$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa File: 8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa (raw, json) Hash identifier: weqKGU+pVribVoHXc9k76POXjdD1+KEqs7t2sWaRvfw= Subject key identifier: 14:38:38:0C:83:B3:46:3E:3E:14:69:EE:98:F2:67:22:A0:35:82:6E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 624FE9822DDE1B7F75E970BEB4CA58998165DEE9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa Signing time: Fri 29 Aug 2025 15:32:32 +0000 ROA not before: Fri 29 Aug 2025 15:32:32 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:4f:e9:82:2d:de:1b:7f:75:e9:70:be:b4:ca:58:99:81:65:de:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 15:32:32 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=74e00593997e838db33fff7b9177363ed18a162098d3b6ab4948cc969091307e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:c0:4f:f9:da:31:e5:ab:d1:c3:0d:2d:5e: 6e:2c:92:22:79:b2:80:76:00:f8:4c:14:e1:b2:91: 04:84:ca:66:ad:1c:dd:c0:50:9c:7c:a9:cb:32:d8: f5:8d:ae:82:7a:d4:d6:33:92:04:a7:4c:ad:c9:f9: 72:1e:bd:18:5b:c3:ac:a7:10:0f:ad:dd:e5:bc:fc: 81:04:32:4a:e7:d8:06:0a:a9:10:de:bb:8a:a8:5e: 7e:38:b1:63:10:5b:ba:7f:83:69:20:f2:f0:3a:87: bd:a9:59:4b:9d:1b:ac:fc:b4:da:e7:e2:44:99:73: c9:6a:5a:db:2f:dc:33:d6:65:4a:cc:84:93:7d:da: ce:03:19:df:72:d2:c7:cb:56:16:f9:b9:37:b5:9e: 70:88:d5:ff:81:af:2f:b7:7c:dc:b5:50:81:0e:16: 27:e4:3b:ee:86:cb:03:45:b2:41:d2:45:01:ee:ec: 85:61:e0:5b:41:ae:01:72:cd:07:0c:9a:39:b0:c3: 80:e4:8a:dd:e2:4d:c2:f2:3e:da:b8:cd:07:50:5c: c9:5c:e7:08:1d:72:7c:9a:5d:b4:f3:1e:27:02:58: 07:33:b8:b9:89:2d:ed:21:f5:e0:d3:9c:99:8c:08: b0:66:0d:a3:63:68:0f:0f:c7:51:d9:2f:25:de:bd: c4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:38:38:0C:83:B3:46:3E:3E:14:69:EE:98:F2:67:22:A0:35:82:6E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6::/32 Signature Algorithm: sha256WithRSAEncryption 0b:79:20:02:fd:b1:d1:e7:38:05:70:b4:04:7a:49:e9:aa:b7: c7:f7:d9:26:60:42:16:13:88:30:4c:7c:cd:92:da:e9:2d:18: c8:c1:48:7c:9c:ed:28:72:e1:ed:85:aa:2a:33:de:23:08:87: 4a:aa:24:d5:46:33:2b:36:68:31:0d:f9:e1:57:13:a5:87:b8: cb:31:fa:e3:8d:34:2e:8e:c5:99:c0:88:e4:1d:6c:54:de:da: 51:d6:0b:f9:39:14:f8:82:16:41:89:28:dd:24:80:90:b6:24: de:32:45:f4:d4:0f:99:b1:41:3e:bf:d7:e2:77:07:a0:05:ac: bd:3a:89:26:ff:93:0c:d5:0f:01:1c:f4:c0:cf:01:7b:4e:35: 70:ea:b0:19:e6:f1:d1:09:73:88:0b:73:8e:c9:5b:5d:5e:be: f8:0d:ca:a2:60:34:36:e0:94:d7:36:79:4e:d2:6f:f4:68:c9: 99:25:b8:9e:d2:16:e7:bc:34:10:be:7e:8d:14:a2:0b:48:cb: 80:15:62:7e:9f:73:ae:3f:5d:ee:8f:12:e4:c5:5d:65:ae:58: de:a9:25:43:81:d5:33:cb:9e:99:13:fe:b5:15:07:e6:dc:1f: 59:43:07:99:54:b3:76:d1:8c:4c:76:96:58:90:8b:83:d3:bc: 16:4d:0d:89 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUYk/pgi3eG3916XC+tMpYmYFl3ukwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTUzMjMyWhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NGUwMDU5Mzk5N2U4MzhkYjMzZmZmN2I5MTc3MzYzZWQx OGExNjIwOThkM2I2YWI0OTQ4Y2M5NjkwOTEzMDdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIOsBP+dox5avRww0tXm4skiJ5soB2APhMFOGykQSEymat HN3AUJx8qcsy2PWNroJ61NYzkgSnTK3J+XIevRhbw6ynEA+t3eW8/IEEMkrn2AYK qRDeu4qoXn44sWMQW7p/g2kg8vA6h72pWUudG6z8tNrn4kSZc8lqWtsv3DPWZUrM hJN92s4DGd9y0sfLVhb5uTe1nnCI1f+Bry+3fNy1UIEOFifkO+6GywNFskHSRQHu 7IVh4FtBrgFyzQcMmjmww4Dkit3iTcLyPtq4zQdQXMlc5wgdcnyaXbTzHicCWAcz uLmJLe0h9eDTnJmMCLBmDaNjaA8Px1HZLyXevcTtAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUFDg4DIOzRj4+FGnumPJnIqA1gm4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhjODM3ZWMyLWE2NzQtNGRkMi05MjZjLTBkM2NkZjZiYjliNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB/2MA0GCSqGSIb3DQEBCwUAA4IBAQALeSAC/bHR5zgFcLQEeknpqrfH 99kmYEIWE4gwTHzNktrpLRjIwUh8nO0ocuHthaoqM94jCIdKqiTVRjMrNmgxDfnh VxOlh7jLMfrjjTQujsWZwIjkHWxU3tpR1gv5ORT4ghZBiSjdJICQtiTeMkX01A+Z sUE+v9fidwegBay9Ookm/5MM1Q8BHPTAzwF7TjVw6rAZ5vHRCXOIC3OOyVtdXr74 DcqiYDQ24JTXNnlO0m/0aMmZJbie0hbnvDQQvn6NFKILSMuAFWJ+n3OuP13ujxLk xV1lrljeqSVDgdUzy56ZE/61FQfm3B9ZQweZVLN20YxMdpZYkIuD07wWTQ2J -----END CERTIFICATE-----Generated at Sat Sep 6 16:28:09 2025 by rpki-client