$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb376071-26aa-4a42-baa1-5a5cac704a4b.roa File: fb376071-26aa-4a42-baa1-5a5cac704a4b.roa (raw, json) Hash identifier: QzdjLS6bhu4bbj90dd9aTzp1kZn5nPGgotmwluvVd+8= Subject key identifier: 4F:E4:BF:81:1A:FC:ED:46:6A:FA:C6:F1:FC:65:31:A1:24:7B:3B:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04DA64E0D836463061348F6855AD59CEA14876A6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb376071-26aa-4a42-baa1-5a5cac704a4b.roa Signing time: Fri 29 Aug 2025 15:10:28 +0000 ROA not before: Fri 29 Aug 2025 15:10:28 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:7480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:da:64:e0:d8:36:46:30:61:34:8f:68:55:ad:59:ce:a1:48:76:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 15:10:28 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=b5ac35366939b77f83059c5d415658409963f33d43cddec36a923100eef00559, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e4:23:b1:98:84:8a:02:c0:23:49:a9:17:8b: b7:d6:0b:ba:87:30:a1:f5:c8:16:b6:24:42:0d:5e: ec:7d:4f:84:18:15:8e:69:a0:01:d0:84:bb:95:8b: a3:ee:e1:6b:77:67:01:c1:94:20:7f:19:5b:16:15: dd:87:38:e5:43:c1:e6:f1:b4:18:f5:95:07:72:14: 44:62:f8:af:40:fb:8d:6e:0b:28:8f:c2:c5:f0:a3: e9:e4:32:2f:0c:fd:4c:95:48:74:49:26:27:bf:71: 87:4f:62:4e:9e:b1:03:c7:4a:fd:a9:99:f9:77:0f: f0:90:e4:a8:2a:10:59:18:11:08:c6:7d:5e:49:83: f3:84:4f:83:3d:52:ba:06:ea:6c:c5:2f:dc:36:b9: 9d:c5:ca:40:ef:ba:68:e3:b6:eb:4c:c2:12:db:35: 18:c7:b3:2a:4f:2b:71:52:99:5f:3f:65:b7:a4:18: 3e:c4:f9:b6:7b:32:93:49:0b:2c:e7:3e:fb:2d:9b: 72:06:d5:b0:a1:dd:64:51:8a:c1:73:ed:ec:18:e8: 8d:e1:f5:f5:0d:bc:21:cb:43:5e:d9:4c:1a:e0:42: 8d:f6:1e:b7:35:bc:67:88:15:67:66:6c:f7:7d:e2: a9:5f:70:8b:be:46:8b:7c:d9:42:fd:f4:ab:f5:2e: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E4:BF:81:1A:FC:ED:46:6A:FA:C6:F1:FC:65:31:A1:24:7B:3B:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb376071-26aa-4a42-baa1-5a5cac704a4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:7480::/48 Signature Algorithm: sha256WithRSAEncryption 6c:cd:eb:99:2d:0b:74:dc:5e:61:00:78:8a:9a:33:6f:79:74: 25:3e:18:df:21:99:62:b5:14:08:69:eb:44:61:49:ba:34:b2: 4a:08:80:79:3b:a1:ac:21:62:e2:31:d9:89:82:21:b9:02:81: 61:d0:30:23:16:64:8c:42:c6:0d:82:f4:76:4d:4d:8b:c4:e3: 24:aa:e7:7a:e8:df:02:29:58:cf:0f:c6:a3:b5:a1:f8:c5:9b: 62:c0:5e:a6:b1:b9:4d:65:99:e7:fe:6d:c7:0d:0c:06:38:57: b1:2b:00:41:6d:e8:f1:2b:a3:ed:e7:3c:be:9a:3b:92:7a:02: f3:62:3f:f6:cf:44:e7:49:2a:d9:f1:b7:95:5f:d6:99:6f:86: e8:13:dd:1d:27:b5:fa:64:92:e6:51:60:63:59:01:9a:24:03: a9:0a:89:bc:8e:90:dc:15:32:89:94:33:6a:89:d1:8b:e0:96: a0:ce:1f:fa:5f:50:f8:8e:88:08:2a:d3:db:ba:08:83:6c:97: 5c:79:8a:cc:c4:a3:c4:83:93:6a:d9:8f:f8:4f:ee:c5:86:60: b8:ff:3b:4a:cc:e5:0f:04:4c:02:ba:13:6b:da:82:c5:88:e7: f1:43:cc:66:b2:0f:c3:cb:5e:b2:74:1e:e9:a0:99:46:d7:04: 42:7e:f7:77 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBNpk4Ng2RjBhNI9oVa1ZzqFIdqYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTUxMDI4WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNWFjMzUzNjY5MzliNzdmODMwNTljNWQ0MTU2NTg0MDk5 NjNmMzNkNDNjZGRlYzM2YTkyMzEwMGVlZjAwNTU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCK5COxmISKAsAjSakXi7fWC7qHMKH1yBa2JEINXux9T4QY FY5poAHQhLuVi6Pu4Wt3ZwHBlCB/GVsWFd2HOOVDwebxtBj1lQdyFERi+K9A+41u CyiPwsXwo+nkMi8M/UyVSHRJJie/cYdPYk6esQPHSv2pmfl3D/CQ5KgqEFkYEQjG fV5Jg/OET4M9UroG6mzFL9w2uZ3FykDvumjjtutMwhLbNRjHsypPK3FSmV8/Zbek GD7E+bZ7MpNJCyznPvstm3IG1bCh3WRRisFz7ewY6I3h9fUNvCHLQ17ZTBrgQo32 Hrc1vGeIFWdmbPd94qlfcIu+Rot82UL99Kv1LiwPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUT+S/gRr87UZq+sbx/GUxoSR7O8YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZiMzc2MDcxLTI2YWEtNGE0Mi1iYWExLTVhNWNhYzcwNGE0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//dIAwDQYJKoZIhvcNAQELBQADggEBAGzN65ktC3TcXmEAeIqaM295 dCU+GN8hmWK1FAhp60RhSbo0skoIgHk7oawhYuIx2YmCIbkCgWHQMCMWZIxCxg2C 9HZNTYvE4ySq53ro3wIpWM8PxqO1ofjFm2LAXqaxuU1lmef+bccNDAY4V7ErAEFt 6PEro+3nPL6aO5J6AvNiP/bPROdJKtnxt5Vf1plvhugT3R0ntfpkkuZRYGNZAZok A6kKibyOkNwVMomUM2qJ0YvglqDOH/pfUPiOiAgq09u6CINsl1x5iszEo8SDk2rZ j/hP7sWGYLj/O0rM5Q8ETAK6E2vagsWI5/FDzGayD8PLXrJ0HumgmUbXBEJ+93c= -----END CERTIFICATE-----Generated at Sat Sep 6 16:52:45 2025 by rpki-client