$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1d5fcef-b687-4ab2-941f-2a3769e74a36.roa File: c1d5fcef-b687-4ab2-941f-2a3769e74a36.roa (raw, json) Hash identifier: qwoo0nhjj42RTAmN9plhFti/sAPGXR27OdnTg8Hls9s= Subject key identifier: 1F:2F:5B:0D:77:86:8D:C4:F2:2E:7E:3A:5F:86:ED:DA:7B:76:37:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4DBBDE4802AB9D9B0192793925CF651E02ED6E6C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1d5fcef-b687-4ab2-941f-2a3769e74a36.roa Signing time: Tue 26 Aug 2025 16:40:19 +0000 ROA not before: Tue 26 Aug 2025 16:40:19 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:807b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:bb:de:48:02:ab:9d:9b:01:92:79:39:25:cf:65:1e:02:ed:6e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:40:19 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=02d7b746e841a77c5f5e9d907ffd8b2b17874b11886a4120c69cb503cd97c546, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:8e:37:2c:74:bb:2c:b7:7b:c4:2c:13:71: ee:08:32:3e:7a:3b:6c:44:96:bc:ad:98:b5:0b:db: 6b:2a:0e:c8:b6:9c:01:35:04:21:53:5f:0e:2f:71: 3f:cb:93:2a:57:b7:42:98:ec:97:80:22:f1:d0:88: cc:ec:94:ab:5c:71:42:e0:c4:71:ff:73:f9:62:99: d2:3b:9f:ca:0a:9f:2e:ca:5b:c3:93:a6:e1:bc:38: d5:5f:52:a9:a3:6f:a2:d8:22:b6:2f:89:63:72:45: 96:d8:30:a3:ea:a5:a5:3f:ae:e2:f0:5c:9c:5d:6d: e0:6e:ba:49:88:44:1f:cc:3e:7a:37:07:86:92:ee: e2:e7:96:cd:06:59:37:1b:55:e2:e3:8a:ec:19:68: 56:6f:54:da:92:f0:80:84:ca:7a:40:91:9a:bc:44: 50:1b:a0:f6:de:42:82:3a:3d:5f:d7:f1:80:5a:73: 5b:60:a1:df:c4:32:22:fb:3c:42:1f:74:12:40:10: 2b:6e:04:bd:55:b6:49:6a:84:40:32:be:70:9d:56: 64:07:4d:d9:75:1a:e5:69:07:ac:96:04:09:e2:44: 4e:34:41:65:c1:cd:48:40:b1:2c:aa:1e:a0:48:90: 1d:fa:9f:c6:57:d7:41:aa:36:57:d7:e1:a0:27:cd: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2F:5B:0D:77:86:8D:C4:F2:2E:7E:3A:5F:86:ED:DA:7B:76:37:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1d5fcef-b687-4ab2-941f-2a3769e74a36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:807b::/48 Signature Algorithm: sha256WithRSAEncryption b7:8c:1a:92:48:0d:0b:ba:47:55:ff:ec:57:f2:9b:1c:4c:b6: 7c:80:ae:32:09:f4:27:5e:64:f5:e6:c9:67:67:c3:3a:82:92: e0:bc:aa:c9:af:c4:78:eb:a7:e2:98:df:6b:05:a0:9b:83:7f: ba:d0:68:87:6e:26:8f:26:1f:a9:73:9d:70:bf:9d:70:7a:09: 38:66:10:62:d2:de:95:28:22:f6:65:a2:e5:79:62:72:fe:2a: c6:1f:33:d7:04:82:66:d3:d8:b7:ef:e6:fc:f2:2c:07:b6:df: 81:e9:36:09:21:e9:17:2b:dd:37:3d:2b:c8:df:97:15:0a:e9: 68:31:e8:15:8a:b7:4c:8a:e9:1c:99:5f:18:18:a2:34:61:6b: 64:58:e0:5c:22:96:33:9c:77:7a:a3:aa:2f:36:ea:a5:db:e1: 38:12:7d:6a:3d:61:2a:fc:2e:62:b8:13:96:20:94:d6:1b:c6: 9b:b2:8a:e4:86:ca:0e:f4:30:08:e8:01:a8:31:2a:36:a4:11: fc:8c:27:49:9e:b1:96:b7:cc:a4:a2:6f:41:7f:97:81:e1:de: 30:0a:bc:bf:d1:d4:b3:07:29:43:2a:65:49:8b:2a:6a:cd:13: 3f:e2:6b:09:a7:dd:d3:25:21:38:91:87:ac:1f:39:4e:ad:d6: e2:02:15:66 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTbveSAKrnZsBknk5Jc9lHgLtbmwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTY0MDE5WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMmQ3Yjc0NmU4NDFhNzdjNWY1ZTlkOTA3ZmZkOGIyYjE3 ODc0YjExODg2YTQxMjBjNjljYjUwM2NkOTdjNTQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwk443LHS7LLd7xCwTce4IMj56O2xElrytmLUL22sqDsi2 nAE1BCFTXw4vcT/LkypXt0KY7JeAIvHQiMzslKtccULgxHH/c/limdI7n8oKny7K W8OTpuG8ONVfUqmjb6LYIrYviWNyRZbYMKPqpaU/ruLwXJxdbeBuukmIRB/MPno3 B4aS7uLnls0GWTcbVeLjiuwZaFZvVNqS8ICEynpAkZq8RFAboPbeQoI6PV/X8YBa c1tgod/EMiL7PEIfdBJAECtuBL1VtklqhEAyvnCdVmQHTdl1GuVpB6yWBAniRE40 QWXBzUhAsSyqHqBIkB36n8ZX10GqNlfX4aAnzY6xAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHy9bDXeGjcTyLn46X4bt2nt2N2kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxZDVmY2VmLWI2ODctNGFiMi05NDFmLTJhMzc2OWU3NGEzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gHswDQYJKoZIhvcNAQELBQADggEBALeMGpJIDQu6R1X/7FfymxxM tnyArjIJ9CdeZPXmyWdnwzqCkuC8qsmvxHjrp+KY32sFoJuDf7rQaIduJo8mH6lz nXC/nXB6CThmEGLS3pUoIvZlouV5YnL+KsYfM9cEgmbT2Lfv5vzyLAe234HpNgkh 6Rcr3Tc9K8jflxUK6Wgx6BWKt0yK6RyZXxgYojRha2RY4FwiljOcd3qjqi826qXb 4TgSfWo9YSr8LmK4E5YglNYbxpuyiuSGyg70MAjoAagxKjakEfyMJ0mesZa3zKSi b0F/l4Hh3jAKvL/R1LMHKUMqZUmLKmrNEz/iawmn3dMlITiRh6wfOU6t1uICFWY= -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:18 2025 by rpki-client