$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0bfd803-ff17-4146-a35b-8824d41bfca6.roa File: f0bfd803-ff17-4146-a35b-8824d41bfca6.roa (raw, json) Hash identifier: eJyKmyv+Dbo191bmA0cfSGQtJjF1j82Mxww0g92kBuY= Subject key identifier: 1F:BE:6B:7A:AD:A4:A4:89:F3:CC:46:7E:5A:F0:E7:83:4D:A9:EE:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A6825591D7D3D0A51272071188C9C2C1703B518 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0bfd803-ff17-4146-a35b-8824d41bfca6.roa Signing time: Fri 29 Aug 2025 00:51:40 +0000 ROA not before: Fri 29 Aug 2025 00:51:40 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:6040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:68:25:59:1d:7d:3d:0a:51:27:20:71:18:8c:9c:2c:17:03:b5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 00:51:40 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=40b0968994caf720d413f2da7ce1bf3ac862c56be4691fc206feceda2fc8e486, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f8:40:d3:55:54:1d:29:24:74:54:de:f1:cc: 91:de:9b:22:f0:50:b4:90:b6:3b:25:1a:ab:a5:0b: 34:18:fd:aa:1f:d0:f0:65:e4:19:2a:64:09:a7:d7: 54:71:9b:96:a0:05:f6:09:24:cb:24:e7:ec:3a:30: a2:c0:be:99:7e:2c:11:e1:ae:ac:2e:26:e6:5c:db: 79:04:0c:f2:70:af:80:a9:a7:6b:0f:62:3f:09:ce: 2b:e4:86:b6:42:62:aa:8b:57:92:83:74:13:a7:51: f7:ed:ea:15:c8:20:6c:45:b9:48:8b:0f:08:5c:fd: b6:6d:ec:be:70:13:a6:c6:98:c1:d8:ff:ee:71:d9: cb:e2:32:a9:0f:8a:b6:e9:b5:92:54:36:e4:7f:9f: 0d:17:5b:4a:0e:5c:76:b2:1a:76:e4:07:81:d4:24: 72:93:cf:6b:04:0b:56:31:f3:9e:6f:4d:b2:ad:43: 77:71:a9:9f:e2:3d:18:fb:e2:cd:3a:fc:44:32:4d: c0:6c:87:a3:28:e0:3d:0e:4a:a6:7b:e4:d0:c0:b8: 31:86:e6:9b:69:f0:32:59:17:49:1e:61:7f:86:0a: 7a:df:94:b7:a7:8d:a1:2a:30:52:20:df:a0:81:55: 10:39:58:69:d6:89:c7:f9:fb:41:4b:2f:c1:b3:17: 71:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BE:6B:7A:AD:A4:A4:89:F3:CC:46:7E:5A:F0:E7:83:4D:A9:EE:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0bfd803-ff17-4146-a35b-8824d41bfca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:6040::/46 Signature Algorithm: sha256WithRSAEncryption 1d:0f:a6:a9:e0:bc:32:73:93:8e:97:01:f8:78:a1:78:fb:ce: c3:cb:c9:44:ae:89:47:12:68:dc:98:8b:89:f6:95:57:e5:49: 2e:42:20:7b:ef:83:ae:26:29:86:e8:5f:d0:03:0e:43:a0:4e: d9:29:dc:9a:32:d5:b9:5c:cc:9d:2b:93:8f:1b:a7:01:95:be: a1:1b:ae:ce:86:44:f5:d0:ce:9c:70:05:8e:bd:d6:3c:0e:1a: e0:2e:b3:ef:36:a6:88:41:bb:7c:a4:5c:03:5d:3a:e9:db:43: 09:4b:44:fb:c0:48:16:c7:b2:9d:16:12:39:3e:98:3e:bf:27: e5:70:bb:ac:94:03:08:bf:b6:27:72:cc:72:ae:28:aa:6f:82: 2a:1a:71:41:8f:d6:05:46:3d:72:e1:7e:61:04:6d:3a:a0:a9: e2:8e:b0:25:e3:e9:0e:28:43:9d:20:c3:a5:fa:8f:10:82:2f: c5:26:41:bb:aa:98:3a:02:74:4c:53:ae:0e:42:01:79:11:c7: ef:b8:d7:21:bb:ca:82:89:ac:09:c1:1c:91:0e:32:c1:50:e8: b5:15:5c:80:13:46:20:4d:b0:ad:7c:07:6f:5a:a0:eb:d9:d2: b2:a9:21:e7:05:8a:32:76:25:c4:98:71:3d:80:60:c9:25:4c: 4c:51:31:e0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWmglWR19PQpRJyBxGIycLBcDtRgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MDA1MTQwWhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGIwOTY4OTk0Y2FmNzIwZDQxM2YyZGE3Y2UxYmYzYWM4 NjJjNTZiZTQ2OTFmYzIwNmZlY2VkYTJmYzhlNDg2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC++EDTVVQdKSR0VN7xzJHemyLwULSQtjslGqulCzQY/aof 0PBl5BkqZAmn11Rxm5agBfYJJMsk5+w6MKLAvpl+LBHhrqwuJuZc23kEDPJwr4Cp p2sPYj8JzivkhrZCYqqLV5KDdBOnUfft6hXIIGxFuUiLDwhc/bZt7L5wE6bGmMHY /+5x2cviMqkPirbptZJUNuR/nw0XW0oOXHayGnbkB4HUJHKTz2sEC1Yx855vTbKt Q3dxqZ/iPRj74s06/EQyTcBsh6Mo4D0OSqZ75NDAuDGG5ptp8DJZF0keYX+GCnrf lLenjaEqMFIg36CBVRA5WGnWicf5+0FLL8GzF3HJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUH75req2kpInzzEZ+WvDng02p7jcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwYmZkODAzLWZmMTctNDE0Ni1hMzViLTg4MjRkNDFiZmNhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pYEAwDQYJKoZIhvcNAQELBQADggEBAB0PpqngvDJzk46XAfh4oXj7 zsPLyUSuiUcSaNyYi4n2lVflSS5CIHvvg64mKYboX9ADDkOgTtkp3Joy1blczJ0r k48bpwGVvqEbrs6GRPXQzpxwBY691jwOGuAus+82pohBu3ykXANdOunbQwlLRPvA SBbHsp0WEjk+mD6/J+Vwu6yUAwi/tidyzHKuKKpvgioacUGP1gVGPXLhfmEEbTqg qeKOsCXj6Q4oQ50gw6X6jxCCL8UmQbuqmDoCdExTrg5CAXkRx++41yG7yoKJrAnB HJEOMsFQ6LUVXIATRiBNsK18B29aoOvZ0rKpIecFijJ2JcSYcT2AYMklTExRMeA= -----END CERTIFICATE-----Generated at Sat Sep 6 16:40:51 2025 by rpki-client