$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/623e0c25-ebcc-443d-aa05-3aa115d44e24.roa File: 623e0c25-ebcc-443d-aa05-3aa115d44e24.roa (raw, json) Hash identifier: 18vGaHMk5MMDDO1nPyZ3Ydz0m4OqSQVSBeTsYk5vJWI= Subject key identifier: 76:D3:FB:83:E5:40:CE:58:84:5D:78:84:0C:76:83:A2:AE:47:5D:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 066E3365B43A6EA0158A2CD9F3FF65CF4B5CF126 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/623e0c25-ebcc-443d-aa05-3aa115d44e24.roa Signing time: Tue 26 Aug 2025 15:22:29 +0000 ROA not before: Tue 26 Aug 2025 15:22:29 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:6e:33:65:b4:3a:6e:a0:15:8a:2c:d9:f3:ff:65:cf:4b:5c:f1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:22:29 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=923c4f1b48115bcc23fbc739a33624e53deca625944ab2e7337c0374927608d6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:04:13:73:8a:8f:94:0f:2a:3d:26:6d:8b: b8:6b:73:3a:d7:b2:20:d2:4e:ab:87:53:4f:03:aa: d4:c7:ed:b6:5a:b3:2b:2e:f9:1a:f5:cf:e4:57:80: f0:7d:1d:73:e6:f3:75:8a:de:2a:d5:e2:18:d4:14: 8f:35:bd:fa:4c:9b:12:d5:af:18:23:d3:c3:7f:75: 9d:07:24:23:b8:b5:83:04:2d:ca:01:21:f9:6b:e1: 27:92:0c:62:6f:b1:3d:61:af:8a:b2:cd:22:58:78: aa:83:97:4a:1e:fb:7f:01:e7:d6:d4:c9:e5:e7:c7: 64:b4:61:54:d7:c1:b4:36:e2:99:10:16:3b:ad:75: 36:c5:82:7f:6a:5e:63:90:8c:83:ac:6a:9f:ee:ba: 7e:a3:4e:37:e3:6b:bb:9c:f9:8d:3e:b2:7d:8f:29: b0:6e:be:cf:8b:73:22:c3:48:6d:38:42:a2:af:05: f2:56:bd:23:21:6d:f2:b1:49:d5:3f:c3:9d:c5:2d: 1c:b7:c4:67:a4:a4:e5:ab:75:e6:bf:87:c6:22:2f: c1:ef:c5:89:67:69:46:c9:b2:ac:04:9d:2d:77:cd: 4b:21:9b:bd:a0:1e:f4:2f:89:48:e0:86:35:d7:40: f5:ad:f8:df:3a:a0:b8:17:c8:8f:19:9d:08:74:0d: b0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D3:FB:83:E5:40:CE:58:84:5D:78:84:0C:76:83:A2:AE:47:5D:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/623e0c25-ebcc-443d-aa05-3aa115d44e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8050::/48 Signature Algorithm: sha256WithRSAEncryption b0:05:87:a7:10:35:78:1c:12:33:fa:18:1f:e9:71:13:c9:dd: 7e:03:d2:a6:40:9e:ea:13:3f:ad:3c:dc:6d:f6:87:c6:9a:5f: ad:19:fc:d6:06:70:d8:3c:f9:c6:9f:d7:be:97:cd:4a:8a:5f: e9:d1:01:93:17:16:9f:93:88:e2:65:1a:01:45:96:85:93:6a: fb:5f:21:9d:db:3d:50:b1:85:bd:be:24:cd:28:2b:ef:15:70: 1d:5b:64:64:41:15:99:ce:63:91:a5:f9:f5:46:90:37:60:e2: d6:ff:4d:48:f1:44:c5:d7:d1:42:9b:d1:c8:35:c2:6f:6d:b0: c0:ba:34:e8:9b:90:13:54:e2:ce:12:a3:55:bc:16:16:41:dd: 0f:97:04:09:e4:ff:4a:9e:06:43:ec:73:30:26:0d:92:c3:20: c5:89:fd:7d:44:bd:07:77:f2:49:4e:0c:a2:d5:eb:22:06:fc: e5:bd:53:cf:5c:fe:55:1b:14:d9:65:ca:e7:55:1d:f0:60:f7: 06:e6:99:6a:42:79:6d:5d:9b:37:b8:52:3d:cf:7f:0b:71:b5: 18:a5:56:ce:a7:61:50:1a:8f:69:61:d9:bc:63:02:73:de:12: c7:ae:13:19:d1:e7:76:10:5b:96:05:41:ee:50:a2:3d:78:35: d7:d8:3e:9c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBm4zZbQ6bqAViizZ8/9lz0tc8SYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUyMjI5WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjNjNGYxYjQ4MTE1YmNjMjNmYmM3MzlhMzM2MjRlNTNk ZWNhNjI1OTQ0YWIyZTczMzdjMDM3NDkyNzYwOGQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+iwQTc4qPlA8qPSZti7hrczrXsiDSTquHU08DqtTH7bZa sysu+Rr1z+RXgPB9HXPm83WK3irV4hjUFI81vfpMmxLVrxgj08N/dZ0HJCO4tYME LcoBIflr4SeSDGJvsT1hr4qyzSJYeKqDl0oe+38B59bUyeXnx2S0YVTXwbQ24pkQ FjutdTbFgn9qXmOQjIOsap/uun6jTjfja7uc+Y0+sn2PKbBuvs+LcyLDSG04QqKv BfJWvSMhbfKxSdU/w53FLRy3xGekpOWrdea/h8YiL8HvxYlnaUbJsqwEnS13zUsh m72gHvQviUjghjXXQPWt+N86oLgXyI8ZnQh0DbDXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdtP7g+VAzliEXXiEDHaDoq5HXYwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYyM2UwYzI1LWViY2MtNDQzZC1hYTA1LTNhYTExNWQ0NGUyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gFAwDQYJKoZIhvcNAQELBQADggEBALAFh6cQNXgcEjP6GB/pcRPJ 3X4D0qZAnuoTP6083G32h8aaX60Z/NYGcNg8+caf176XzUqKX+nRAZMXFp+TiOJl GgFFloWTavtfIZ3bPVCxhb2+JM0oK+8VcB1bZGRBFZnOY5Gl+fVGkDdg4tb/TUjx RMXX0UKb0cg1wm9tsMC6NOibkBNU4s4So1W8FhZB3Q+XBAnk/0qeBkPsczAmDZLD IMWJ/X1EvQd38klODKLV6yIG/OW9U89c/lUbFNllyudVHfBg9wbmmWpCeW1dmze4 Uj3PfwtxtRilVs6nYVAaj2lh2bxjAnPeEseuExnR53YQW5YFQe5Qoj14NdfYPpw= -----END CERTIFICATE-----Generated at Sat Sep 6 14:12:04 2025 by rpki-client