$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259f720-d976-494a-b049-c39cefc1daa6.roa File: 3259f720-d976-494a-b049-c39cefc1daa6.roa (raw, json) Hash identifier: 2j+OjqhAa3gDVzZ4Fqk8yFlaZl+ClRo3GK9TBx4sAxE= Subject key identifier: AA:5E:66:43:4F:D6:8B:32:A5:D3:C5:93:2A:BB:2A:17:6A:BD:16:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E4DBE01CE00BEC36E8A2899C9D1401AD5307FF8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259f720-d976-494a-b049-c39cefc1daa6.roa Signing time: Tue 26 Aug 2025 16:40:15 +0000 ROA not before: Tue 26 Aug 2025 16:40:15 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:7440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4d:be:01:ce:00:be:c3:6e:8a:28:99:c9:d1:40:1a:d5:30:7f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:40:15 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=0f4e577861e4fcfc527ec0897887c72d9165457bcfa379c2536d7c2113c739ba, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:2a:55:a1:d5:35:15:54:91:75:3f:ad:98: 74:8c:6a:49:05:a8:95:7b:dd:bb:f3:27:49:cb:9c: 8f:9d:7c:90:c0:90:df:96:8c:c5:5f:88:af:29:e4: 26:af:6f:5a:12:0c:40:ff:6b:ed:fd:51:db:13:47: 73:3c:ad:a9:e6:b3:d9:48:d3:59:20:09:4f:fc:2b: 09:d2:89:94:5d:80:81:61:e6:f8:1c:64:57:3b:5b: 7a:29:98:88:ec:3b:98:a0:5d:3a:56:05:9c:80:bf: 99:c2:d9:9e:d9:db:89:6b:a6:40:ce:84:e4:c7:7d: 67:f9:c7:10:11:95:63:b6:30:31:49:73:fd:6e:71: 54:00:d9:23:f6:63:2a:96:8f:7e:5a:f2:c5:c4:35: 4c:6f:31:cb:d6:b0:00:de:b3:db:f1:76:17:e3:20: 8d:70:e2:f0:11:58:43:10:e8:8a:7e:e2:a6:02:66: 10:9b:ee:1d:a1:df:56:c2:f3:ea:4d:c5:94:6c:11: 68:a9:fb:90:35:e4:ec:4e:1d:f0:6a:77:0c:94:43: 7b:ee:39:93:07:a8:65:65:77:68:b0:f1:86:20:2a: d3:d5:5a:1f:91:bf:58:f3:da:d9:a9:d2:9d:5e:bb: de:d7:09:b7:35:45:ef:48:dd:91:77:7c:0b:f5:0e: 23:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5E:66:43:4F:D6:8B:32:A5:D3:C5:93:2A:BB:2A:17:6A:BD:16:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259f720-d976-494a-b049-c39cefc1daa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:7440::/48 Signature Algorithm: sha256WithRSAEncryption 15:3e:c7:f8:6a:b0:b2:df:53:07:ea:32:f8:8c:b0:9f:59:0c: 60:71:b1:ef:1e:13:be:5b:0f:c7:86:f5:c8:d9:2c:c0:af:5a: ed:86:2e:58:85:da:6f:79:8f:8f:a1:78:ee:6f:94:cd:37:01: 9a:e0:b7:af:7d:db:d1:6e:ef:5f:09:a2:c0:cd:27:a0:00:44: ea:d2:30:0a:5b:5b:b4:47:13:52:a5:85:56:d3:73:b0:90:be: 1e:4b:49:d6:3d:98:4f:6a:e5:e2:e7:6d:97:21:5e:5c:b6:54: 2b:d5:e4:82:c1:b5:62:d6:51:6a:b8:4f:eb:8b:80:1b:d5:fa: 4b:ef:af:64:e2:a7:66:31:89:89:01:49:b0:33:ee:3f:de:e6: 34:a7:b9:6c:80:c6:5a:79:25:ff:2a:7a:be:6f:13:14:20:04: ed:ce:28:bf:d9:a2:ee:d4:cd:04:46:b9:93:f8:45:e3:87:61: e3:5d:8d:73:16:0f:5f:12:cf:eb:07:7e:0d:fc:a5:8b:f9:2e: 88:7c:49:d0:2f:33:8a:bb:1b:5e:60:ef:7a:7b:a5:25:85:8d: ff:90:60:ee:cb:ad:64:54:e9:18:35:05:43:f6:61:d1:40:30: 27:7f:c1:82:28:f6:da:1c:70:90:b5:63:f3:d8:77:b5:c7:f4: 4d:97:f3:13 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXk2+Ac4AvsNuiiiZydFAGtUwf/gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTY0MDE1WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjRlNTc3ODYxZTRmY2ZjNTI3ZWMwODk3ODg3YzcyZDkx NjU0NTdiY2ZhMzc5YzI1MzZkN2MyMTEzYzczOWJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxzCpVodU1FVSRdT+tmHSMakkFqJV73bvzJ0nLnI+dfJDA kN+WjMVfiK8p5Cavb1oSDED/a+39UdsTR3M8ranms9lI01kgCU/8KwnSiZRdgIFh 5vgcZFc7W3opmIjsO5igXTpWBZyAv5nC2Z7Z24lrpkDOhOTHfWf5xxARlWO2MDFJ c/1ucVQA2SP2YyqWj35a8sXENUxvMcvWsADes9vxdhfjII1w4vARWEMQ6Ip+4qYC ZhCb7h2h31bC8+pNxZRsEWip+5A15OxOHfBqdwyUQ3vuOZMHqGVld2iw8YYgKtPV Wh+Rv1jz2tmp0p1eu97XCbc1Re9I3ZF3fAv1DiObAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUql5mQ0/WizKl08WTKrsqF2q9FvYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMyNTlmNzIwLWQ5NzYtNDk0YS1iMDQ5LWMzOWNlZmMxZGFhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//dEAwDQYJKoZIhvcNAQELBQADggEBABU+x/hqsLLfUwfqMviMsJ9Z DGBxse8eE75bD8eG9cjZLMCvWu2GLliF2m95j4+heO5vlM03AZrgt69929Fu718J osDNJ6AAROrSMApbW7RHE1KlhVbTc7CQvh5LSdY9mE9q5eLnbZchXly2VCvV5ILB tWLWUWq4T+uLgBvV+kvvr2Tip2YxiYkBSbAz7j/e5jSnuWyAxlp5Jf8qer5vExQg BO3OKL/Zou7UzQRGuZP4ReOHYeNdjXMWD18Sz+sHfg38pYv5Loh8SdAvM4q7G15g 73p7pSWFjf+QYO7LrWRU6Rg1BUP2YdFAMCd/wYIo9toccJC1Y/PYd7XH9E2X8xM= -----END CERTIFICATE-----Generated at Sat Sep 6 16:46:21 2025 by rpki-client