$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c1a805c-d068-478c-9e6b-378bde6fc1c0.roa File: 5c1a805c-d068-478c-9e6b-378bde6fc1c0.roa (raw, json) Hash identifier: 2mAH82gPne9Ck0iA6W8FTNEP5ghnyOMBnmqNMS9x+nE= Subject key identifier: 5D:60:9E:1F:F7:EE:83:85:25:89:52:1D:4C:45:AB:DC:2D:7B:A1:56 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61BBE44F5EA810F8D01D31B1A4133346FCB774F8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c1a805c-d068-478c-9e6b-378bde6fc1c0.roa Signing time: Tue 26 Aug 2025 16:30:33 +0000 ROA not before: Tue 26 Aug 2025 16:30:33 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:40b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:bb:e4:4f:5e:a8:10:f8:d0:1d:31:b1:a4:13:33:46:fc:b7:74:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:30:33 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=b0dd236fdcc23fcdb9785e5b2c09834f6bc7636914ef9ac2ade06d5886b5473a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:8f:b9:b8:95:50:ad:2d:eb:d7:8f:77:b8: 5d:46:30:29:6b:60:a2:0f:0f:8c:81:59:27:12:8e: ed:d6:3b:28:fb:26:bd:ff:a0:a6:6a:c2:09:be:dc: be:62:cf:c2:30:cd:2a:f2:03:db:6c:f7:57:26:e6: a4:62:35:8e:e9:ce:43:20:3a:78:15:e3:7b:1a:92: 9f:02:7d:88:c5:4a:06:21:5b:75:9f:b4:75:d8:28: 21:ff:9e:38:9c:0e:09:28:61:6b:5c:b6:36:91:fa: 71:52:5a:6b:a5:a9:be:74:b0:1c:c6:9c:cd:5b:76: 2c:7a:b8:ba:fd:a6:ca:10:25:8a:3e:1c:09:c8:41: e3:45:f7:85:16:85:b4:08:3c:90:4e:48:c5:f5:53: aa:bd:85:fd:38:2c:44:e3:92:b8:53:0f:79:fe:0d: 77:bf:29:27:21:24:dd:44:58:00:ec:58:60:f9:f1: 9f:d3:99:df:6f:f3:03:ec:4d:60:cc:db:4d:a1:9b: ee:a4:48:9d:bb:fe:67:33:9c:18:76:b7:64:d6:44: 1c:89:bb:6e:46:77:61:5c:28:2a:d6:a9:e8:d3:1a: 98:af:20:1d:17:e0:5c:46:c5:a4:29:39:25:32:28: 5b:a8:36:99:11:04:93:47:6b:0c:27:3f:73:e4:11: 40:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:60:9E:1F:F7:EE:83:85:25:89:52:1D:4C:45:AB:DC:2D:7B:A1:56 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c1a805c-d068-478c-9e6b-378bde6fc1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:40b0::/48 Signature Algorithm: sha256WithRSAEncryption 16:dc:90:63:86:67:14:60:32:94:a1:9c:ca:9f:45:b1:d3:ab: 9e:c4:7c:c9:8a:6f:10:33:e1:9e:f9:37:90:b3:15:f5:02:45: 38:ae:b5:0a:fb:82:a8:d3:7e:d2:8a:9a:7f:a2:a1:8d:f4:6d: c5:89:d4:5f:5d:75:b7:b7:92:51:21:ca:8d:f7:d4:96:f2:b2: 71:93:cc:bc:35:e0:d8:0c:72:60:8e:ff:fc:c4:ac:60:80:e2: 20:86:95:86:27:45:c9:09:2b:f6:57:bb:51:0d:3c:52:75:df: 32:c5:98:c0:14:05:b4:a8:c7:76:1f:5f:f8:5f:75:88:fc:1d: b7:14:e7:1e:0c:83:31:a7:51:16:9c:95:55:0e:50:32:5f:6e: 3c:f8:50:dd:f3:3d:6f:01:16:f6:98:78:30:26:ad:46:b1:4d: b5:d5:10:64:a9:98:87:e4:d6:4e:e6:7a:8d:d4:3b:66:bf:82: b1:74:b7:91:ea:fa:4e:70:5d:65:ea:be:be:dc:42:7c:b8:6d: 3c:68:15:e5:f3:7d:30:7a:bc:b4:e7:a4:37:e5:72:63:98:a6: e3:d5:dd:f0:56:32:df:25:f2:cf:33:86:1b:47:82:91:ce:df: bf:4c:10:1d:0b:83:55:8d:29:a8:a2:49:da:dc:c7:7b:fc:d6: 3a:f2:e2:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYbvkT16oEPjQHTGxpBMzRvy3dPgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTYzMDMzWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMGRkMjM2ZmRjYzIzZmNkYjk3ODVlNWIyYzA5ODM0ZjZi Yzc2MzY5MTRlZjlhYzJhZGUwNmQ1ODg2YjU0NzNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCR4I+5uJVQrS3r1493uF1GMClrYKIPD4yBWScSju3WOyj7 Jr3/oKZqwgm+3L5iz8IwzSryA9ts91cm5qRiNY7pzkMgOngV43sakp8CfYjFSgYh W3WftHXYKCH/njicDgkoYWtctjaR+nFSWmulqb50sBzGnM1bdix6uLr9psoQJYo+ HAnIQeNF94UWhbQIPJBOSMX1U6q9hf04LETjkrhTD3n+DXe/KSchJN1EWADsWGD5 8Z/Tmd9v8wPsTWDM202hm+6kSJ27/mcznBh2t2TWRByJu25Gd2FcKCrWqejTGpiv IB0X4FxGxaQpOSUyKFuoNpkRBJNHawwnP3PkEUC7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXWCeH/fug4UliVIdTEWr3C17oVYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjMWE4MDVjLWQwNjgtNDc4Yy05ZTZiLTM3OGJkZTZmYzFjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AQLAwDQYJKoZIhvcNAQELBQADggEBABbckGOGZxRgMpShnMqfRbHT q57EfMmKbxAz4Z75N5CzFfUCRTiutQr7gqjTftKKmn+ioY30bcWJ1F9ddbe3klEh yo331JbysnGTzLw14NgMcmCO//zErGCA4iCGlYYnRckJK/ZXu1ENPFJ13zLFmMAU BbSox3YfX/hfdYj8HbcU5x4MgzGnURaclVUOUDJfbjz4UN3zPW8BFvaYeDAmrUax TbXVEGSpmIfk1k7meo3UO2a/grF0t5Hq+k5wXWXqvr7cQny4bTxoFeXzfTB6vLTn pDflcmOYpuPV3fBWMt8l8s8zhhtHgpHO379MEB0Lg1WNKaiiSdrcx3v81jry4so= -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:17 2025 by rpki-client