$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c366d4ab-ff10-418b-bd5f-1bce06216fee.roa File: c366d4ab-ff10-418b-bd5f-1bce06216fee.roa (raw, json) Hash identifier: XRgySX658MN68e4ilXYPcjfBj9vdVa+GsWRSSBRmD90= Subject key identifier: 72:1D:99:39:75:EC:FC:FB:35:4B:39:79:99:C0:20:C6:67:82:9D:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 486930064241FB94FCBB9327238CE30C6A6D9739 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c366d4ab-ff10-418b-bd5f-1bce06216fee.roa Signing time: Mon 01 Sep 2025 15:31:34 +0000 ROA not before: Mon 01 Sep 2025 15:31:34 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1a:c000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:69:30:06:42:41:fb:94:fc:bb:93:27:23:8c:e3:0c:6a:6d:97:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:31:34 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=8bde0d70e542f5be2be39fcdf97eacb9efdca822bbe04613a5d90c2c3a3a738e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:dc:4d:e8:9b:ba:e9:64:97:20:b2:16:43: 0f:f6:6c:6d:ae:39:0a:5a:cf:69:a5:c0:a2:ac:de: 21:cb:a3:d3:58:39:3e:d8:fc:94:6d:f6:e7:6e:d5: e2:cd:d4:72:3b:3f:7f:e8:72:5c:18:2c:c5:79:34: e7:2b:1f:43:9c:d0:d8:0a:0e:81:9e:a6:a1:6b:bc: ee:21:3a:7e:fe:eb:dd:da:ce:33:3e:6e:a2:b5:60: 77:5a:1b:80:96:3a:a3:52:ab:81:4e:7d:6c:9c:e8: 87:fa:b5:e9:2c:da:0a:50:e9:82:e3:a3:7a:15:be: 39:87:95:7e:29:31:76:8a:dc:d9:75:e3:40:ab:5c: ec:88:f7:69:27:b3:bb:e4:7e:b7:0e:0f:17:8e:a5: e9:68:d4:aa:df:fb:ef:ac:ad:8a:75:db:93:96:6c: 65:02:e7:56:01:50:92:7a:37:a2:15:27:ce:64:8d: c8:ea:6a:e9:d8:52:a7:4a:3b:3f:af:ab:7a:31:35: a9:c0:4f:c2:cc:d4:8f:0d:59:ad:37:65:49:66:89: 5a:4a:87:39:57:13:2d:64:6d:3c:91:08:56:9c:78: 0d:b8:56:f5:23:44:c8:3e:36:ea:d3:64:78:d3:94: 4f:fe:51:2a:dd:f3:19:5d:17:db:fa:59:1a:f1:53: 1e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1D:99:39:75:EC:FC:FB:35:4B:39:79:99:C0:20:C6:67:82:9D:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c366d4ab-ff10-418b-bd5f-1bce06216fee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1a:c000::/37 Signature Algorithm: sha256WithRSAEncryption 76:04:b5:1b:05:94:aa:a1:20:e5:fc:ba:18:b0:96:41:03:87: 11:31:14:24:2e:67:93:7c:e0:57:8f:e9:27:fe:e7:94:cf:49: eb:cf:5f:ee:0d:6f:ed:fa:21:38:a9:61:b8:e6:d9:19:78:05: fe:04:e0:47:03:1f:2a:20:8a:5b:76:84:e7:a1:ae:f6:58:57: 3d:23:e6:d2:87:cc:0e:38:51:0e:9c:da:77:c4:77:f2:76:33: 15:8c:c1:58:86:66:c5:38:c4:5b:0b:4a:99:6f:59:dc:ab:09: 66:10:96:dd:13:f2:fc:34:9a:ae:4e:60:0f:bd:fe:35:df:4f: cf:2e:fa:23:7d:95:a0:3e:84:f5:d0:3f:b7:93:95:a0:ad:9a: c5:bf:eb:54:4d:72:66:12:02:2a:0a:04:6d:8d:d4:12:9b:14: 3d:02:58:ad:21:09:3e:9b:9c:57:1b:0f:e8:bc:e9:82:14:67: 63:3d:61:ac:db:2a:31:ba:57:74:b5:04:d2:67:3d:14:74:b8: 7c:f2:7a:41:55:0d:31:60:3b:56:b8:f8:d5:46:94:c3:72:03: 7b:13:34:4c:54:cf:9d:57:2c:34:81:e7:7f:d9:e1:6f:f3:98: ee:93:32:50:32:c4:d0:d3:26:be:a8:4c:f7:de:db:b6:d0:c7: b5:66:a2:49 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSGkwBkJB+5T8u5MnI4zjDGptlzkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTUzMTM0WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YmRlMGQ3MGU1NDJmNWJlMmJlMzlmY2RmOTdlYWNiOWVm ZGNhODIyYmJlMDQ2MTNhNWQ5MGMyYzNhM2E3MzhlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxf9xN6Ju66WSXILIWQw/2bG2uOQpaz2mlwKKs3iHLo9NY OT7Y/JRt9udu1eLN1HI7P3/oclwYLMV5NOcrH0Oc0NgKDoGepqFrvO4hOn7+693a zjM+bqK1YHdaG4CWOqNSq4FOfWyc6If6teks2gpQ6YLjo3oVvjmHlX4pMXaK3Nl1 40CrXOyI92kns7vkfrcODxeOpelo1Krf+++srYp125OWbGUC51YBUJJ6N6IVJ85k jcjqaunYUqdKOz+vq3oxNanAT8LM1I8NWa03ZUlmiVpKhzlXEy1kbTyRCFaceA24 VvUjRMg+NurTZHjTlE/+USrd8xldF9v6WRrxUx4bAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUch2ZOXXs/Ps1Szl5mcAgxmeCnSkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MzNjZkNGFiLWZmMTAtNDE4Yi1iZDVmLTFiY2UwNjIxNmZlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8awDANBgkqhkiG9w0BAQsFAAOCAQEAdgS1GwWUqqEg5fy6GLCWQQOH ETEUJC5nk3zgV4/pJ/7nlM9J689f7g1v7fohOKlhuObZGXgF/gTgRwMfKiCKW3aE 56Gu9lhXPSPm0ofMDjhRDpzad8R38nYzFYzBWIZmxTjEWwtKmW9Z3KsJZhCW3RPy /DSark5gD73+Nd9Pzy76I32VoD6E9dA/t5OVoK2axb/rVE1yZhICKgoEbY3UEpsU PQJYrSEJPpucVxsP6LzpghRnYz1hrNsqMbpXdLUE0mc9FHS4fPJ6QVUNMWA7Vrj4 1UaUw3IDexM0TFTPnVcsNIHnf9nhb/OY7pMyUDLE0NMmvqhM997bttDHtWaiSQ== -----END CERTIFICATE-----Generated at Sat Sep 6 14:05:56 2025 by rpki-client