$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fb1c7ab-2535-4869-a7ee-185076455e71.roa File: 7fb1c7ab-2535-4869-a7ee-185076455e71.roa (raw, json) Hash identifier: a2myW2upOy9FVW+5hoqzX7NCzcUOZVwPmahcfh70Xeg= Subject key identifier: 4E:53:92:AB:9B:38:AF:0F:63:56:D9:90:01:1D:44:6E:CD:C7:E8:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 550F45454B75BB1CC3C0731729F862EEEAB157B4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fb1c7ab-2535-4869-a7ee-185076455e71.roa Signing time: Fri 29 Aug 2025 15:40:51 +0000 ROA not before: Fri 29 Aug 2025 15:40:51 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f12::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:0f:45:45:4b:75:bb:1c:c3:c0:73:17:29:f8:62:ee:ea:b1:57:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 15:40:51 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=ea07301589251cfecf1f6f7b4af06601041be9cf889a5308d2f8cb11b909389a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:63:b2:a1:99:3f:d7:fe:52:ef:d6:01:82:1f: cc:4d:5e:51:a8:a6:62:07:96:b8:32:af:88:d6:d7: 51:49:57:cc:bc:e7:b6:8c:1a:13:14:15:84:39:8d: 4e:d4:90:c8:49:56:e2:75:16:51:66:8e:40:5a:de: fa:0f:26:91:c8:3e:bd:ca:e4:99:f0:07:2c:98:70: e5:d6:10:7a:28:71:f2:40:86:98:4c:fe:c3:ea:6a: f8:30:0a:93:40:4c:88:08:e6:7b:12:54:6f:6b:18: 58:58:e7:5e:81:e5:15:94:67:7d:02:ab:b4:7f:3c: 54:81:55:74:1d:0b:8b:15:98:b8:8d:c8:85:e8:bb: da:9e:10:24:f1:af:b1:bd:0a:29:3d:2d:95:cc:ee: 05:48:13:f0:24:31:c1:b8:6b:ef:43:2e:a3:e0:16: 7d:cd:e4:6f:aa:59:59:6d:84:d6:08:b4:58:cb:03: e2:14:73:74:45:0d:f8:20:9e:72:aa:c9:8a:5d:34: ca:6a:1f:b7:50:5c:52:93:57:62:46:9d:22:66:be: 1e:1f:ca:21:eb:f9:97:dc:4a:b3:a4:9f:d8:65:1b: fa:b2:36:07:f7:b5:d5:5a:56:d4:6d:eb:50:1f:74: c6:fd:8f:eb:38:92:72:98:0a:86:46:bb:ea:1c:b1: 6e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:53:92:AB:9B:38:AF:0F:63:56:D9:90:01:1D:44:6E:CD:C7:E8:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fb1c7ab-2535-4869-a7ee-185076455e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f12::/36 Signature Algorithm: sha256WithRSAEncryption 59:e4:60:a0:c5:32:b8:4d:c4:a2:74:c8:59:24:a3:9b:1c:12: cd:f2:d6:a4:de:b2:67:0b:45:94:82:22:e6:57:a3:af:94:0a: dd:de:73:01:d7:7d:09:12:d6:b3:1c:7c:cf:e8:e2:6d:c4:d4: 10:84:63:c1:de:5c:78:59:26:5f:b5:0e:b5:2f:be:2f:ad:93: fa:68:db:66:21:1f:d1:0b:0a:65:cf:4f:cc:8a:e7:b9:17:75: b7:e0:26:05:a1:8d:49:f5:24:c6:ca:1b:16:b7:3c:82:c6:2f: 15:75:ec:59:1b:0f:f0:7a:6d:51:4e:e3:b1:89:ac:04:9e:63: f2:3c:8b:7a:f1:d0:8b:4f:ab:79:78:3f:06:0b:06:42:5e:6e: 5c:c3:4b:28:20:33:2b:12:f7:94:b0:ae:b6:1f:1a:0e:fa:8a: 89:36:ab:77:8e:8f:c4:e7:af:66:c7:8e:12:40:3e:91:57:f0: 55:2f:8a:e5:96:bd:c9:f2:96:5a:7e:0b:02:df:f4:7e:cf:4c: ae:f4:05:e5:01:7d:e8:3e:21:e9:bf:ec:e2:e8:ca:cb:e3:3c: a0:10:1b:c6:37:da:3d:db:30:f4:29:2a:19:f8:bc:dc:f9:66: e7:82:9f:c7:d8:4e:06:aa:21:2e:8b:ca:6a:3a:2d:41:b5:8d: 5e:48:5d:f0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVQ9FRUt1uxzDwHMXKfhi7uqxV7QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTU0MDUxWhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTA3MzAxNTg5MjUxY2ZlY2YxZjZmN2I0YWYwNjYwMTA0 MWJlOWNmODg5YTUzMDhkMmY4Y2IxMWI5MDkzODlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSY7KhmT/X/lLv1gGCH8xNXlGopmIHlrgyr4jW11FJV8y8 57aMGhMUFYQ5jU7UkMhJVuJ1FlFmjkBa3voPJpHIPr3K5JnwByyYcOXWEHoocfJA hphM/sPqavgwCpNATIgI5nsSVG9rGFhY516B5RWUZ30Cq7R/PFSBVXQdC4sVmLiN yIXou9qeECTxr7G9Cik9LZXM7gVIE/AkMcG4a+9DLqPgFn3N5G+qWVlthNYItFjL A+IUc3RFDfggnnKqyYpdNMpqH7dQXFKTV2JGnSJmvh4fyiHr+ZfcSrOkn9hlG/qy Ngf3tdVaVtRt61AfdMb9j+s4knKYCoZGu+ocsW57AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUTlOSq5s4rw9jVtmQAR1Ebs3H6NQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdmYjFjN2FiLTI1MzUtNDg2OS1hN2VlLTE4NTA3NjQ1NWU3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8SADANBgkqhkiG9w0BAQsFAAOCAQEAWeRgoMUyuE3EonTIWSSjmxwS zfLWpN6yZwtFlIIi5lejr5QK3d5zAdd9CRLWsxx8z+jibcTUEIRjwd5ceFkmX7UO tS++L62T+mjbZiEf0QsKZc9PzIrnuRd1t+AmBaGNSfUkxsobFrc8gsYvFXXsWRsP 8HptUU7jsYmsBJ5j8jyLevHQi0+reXg/BgsGQl5uXMNLKCAzKxL3lLCuth8aDvqK iTard46PxOevZseOEkA+kVfwVS+K5Za9yfKWWn4LAt/0fs9MrvQF5QF96D4h6b/s 4ujKy+M8oBAbxjfaPdsw9CkqGfi83Plm54Kfx9hOBqohLovKajotQbWNXkhd8A== -----END CERTIFICATE-----Generated at Sat Sep 6 14:14:32 2025 by rpki-client