$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa File: 4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa (raw, json) Hash identifier: AUky09G1ipxoOOvIGIMXYZrxqHP0kOzuiJr3UbomMKc= Subject key identifier: 9B:F7:F6:2C:D7:FE:A8:D9:89:AA:04:B9:61:0A:18:F8:50:EE:91:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7DA3A2FA430A6524D5A407DEA80A3B0D142416C9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa Signing time: Wed 13 Aug 2025 00:11:44 +0000 ROA not before: Wed 13 Aug 2025 00:11:44 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a3:a2:fa:43:0a:65:24:d5:a4:07:de:a8:0a:3b:0d:14:24:16:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 13 00:11:44 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=b7a5f4aac8f39287f880baf5c200faf593a5627314a356fd39d5ad01476766a6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:c4:0c:7c:20:74:aa:51:31:e7:90:a9:b8: bc:d5:09:21:29:02:58:50:31:97:57:b5:a3:22:34: bc:64:04:b0:e8:b4:6c:8b:46:6e:5a:ce:5a:e3:b5: 8d:a9:cb:d3:ae:88:59:bc:34:35:6b:b2:a6:7c:10: 7c:50:d5:32:3e:93:fe:81:12:c1:d0:b8:bb:0f:21: e3:2c:1b:93:5e:b1:04:e8:ff:85:40:e2:c7:35:22: 18:b9:82:7f:20:7e:32:ac:18:73:26:71:40:72:91: 48:d6:da:a3:b5:ec:cc:a2:5e:f3:3e:fd:22:15:67: bf:42:f9:ad:b8:65:39:b8:ff:a6:28:e2:ed:00:90: ed:3e:8f:85:54:a7:a5:19:71:1f:72:6f:b9:fc:1e: bd:44:34:24:3f:72:79:1c:64:fa:63:09:a4:e7:67: 51:51:fa:6b:26:7f:b6:08:95:4f:b9:87:85:e2:18: 1c:2d:9c:66:3c:73:48:20:a6:00:ee:42:41:32:4c: 77:55:dd:a7:38:84:31:f2:ad:4b:70:96:6b:dc:9d: 3a:25:ae:db:54:ad:4e:b8:29:95:e9:e5:eb:20:c5: 1d:27:13:ad:75:ea:0b:e4:d3:60:8e:fa:a2:fc:df: 25:0a:cc:80:12:5d:f4:58:5d:d7:70:27:a3:44:fc: 58:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F7:F6:2C:D7:FE:A8:D9:89:AA:04:B9:61:0A:18:F8:50:EE:91:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:5000::/40 Signature Algorithm: sha256WithRSAEncryption 41:67:43:3f:92:07:a4:c7:65:df:17:fa:22:cb:54:f2:ce:bf: 6b:91:a8:c0:84:91:74:01:a1:a1:3b:fb:0d:4b:98:e1:ed:67: 79:c3:bb:9a:21:b7:d2:cb:bc:af:04:80:8d:22:3a:2e:4a:fe: 8f:ab:3c:7d:26:e3:df:81:8e:c6:9b:2c:86:f2:6c:08:45:24: 40:48:ee:7c:f5:54:d4:09:68:97:a7:d7:7b:f9:6a:21:23:c2: 8e:b4:b1:43:11:eb:e7:b8:79:cf:14:a1:d9:17:65:19:ea:8d: a1:0d:87:a1:c1:33:33:21:42:fe:bc:69:a9:8d:65:87:f1:69: 10:2c:ae:17:28:ed:78:7a:3f:4a:8d:4a:e3:9e:88:c1:67:2c: 0e:93:0f:c8:a4:78:66:73:79:ac:c1:12:49:a7:9f:d7:34:3e: d0:86:f8:ae:38:29:10:00:4a:1a:f7:eb:54:3e:e8:3c:11:05: 54:8c:43:dd:a0:1a:e6:9a:aa:95:84:d4:61:b0:a4:a3:92:cd: a7:44:93:eb:b1:f4:58:05:27:da:b7:cf:6f:a4:70:c2:3c:60: d3:8b:36:4d:03:4d:11:8b:5d:1a:68:9b:66:03:bb:bf:59:b1: dc:3a:5a:7e:29:25:59:38:7b:2a:8c:48:09:d5:61:ea:64:fb: b2:91:3c:d1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfaOi+kMKZSTVpAfeqAo7DRQkFskwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEzMDAxMTQ0WhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2E1ZjRhYWM4ZjM5Mjg3Zjg4MGJhZjVjMjAwZmFmNTkz YTU2MjczMTRhMzU2ZmQzOWQ1YWQwMTQ3Njc2NmE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8RMQMfCB0qlEx55CpuLzVCSEpAlhQMZdXtaMiNLxkBLDo tGyLRm5azlrjtY2py9OuiFm8NDVrsqZ8EHxQ1TI+k/6BEsHQuLsPIeMsG5NesQTo /4VA4sc1Ihi5gn8gfjKsGHMmcUBykUjW2qO17MyiXvM+/SIVZ79C+a24ZTm4/6Yo 4u0AkO0+j4VUp6UZcR9yb7n8Hr1ENCQ/cnkcZPpjCaTnZ1FR+msmf7YIlU+5h4Xi GBwtnGY8c0ggpgDuQkEyTHdV3ac4hDHyrUtwlmvcnTolrttUrU64KZXp5esgxR0n E6116gvk02CO+qL83yUKzIASXfRYXddwJ6NE/Fh3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUm/f2LNf+qNmJqgS5YQoY+FDukRswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRlYjFkNDVjLTBiZmMtNDZhMy05N2M2LWQ3M2IyOGNkOGEwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+gUDANBgkqhkiG9w0BAQsFAAOCAQEAQWdDP5IHpMdl3xf6IstU8s6/ a5GowISRdAGhoTv7DUuY4e1necO7miG30su8rwSAjSI6Lkr+j6s8fSbj34GOxpss hvJsCEUkQEjufPVU1Alol6fXe/lqISPCjrSxQxHr57h5zxSh2RdlGeqNoQ2HocEz MyFC/rxpqY1lh/FpECyuFyjteHo/So1K456IwWcsDpMPyKR4ZnN5rMESSaef1zQ+ 0Ib4rjgpEABKGvfrVD7oPBEFVIxD3aAa5pqqlYTUYbCko5LNp0ST67H0WAUn2rfP b6Rwwjxg04s2TQNNEYtdGmibZgO7v1mx3DpafiklWTh7KoxICdVh6mT7spE80Q== -----END CERTIFICATE-----Generated at Sat Aug 23 12:06:16 2025 by rpki-client