$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc4b71fd-9963-4adb-be05-598fbf89dc31.roa File: dc4b71fd-9963-4adb-be05-598fbf89dc31.roa (raw, json) Hash identifier: 5szk372y6CAY5UtvehgB6grGkI+Q3B9UbCRYxArlHTE= Subject key identifier: 69:B7:DE:7C:C2:B1:77:F9:37:C0:48:1D:19:F6:FC:F1:44:DD:2F:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35EA64CA931D42229C5CAD4994613C41271AE5F1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc4b71fd-9963-4adb-be05-598fbf89dc31.roa Signing time: Mon 25 Aug 2025 16:53:49 +0000 ROA not before: Mon 25 Aug 2025 16:53:49 +0000 ROA not after: Mon 29 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:7800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ea:64:ca:93:1d:42:22:9c:5c:ad:49:94:61:3c:41:27:1a:e5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 16:53:49 2025 GMT Not After : Sep 29 23:59:59 2025 GMT Subject: serialNumber=b960c09025fa31fc03e8f222968d7ddb66c737d11052e39b1d6f2b41fa5de71d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:36:f7:1e:6c:5d:58:f7:93:2b:db:a2:3a: f0:72:30:90:1d:59:bd:57:88:f5:d8:fa:94:7a:32: 82:0f:a8:ec:21:5b:e2:cc:cd:02:cf:73:52:4c:c3: 3c:ec:1c:7e:bd:bb:84:d9:3b:15:e9:37:6c:fc:c3: f5:c4:66:3a:ec:c9:64:c1:e5:7b:f3:3a:91:7f:cf: ed:04:d6:6f:36:2b:36:60:a8:81:b2:be:38:d6:01: 47:37:6d:e3:a8:4e:95:35:46:44:40:da:28:4f:11: 11:a3:dc:4b:93:ab:b8:96:e6:dd:61:1e:fe:5c:5b: ba:68:ce:09:91:9c:a7:71:09:62:c4:e0:56:8a:e3: 03:24:0d:ab:88:25:6c:a6:a3:80:be:db:1b:42:99: ab:c2:f9:bd:07:59:c6:c5:d2:89:ca:ed:c1:c1:c2: d3:d1:1e:ea:d8:83:26:9b:e2:8c:ff:8d:9b:41:f0: da:dd:ad:e4:cc:e8:47:9b:fd:75:dc:38:88:7a:d0: cd:67:af:a4:1f:55:a5:63:29:88:b6:9a:8a:29:62: 60:95:42:a5:c2:35:33:79:66:66:10:12:4c:80:86: a4:4a:0c:a5:ad:36:65:6e:7f:3a:65:64:af:f7:6a: 2b:e5:b3:4a:b7:8f:19:eb:c3:25:28:fa:0e:bc:57: 4b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B7:DE:7C:C2:B1:77:F9:37:C0:48:1D:19:F6:FC:F1:44:DD:2F:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc4b71fd-9963-4adb-be05-598fbf89dc31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:7800::/48 Signature Algorithm: sha256WithRSAEncryption 20:15:d0:ea:18:e7:56:ca:da:72:84:ab:47:0c:9b:4c:63:da: 19:b4:26:e5:05:4a:7a:d6:8f:bf:1b:c3:fa:d4:6a:a9:d5:5e: be:37:53:25:6b:5b:71:25:c8:d0:29:f6:69:30:03:28:48:31: 67:0d:d4:ae:6c:cf:08:cc:ec:d7:88:74:02:e6:cf:6c:21:18: be:95:f2:fc:ad:f8:56:74:87:de:e5:20:51:89:54:83:0a:85: f0:35:c1:5d:40:c0:80:ae:2c:2c:cc:ca:f6:5c:57:b0:79:02: 01:08:c9:ab:89:85:e7:95:89:44:11:4b:5c:e5:f1:a9:00:13: bc:ff:e0:3d:64:35:92:2b:8e:a6:5b:c8:fe:e5:89:67:12:d0: c2:bb:7f:ad:8c:72:0b:15:df:01:98:31:4e:88:69:bf:15:44: e3:c1:31:06:20:00:8d:bf:82:2e:d4:31:50:de:aa:b2:37:25: ed:d0:c6:1c:5c:cb:eb:14:47:20:ba:7f:79:e8:81:1c:06:19: 53:ac:76:8f:3d:25:ff:52:5e:93:84:90:c1:b2:7b:45:5b:b6: d7:59:86:36:d6:13:0a:98:bc:bd:fe:86:a8:d6:a7:06:06:66: 41:17:7f:19:33:64:20:22:27:d8:03:e7:13:3c:1c:6e:bc:11: 91:88:d7:4f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNepkypMdQiKcXK1JlGE8QSca5fEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI1MTY1MzQ5WhcNMjUwOTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTYwYzA5MDI1ZmEzMWZjMDNlOGYyMjI5NjhkN2RkYjY2 YzczN2QxMTA1MmUzOWIxZDZmMmI0MWZhNWRlNzFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2Zzb3HmxdWPeTK9uiOvByMJAdWb1XiPXY+pR6MoIPqOwh W+LMzQLPc1JMwzzsHH69u4TZOxXpN2z8w/XEZjrsyWTB5XvzOpF/z+0E1m82KzZg qIGyvjjWAUc3beOoTpU1RkRA2ihPERGj3EuTq7iW5t1hHv5cW7pozgmRnKdxCWLE 4FaK4wMkDauIJWymo4C+2xtCmavC+b0HWcbF0onK7cHBwtPRHurYgyab4oz/jZtB 8NrdreTM6Eeb/XXcOIh60M1nr6QfVaVjKYi2moopYmCVQqXCNTN5ZmYQEkyAhqRK DKWtNmVufzplZK/3aivls0q3jxnrwyUo+g68V0upAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUabfefMKxd/k3wEgdGfb88UTdLy0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjNGI3MWZkLTk5NjMtNGFkYi1iZTA1LTU5OGZiZjg5ZGMzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/seAAwDQYJKoZIhvcNAQELBQADggEBACAV0OoY51bK2nKEq0cMm0xj 2hm0JuUFSnrWj78bw/rUaqnVXr43UyVrW3ElyNAp9mkwAyhIMWcN1K5szwjM7NeI dALmz2whGL6V8vyt+FZ0h97lIFGJVIMKhfA1wV1AwICuLCzMyvZcV7B5AgEIyauJ heeViUQRS1zl8akAE7z/4D1kNZIrjqZbyP7liWcS0MK7f62McgsV3wGYMU6Iab8V ROPBMQYgAI2/gi7UMVDeqrI3Je3Qxhxcy+sURyC6f3nogRwGGVOsdo89Jf9SXpOE kMGye0VbttdZhjbWEwqYvL3+hqjWpwYGZkEXfxkzZCAiJ9gD5xM8HG68EZGI108= -----END CERTIFICATE-----Generated at Sat Sep 6 14:12:21 2025 by rpki-client