$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece8eb8f-37d1-4797-8746-990300c8ab75.roa File: ece8eb8f-37d1-4797-8746-990300c8ab75.roa (raw, json) Hash identifier: KdvM63mc0JBjXugsr8GGGtUyeCi93fEWTkWt4iStCAI= Subject key identifier: 32:53:6D:CA:C5:CD:62:72:DC:52:7F:9A:36:82:26:03:72:6A:38:8F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2B4474276E81456D4E95FC27F540580AFECA3923 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece8eb8f-37d1-4797-8746-990300c8ab75.roa Signing time: Tue 12 Aug 2025 00:10:24 +0000 ROA not before: Tue 12 Aug 2025 00:10:24 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:8422::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:44:74:27:6e:81:45:6d:4e:95:fc:27:f5:40:58:0a:fe:ca:39:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 12 00:10:24 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=f59faa19eabea055b8013a844295c4ffdd35fb6743a77fddd10a675d02579f4a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:11:97:db:ae:64:29:6b:ba:53:0f:b9:1c:63: 26:e2:83:23:5d:d9:08:40:35:c3:91:e7:32:03:23: a8:ba:53:31:04:44:2b:a9:08:6c:5f:fc:e4:20:33: 89:8c:94:07:35:12:aa:c2:cc:f2:5d:9a:01:59:f1: ea:97:7a:94:fe:35:48:b6:da:88:e7:b6:8d:02:28: 28:43:38:bc:13:57:6f:5c:c4:68:b2:3c:5c:a8:3d: f9:ed:bf:3c:39:01:b1:0d:84:87:ff:40:99:9e:aa: 87:48:5d:57:96:56:15:6b:fe:9b:62:8e:3c:a5:89: 2a:b9:10:de:72:60:42:b3:11:57:25:d7:1d:7b:ce: bd:cf:80:de:64:58:c8:47:6c:bc:13:db:3c:79:56: 8d:14:3f:b7:1d:de:83:db:ed:6d:df:4c:ca:87:3e: 2f:6c:7c:ff:14:62:5c:a2:f4:49:d1:1e:cd:58:6a: a9:cf:c7:b9:51:99:77:16:fd:6c:d3:93:00:53:68: c2:31:58:ab:49:78:7e:6e:5f:c5:dc:b9:70:0f:46: 45:4b:cf:41:e9:c3:49:04:9e:54:69:bd:40:4e:d9: ff:1b:95:71:41:62:2b:af:1e:70:5e:60:9d:35:be: 02:6d:3c:f8:be:a2:99:22:ff:94:80:f3:3a:6d:e6: 69:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:53:6D:CA:C5:CD:62:72:DC:52:7F:9A:36:82:26:03:72:6A:38:8F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece8eb8f-37d1-4797-8746-990300c8ab75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:8422::/48 Signature Algorithm: sha256WithRSAEncryption cb:a9:24:02:79:7b:dd:ab:13:9e:5b:10:29:3a:6f:35:61:4c: 11:28:f6:ba:98:af:44:8c:e7:3c:96:b8:c1:45:b0:95:99:22: e6:7f:af:0a:a2:54:5c:60:96:b9:00:55:60:45:f6:b5:23:5c: 7b:22:f2:ff:c8:72:e2:01:c1:7d:b1:f3:98:be:f2:f5:84:f7: b3:81:b4:97:46:b3:f2:04:d5:33:c9:32:5e:6e:3d:bc:5c:57: b5:99:7c:83:54:57:87:4f:ec:18:97:b6:15:61:fe:28:4c:ab: f2:9b:53:57:9d:fe:ac:64:7d:d5:d1:88:a9:53:6f:2b:44:b6: 9f:25:7c:26:19:f5:39:54:23:ba:1b:41:ed:dd:fb:8c:42:75: 38:97:c3:18:d8:05:fa:87:1e:f3:74:e8:53:48:3c:fe:59:d2: 4f:03:39:01:1f:8e:73:e2:9f:f7:f9:27:5e:d0:a6:d4:c3:08: 56:11:47:2b:61:ba:2b:2e:6d:bb:bc:80:ba:ab:75:b9:76:10: d2:58:b3:e3:0e:c0:1a:56:c1:1f:94:d9:86:48:6c:06:95:67: 0c:c9:28:8b:b6:f6:4f:e3:6c:25:7f:f0:37:3a:3d:d5:95:d5: 0e:97:7e:c4:4b:fe:4b:c8:40:26:96:aa:54:48:ba:25:ff:54: f1:36:0e:21 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUK0R0J26BRW1Olfwn9UBYCv7KOSMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDAxMDI0WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTlmYWExOWVhYmVhMDU1YjgwMTNhODQ0Mjk1YzRmZmRk MzVmYjY3NDNhNzdmZGRkMTBhNjc1ZDAyNTc5ZjRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDEZfbrmQpa7pTD7kcYybigyNd2QhANcOR5zIDI6i6UzEE RCupCGxf/OQgM4mMlAc1EqrCzPJdmgFZ8eqXepT+NUi22ojnto0CKChDOLwTV29c xGiyPFyoPfntvzw5AbENhIf/QJmeqodIXVeWVhVr/ptijjyliSq5EN5yYEKzEVcl 1x17zr3PgN5kWMhHbLwT2zx5Vo0UP7cd3oPb7W3fTMqHPi9sfP8UYlyi9EnRHs1Y aqnPx7lRmXcW/WzTkwBTaMIxWKtJeH5uX8XcuXAPRkVLz0Hpw0kEnlRpvUBO2f8b lXFBYiuvHnBeYJ01vgJtPPi+opki/5SA8zpt5mm3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMlNtysXNYnLcUn+aNoImA3JqOI8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VjZThlYjhmLTM3ZDEtNDc5Ny04NzQ2LTk5MDMwMGM4YWI3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9hCIwDQYJKoZIhvcNAQELBQADggEBAMupJAJ5e92rE55bECk6bzVh TBEo9rqYr0SM5zyWuMFFsJWZIuZ/rwqiVFxglrkAVWBF9rUjXHsi8v/IcuIBwX2x 85i+8vWE97OBtJdGs/IE1TPJMl5uPbxcV7WZfINUV4dP7BiXthVh/ihMq/KbU1ed /qxkfdXRiKlTbytEtp8lfCYZ9TlUI7obQe3d+4xCdTiXwxjYBfqHHvN06FNIPP5Z 0k8DOQEfjnPin/f5J17QptTDCFYRRythuisubbu8gLqrdbl2ENJYs+MOwBpWwR+U 2YZIbAaVZwzJKIu29k/jbCV/8Dc6PdWV1Q6XfsRL/kvIQCaWqlRIuiX/VPE2DiE= -----END CERTIFICATE-----Generated at Wed Aug 20 13:18:37 2025 by rpki-client