$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55e8badf-419a-4e21-ae51-df5950add8d9.roa File: 55e8badf-419a-4e21-ae51-df5950add8d9.roa (raw, json) Hash identifier: CwBzE3oKgjp2J6WX7/5ZoNx8lC1T2NfJS/FtdkQQk2A= Subject key identifier: F4:01:2F:5E:6B:E4:8E:2E:E5:16:C1:FE:93:38:13:0D:85:66:C2:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 42BEB49326206963E06A1C6B4D2B096281AF67E6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55e8badf-419a-4e21-ae51-df5950add8d9.roa Signing time: Mon 01 Sep 2025 15:30:59 +0000 ROA not before: Mon 01 Sep 2025 15:30:59 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1a:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:be:b4:93:26:20:69:63:e0:6a:1c:6b:4d:2b:09:62:81:af:67:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:30:59 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=134f80fac470873487d0038256f89d13fcb4a2b2450da00ec00baf5cf42c36bb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:a7:05:e1:01:8f:e4:56:97:0d:e2:ac:fc: 70:4a:c1:7d:65:82:5b:1b:d9:af:8a:9f:73:be:8d: 99:2b:d7:49:b6:87:5b:06:d2:9f:a4:e3:09:73:56: ea:a2:d2:99:a2:28:a9:70:ba:e0:71:56:18:01:ec: e1:ca:7f:d6:6d:a2:ed:a0:eb:8d:a9:20:6d:49:52: 6e:4f:b1:b0:bf:57:ed:51:e1:d1:46:43:a0:ef:b5: 9c:9a:36:29:bb:69:43:5b:5f:4a:46:cb:61:c1:0f: a5:f7:8f:94:a0:4a:af:52:e5:0a:72:8e:f1:32:e0: 51:03:16:ea:74:a1:9f:ec:43:21:98:b3:57:c8:78: 79:a7:1c:bf:6b:90:74:9e:8f:38:f4:5f:75:ab:38: d9:e9:44:7e:a5:ce:f9:a9:55:9a:8d:1e:5a:14:a4: 35:20:16:11:0a:53:c3:ab:99:4a:1c:d6:4c:02:5a: 6f:1d:6f:b6:94:42:db:8e:cb:ae:30:2a:ae:ad:07: c0:24:81:3f:54:0c:d0:9a:29:7e:11:67:2b:40:13: 62:34:c4:da:d0:70:00:25:8a:e5:32:37:aa:b2:97: af:e7:6b:b3:df:2e:1b:1a:21:a5:9f:16:45:f3:63: 0f:3c:ab:d9:0b:fc:b7:41:70:79:a1:b2:aa:3e:1d: f5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:01:2F:5E:6B:E4:8E:2E:E5:16:C1:FE:93:38:13:0D:85:66:C2:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55e8badf-419a-4e21-ae51-df5950add8d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1a:c800::/37 Signature Algorithm: sha256WithRSAEncryption c3:80:4b:b5:45:51:4a:d5:3b:40:b7:27:f6:9a:81:32:6b:b6: a6:63:62:35:eb:61:7a:b0:ba:2c:ce:78:45:6d:c5:7d:35:13: 80:27:62:fe:f8:08:85:4a:7d:b3:29:28:bd:c0:69:3a:3c:99: ba:26:d6:9a:1e:e9:95:65:1b:71:59:41:0d:42:2a:e4:ce:c9: 11:58:2a:4d:40:f4:d3:24:ce:28:84:10:ed:62:b6:b0:3f:e4: 43:fe:bc:a7:db:f1:91:65:45:e6:63:b2:e4:b5:d5:75:69:b1: 23:e9:f8:b1:78:32:46:4c:2a:75:6a:60:f0:85:2b:a5:7b:9f: fa:7f:f9:e2:25:8f:b7:ec:7c:49:b4:93:b5:b6:e8:cc:d1:e1: ca:22:63:4e:5f:45:21:c7:bd:ab:ac:c3:90:cc:c0:28:4e:8b: 76:a7:bb:0d:b1:d3:23:a9:e6:32:23:83:b5:49:e7:64:95:0b: cb:78:fd:72:3f:02:84:e2:86:d0:f4:73:bc:08:0a:fe:b1:74: 74:2f:6f:40:d7:33:b9:42:72:70:ca:2b:77:0e:c3:cd:9f:4a: fc:6b:14:95:6e:c4:1c:b0:c4:4e:c9:31:8c:d9:cd:9c:95:db: 09:39:cd:35:e1:e4:f6:00:6b:87:f4:49:72:34:91:07:f7:f7: 29:11:04:a2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQr60kyYgaWPgahxrTSsJYoGvZ+YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTUzMDU5WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzRmODBmYWM0NzA4NzM0ODdkMDAzODI1NmY4OWQxM2Zj YjRhMmIyNDUwZGEwMGVjMDBiYWY1Y2Y0MmMzNmJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwC6cF4QGP5FaXDeKs/HBKwX1lglsb2a+Kn3O+jZkr10m2 h1sG0p+k4wlzVuqi0pmiKKlwuuBxVhgB7OHKf9Ztou2g642pIG1JUm5PsbC/V+1R 4dFGQ6DvtZyaNim7aUNbX0pGy2HBD6X3j5SgSq9S5QpyjvEy4FEDFup0oZ/sQyGY s1fIeHmnHL9rkHSejzj0X3WrONnpRH6lzvmpVZqNHloUpDUgFhEKU8OrmUoc1kwC Wm8db7aUQtuOy64wKq6tB8AkgT9UDNCaKX4RZytAE2I0xNrQcAAliuUyN6qyl6/n a7PfLhsaIaWfFkXzYw88q9kL/LdBcHmhsqo+HfVvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9AEvXmvkji7lFsH+kzgTDYVmwmcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU1ZThiYWRmLTQxOWEtNGUyMS1hZTUxLWRmNTk1MGFkZDhkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8ayDANBgkqhkiG9w0BAQsFAAOCAQEAw4BLtUVRStU7QLcn9pqBMmu2 pmNiNetherC6LM54RW3FfTUTgCdi/vgIhUp9sykovcBpOjyZuibWmh7plWUbcVlB DUIq5M7JEVgqTUD00yTOKIQQ7WK2sD/kQ/68p9vxkWVF5mOy5LXVdWmxI+n4sXgy RkwqdWpg8IUrpXuf+n/54iWPt+x8SbSTtbbozNHhyiJjTl9FIce9q6zDkMzAKE6L dqe7DbHTI6nmMiODtUnnZJULy3j9cj8ChOKG0PRzvAgK/rF0dC9vQNczuUJycMor dw7DzZ9K/GsUlW7EHLDETskxjNnNnJXbCTnNNeHk9gBrh/RJcjSRB/f3KREEog== -----END CERTIFICATE-----Generated at Sat Sep 6 14:12:10 2025 by rpki-client