$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ebb627b-d720-4375-b47a-2400c3db73e9.roa File: 8ebb627b-d720-4375-b47a-2400c3db73e9.roa (raw, json) Hash identifier: 9jVPliRINyBb0tfPve3IsOJVFhVEzow1xCGym4ZSBxQ= Subject key identifier: 98:67:CC:14:A7:88:D1:D9:77:76:10:A2:AF:6F:E2:3B:D5:33:BC:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F492D22584492DF1AABC2B910B1C0B41A585EF0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ebb627b-d720-4375-b47a-2400c3db73e9.roa Signing time: Wed 27 Aug 2025 21:06:58 +0000 ROA not before: Wed 27 Aug 2025 21:06:58 +0000 ROA not after: Wed 01 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f11:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:49:2d:22:58:44:92:df:1a:ab:c2:b9:10:b1:c0:b4:1a:58:5e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 27 21:06:58 2025 GMT Not After : Oct 1 23:59:59 2025 GMT Subject: serialNumber=e9915882cdffc65eafd42b5bed1406f9d4b36264defc5d7c447c5205d7570da4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bb:fa:ec:a2:76:a7:38:ec:51:b1:d1:c4:be: 05:c6:05:06:c0:c4:f9:e5:b5:62:bc:24:aa:45:1d: 24:3d:30:29:ee:eb:32:38:91:c0:8f:8f:e9:4f:9b: 40:7c:b7:37:ff:85:06:1f:4e:bf:84:6e:59:fe:02: 6e:21:6f:89:41:41:99:6b:08:50:d6:99:42:6e:d2: 2f:3d:e9:fe:e2:ca:4b:54:55:61:d9:e0:82:ae:10: b7:e9:79:2d:1d:b4:d1:a2:af:53:4b:02:4a:2a:d8: e1:96:27:50:82:f8:c3:fb:07:a9:5e:1f:59:fe:b9: fd:e0:5f:7b:4f:ff:e1:c4:9f:9d:47:87:4e:86:87: 37:2f:41:e4:68:f1:c5:80:99:bc:09:2b:82:0f:61: 74:23:ea:b1:f3:62:d8:f4:43:20:c1:8d:42:ec:c0: e2:91:d0:2f:b0:50:42:20:b5:5c:ff:37:eb:8a:73: 7e:6d:7a:84:d8:d2:db:fd:c6:4c:9b:64:2d:c8:c5: 4c:1f:0d:83:4e:3a:1b:b6:ee:e5:d2:90:3d:3d:21: 95:2f:13:52:26:a2:aa:2b:03:bb:75:3d:83:0e:66: 8d:cf:3a:3f:55:24:0b:06:fd:6d:0e:62:b9:21:ce: 0d:e6:e3:5c:a9:93:32:50:22:2f:32:ae:20:90:c3: f5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:67:CC:14:A7:88:D1:D9:77:76:10:A2:AF:6F:E2:3B:D5:33:BC:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ebb627b-d720-4375-b47a-2400c3db73e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f11:c000::/36 Signature Algorithm: sha256WithRSAEncryption 72:3e:c3:43:8f:97:0c:6b:44:35:35:b4:a2:0c:a4:80:e6:37: 04:8c:b0:ea:ca:07:2e:11:4a:af:5d:0d:a1:0e:96:73:90:b8: 08:fd:8e:8e:35:47:9d:d6:a0:81:71:5c:79:db:69:c1:d6:01: ab:d1:ab:99:c4:fc:66:da:88:b8:68:a9:85:82:04:d4:86:33: 4d:7e:ed:67:c9:ba:d9:34:84:0f:5d:33:26:a8:9e:d3:62:0e: 68:83:4a:1d:1e:8f:fe:bb:da:79:f2:fc:1a:ac:77:54:f8:da: f1:96:09:a0:e3:37:ab:9f:ca:8d:e9:87:3c:16:95:ef:d8:89: 3f:41:0f:52:62:86:5a:0d:f5:b0:ef:36:ff:00:f7:13:b9:65: c7:13:76:62:5b:fa:5a:3b:91:e2:06:59:1a:19:3a:80:98:f5: 63:2b:8e:07:4b:0b:af:ec:67:66:e3:50:78:1b:08:e3:92:62: 30:e6:e0:2c:a9:62:a9:9a:42:b4:be:b5:27:72:26:64:81:81: f2:06:49:7b:59:03:a8:89:cd:0d:99:52:42:7a:52:7c:e9:0b: 1d:bb:43:be:02:71:80:1a:1f:cc:8e:e2:54:14:b1:90:38:ea: 32:86:a4:54:35:db:61:c7:97:76:3f:96:46:9e:cc:04:17:a7: b4:ef:fa:07 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUX0ktIlhEkt8aq8K5ELHAtBpYXvAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI3MjEwNjU4WhcNMjUxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTkxNTg4MmNkZmZjNjVlYWZkNDJiNWJlZDE0MDZmOWQ0 YjM2MjY0ZGVmYzVkN2M0NDdjNTIwNWQ3NTcwZGE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNu/rsonanOOxRsdHEvgXGBQbAxPnltWK8JKpFHSQ9MCnu 6zI4kcCPj+lPm0B8tzf/hQYfTr+Ebln+Am4hb4lBQZlrCFDWmUJu0i896f7iyktU VWHZ4IKuELfpeS0dtNGir1NLAkoq2OGWJ1CC+MP7B6leH1n+uf3gX3tP/+HEn51H h06GhzcvQeRo8cWAmbwJK4IPYXQj6rHzYtj0QyDBjULswOKR0C+wUEIgtVz/N+uK c35teoTY0tv9xkybZC3IxUwfDYNOOhu27uXSkD09IZUvE1ImoqorA7t1PYMOZo3P Oj9VJAsG/W0OYrkhzg3m41ypkzJQIi8yriCQw/VZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUmGfMFKeI0dl3dhCir2/iO9UzvJwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlYmI2MjdiLWQ3MjAtNDM3NS1iNDdhLTI0MDBjM2RiNzNlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8RwDANBgkqhkiG9w0BAQsFAAOCAQEAcj7DQ4+XDGtENTW0ogykgOY3 BIyw6soHLhFKr10NoQ6Wc5C4CP2OjjVHndaggXFcedtpwdYBq9GrmcT8ZtqIuGip hYIE1IYzTX7tZ8m62TSED10zJqie02IOaINKHR6P/rvaefL8Gqx3VPja8ZYJoOM3 q5/KjemHPBaV79iJP0EPUmKGWg31sO82/wD3E7llxxN2Ylv6WjuR4gZZGhk6gJj1 YyuOB0sLr+xnZuNQeBsI45JiMObgLKliqZpCtL61J3ImZIGB8gZJe1kDqInNDZlS QnpSfOkLHbtDvgJxgBofzI7iVBSxkDjqMoakVDXbYceXdj+WRp7MBBentO/6Bw== -----END CERTIFICATE-----Generated at Sat Sep 6 14:12:02 2025 by rpki-client