$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72a7c231-dc49-4e1e-8a38-37649f06c626.roa File: 72a7c231-dc49-4e1e-8a38-37649f06c626.roa (raw, json) Hash identifier: fjdfmnNrfA6ImFYMNAxHdINeCSUEZHi6jInUQPHkZyo= Subject key identifier: D0:33:34:5B:DF:3E:CF:1D:A5:20:ED:68:6D:5B:EC:A3:CE:99:B1:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 34617C6A22FC862BE66D0338CA297FDFFAD77BC3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72a7c231-dc49-4e1e-8a38-37649f06c626.roa Signing time: Tue 26 Aug 2025 15:52:02 +0000 ROA not before: Tue 26 Aug 2025 15:52:02 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:7480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:61:7c:6a:22:fc:86:2b:e6:6d:03:38:ca:29:7f:df:fa:d7:7b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:52:02 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=5cefbae617ad5ec8fd1af4772534cb41f5f049b174664cfdb503b3b3cafbee5e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:44:3c:a6:3a:a3:88:10:3b:c0:1f:7f:a3: a0:87:a4:5b:a8:76:46:5e:59:2b:f7:58:37:45:60: e5:50:40:bd:93:b4:58:1a:6f:ee:22:e4:ae:ff:82: d4:d2:12:98:75:0b:79:95:d8:03:36:09:92:b7:c2: c0:ed:e0:bc:9b:48:ea:39:52:b5:37:43:2c:41:d4: 51:23:1b:68:46:81:6b:f1:dc:d2:4a:68:8b:b4:1c: f7:d2:69:8d:d6:b4:d7:ee:50:37:36:3f:8e:4f:aa: 3d:54:9e:f5:d5:45:8b:ce:47:68:bb:12:95:1b:89: 10:be:fc:8d:de:42:da:07:9c:42:89:2f:6d:55:f3: 17:0b:bf:57:2c:b3:58:03:d7:9f:56:3a:7e:b9:30: 75:20:56:f4:c7:79:28:79:30:bf:6e:7e:88:0e:64: cd:ca:33:ee:8b:22:ed:b0:71:23:46:05:00:49:1c: 6a:40:58:45:84:0b:98:08:b7:28:fd:99:a8:7e:09: bf:7f:98:45:e4:60:d6:88:96:6e:59:d6:87:82:0f: ec:99:59:83:27:f6:e8:5e:df:9b:a2:be:c4:9f:8b: 5e:bc:8b:ef:1d:f6:02:2e:09:63:95:5a:bf:c8:29: 68:cb:41:59:1b:e8:c5:e4:e8:d0:d9:61:46:3d:e6: 35:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:33:34:5B:DF:3E:CF:1D:A5:20:ED:68:6D:5B:EC:A3:CE:99:B1:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72a7c231-dc49-4e1e-8a38-37649f06c626.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:7480::/48 Signature Algorithm: sha256WithRSAEncryption d0:68:fb:88:01:d2:13:ab:a0:46:08:dc:75:1a:1a:92:8b:78: 1b:9d:92:6f:dd:4d:0b:60:56:60:ad:82:d7:76:fb:71:b3:60: 61:ae:4c:30:bc:73:40:ce:be:f3:f9:b8:3b:29:dc:fd:d0:60: f1:ce:5c:3e:c4:39:72:7e:35:c2:11:7e:e4:ce:48:65:2f:93: 05:23:b6:cc:8e:0a:ce:68:22:d5:a3:bd:16:e9:58:06:e5:28: aa:b0:6d:f9:9c:99:a1:a9:d3:d7:b1:a3:7e:46:d3:33:e8:89: f9:2b:7b:a1:01:3d:f8:04:1c:6c:fa:a3:ed:37:9e:a3:f6:3a: 7d:a1:ec:7d:52:eb:65:92:6a:00:50:9e:5b:ea:21:20:43:0d: 87:07:66:ae:10:77:75:d9:77:f3:af:c3:3d:2c:5b:a0:c8:74: 34:f1:0c:6c:0c:13:31:65:72:a9:a9:43:7b:38:8d:ca:e1:f5: 1c:d4:de:1b:2b:ec:48:dd:58:e0:fc:e0:4e:68:d6:70:94:61: 01:6e:af:d5:34:c7:9f:6e:be:c8:a8:c2:ac:b0:43:99:de:82: 01:52:b4:42:2c:08:64:ef:3c:ff:9e:f2:46:28:23:af:e0:a2: a7:d8:d9:32:b1:87:2a:8c:d6:2f:44:24:e0:38:e2:97:1b:ed: 71:fa:f0:7d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNGF8aiL8hivmbQM4yil/3/rXe8MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTU1MjAyWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Y2VmYmFlNjE3YWQ1ZWM4ZmQxYWY0NzcyNTM0Y2I0MWY1 ZjA0OWIxNzQ2NjRjZmRiNTAzYjNiM2NhZmJlZTVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtukQ8pjqjiBA7wB9/o6CHpFuodkZeWSv3WDdFYOVQQL2T tFgab+4i5K7/gtTSEph1C3mV2AM2CZK3wsDt4LybSOo5UrU3QyxB1FEjG2hGgWvx 3NJKaIu0HPfSaY3WtNfuUDc2P45Pqj1UnvXVRYvOR2i7EpUbiRC+/I3eQtoHnEKJ L21V8xcLv1css1gD159WOn65MHUgVvTHeSh5ML9ufogOZM3KM+6LIu2wcSNGBQBJ HGpAWEWEC5gItyj9mah+Cb9/mEXkYNaIlm5Z1oeCD+yZWYMn9uhe35uivsSfi168 i+8d9gIuCWOVWr/IKWjLQVkb6MXk6NDZYUY95jU/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0DM0W98+zx2lIO1obVvso86ZsbcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcyYTdjMjMxLWRjNDktNGUxZS04YTM4LTM3NjQ5ZjA2YzYyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84dIAwDQYJKoZIhvcNAQELBQADggEBANBo+4gB0hOroEYI3HUaGpKL eBudkm/dTQtgVmCtgtd2+3GzYGGuTDC8c0DOvvP5uDsp3P3QYPHOXD7EOXJ+NcIR fuTOSGUvkwUjtsyOCs5oItWjvRbpWAblKKqwbfmcmaGp09exo35G0zPoifkre6EB PfgEHGz6o+03nqP2On2h7H1S62WSagBQnlvqISBDDYcHZq4Qd3XZd/Ovwz0sW6DI dDTxDGwMEzFlcqmpQ3s4jcrh9RzU3hsr7EjdWOD84E5o1nCUYQFur9U0x59uvsio wqywQ5neggFStEIsCGTvPP+e8kYoI6/goqfY2TKxhyqM1i9EJOA44pcb7XH68H0= -----END CERTIFICATE-----Generated at Sat Sep 6 14:13:47 2025 by rpki-client