$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c1a5029-7410-499a-b77d-92c3cfc4dffe.roa File: 6c1a5029-7410-499a-b77d-92c3cfc4dffe.roa (raw, json) Hash identifier: ceuPusb7ZrcuvGXHA708FxpAOvrYmIH7b8tgbQJkB0c= Subject key identifier: 89:C4:1B:EC:2C:91:69:2C:F2:05:F0:80:4B:FF:DB:42:57:8E:40:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3FD7A263ECAFA913CD2D249AD1A280B3D71E32F1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c1a5029-7410-499a-b77d-92c3cfc4dffe.roa Signing time: Fri 15 Aug 2025 00:50:55 +0000 ROA not before: Fri 15 Aug 2025 00:50:55 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d7:a2:63:ec:af:a9:13:cd:2d:24:9a:d1:a2:80:b3:d7:1e:32:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 15 00:50:55 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=d9ea840fe7686c62c2f3dc1fa4ffaa073e98f2c7ae25b576e3d8bcd523738a0f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:d5:95:a5:c3:e1:ad:ec:7c:7d:e1:f8:91: 81:e4:69:84:03:4f:45:b5:9c:2c:04:d4:c9:af:c8: c0:b6:78:f4:47:c4:eb:9d:f4:cf:cd:64:29:79:3d: 41:f6:a3:62:82:78:3e:46:a8:12:7d:77:55:9e:9c: 13:46:b6:eb:5a:fd:f8:d0:b1:6d:bb:99:42:02:2c: 40:37:a9:66:c2:5b:8e:c0:34:1f:89:59:c6:3d:0d: 02:2f:02:68:47:db:0c:3b:de:ee:ee:7d:aa:14:84: fa:91:1e:1a:4b:8e:4d:e1:9a:72:bb:13:43:a8:c3: 07:86:8a:55:6f:a1:6e:b8:64:cb:fc:bc:80:d5:da: a5:17:a9:61:b8:61:f2:62:2a:65:f8:9e:9a:c8:4f: a0:85:c9:15:14:78:a7:2d:4d:25:0b:9c:e9:3f:a6: ce:96:d5:f9:d9:94:b6:c3:93:4f:79:78:80:5f:d9: 7e:2c:a7:5a:d4:ee:b6:d3:3f:14:73:e9:ae:57:78: a2:d1:b4:fd:6a:86:4d:12:63:a3:3c:21:f4:c5:b1: 30:0b:2e:42:58:b0:ed:84:71:4f:e1:d0:78:8b:d4: 8b:d3:a8:b0:d9:56:b4:60:ab:f6:fb:2c:2a:d2:33: ca:78:23:0e:9d:02:0e:ef:6f:3a:49:7a:b8:fc:fd: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C4:1B:EC:2C:91:69:2C:F2:05:F0:80:4B:FF:DB:42:57:8E:40:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c1a5029-7410-499a-b77d-92c3cfc4dffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:1000::/40 Signature Algorithm: sha256WithRSAEncryption 98:99:3f:86:06:79:ab:35:27:13:1a:23:f5:79:8d:bd:e5:8c: f0:58:ef:6a:a2:35:75:e7:9c:ac:19:45:08:fd:fe:20:2e:7a: e6:ac:c5:f9:75:d6:f5:b1:88:48:88:9d:bd:24:a4:29:87:3b: 28:e0:39:dc:1a:23:3d:b1:10:f0:9c:6c:36:04:13:64:e9:ba: d9:e3:e5:1b:08:0b:f4:81:77:ae:db:66:62:f2:79:80:d6:5a: e2:e7:0c:a7:96:40:a4:47:2a:04:52:fc:c8:82:8c:0f:f3:1b: d4:25:bc:33:27:24:0e:f5:ef:b7:ea:3c:46:1c:69:20:0a:89: ba:80:5f:4c:d5:3b:96:67:f6:3a:fb:fb:c1:b5:e5:03:c7:b9: 41:94:a2:6d:8f:8e:47:1b:18:01:47:ba:b2:dd:ec:89:54:c4: d0:cc:f4:1d:af:86:da:12:c0:7a:b9:b6:dc:62:03:e4:d1:95: 51:19:6c:23:3c:23:10:1a:4c:e2:16:8f:b2:42:2e:05:f9:4d: 36:e7:bc:7b:08:26:23:04:34:5a:41:75:3f:b2:4d:14:53:aa: 7d:3b:8b:b3:ac:15:21:e8:bc:f7:cd:ac:dc:81:67:83:4d:c5: 14:8b:78:52:b7:4d:a5:5f:4f:f2:0d:ae:18:b3:e9:01:1c:2e: be:2e:35:e8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUP9eiY+yvqRPNLSSa0aKAs9ceMvEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE1MDA1MDU1WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWVhODQwZmU3Njg2YzYyYzJmM2RjMWZhNGZmYWEwNzNl OThmMmM3YWUyNWI1NzZlM2Q4YmNkNTIzNzM4YTBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC64NWVpcPhrex8feH4kYHkaYQDT0W1nCwE1MmvyMC2ePRH xOud9M/NZCl5PUH2o2KCeD5GqBJ9d1WenBNGtuta/fjQsW27mUICLEA3qWbCW47A NB+JWcY9DQIvAmhH2ww73u7ufaoUhPqRHhpLjk3hmnK7E0OowweGilVvoW64ZMv8 vIDV2qUXqWG4YfJiKmX4nprIT6CFyRUUeKctTSULnOk/ps6W1fnZlLbDk095eIBf 2X4sp1rU7rbTPxRz6a5XeKLRtP1qhk0SY6M8IfTFsTALLkJYsO2EcU/h0HiL1IvT qLDZVrRgq/b7LCrSM8p4Iw6dAg7vbzpJerj8/aFlAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUicQb7CyRaSzyBfCAS//bQleOQIgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjMWE1MDI5LTc0MTAtNDk5YS1iNzdkLTkyYzNjZmM0ZGZmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/zEDANBgkqhkiG9w0BAQsFAAOCAQEAmJk/hgZ5qzUnExoj9XmNveWM 8FjvaqI1deecrBlFCP3+IC565qzF+XXW9bGISIidvSSkKYc7KOA53BojPbEQ8Jxs NgQTZOm62ePlGwgL9IF3rttmYvJ5gNZa4ucMp5ZApEcqBFL8yIKMD/Mb1CW8Myck DvXvt+o8RhxpIAqJuoBfTNU7lmf2Ovv7wbXlA8e5QZSibY+ORxsYAUe6st3siVTE 0Mz0Ha+G2hLAerm23GID5NGVURlsIzwjEBpM4haPskIuBflNNue8ewgmIwQ0WkF1 P7JNFFOqfTuLs6wVIei8982s3IFng03FFIt4UrdNpV9P8g2uGLPpARwuvi416A== -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:17 2025 by rpki-client