$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7873fdb-b89a-4bdc-bc40-0995b97e1dd9.roa File: c7873fdb-b89a-4bdc-bc40-0995b97e1dd9.roa (raw, json) Hash identifier: FFcTdGQ9etJMRqMD0gnuwyJj5mXk1oQITvaWA2Wufqk= Subject key identifier: 2A:D0:95:41:55:56:C4:8B:8C:2C:D4:81:8A:82:C5:74:A9:6E:B6:93 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5440F1241150CE09DB596AE0AA20FCA896C83550 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7873fdb-b89a-4bdc-bc40-0995b97e1dd9.roa Signing time: Fri 29 Aug 2025 16:12:01 +0000 ROA not before: Fri 29 Aug 2025 16:12:01 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1f:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:40:f1:24:11:50:ce:09:db:59:6a:e0:aa:20:fc:a8:96:c8:35:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:12:01 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=60339b2002d0f0cca0c4b7aee04f94a231d63e3f9ffc0d74f5e0870e3fc462c8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ff:71:9c:10:be:a4:14:e5:ef:0d:7d:de:a2: e3:11:30:51:1c:c3:9a:82:db:03:06:40:e1:ac:df: f5:f2:7c:9d:ec:66:0a:66:fd:95:c3:f1:6f:23:34: 40:cf:05:25:02:48:e4:1b:b1:e9:67:ce:db:71:d8: 62:39:b9:a1:32:6f:ce:d4:c4:2e:d5:40:6e:b0:9d: db:c8:53:94:15:c5:bc:33:a8:c2:a2:ee:a3:01:b4: 40:eb:63:86:0a:c2:96:b3:28:ac:d1:d0:d0:a5:b4: 71:8e:e3:db:65:a3:3f:60:66:84:09:51:57:ba:7f: a6:89:14:21:80:9a:5e:af:59:26:8f:3e:29:4f:81: d0:25:40:5c:3d:6c:8b:61:42:07:c6:a1:8f:8f:b7: 26:ad:93:04:e0:b2:c8:46:fa:c3:bd:39:c5:23:38: e9:fc:a9:5d:0e:81:d3:37:b4:42:e9:f7:c7:97:89: 92:f0:7b:f3:01:84:8d:7b:82:74:28:1d:6b:d7:c0: 64:a8:07:fc:7f:59:15:34:1e:02:2c:64:61:46:e1: ac:34:18:17:61:9d:7b:de:d4:4e:5d:7d:26:61:88: 08:2b:97:06:c5:18:3d:58:89:59:01:7e:7d:b7:d7: 1a:cd:85:66:ff:ff:15:7b:a2:f9:a4:25:04:9c:b4: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D0:95:41:55:56:C4:8B:8C:2C:D4:81:8A:82:C5:74:A9:6E:B6:93 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7873fdb-b89a-4bdc-bc40-0995b97e1dd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1f:4000::/36 Signature Algorithm: sha256WithRSAEncryption ae:00:8a:74:63:95:c8:f5:84:1b:81:f7:e1:34:04:ee:1a:a5: a4:2f:69:81:23:e5:dc:f9:f4:83:5d:55:72:ba:2b:8b:cf:fb: b5:e8:42:36:ea:76:f4:82:ab:d3:33:70:f8:48:96:91:dd:b5: 06:dd:15:5f:b4:9c:2c:d5:9b:6f:65:95:3f:27:2f:fb:92:0b: e7:92:0a:a4:ea:75:2f:80:dc:01:97:0c:6a:4b:76:59:7f:54: 7e:8a:7d:a8:20:8b:31:d9:99:b3:47:28:b0:a3:13:f2:d4:26: 6a:f0:1d:76:49:67:eb:f6:09:c1:c2:8b:dc:93:c8:92:3b:14: eb:1d:f7:e7:ff:68:45:15:c8:a6:1d:f0:01:67:ad:57:b7:83: 8c:bd:af:b2:46:63:67:62:12:d5:18:47:5b:88:7e:99:ca:b3: c6:53:6f:83:24:a4:05:da:b4:77:8a:3b:4c:c2:39:63:08:1d: 74:6e:1b:fa:d0:1b:b4:fd:91:c6:97:a3:c3:70:f5:33:70:e5: 98:6f:bb:cd:34:01:b7:2d:e7:a6:32:d3:8f:87:0f:be:6e:ac: 6d:f7:00:be:f1:d9:b0:af:aa:af:10:dc:69:79:fa:d0:70:e0: 35:2c:15:56:64:81:4e:b5:63:e5:82:7a:f5:2a:14:87:b3:f1: 1c:8c:cd:27 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVEDxJBFQzgnbWWrgqiD8qJbINVAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTYxMjAxWhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDMzOWIyMDAyZDBmMGNjYTBjNGI3YWVlMDRmOTRhMjMx ZDYzZTNmOWZmYzBkNzRmNWUwODcwZTNmYzQ2MmM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDj/3GcEL6kFOXvDX3eouMRMFEcw5qC2wMGQOGs3/XyfJ3s Zgpm/ZXD8W8jNEDPBSUCSOQbselnzttx2GI5uaEyb87UxC7VQG6wndvIU5QVxbwz qMKi7qMBtEDrY4YKwpazKKzR0NCltHGO49tloz9gZoQJUVe6f6aJFCGAml6vWSaP PilPgdAlQFw9bIthQgfGoY+PtyatkwTgsshG+sO9OcUjOOn8qV0OgdM3tELp98eX iZLwe/MBhI17gnQoHWvXwGSoB/x/WRU0HgIsZGFG4aw0GBdhnXve1E5dfSZhiAgr lwbFGD1YiVkBfn231xrNhWb//xV7ovmkJQSctLeFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUKtCVQVVWxIuMLNSBioLFdKlutpMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3ODczZmRiLWI4OWEtNGJkYy1iYzQwLTA5OTViOTdlMWRkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8fQDANBgkqhkiG9w0BAQsFAAOCAQEArgCKdGOVyPWEG4H34TQE7hql pC9pgSPl3Pn0g11Vcrori8/7tehCNup29IKr0zNw+EiWkd21Bt0VX7ScLNWbb2WV Pycv+5IL55IKpOp1L4DcAZcMakt2WX9Ufop9qCCLMdmZs0cosKMT8tQmavAddkln 6/YJwcKL3JPIkjsU6x335/9oRRXIph3wAWetV7eDjL2vskZjZ2IS1RhHW4h+mcqz xlNvgySkBdq0d4o7TMI5YwgddG4b+tAbtP2Rxpejw3D1M3DlmG+7zTQBty3npjLT j4cPvm6sbfcAvvHZsK+qrxDcaXn60HDgNSwVVmSBTrVj5YJ69SoUh7PxHIzNJw== -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:28 2025 by rpki-client