$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73cb71e8-7b38-4414-be54-be4962981b67.roa File: 73cb71e8-7b38-4414-be54-be4962981b67.roa (raw, json) Hash identifier: yC3PkuBZGQx+pF+p2itY/YEiUIBVbUIccbqN7JoJqo0= Subject key identifier: 50:DE:5A:84:B1:9F:16:B1:27:EB:C7:C6:9E:BB:DD:E7:EE:0D:7D:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0ECA4C55A20CBAE57010244CA07C4DE9603F509E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73cb71e8-7b38-4414-be54-be4962981b67.roa Signing time: Tue 26 Aug 2025 16:51:00 +0000 ROA not before: Tue 26 Aug 2025 16:51:00 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ca:4c:55:a2:0c:ba:e5:70:10:24:4c:a0:7c:4d:e9:60:3f:50:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:51:00 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=28e184ed3d723333ee69e88ef9319f9286d35e4cddd9c8739a00a8b3eeb7e4ff, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:e1:20:5e:2f:6d:e1:cb:a3:f7:ce:52:b9: 21:79:88:9e:fd:e3:b5:1c:5e:07:16:75:01:a6:d9: e1:b0:ba:e7:e8:87:e8:29:01:50:4d:42:ea:ab:dc: b5:b4:d8:45:37:61:ad:52:c1:d0:f7:7d:e2:9c:de: 1b:3c:f2:b3:52:5a:c6:70:00:a1:ad:10:5a:a5:4b: b1:15:50:16:2c:29:0a:81:60:31:64:51:c0:dd:68: a8:51:78:fd:3e:9c:2a:2b:fc:3f:c4:d7:47:9f:78: 4a:07:0a:37:ec:23:06:27:ff:d6:f9:92:b3:bd:bf: 96:ed:1e:fc:de:52:50:84:98:fb:03:d1:75:4b:3f: 56:54:0d:5b:26:27:f4:c3:3d:7f:ca:67:d4:4b:34: 40:e5:44:24:52:57:68:9b:e6:4d:5e:f7:6e:0b:77: df:90:14:d7:95:f0:a3:f4:35:f1:7d:39:1c:7f:41: 42:d4:73:cd:02:b6:a8:78:78:13:89:1d:fd:fb:44: f3:a9:08:78:10:ef:4d:d9:9f:b3:7d:88:00:a6:03: 09:e3:74:05:1b:8f:b0:22:e0:53:7d:04:f6:b8:70: 78:85:2b:04:3b:7d:f8:30:0e:87:be:ef:98:d9:7f: 80:00:26:28:5e:4a:ab:03:bc:5a:9d:4f:e1:74:2d: 9f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DE:5A:84:B1:9F:16:B1:27:EB:C7:C6:9E:BB:DD:E7:EE:0D:7D:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73cb71e8-7b38-4414-be54-be4962981b67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:5000::/40 Signature Algorithm: sha256WithRSAEncryption a7:48:9b:64:3e:1b:0e:52:f8:88:ad:82:9d:36:ce:58:2c:3c: a7:71:8e:d9:26:93:0e:72:a2:f6:67:14:89:9d:fe:eb:1f:cf: d7:cb:8d:88:d4:67:8f:ca:a5:3e:db:8b:98:b4:41:ca:12:e5: f5:d6:55:3d:6a:5b:7a:80:29:7b:f9:53:18:ce:29:2b:66:90: 75:69:74:3f:d3:08:3a:e2:a7:59:37:f3:81:31:f9:52:ce:71: d6:ed:1c:2b:06:84:f3:0a:78:c6:34:b1:c2:22:20:de:6d:c1: c0:14:4d:70:30:75:c2:06:55:4f:16:a7:b5:84:3a:a6:0d:ee: 3f:80:52:3b:b5:bc:c0:b7:0d:06:81:64:eb:2b:25:9d:13:9c: 06:45:3d:06:d4:f4:f0:ee:d0:db:10:16:c4:af:e3:9f:e8:46: cd:78:1e:b7:a8:36:92:dd:e7:95:9c:f3:18:2e:a0:f7:7b:26: 32:96:25:27:11:42:cb:77:ac:96:7b:39:1b:2a:55:1b:d3:42: 20:4c:65:99:70:4a:3e:f1:fe:01:74:2a:36:19:54:59:08:41: 5f:06:2d:83:d2:b9:71:22:2a:78:fd:e7:c0:56:b0:12:c6:53: 2f:87:32:0d:16:3f:49:a2:55:0b:b0:15:9f:1b:1d:e9:aa:3c: 56:5e:b8:ed -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDspMVaIMuuVwECRMoHxN6WA/UJ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTY1MTAwWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOGUxODRlZDNkNzIzMzMzZWU2OWU4OGVmOTMxOWY5Mjg2 ZDM1ZTRjZGRkOWM4NzM5YTAwYThiM2VlYjdlNGZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6QeEgXi9t4cuj985SuSF5iJ7947UcXgcWdQGm2eGwuufo h+gpAVBNQuqr3LW02EU3Ya1SwdD3feKc3hs88rNSWsZwAKGtEFqlS7EVUBYsKQqB YDFkUcDdaKhReP0+nCor/D/E10efeEoHCjfsIwYn/9b5krO9v5btHvzeUlCEmPsD 0XVLP1ZUDVsmJ/TDPX/KZ9RLNEDlRCRSV2ib5k1e924Ld9+QFNeV8KP0NfF9ORx/ QULUc80Ctqh4eBOJHf37RPOpCHgQ703Zn7N9iACmAwnjdAUbj7Ai4FN9BPa4cHiF KwQ7ffgwDoe+75jZf4AAJiheSqsDvFqdT+F0LZ9dAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUUN5ahLGfFrEn68fGnrvd5+4NfW0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzczY2I3MWU4LTdiMzgtNDQxNC1iZTU0LWJlNDk2Mjk4MWI2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8AUDANBgkqhkiG9w0BAQsFAAOCAQEAp0ibZD4bDlL4iK2CnTbOWCw8 p3GO2SaTDnKi9mcUiZ3+6x/P18uNiNRnj8qlPtuLmLRByhLl9dZVPWpbeoApe/lT GM4pK2aQdWl0P9MIOuKnWTfzgTH5Us5x1u0cKwaE8wp4xjSxwiIg3m3BwBRNcDB1 wgZVTxantYQ6pg3uP4BSO7W8wLcNBoFk6yslnROcBkU9BtT08O7Q2xAWxK/jn+hG zXget6g2kt3nlZzzGC6g93smMpYlJxFCy3eslns5GypVG9NCIExlmXBKPvH+AXQq NhlUWQhBXwYtg9K5cSIqeP3nwFawEsZTL4cyDRY/SaJVC7AVnxsd6ao8Vl647Q== -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:28 2025 by rpki-client