$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07ca21c-f544-4b85-8cf0-11947df96f7c.roa File: a07ca21c-f544-4b85-8cf0-11947df96f7c.roa (raw, json) Hash identifier: Asqtd9jJUFtl40i3axdMNq/8xg8AzGlBtKpyNFe5odQ= Subject key identifier: E7:56:B1:03:24:26:E2:ED:39:92:D1:23:BB:24:90:3C:BC:97:B8:94 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17A7BBBE37C17A5A9239D5DFCDF03DC63F6BA460 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07ca21c-f544-4b85-8cf0-11947df96f7c.roa Signing time: Tue 26 Aug 2025 16:01:30 +0000 ROA not before: Tue 26 Aug 2025 16:01:30 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:6020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a7:bb:be:37:c1:7a:5a:92:39:d5:df:cd:f0:3d:c6:3f:6b:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:01:30 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=8d0afb99651adce03cb22af66f69577546dbde10007b987d42ae1d8abe211c2b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:63:2b:99:80:32:d1:53:aa:30:f4:e4:63: ef:28:77:80:33:91:8e:55:32:a0:e3:c0:fe:61:0b: aa:81:41:88:0d:14:c4:ed:2e:e3:3c:b4:1d:01:5f: 40:da:3e:a1:8e:6a:b7:65:9e:16:8f:33:b6:61:8f: f2:f1:50:b1:a4:7f:ef:7c:82:71:23:72:fa:47:14: 60:ce:6b:4d:b1:46:60:96:66:25:08:55:8b:1e:3f: 09:b1:b8:9b:7e:c9:5d:49:d9:3f:27:4d:91:ef:d8: e5:19:98:34:2a:8c:ef:d0:39:8f:d9:b3:39:6f:2b: 0d:22:f0:fa:70:6a:4b:7e:55:c9:5b:d7:ca:bd:b5: c0:b3:a0:b9:4e:e6:a5:98:2e:55:8d:ed:5b:73:f1: 92:e3:fd:8b:29:17:97:8d:aa:92:cd:7d:1e:74:a6: 27:74:41:c3:b9:b1:55:bd:c8:8a:95:88:eb:49:09: b6:51:a7:99:50:88:55:5c:4a:63:85:e3:39:80:4b: 35:47:45:5a:39:f1:aa:d3:65:3b:1d:48:9d:49:22: c8:10:2f:2c:61:e0:8d:ad:55:c0:f5:a1:7e:c3:11: 26:c5:69:ec:ce:80:f4:9c:c9:72:36:07:09:e0:c2: 2c:c3:77:de:a7:90:6e:ae:b6:82:dc:b4:56:0b:77: 57:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:56:B1:03:24:26:E2:ED:39:92:D1:23:BB:24:90:3C:BC:97:B8:94 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07ca21c-f544-4b85-8cf0-11947df96f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:6020::/48 Signature Algorithm: sha256WithRSAEncryption d7:99:86:1d:9e:0b:8d:55:31:d5:50:58:0b:b3:74:3f:57:5a: 1f:ea:5a:5e:44:87:e7:51:41:3a:19:1f:58:0f:32:a2:0c:40: 76:1c:f4:9d:1c:c6:1b:51:95:98:fe:94:06:0d:31:67:c8:4d: 27:ad:3b:50:78:a1:44:bb:34:ec:be:85:f3:51:6a:a4:e0:00: 9a:c3:be:52:1b:52:10:4b:fb:2d:93:5f:58:92:bc:75:ef:88: 1c:23:d1:ed:51:1c:b9:74:8c:d5:e7:13:92:7a:8c:5c:39:c5: 44:3c:ae:5b:c8:d4:63:11:70:e5:a2:cd:5e:23:e1:23:46:b2: 16:79:a1:4e:7d:7f:72:2c:c5:ed:c8:6f:22:1b:12:b1:d8:65: 4d:e8:ab:f6:ff:aa:cf:2e:0a:21:f4:99:0a:23:07:6a:ea:4f: 39:84:68:a7:0c:13:95:c6:f5:10:3b:7d:ef:5e:af:b9:c6:eb: 08:f7:d5:16:1f:14:06:e9:10:60:18:a8:10:39:49:5a:5a:38: aa:a7:b5:50:c4:7c:c7:36:87:01:d4:9c:24:18:c3:05:0d:db: 3b:20:d0:1d:7a:21:a6:b2:38:c1:3d:85:66:84:16:48:3e:da: bb:60:e6:23:ae:0b:c6:75:bf:c1:00:f0:73:60:9d:54:1d:00: a3:73:3f:ba -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUF6e7vjfBelqSOdXfzfA9xj9rpGAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTYwMTMwWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDBhZmI5OTY1MWFkY2UwM2NiMjJhZjY2ZjY5NTc3NTQ2 ZGJkZTEwMDA3Yjk4N2Q0MmFlMWQ4YWJlMjExYzJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyVmMrmYAy0VOqMPTkY+8od4AzkY5VMqDjwP5hC6qBQYgN FMTtLuM8tB0BX0DaPqGOardlnhaPM7Zhj/LxULGkf+98gnEjcvpHFGDOa02xRmCW ZiUIVYsePwmxuJt+yV1J2T8nTZHv2OUZmDQqjO/QOY/ZszlvKw0i8Ppwakt+Vclb 18q9tcCzoLlO5qWYLlWN7Vtz8ZLj/YspF5eNqpLNfR50pid0QcO5sVW9yIqViOtJ CbZRp5lQiFVcSmOF4zmASzVHRVo58arTZTsdSJ1JIsgQLyxh4I2tVcD1oX7DESbF aezOgPScyXI2BwngwizDd96nkG6utoLctFYLd1cZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU51axAyQm4u05ktEjuySQPLyXuJQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwN2NhMjFjLWY1NDQtNGI4NS04Y2YwLTExOTQ3ZGY5NmY3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AYCAwDQYJKoZIhvcNAQELBQADggEBANeZhh2eC41VMdVQWAuzdD9X Wh/qWl5Eh+dRQToZH1gPMqIMQHYc9J0cxhtRlZj+lAYNMWfITSetO1B4oUS7NOy+ hfNRaqTgAJrDvlIbUhBL+y2TX1iSvHXviBwj0e1RHLl0jNXnE5J6jFw5xUQ8rlvI 1GMRcOWizV4j4SNGshZ5oU59f3Isxe3IbyIbErHYZU3oq/b/qs8uCiH0mQojB2rq TzmEaKcME5XG9RA7fe9er7nG6wj31RYfFAbpEGAYqBA5SVpaOKqntVDEfMc2hwHU nCQYwwUN2zsg0B16IaayOME9hWaEFkg+2rtg5iOuC8Z1v8EA8HNgnVQdAKNzP7o= -----END CERTIFICATE-----Generated at Sat Sep 6 14:05:54 2025 by rpki-client