$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa File: b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa (raw, json) Hash identifier: XQgwdAx1oEwz8kqw+njmpwuQBBNcTmlSHSsyn8YSSQE= Subject key identifier: 32:57:64:A7:95:1C:86:AD:09:49:0F:F6:E9:8F:F5:36:E2:2E:EF:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1575738DBF2C100DF88E9E2F9B2A7220A4967EB7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa Signing time: Tue 26 Aug 2025 15:41:07 +0000 ROA not before: Tue 26 Aug 2025 15:41:07 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:74c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:75:73:8d:bf:2c:10:0d:f8:8e:9e:2f:9b:2a:72:20:a4:96:7e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:41:07 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=7485f73abdf483d8610420b4a334b31a8df1a758c53f0a560d991ed67ae0f8e1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:28:69:bb:ad:52:e5:94:3c:79:fa:62:d2:d2: e8:0b:bf:ea:12:2c:4e:77:bc:7a:dc:c2:52:be:3f: 88:84:c4:28:f8:fb:58:f7:bb:43:c9:e6:48:e5:21: 89:23:3e:9b:d5:62:de:79:bb:2d:e5:fd:fd:3d:3f: ee:b6:87:fa:59:3f:be:7d:20:b7:c8:a7:9f:35:83: f8:ee:e6:a3:3e:b3:1f:e7:c5:93:5b:3a:30:27:9f: 07:78:7d:5f:45:76:82:21:7c:38:9a:42:9f:48:9b: 72:6e:01:b7:61:b5:4f:df:41:aa:e6:a0:45:a1:46: eb:d1:56:de:ec:3f:ae:66:03:82:b4:04:ba:6b:6c: 32:f5:45:b5:b6:88:e8:6a:2f:50:af:95:89:6c:52: f1:ed:31:11:d8:78:74:e5:a6:47:55:28:e1:fc:44: 00:01:b8:18:88:e8:36:69:0d:ba:25:b5:ad:95:32: dc:65:b7:d7:ea:d2:ae:c6:b4:a4:f7:60:3e:4d:13: d0:6c:d0:f6:ac:86:33:4d:5f:24:b2:44:5b:2d:6a: f2:1c:c0:c4:58:d0:d1:f9:fc:8e:f0:c2:50:e3:1e: fa:dc:61:41:34:4e:cb:10:ff:4a:60:b4:00:0d:d8: d8:45:3b:c8:8b:c7:64:94:00:bb:cd:1e:53:0a:ad: 69:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:57:64:A7:95:1C:86:AD:09:49:0F:F6:E9:8F:F5:36:E2:2E:EF:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:74c0::/48 Signature Algorithm: sha256WithRSAEncryption 26:07:89:7d:cb:7e:9e:21:43:71:65:0f:fd:1f:be:ea:45:37: 7a:e2:a3:33:4f:df:0e:36:d9:97:22:d9:51:f7:01:ea:81:15: fe:fa:ef:25:ba:69:d8:8b:a3:b2:0e:88:47:1a:63:fd:6a:39: af:b6:8b:b6:ce:af:9a:08:47:ea:96:18:f0:a0:81:d2:74:cc: 2e:87:9d:b3:82:ea:90:9c:dc:f2:73:45:a5:08:d6:4a:68:1a: 49:2c:eb:23:ae:55:7d:d7:bc:e3:3c:a0:10:01:ec:7f:c4:0d: 24:70:05:43:20:76:e6:e1:c9:bb:a4:3e:8e:0f:50:e1:60:92: b9:52:96:22:51:84:3a:af:d2:6a:bd:3d:13:2f:ec:74:42:61: 77:7f:09:5e:65:26:c9:7b:5a:f5:c9:ae:cb:9d:1d:05:4a:40: a5:f6:65:89:08:06:19:26:52:61:63:5b:0f:e8:aa:32:02:09: 44:30:84:e5:58:a8:13:e9:e4:c4:ff:2d:3f:95:20:3b:ed:0a: 1d:c3:b0:d2:0f:c7:4a:86:17:a2:84:1e:a5:87:a8:1c:68:42: 5f:6f:58:5e:49:64:31:70:0c:95:41:06:3d:d7:ab:2e:70:21: 71:64:57:17:60:1e:0c:5e:aa:db:33:71:42:ad:1b:f0:90:a6: b4:42:9d:83 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFXVzjb8sEA34jp4vmypyIKSWfrcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTU0MTA3WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDg1ZjczYWJkZjQ4M2Q4NjEwNDIwYjRhMzM0YjMxYThk ZjFhNzU4YzUzZjBhNTYwZDk5MWVkNjdhZTBmOGUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfKGm7rVLllDx5+mLS0ugLv+oSLE53vHrcwlK+P4iExCj4 +1j3u0PJ5kjlIYkjPpvVYt55uy3l/f09P+62h/pZP759ILfIp581g/ju5qM+sx/n xZNbOjAnnwd4fV9FdoIhfDiaQp9Im3JuAbdhtU/fQarmoEWhRuvRVt7sP65mA4K0 BLprbDL1RbW2iOhqL1CvlYlsUvHtMRHYeHTlpkdVKOH8RAABuBiI6DZpDbolta2V Mtxlt9fq0q7GtKT3YD5NE9Bs0PashjNNXySyRFstavIcwMRY0NH5/I7wwlDjHvrc YUE0TssQ/0pgtAAN2NhFO8iLx2SUALvNHlMKrWn7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMldkp5Uchq0JSQ/26Y/1NuIu75UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0ZmU3ZjRlLTA3YzAtNGU4ZS04Nzg1LTcwZjQyMWI1MjU2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//dMAwDQYJKoZIhvcNAQELBQADggEBACYHiX3Lfp4hQ3FlD/0fvupF N3riozNP3w422Zci2VH3AeqBFf767yW6adiLo7IOiEcaY/1qOa+2i7bOr5oIR+qW GPCggdJ0zC6HnbOC6pCc3PJzRaUI1kpoGkks6yOuVX3XvOM8oBAB7H/EDSRwBUMg dubhybukPo4PUOFgkrlSliJRhDqv0mq9PRMv7HRCYXd/CV5lJsl7WvXJrsudHQVK QKX2ZYkIBhkmUmFjWw/oqjICCUQwhOVYqBPp5MT/LT+VIDvtCh3DsNIPx0qGF6KE HqWHqBxoQl9vWF5JZDFwDJVBBj3Xqy5wIXFkVxdgHgxeqtszcUKtG/CQprRCnYM= -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:30 2025 by rpki-client