$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750dd1da-97f3-486b-a958-d4f08b962aec.roa File: 750dd1da-97f3-486b-a958-d4f08b962aec.roa (raw, json) Hash identifier: pe7Kion/wQk0rRsVJfd6mp8j2PGIXMSyV5UvzFaVDjM= Subject key identifier: 12:F6:2A:E0:E0:9C:43:00:D4:EF:C4:2D:01:99:7B:52:A3:92:82:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 56AC79A2406F232E3640032FD03FAD93F7B3BB90 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750dd1da-97f3-486b-a958-d4f08b962aec.roa Signing time: Fri 29 Aug 2025 16:11:56 +0000 ROA not before: Fri 29 Aug 2025 16:11:56 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f10:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ac:79:a2:40:6f:23:2e:36:40:03:2f:d0:3f:ad:93:f7:b3:bb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:11:56 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=99b0f16e51939698d88f9e54e62ed9a74791cbe415d9a202237cb377a7c45b72, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:a3:99:1c:04:3d:f1:98:1c:b0:80:ce:57: 15:bd:5d:c7:5f:de:d0:91:17:65:8d:19:d3:fc:a1: 31:31:b1:60:d3:62:8a:8a:7b:c3:b1:40:25:2f:74: 6a:42:e0:ba:34:92:9e:ca:e4:2f:40:26:7f:20:c0: bc:69:dd:47:68:d4:d3:35:23:c8:07:6d:46:07:f2: 68:08:dd:42:f3:90:8a:f5:4b:63:e3:a9:38:ba:e9: 87:15:bd:ee:e1:ae:68:05:44:9b:c3:03:6c:46:33: b6:90:24:d2:92:99:48:c1:12:07:3e:5e:0c:48:d8: c9:8c:88:55:db:d8:59:8e:5d:43:a9:09:d0:83:ba: a4:d7:12:eb:b8:9a:e5:47:4a:d0:f9:b8:f0:81:5b: 7d:45:8f:f9:dc:17:47:6a:c7:41:f6:46:67:db:3b: 13:39:2f:29:41:97:82:c5:e2:34:a5:ed:2c:bd:f1: e0:c2:84:2d:91:0b:8b:42:d0:54:df:b5:74:63:f2: d3:58:2b:f6:45:02:15:36:64:a8:1a:2f:f3:83:0e: 4d:7b:61:70:35:58:80:ec:db:fd:83:ee:30:d2:0b: 92:65:c9:43:b5:b9:34:07:07:c3:94:2d:f2:07:82: a2:45:d1:96:36:97:07:c3:e0:66:3f:6b:11:96:3e: f5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F6:2A:E0:E0:9C:43:00:D4:EF:C4:2D:01:99:7B:52:A3:92:82:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750dd1da-97f3-486b-a958-d4f08b962aec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f10:c000::/36 Signature Algorithm: sha256WithRSAEncryption 35:bb:4a:d2:a4:41:e8:9b:28:d4:37:40:8b:58:3f:b0:38:19: 3d:25:70:18:d3:9a:99:0d:f6:4d:2d:58:7c:14:5e:13:5d:1f: c7:7b:90:c1:5a:4c:92:a7:4f:c6:b0:cf:5c:8f:c6:5f:9a:b8: 1b:2e:05:97:ad:04:1a:68:1f:8e:70:a3:18:03:77:79:ba:19: ab:11:25:13:75:e1:36:57:2f:65:8c:5e:fb:96:77:20:75:f3: 00:9f:53:01:bb:87:4c:ca:aa:82:9b:b2:03:7e:7a:a9:5f:bf: fc:a1:c9:30:47:51:15:c0:00:2f:26:37:5f:7c:48:c6:89:43: 53:85:da:2f:2b:99:d4:97:ff:2b:4f:d6:4f:85:d3:4d:53:91: 7a:bb:9f:d3:1a:cd:e3:11:c9:02:66:1e:11:7d:e0:1e:8b:fc: e1:37:b5:e3:f4:e3:58:5e:5d:2c:89:f9:c3:b5:82:39:6b:79: f5:1a:a7:8f:45:53:31:db:f3:5b:47:78:62:bc:4b:14:89:46: 0f:cb:73:ee:48:c0:a7:e6:53:87:14:c6:b7:f8:3e:c1:9e:1c: e5:ff:dc:3d:cd:5d:de:d3:5e:f8:89:85:92:21:34:f8:a0:3f: d7:7e:44:8b:18:ee:c5:ce:60:9b:69:1c:49:43:48:b8:d3:f8: da:ff:ac:b0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVqx5okBvIy42QAMv0D+tk/ezu5AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTYxMTU2WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5OWIwZjE2ZTUxOTM5Njk4ZDg4ZjllNTRlNjJlZDlhNzQ3 OTFjYmU0MTVkOWEyMDIyMzdjYjM3N2E3YzQ1YjcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfMKOZHAQ98ZgcsIDOVxW9Xcdf3tCRF2WNGdP8oTExsWDT YoqKe8OxQCUvdGpC4Lo0kp7K5C9AJn8gwLxp3Udo1NM1I8gHbUYH8mgI3ULzkIr1 S2PjqTi66YcVve7hrmgFRJvDA2xGM7aQJNKSmUjBEgc+XgxI2MmMiFXb2FmOXUOp CdCDuqTXEuu4muVHStD5uPCBW31Fj/ncF0dqx0H2RmfbOxM5LylBl4LF4jSl7Sy9 8eDChC2RC4tC0FTftXRj8tNYK/ZFAhU2ZKgaL/ODDk17YXA1WIDs2/2D7jDSC5Jl yUO1uTQHB8OULfIHgqJF0ZY2lwfD4GY/axGWPvVNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUEvYq4OCcQwDU78QtAZl7UqOSglMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1MGRkMWRhLTk3ZjMtNDg2Yi1hOTU4LWQ0ZjA4Yjk2MmFlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8QwDANBgkqhkiG9w0BAQsFAAOCAQEANbtK0qRB6Jso1DdAi1g/sDgZ PSVwGNOamQ32TS1YfBReE10fx3uQwVpMkqdPxrDPXI/GX5q4Gy4Fl60EGmgfjnCj GAN3eboZqxElE3XhNlcvZYxe+5Z3IHXzAJ9TAbuHTMqqgpuyA356qV+//KHJMEdR FcAALyY3X3xIxolDU4XaLyuZ1Jf/K0/WT4XTTVOReruf0xrN4xHJAmYeEX3gHov8 4Te14/TjWF5dLIn5w7WCOWt59Rqnj0VTMdvzW0d4YrxLFIlGD8tz7kjAp+ZThxTG t/g+wZ4c5f/cPc1d3tNe+ImFkiE0+KA/135Eixjuxc5gm2kcSUNIuNP42v+ssA== -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:44 2025 by rpki-client