$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66211771-006c-403c-9f59-8b5ea44be947.roa File: 66211771-006c-403c-9f59-8b5ea44be947.roa (raw, json) Hash identifier: PwgvqyoXJyU8H5LKyUP+sTKnK4IzF6LHbxdL7H5Y0Qg= Subject key identifier: 1F:12:53:57:25:F5:0B:5A:29:F6:0A:F7:75:FA:67:D8:89:77:9F:C1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 250DD2B1BF3C38263826A6AE22905321F48640B8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66211771-006c-403c-9f59-8b5ea44be947.roa Signing time: Tue 26 Aug 2025 15:40:27 +0000 ROA not before: Tue 26 Aug 2025 15:40:27 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:0d:d2:b1:bf:3c:38:26:38:26:a6:ae:22:90:53:21:f4:86:40:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:40:27 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=405bc69f6576d484ad520e920b2206e6c934b8ee0e9c376b12519d64a6f84bf7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:57:0d:d0:ef:4e:96:fe:b2:e2:94:41:61:67: 56:11:c9:cc:68:ef:91:12:b0:53:94:6b:93:2b:e9: 56:0f:8b:ae:a7:07:7a:92:6a:bd:3f:b4:4b:1d:f0: 6a:0f:1b:60:9e:b6:c6:f9:e1:8d:7f:e6:b6:fb:8e: d1:32:29:a6:53:e3:61:72:76:8d:1f:6b:bf:b6:48: c4:4a:01:5d:e4:3c:cc:2e:93:4a:f9:cb:d0:02:b7: 28:07:f5:de:2c:5e:f0:dd:30:54:13:93:e0:c3:ac: 4c:ef:54:39:14:5b:5a:01:46:c4:6a:50:47:e7:45: 12:e8:ad:4d:c5:ed:fa:4f:cf:8c:98:54:5b:60:29: 85:81:06:80:85:dc:0c:03:4b:05:9e:85:ba:ba:73: 5b:c3:10:85:6d:c6:5f:70:f6:77:c1:06:c7:c5:65: 96:7f:44:a5:e1:ed:de:02:fd:00:29:ea:74:49:b1: 39:f7:74:cc:eb:b2:8b:0b:05:08:f3:35:28:4c:55: d4:33:bf:6b:40:d1:7a:1c:af:3d:c0:41:bb:f4:ca: 78:8a:f0:80:99:94:a8:82:a9:b9:1f:d9:29:6b:ee: 9b:9d:af:df:01:35:23:71:2c:0e:65:6d:a3:1a:6d: 9d:d8:50:c2:7a:37:8f:44:aa:96:b1:2b:66:15:69: 96:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:12:53:57:25:F5:0B:5A:29:F6:0A:F7:75:FA:67:D8:89:77:9F:C1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66211771-006c-403c-9f59-8b5ea44be947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8040::/48 Signature Algorithm: sha256WithRSAEncryption 54:02:93:35:9a:bc:64:e7:e3:3c:bb:87:b1:1a:76:60:43:98: 92:5d:57:e7:5a:0a:5a:ca:84:ec:32:2d:bb:65:4e:f8:e7:0d: e2:81:27:6a:b5:7f:e2:eb:83:8b:4d:43:dc:a4:9e:19:0d:4c: 67:d9:e6:bb:35:e9:85:3d:aa:7f:ab:30:3f:d6:db:a4:db:76: 5a:88:7d:83:81:c8:4e:82:3a:c5:a8:a6:08:f7:ee:70:e1:b3: f1:75:97:40:e8:f3:4d:da:53:94:a3:7b:34:2f:11:67:f1:2f: 45:f9:16:d9:8f:0f:97:36:54:26:46:ab:8d:3a:0f:40:6e:15: 3b:83:65:26:df:91:dc:c9:44:e2:1a:4d:ef:b0:3f:c6:b3:07: a9:cb:38:d7:ad:0f:de:35:1c:26:ea:33:9a:a0:97:2b:a2:c5: 20:46:5d:ff:62:07:10:9a:4f:16:6a:e8:0e:39:2c:a0:6e:b4: 94:c2:f4:ec:13:3b:fe:7d:8f:8d:66:84:e7:63:e5:8f:9c:18: 93:45:98:ca:98:4f:dd:94:a0:6f:af:29:d2:7a:57:27:7c:77: 37:8d:e4:34:5d:75:80:4b:07:1b:39:78:4e:f6:36:d9:ec:46: 30:eb:54:86:84:e0:9d:f1:ac:25:7c:7a:23:8e:46:4d:b4:e7: 01:1d:56:c9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJQ3Ssb88OCY4JqauIpBTIfSGQLgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTU0MDI3WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDViYzY5ZjY1NzZkNDg0YWQ1MjBlOTIwYjIyMDZlNmM5 MzRiOGVlMGU5YzM3NmIxMjUxOWQ2NGE2Zjg0YmY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVVw3Q706W/rLilEFhZ1YRycxo75ESsFOUa5Mr6VYPi66n B3qSar0/tEsd8GoPG2Cetsb54Y1/5rb7jtEyKaZT42Fydo0fa7+2SMRKAV3kPMwu k0r5y9ACtygH9d4sXvDdMFQTk+DDrEzvVDkUW1oBRsRqUEfnRRLorU3F7fpPz4yY VFtgKYWBBoCF3AwDSwWehbq6c1vDEIVtxl9w9nfBBsfFZZZ/RKXh7d4C/QAp6nRJ sTn3dMzrsosLBQjzNShMVdQzv2tA0Xocrz3AQbv0yniK8ICZlKiCqbkf2Slr7pud r98BNSNxLA5lbaMabZ3YUMJ6N49EqpaxK2YVaZbNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHxJTVyX1C1op9gr3dfpn2Il3n8EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY2MjExNzcxLTAwNmMtNDAzYy05ZjU5LThiNWVhNDRiZTk0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gEAwDQYJKoZIhvcNAQELBQADggEBAFQCkzWavGTn4zy7h7EadmBD mJJdV+daClrKhOwyLbtlTvjnDeKBJ2q1f+Lrg4tNQ9yknhkNTGfZ5rs16YU9qn+r MD/W26TbdlqIfYOByE6COsWopgj37nDhs/F1l0Do803aU5SjezQvEWfxL0X5FtmP D5c2VCZGq406D0BuFTuDZSbfkdzJROIaTe+wP8azB6nLONetD941HCbqM5qglyui xSBGXf9iBxCaTxZq6A45LKButJTC9OwTO/59j41mhOdj5Y+cGJNFmMqYT92UoG+v KdJ6Vyd8dzeN5DRddYBLBxs5eE72NtnsRjDrVIaE4J3xrCV8eiOORk205wEdVsk= -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:06 2025 by rpki-client