$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59259747-3e3d-4349-ae04-74ac80ea279e.roa File: 59259747-3e3d-4349-ae04-74ac80ea279e.roa (raw, json) Hash identifier: a72Ih3MQBzgOWiyroAZE8u7eVHpv30t4Cr5fX5cm3zU= Subject key identifier: 03:10:6C:33:B5:A6:91:A8:13:2B:30:6A:40:C6:0B:12:62:0E:AD:1E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C3CDB785A84146246AAE61E6851FD0139D56BB1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59259747-3e3d-4349-ae04-74ac80ea279e.roa Signing time: Fri 29 Aug 2025 00:42:25 +0000 ROA not before: Fri 29 Aug 2025 00:42:25 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3c:db:78:5a:84:14:62:46:aa:e6:1e:68:51:fd:01:39:d5:6b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 00:42:25 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=661d4c00eda491f74e2cf1adb4bc569ddd4490b7b04b39268ce9b49bc59cc046, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:0b:02:49:1f:76:e9:e9:69:03:b5:b0:0e: ce:f1:c5:75:60:81:72:c7:42:f0:b3:5a:2c:e4:ba: 74:d4:ca:13:58:ac:00:07:8f:4a:d8:7f:21:95:7f: 9e:f8:e3:96:1f:70:60:f4:e6:ae:24:37:60:15:98: e0:23:a2:ba:0e:c5:40:b6:82:9e:a0:45:7c:53:7d: 4c:ea:64:30:1d:d6:79:d2:91:23:88:2c:5f:d1:20: a3:ff:c6:e3:16:0e:dc:1d:95:b0:6a:f8:93:5d:fc: 82:15:ad:4e:2e:aa:c4:d4:25:dd:83:a8:df:3a:30: 2a:35:7b:ac:b6:db:9e:4e:f8:b6:92:58:b0:3d:b9: f4:e3:02:f6:23:fc:f3:c3:d1:ae:6d:07:56:e6:47: 63:8c:05:3d:cb:a4:71:b1:14:c0:39:19:a1:4d:9e: c2:8a:d6:10:d7:cc:8e:a8:dc:67:a6:9f:3a:62:e8: 0a:b8:1c:89:19:9c:be:2a:2c:0c:ba:f3:51:5f:02: 52:6d:ad:35:36:68:ab:e6:36:b6:ff:5d:ea:b5:e9: 5e:4b:a2:ae:64:a8:30:35:dd:d6:b3:59:24:f6:ad: 07:74:5b:56:e8:20:64:5f:f9:3a:87:cb:3e:fd:d3: c4:46:7a:9a:7f:d0:0f:63:a9:74:80:18:ac:75:39: 1b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:10:6C:33:B5:A6:91:A8:13:2B:30:6A:40:C6:0B:12:62:0E:AD:1E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59259747-3e3d-4349-ae04-74ac80ea279e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:2000::/40 Signature Algorithm: sha256WithRSAEncryption a8:b2:67:93:be:46:f6:7f:c1:16:07:82:d6:23:45:f7:26:c1: 7f:57:d9:66:a4:0b:64:a6:e3:f6:e3:fa:c2:d5:a6:da:5a:32: c6:09:4a:e6:e6:5f:2a:c0:62:ce:fa:a2:07:59:c3:0f:a1:77: 86:c8:04:b3:4a:e3:08:ea:ea:a0:13:70:bc:88:f8:e2:8f:18: 62:1f:9c:0a:b9:39:ef:01:f1:97:24:9f:05:47:0b:24:a8:7e: 11:a3:52:a5:c8:ee:82:95:c7:39:9b:28:07:0d:2f:1d:45:52: 9d:72:7a:7e:71:d7:e0:9e:ce:d3:70:7c:d0:92:ac:99:96:dc: 40:f9:d1:22:d0:a8:2b:55:16:0c:4f:6b:2e:d5:60:26:bb:c6: 9a:e0:8c:9a:a1:5f:de:41:b9:74:f7:fb:42:de:e9:cb:88:ee: 27:12:bc:d2:bd:4b:60:dd:40:2d:ab:9b:ab:94:7d:cc:f4:3c: 03:30:d3:64:7c:02:54:21:84:99:cf:3f:8d:b6:e9:5c:3d:64: de:b0:76:b7:c6:37:6b:db:e9:04:e4:77:2a:29:80:ed:62:ee: 84:99:d5:01:14:3b:58:c5:76:54:c0:c3:d3:a8:8d:29:b5:0d: 52:b4:2b:47:7f:a5:3d:56:27:30:c1:74:76:9f:19:cf:31:e1: 5e:2a:e2:0b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHDzbeFqEFGJGquYeaFH9ATnVa7EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MDA0MjI1WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NjFkNGMwMGVkYTQ5MWY3NGUyY2YxYWRiNGJjNTY5ZGRk NDQ5MGI3YjA0YjM5MjY4Y2U5YjQ5YmM1OWNjMDQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCEgsCSR926elpA7WwDs7xxXVggXLHQvCzWizkunTUyhNY rAAHj0rYfyGVf57445YfcGD05q4kN2AVmOAjoroOxUC2gp6gRXxTfUzqZDAd1nnS kSOILF/RIKP/xuMWDtwdlbBq+JNd/IIVrU4uqsTUJd2DqN86MCo1e6y2255O+LaS WLA9ufTjAvYj/PPD0a5tB1bmR2OMBT3LpHGxFMA5GaFNnsKK1hDXzI6o3Gemnzpi 6Aq4HIkZnL4qLAy681FfAlJtrTU2aKvmNrb/Xeq16V5Loq5kqDA13dazWST2rQd0 W1boIGRf+TqHyz7908RGepp/0A9jqXSAGKx1ORu9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUAxBsM7WmkagTKzBqQMYLEmIOrR4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5MjU5NzQ3LTNlM2QtNDM0OS1hZTA0LTc0YWM4MGVhMjc5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/yIDANBgkqhkiG9w0BAQsFAAOCAQEAqLJnk75G9n/BFgeC1iNF9ybB f1fZZqQLZKbj9uP6wtWm2loyxglK5uZfKsBizvqiB1nDD6F3hsgEs0rjCOrqoBNw vIj44o8YYh+cCrk57wHxlySfBUcLJKh+EaNSpcjugpXHOZsoBw0vHUVSnXJ6fnHX 4J7O03B80JKsmZbcQPnRItCoK1UWDE9rLtVgJrvGmuCMmqFf3kG5dPf7Qt7py4ju JxK80r1LYN1ALaubq5R9zPQ8AzDTZHwCVCGEmc8/jbbpXD1k3rB2t8Y3a9vpBOR3 KimA7WLuhJnVARQ7WMV2VMDD06iNKbUNUrQrR3+lPVYnMMF0dp8ZzzHhXiriCw== -----END CERTIFICATE-----Generated at Sat Sep 6 14:12:18 2025 by rpki-client