$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/827dd8ab-835b-4309-b0ff-29e59bed4da1.roa File: 827dd8ab-835b-4309-b0ff-29e59bed4da1.roa (raw, json) Hash identifier: FeTaJg54PhHXMw96Gcx8X3z+Sim56cCAXmGynwBEo0M= Subject key identifier: 9E:AF:ED:FF:0E:B8:28:0E:33:40:A3:80:86:AE:83:AA:4A:7F:44:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 519354172DCC43868867F771F0B16D0DB801C575 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/827dd8ab-835b-4309-b0ff-29e59bed4da1.roa Signing time: Fri 08 Aug 2025 20:07:06 +0000 ROA not before: Fri 08 Aug 2025 20:07:06 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f68:40c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:93:54:17:2d:cc:43:86:88:67:f7:71:f0:b1:6d:0d:b8:01:c5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 20:07:06 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=1b8e0deeb531c6cf6781d86717a614e72ee11d889253b017e0c99d4dbef35eae, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:41:f4:88:13:26:60:09:e2:e7:38:54:af: d1:50:e0:64:58:7a:5c:b2:f3:22:eb:43:a1:1c:38: 45:56:27:9e:1e:59:71:40:7c:5c:88:a8:8d:8d:99: b1:18:86:51:fc:06:ef:78:44:31:74:f5:69:20:b7: 35:b4:92:cf:93:67:b3:a7:1f:25:bb:bb:de:bb:a5: 79:33:5b:c0:bf:f7:d5:35:a2:1c:aa:34:86:6b:4e: ab:0c:11:5f:64:6b:d9:9d:df:6d:26:34:02:5a:89: c6:f0:41:61:db:3d:35:74:58:6a:94:74:5a:09:7f: 29:cf:77:a2:47:43:6a:b4:8c:06:8b:a8:db:24:ab: 1f:cf:56:3e:6a:72:3a:af:4b:85:ae:e4:cd:a8:f0: a6:a4:a4:02:27:78:5a:1b:66:78:3d:a0:33:6a:1e: a9:d5:d4:52:0a:21:c8:2a:a2:f1:39:60:a5:5d:90: 01:36:58:f9:93:85:e9:6c:fd:9e:d5:16:45:d1:b5: 02:98:1f:29:3f:54:7f:9f:b9:4c:a6:8f:c0:c7:3a: 92:b9:73:99:4b:9d:dd:2d:29:00:fe:85:3c:7b:26: e3:07:cb:38:d3:a7:95:3b:47:aa:f5:6b:5d:ba:4c: 8c:8f:6e:36:de:e9:30:6b:e1:03:6c:ac:11:d3:a2: 84:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AF:ED:FF:0E:B8:28:0E:33:40:A3:80:86:AE:83:AA:4A:7F:44:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/827dd8ab-835b-4309-b0ff-29e59bed4da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:40c0::/46 Signature Algorithm: sha256WithRSAEncryption d1:0f:75:38:41:19:e7:76:4f:b8:6f:88:88:12:17:93:be:10: 76:ee:3c:84:60:29:c8:32:23:3d:7b:93:34:4d:d0:d0:da:3a: 4c:39:bb:9d:53:2d:6c:52:32:7c:58:a9:4c:6c:60:52:e3:2c: b1:02:b7:38:f4:96:a4:ea:28:a7:b8:33:ef:b1:69:19:6e:5a: 02:7a:3a:c1:bd:d8:c7:e2:75:5d:c7:db:53:09:ce:36:0a:bb: 07:d2:56:33:c3:5b:9e:be:97:0e:05:91:2f:2c:39:85:66:b8: 51:0d:b5:ee:3a:fc:53:6e:c9:cb:e3:7e:ec:08:d7:12:49:06: a9:95:a5:67:ca:73:63:57:78:b2:e8:85:87:9e:a0:7d:7f:f9: 2a:37:cc:90:71:f8:16:02:a0:5c:0c:4a:75:12:c0:1e:d7:b6: a3:ac:fa:41:0d:ab:fb:b3:da:de:b9:02:a3:84:6f:db:95:45: ae:67:10:6e:42:cc:af:d7:4c:e0:69:95:1d:c9:ea:24:fe:49: 6c:e3:ac:9c:de:91:f4:1f:92:a5:d2:01:81:bd:2c:e6:fd:bd: 94:b8:c2:38:72:54:28:b1:4b:3e:28:4a:ff:d6:9e:82:9d:94: c0:1b:6b:10:af:1e:bc:4f:4e:58:7e:af:6a:9c:81:47:8c:22: 34:ba:ab:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUZNUFy3MQ4aIZ/dx8LFtDbgBxXUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MjAwNzA2WhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjhlMGRlZWI1MzFjNmNmNjc4MWQ4NjcxN2E2MTRlNzJl ZTExZDg4OTI1M2IwMTdlMGM5OWQ0ZGJlZjM1ZWFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwb0H0iBMmYAni5zhUr9FQ4GRYelyy8yLrQ6EcOEVWJ54e WXFAfFyIqI2NmbEYhlH8Bu94RDF09WkgtzW0ks+TZ7OnHyW7u967pXkzW8C/99U1 ohyqNIZrTqsMEV9ka9md320mNAJaicbwQWHbPTV0WGqUdFoJfynPd6JHQ2q0jAaL qNskqx/PVj5qcjqvS4Wu5M2o8KakpAIneFobZng9oDNqHqnV1FIKIcgqovE5YKVd kAE2WPmThels/Z7VFkXRtQKYHyk/VH+fuUymj8DHOpK5c5lLnd0tKQD+hTx7JuMH yzjTp5U7R6r1a126TIyPbjbe6TBr4QNsrBHTooR5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnq/t/w64KA4zQKOAhq6Dqkp/RFowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgyN2RkOGFiLTgzNWItNDMwOS1iMGZmLTI5ZTU5YmVkNGRhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9oQMAwDQYJKoZIhvcNAQELBQADggEBANEPdThBGed2T7hviIgSF5O+ EHbuPIRgKcgyIz17kzRN0NDaOkw5u51TLWxSMnxYqUxsYFLjLLECtzj0lqTqKKe4 M++xaRluWgJ6OsG92MfidV3H21MJzjYKuwfSVjPDW56+lw4FkS8sOYVmuFENte46 /FNuycvjfuwI1xJJBqmVpWfKc2NXeLLohYeeoH1/+So3zJBx+BYCoFwMSnUSwB7X tqOs+kENq/uz2t65AqOEb9uVRa5nEG5CzK/XTOBplR3J6iT+SWzjrJzekfQfkqXS AYG9LOb9vZS4wjhyVCixSz4oSv/WnoKdlMAbaxCvHrxPTlh+r2qcgUeMIjS6q7Y= -----END CERTIFICATE-----Generated at Thu Aug 21 19:00:44 2025 by rpki-client