF8133B01153D637 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa Signing time: Tue 26 Aug 2025 16:51:04 +0000 ROA not before: Tue 26 Aug 2025 16:51:04 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:74c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:15:72:df:7c:2e:bf:9f:dc:49:02:0b:cf:81:33:b0:11:53:d6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:51:04 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=becd0cb8829dbf4eaf98417e3d55cc8c072123b2614165d54af2ecdd202be7d3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:47:ce:ee:00:f4:b4:10:4c:c4:60:b0:88:4c: 69:72:eb:53:1e:b6:93:fc:2e:ca:ff:fd:78:78:00: a1:46:44:88:14:7d:c9:e5:9e:8c:f5:c8:59:55:06: e5:a1:aa:b0:6e:a7:d2:1d:d0:a8:31:a2:c8:da:7a: 8f:0c:54:b3:5f:7c:85:44:a3:5f:49:1e:cc:b4:75: 27:4b:f4:93:d3:a4:c2:68:2a:b3:07:e3:92:f8:81: ad:68:af:ba:0c:74:4d:58:a4:39:c0:42:76:af:53: 1a:cb:2b:18:b2:46:fc:9f:a0:f1:c4:47:a3:de:53: c1:26:ff:92:bc:12:fa:a4:cd:09:cd:3e:29:72:ba: 22:02:b7:ee:27:21:c3:09:19:6a:dc:45:f1:cb:34: 79:c7:a2:56:6b:6e:50:b7:2f:3f:37:c2:e7:52:78: fe:6b:5b:d6:68:c2:e9:6b:bd:4a:f8:dd:89:ca:fc: 46:62:7a:28:21:6f:ab:de:71:fa:21:ee:0f:af:a7: 5b:e4:a1:d6:a1:4c:77:eb:75:51:3e:40:aa:fe:41: f7:b2:64:ef:66:23:eb:ba:09:72:0e:1f:38:f1:36: 00:e4:56:07:d5:6b:2b:c2:9a:fc:2d:2a:e5:22:ff: 9c:80:19:0c:f7:69:52:97:e7:b6:8d:66:8e:e4:e1: db:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D7:47:A8:10:C7:F9:DF:79:A2:63:21:C5:FB:7C:D1:22:37:5D:33 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:74c0::/48 Signature Algorithm: sha256WithRSAEncryption 68:7f:28:2a:43:62:01:a1:4b:ef:ae:19:9a:52:6b:8b:73:20: 25:50:0c:e2:95:ef:d5:6e:d7:68:c1:6e:b2:20:57:f0:c0:25: 59:d7:5b:89:9d:d9:d2:44:97:90:88:90:22:38:f3:cb:83:66: 58:9a:b9:4b:cd:14:b9:3b:9a:a5:75:8c:5b:66:ef:f8:00:8c: 59:54:91:e4:a7:57:f5:73:29:ee:ab:04:26:c6:4f:c3:83:ee: 03:8d:d2:3c:9d:ad:fe:9f:9c:85:ef:e8:ad:b5:f2:33:bb:20: be:6e:3c:15:cc:fe:f7:6e:02:96:02:42:1e:79:25:cc:1e:ea: 4e:e5:a1:d0:7f:a8:7c:e2:f1:47:c0:f8:aa:e1:10:3c:dd:91: 37:19:45:62:f2:cc:bd:0c:4e:fb:00:71:85:4d:4d:24:50:f0: b6:c6:97:b1:3b:66:4f:71:d5:b6:2f:26:ee:50:ec:ae:53:64: 5f:60:80:2e:b1:c5:eb:32:df:63:58:96:47:8b:80:c8:73:2b: 4f:1a:eb:52:0b:74:88:d5:c3:a7:35:51:2a:63:11:d0:0e:5b: 87:c6:68:67:cc:11:12:fd:68:13:0f:97:c6:14:45:7e:dc:e6: 92:fa:45:b7:f2:89:1d:1b:44:11:23:46:ca:9c:24:17:f0:63: 0d:e2:15:df -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZxVy33wuv5/cSQILz4EzsBFT1jcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTY1MTA0WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZWNkMGNiODgyOWRiZjRlYWY5ODQxN2UzZDU1Y2M4YzA3 MjEyM2IyNjE0MTY1ZDU0YWYyZWNkZDIwMmJlN2QzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSR87uAPS0EEzEYLCITGly61MetpP8Lsr//Xh4AKFGRIgU fcnlnoz1yFlVBuWhqrBup9Id0Kgxosjaeo8MVLNffIVEo19JHsy0dSdL9JPTpMJo KrMH45L4ga1or7oMdE1YpDnAQnavUxrLKxiyRvyfoPHER6PeU8Em/5K8EvqkzQnN PilyuiICt+4nIcMJGWrcRfHLNHnHolZrblC3Lz83wudSeP5rW9ZowulrvUr43YnK /EZieighb6vecfoh7g+vp1vkodahTHfrdVE+QKr+QfeyZO9mI+u6CXIOHzjxNgDk VgfVayvCmvwtKuUi/5yAGQz3aVKX57aNZo7k4duJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUutdHqBDH+d95omMhxft80SI3XTMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5ODg4OTJjLTVkNTQtNGU5OC1hNWIwLTNhMjY5MWE0MmEyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AdMAwDQYJKoZIhvcNAQELBQADggEBAGh/KCpDYgGhS++uGZpSa4tz ICVQDOKV79Vu12jBbrIgV/DAJVnXW4md2dJEl5CIkCI488uDZliauUvNFLk7mqV1 jFtm7/gAjFlUkeSnV/VzKe6rBCbGT8OD7gON0jydrf6fnIXv6K218jO7IL5uPBXM /vduApYCQh55Jcwe6k7lodB/qHzi8UfA+KrhEDzdkTcZRWLyzL0MTvsAcYVNTSRQ 8LbGl7E7Zk9x1bYvJu5Q7K5TZF9ggC6xxesy32NYlkeLgMhzK08a61ILdIjVw6c1 USpjEdAOW4fGaGfMERL9aBMPl8YURX7c5pL6RbfyiR0bRBEjRsqcJBfwYw3iFd8= -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:17 2025 by rpki-client