$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9ee407d-60a9-4910-98f4-9e90c8d2ff9d.roa File: b9ee407d-60a9-4910-98f4-9e90c8d2ff9d.roa (raw, json) Hash identifier: Ui7IeBNiU6wsPzIdefqpeo+rbFCpTlxla0Os6hwG9oo= Subject key identifier: C9:46:43:CC:C2:BB:AB:DA:56:6B:96:08:E4:E4:8A:24:62:43:0E:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72A8477C70A0FB08D5ED5D9608AC5AF1D2C79B3B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9ee407d-60a9-4910-98f4-9e90c8d2ff9d.roa Signing time: Tue 26 Aug 2025 15:20:22 +0000 ROA not before: Tue 26 Aug 2025 15:20:22 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:5080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a8:47:7c:70:a0:fb:08:d5:ed:5d:96:08:ac:5a:f1:d2:c7:9b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:20:22 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=971b4f356c9520beeb20094863c697b55f6fff089c29f08f31601143e764647e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:e5:63:a7:d0:01:3e:e0:65:94:02:f6:87: 5c:6f:dd:86:b1:cc:a9:13:a5:7a:20:11:99:f0:84: 91:2d:a3:03:68:72:0a:32:6e:e3:c3:5b:0b:ff:64: 36:9c:53:6b:e3:f6:c7:57:d7:73:96:d7:24:14:07: 71:dc:f7:bb:50:b2:66:fe:6f:ee:e7:0c:74:67:c7: 92:ad:c8:c9:2b:88:2a:dc:b9:39:97:58:33:08:12: d4:25:ff:16:af:c6:1f:13:3d:f3:00:34:05:45:a0: 0e:1e:2e:67:2c:5e:1c:e1:4d:69:8d:de:61:a9:74: 2f:da:6b:5b:60:bb:a9:fe:1a:d1:94:d1:9a:16:17: da:93:b3:4d:b1:cf:51:6d:dd:92:9b:71:94:ea:30: 3c:9b:d0:64:7d:77:19:d0:85:b7:c4:bd:db:a2:32: 24:d6:b7:1a:a1:dd:03:71:9e:a8:13:c9:b8:79:8d: c4:4f:98:96:ac:a0:70:d1:5f:c5:bb:f8:bc:30:76: f0:0e:da:e7:0a:db:7f:59:be:37:01:60:ec:9e:b2: d9:8f:28:06:1f:eb:6d:ba:3e:9c:0f:6f:b7:4f:df: fc:b6:0c:1d:f2:ae:77:bf:fe:77:47:a1:03:0d:27: 65:6c:8c:68:40:fd:e3:3a:8c:06:f7:49:38:6e:98: d3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:46:43:CC:C2:BB:AB:DA:56:6B:96:08:E4:E4:8A:24:62:43:0E:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9ee407d-60a9-4910-98f4-9e90c8d2ff9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:5080::/48 Signature Algorithm: sha256WithRSAEncryption d0:9a:19:0e:d3:c9:62:78:35:e3:a6:c2:29:45:2f:8e:47:06: 88:e7:ad:0f:f3:f1:db:5c:1e:d1:72:c9:fe:9d:62:d5:b0:27: e6:2b:6c:58:4d:f7:c5:20:3c:1a:c1:f1:7c:af:f1:6c:35:07: 1a:1b:5e:e6:56:2d:58:da:d6:30:06:e2:0c:6a:b2:f2:b2:ab: 52:a4:18:aa:93:8f:b0:c7:2e:64:d4:57:f6:87:22:5d:78:95: 10:b4:74:bb:85:17:0e:0f:bd:a4:28:d8:3a:06:eb:b0:8c:66: 1f:5d:7d:35:e0:a9:ce:ee:bf:a8:3f:fa:6b:40:10:55:92:c5: 83:10:e4:70:9c:63:f9:a6:47:45:f8:4b:50:0c:31:a3:cb:fa: d8:4c:f0:e1:0b:ef:44:59:8d:c6:91:d3:f5:97:88:da:9f:f9: c3:f7:06:28:6b:79:d8:ba:e6:62:7b:94:aa:a8:c7:95:0e:cc: f0:85:5c:70:e6:0f:9e:73:07:1d:71:f1:76:4b:6c:f0:26:e4: 60:19:8a:ab:27:ab:e8:1e:3c:f9:05:bf:32:28:6d:8d:d4:43: e0:58:11:6b:36:45:80:d5:62:a1:c4:36:9f:84:26:72:2d:40: 02:0a:f4:9d:fc:cb:53:93:f4:11:a8:bb:9b:4f:d2:64:8e:7d: 97:bd:1e:71 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcqhHfHCg+wjV7V2WCKxa8dLHmzswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUyMDIyWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzFiNGYzNTZjOTUyMGJlZWIyMDA5NDg2M2M2OTdiNTVm NmZmZjA4OWMyOWYwOGYzMTYwMTE0M2U3NjQ2NDdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/COVjp9ABPuBllAL2h1xv3YaxzKkTpXogEZnwhJEtowNo cgoybuPDWwv/ZDacU2vj9sdX13OW1yQUB3Hc97tQsmb+b+7nDHRnx5KtyMkriCrc uTmXWDMIEtQl/xavxh8TPfMANAVFoA4eLmcsXhzhTWmN3mGpdC/aa1tgu6n+GtGU 0ZoWF9qTs02xz1Ft3ZKbcZTqMDyb0GR9dxnQhbfEvduiMiTWtxqh3QNxnqgTybh5 jcRPmJasoHDRX8W7+LwwdvAO2ucK239ZvjcBYOyestmPKAYf6226PpwPb7dP3/y2 DB3yrne//ndHoQMNJ2VsjGhA/eM6jAb3SThumNO9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyUZDzMK7q9pWa5YI5OSKJGJDDg4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5ZWU0MDdkLTYwYTktNDkxMC05OGY0LTllOTBjOGQyZmY5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84UIAwDQYJKoZIhvcNAQELBQADggEBANCaGQ7TyWJ4NeOmwilFL45H BojnrQ/z8dtcHtFyyf6dYtWwJ+YrbFhN98UgPBrB8Xyv8Ww1BxobXuZWLVja1jAG 4gxqsvKyq1KkGKqTj7DHLmTUV/aHIl14lRC0dLuFFw4PvaQo2DoG67CMZh9dfTXg qc7uv6g/+mtAEFWSxYMQ5HCcY/mmR0X4S1AMMaPL+thM8OEL70RZjcaR0/WXiNqf +cP3Bihredi65mJ7lKqox5UOzPCFXHDmD55zBx1x8XZLbPAm5GAZiqsnq+gePPkF vzIobY3UQ+BYEWs2RYDVYqHENp+EJnItQAIK9J38y1OT9BGou5tP0mSOfZe9HnE= -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:18 2025 by rpki-client