$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a87590-1b18-4e21-bef6-533a9b6eb087.roa File: 02a87590-1b18-4e21-bef6-533a9b6eb087.roa (raw, json) Hash identifier: Juv6RTPvcBHcPHFe3U7ucRTFKeUaaE72m0HqDHwuFyo= Subject key identifier: 58:8E:53:7C:9D:56:B3:82:E0:52:AD:69:F2:35:C0:C6:D3:25:8B:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5495115557C78B77476C4753F221E5553B585557 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a87590-1b18-4e21-bef6-533a9b6eb087.roa Signing time: Sat 06 Sep 2025 00:10:43 +0000 ROA not before: Sat 06 Sep 2025 00:10:43 +0000 ROA not after: Sat 11 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:95:11:55:57:c7:8b:77:47:6c:47:53:f2:21:e5:55:3b:58:55:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 6 00:10:43 2025 GMT Not After : Oct 11 23:59:59 2025 GMT Subject: serialNumber=991ae69b3b59d1867f7e49925f3ff0b6e195c2e5f481fd24f2d2142543a1edd8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:21:f3:e2:c5:7f:4e:8d:18:00:42:07:19: c3:62:4b:b7:d3:6c:25:75:32:fc:b4:92:96:93:ef: 5b:da:a2:0c:16:90:b3:5f:a8:a3:b9:13:ed:be:ad: ae:75:57:b6:4e:3c:06:cb:46:c7:35:d7:a3:b9:a5: 23:be:7c:1d:24:50:6d:ed:76:3c:35:c9:99:42:a7: 85:bf:58:6f:92:1f:d1:cc:a6:28:45:87:62:89:36: b0:bb:f2:fc:62:e5:40:ac:01:85:6b:65:61:3b:a4: da:e3:a2:fd:f0:97:42:ed:70:92:47:ba:71:43:cc: d2:12:d9:cc:01:55:75:a1:47:03:3e:d9:d8:a2:17: 4c:f0:ac:25:6e:15:3c:73:f1:d8:23:8a:f5:a3:96: 91:a5:34:d5:54:f6:cd:29:f4:6e:83:8e:47:91:52: e5:b0:f0:22:63:09:26:cd:ce:c1:36:55:03:fe:d7: 68:db:16:54:ea:a4:a3:34:92:6d:5d:1e:3d:a9:29: 25:52:bf:95:24:e5:6e:28:37:24:bd:c2:1c:bb:83: 1b:52:d9:b0:33:66:26:60:cd:4b:b1:f9:46:50:7b: 9d:a9:14:0c:9c:47:88:ae:5a:68:a4:b1:f8:bc:fa: b3:e7:87:66:7a:12:db:a9:2b:f8:b7:55:a0:bf:0f: 34:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8E:53:7C:9D:56:B3:82:E0:52:AD:69:F2:35:C0:C6:D3:25:8B:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a87590-1b18-4e21-bef6-533a9b6eb087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd::/32 Signature Algorithm: sha256WithRSAEncryption bb:6d:4e:0c:4b:7c:e8:19:7e:6b:f0:48:85:48:1e:fa:09:5c: 24:bc:a5:37:f3:1d:be:4e:ba:56:fd:06:4f:9a:9e:52:9f:61: 4f:06:92:eb:02:e7:38:5d:1b:a2:91:ff:1f:58:94:92:77:23: 5d:60:93:50:d6:cd:1b:3a:98:ad:8b:1e:ea:f8:3f:e2:bf:ae: a4:6f:ad:da:23:d7:ac:17:65:4e:b9:fc:2e:89:56:23:eb:f2: 07:47:18:d2:a3:24:12:ee:32:2d:2c:98:b7:a2:eb:b6:4a:76: a8:8d:2e:37:23:3d:48:ae:e5:2d:24:56:67:b0:b9:c8:33:4b: 91:9c:2d:52:5e:8b:f5:9d:33:d5:fc:10:a4:85:19:06:ca:88: c9:01:46:6b:87:b7:4e:06:bf:b7:b0:c2:95:cf:ed:1e:57:01: ee:b5:f5:b9:37:b1:cc:b0:e1:48:b7:7c:df:3e:aa:37:37:67: 4b:eb:de:ec:cc:1e:40:1a:b3:d2:de:0f:3d:27:a0:24:e5:4a: b9:b4:aa:4f:27:15:6d:71:65:9b:e0:56:da:2a:7c:18:9c:e0: c4:06:79:2b:53:aa:87:c5:68:83:b8:b8:92:16:fa:51:b2:47: 22:42:aa:5d:1e:0d:ca:5d:65:b0:91:e8:23:f0:be:43:af:3e: bd:66:67:bf -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUVJURVVfHi3dHbEdT8iHlVTtYVVcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA2MDAxMDQzWhcNMjUxMDExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5OTFhZTY5YjNiNTlkMTg2N2Y3ZTQ5OTI1ZjNmZjBiNmUx OTVjMmU1ZjQ4MWZkMjRmMmQyMTQyNTQzYTFlZGQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+tSHz4sV/To0YAEIHGcNiS7fTbCV1Mvy0kpaT71vaogwW kLNfqKO5E+2+ra51V7ZOPAbLRsc116O5pSO+fB0kUG3tdjw1yZlCp4W/WG+SH9HM pihFh2KJNrC78vxi5UCsAYVrZWE7pNrjov3wl0LtcJJHunFDzNIS2cwBVXWhRwM+ 2diiF0zwrCVuFTxz8dgjivWjlpGlNNVU9s0p9G6DjkeRUuWw8CJjCSbNzsE2VQP+ 12jbFlTqpKM0km1dHj2pKSVSv5Uk5W4oNyS9why7gxtS2bAzZiZgzUux+UZQe52p FAycR4iuWmiksfi8+rPnh2Z6EtupK/i3VaC/DzQ1AgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUWI5TfJ1Ws4LgUq1p8jXAxtMli6QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyYTg3NTkwLTFiMTgtNGUyMS1iZWY2LTUzM2E5YjZlYjA4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB/9MA0GCSqGSIb3DQEBCwUAA4IBAQC7bU4MS3zoGX5r8EiFSB76CVwk vKU38x2+TrpW/QZPmp5Sn2FPBpLrAuc4XRuikf8fWJSSdyNdYJNQ1s0bOpitix7q +D/iv66kb63aI9esF2VOufwuiVYj6/IHRxjSoyQS7jItLJi3ouu2SnaojS43Iz1I ruUtJFZnsLnIM0uRnC1SXov1nTPV/BCkhRkGyojJAUZrh7dOBr+3sMKVz+0eVwHu tfW5N7HMsOFIt3zfPqo3N2dL697szB5AGrPS3g89J6Ak5Uq5tKpPJxVtcWWb4Fba KnwYnODEBnkrU6qHxWiDuLiSFvpRskciQqpdHg3KXWWwkegj8L5Drz69Zme/ -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:10 2025 by rpki-client