$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8329dbe2-4df9-4bf3-9077-92d6796dbdfd.roa File: 8329dbe2-4df9-4bf3-9077-92d6796dbdfd.roa (raw, json) Hash identifier: klTlrx2ajneYcuKW5aJBUADsK3PWr/JxvIF/8VqsPFo= Subject key identifier: 3F:89:6B:EE:05:65:93:CD:FF:30:CA:4E:B4:EF:E7:1A:D3:6D:1D:94 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2305E70AA4006F59CBDC19023B7436B011FEACF9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8329dbe2-4df9-4bf3-9077-92d6796dbdfd.roa Signing time: Fri 29 Aug 2025 16:02:16 +0000 ROA not before: Fri 29 Aug 2025 16:02:16 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f15:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:05:e7:0a:a4:00:6f:59:cb:dc:19:02:3b:74:36:b0:11:fe:ac:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:02:16 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=8b8f84c12849b881eea15fd0aeb8f45d9bec703b08a8d4c18fcf3e629e797e73, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:d5:e5:63:5a:76:cd:95:53:3f:d7:37:97: 37:0d:9f:11:d6:04:39:a5:77:42:3f:c2:11:67:15: fb:e2:cf:03:c3:47:06:f3:1d:9a:82:d3:b7:11:11: 26:a6:f8:b4:f8:8a:cd:42:fe:79:68:8e:43:7e:c3: 5b:c5:de:3b:39:c8:30:2b:a1:28:3a:e9:2a:19:6f: 86:6c:51:1e:36:e7:92:bd:a4:44:2e:23:a8:73:82: fd:36:0d:c8:95:3f:6b:70:97:20:7d:86:c3:9c:4e: db:53:9c:10:c6:eb:7e:1d:d4:de:d1:b5:9a:cc:a5: 8a:98:f7:e5:da:69:ac:0c:61:17:62:17:5c:45:5d: 5e:1b:a6:fa:be:bd:e1:96:17:8c:18:07:ea:8a:09: a7:d2:cc:a4:d5:2f:d7:5f:ca:a1:76:47:a8:d5:3a: 1e:e6:18:4a:93:03:28:7a:a4:22:da:aa:79:9c:43: f7:9d:9f:56:41:f8:ae:14:3d:5e:7a:bc:c4:dc:37: ef:26:8f:34:3c:8c:8e:ea:0c:d4:a8:83:2c:fb:81: c4:54:18:e1:63:72:74:78:bc:e3:23:14:55:08:1b: 63:1f:8b:9c:15:4b:3d:2f:0d:80:40:b2:65:f0:53: 07:37:b5:2c:d8:6d:f1:54:19:13:4e:95:21:12:d6: 93:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:89:6B:EE:05:65:93:CD:FF:30:CA:4E:B4:EF:E7:1A:D3:6D:1D:94 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8329dbe2-4df9-4bf3-9077-92d6796dbdfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f15:4000::/36 Signature Algorithm: sha256WithRSAEncryption bd:45:6d:8f:1b:af:32:36:b8:94:35:73:74:42:9c:fd:87:20: 17:2a:26:ac:2d:af:cc:69:80:49:a3:e7:0e:e4:46:df:98:d0: d7:96:64:3d:4f:41:9f:e0:49:9f:9c:9a:45:2c:e9:33:33:4c: 2d:c6:0b:df:79:da:2a:46:be:9f:c5:80:5a:c1:1b:18:f1:ea: 64:e6:c6:ad:92:86:b8:83:33:ce:94:1f:8f:6d:c1:5c:7f:9d: 7f:cf:67:75:2d:19:06:f4:7c:96:5c:56:86:ee:b8:77:57:7c: ab:dd:01:14:d2:48:46:7b:ef:7f:94:9c:34:f3:3a:68:71:b9: 54:48:a1:fd:d9:e4:9e:be:9d:cc:6b:a7:b8:ef:b0:1a:0b:29: 6e:e4:6b:97:79:3e:56:05:90:96:eb:a0:58:24:54:b4:ab:ae: 65:64:24:ac:1c:76:98:26:f6:a5:9c:d2:c4:e0:67:bd:38:77: 93:b0:76:14:e5:d5:40:a3:aa:04:07:6c:56:fb:79:34:ef:c1: 1f:a8:55:f5:23:94:fa:5a:f2:fd:4e:97:7f:26:82:d9:5b:0e: 7b:2c:79:26:61:29:5d:4e:5e:6b:cd:cd:e3:87:0c:68:a4:2d: c0:cd:0c:9d:47:53:5e:e4:1b:9b:a4:e0:31:fd:f3:60:7c:d2: 41:db:36:7f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUIwXnCqQAb1nL3BkCO3Q2sBH+rPkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTYwMjE2WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjhmODRjMTI4NDliODgxZWVhMTVmZDBhZWI4ZjQ1ZDli ZWM3MDNiMDhhOGQ0YzE4ZmNmM2U2MjllNzk3ZTczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqHdXlY1p2zZVTP9c3lzcNnxHWBDmld0I/whFnFfvizwPD RwbzHZqC07cRESam+LT4is1C/nlojkN+w1vF3js5yDAroSg66SoZb4ZsUR4255K9 pEQuI6hzgv02DciVP2twlyB9hsOcTttTnBDG634d1N7RtZrMpYqY9+XaaawMYRdi F1xFXV4bpvq+veGWF4wYB+qKCafSzKTVL9dfyqF2R6jVOh7mGEqTAyh6pCLaqnmc Q/edn1ZB+K4UPV56vMTcN+8mjzQ8jI7qDNSogyz7gcRUGOFjcnR4vOMjFFUIG2Mf i5wVSz0vDYBAsmXwUwc3tSzYbfFUGRNOlSES1pNvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUP4lr7gVlk83/MMpOtO/nGtNtHZQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgzMjlkYmUyLTRkZjktNGJmMy05MDc3LTkyZDY3OTZkYmRmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8VQDANBgkqhkiG9w0BAQsFAAOCAQEAvUVtjxuvMja4lDVzdEKc/Ycg FyomrC2vzGmASaPnDuRG35jQ15ZkPU9Bn+BJn5yaRSzpMzNMLcYL33naKka+n8WA WsEbGPHqZObGrZKGuIMzzpQfj23BXH+df89ndS0ZBvR8llxWhu64d1d8q90BFNJI Rnvvf5ScNPM6aHG5VEih/dnknr6dzGunuO+wGgspbuRrl3k+VgWQluugWCRUtKuu ZWQkrBx2mCb2pZzSxOBnvTh3k7B2FOXVQKOqBAdsVvt5NO/BH6hV9SOU+lry/U6X fyaC2VsOeyx5JmEpXU5ea83N44cMaKQtwM0MnUdTXuQbm6TgMf3zYHzSQds2fw== -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:22 2025 by rpki-client