$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c9c8d48-3a30-4979-99b2-fb0eb9b1c404.roa File: 6c9c8d48-3a30-4979-99b2-fb0eb9b1c404.roa (raw, json) Hash identifier: l5nwYEhNTrz29FVrKLGW8m9NRXpvqwdx9QSTW9I1M9Q= Subject key identifier: 0A:B1:16:59:A4:48:2D:0B:35:42:A3:5B:2A:19:7C:E8:0E:78:36:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 73575E3B3A96381AD1B16CF9A810D4E0236939C1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c9c8d48-3a30-4979-99b2-fb0eb9b1c404.roa Signing time: Mon 18 Aug 2025 15:41:19 +0000 ROA not before: Mon 18 Aug 2025 15:41:19 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fb9:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:57:5e:3b:3a:96:38:1a:d1:b1:6c:f9:a8:10:d4:e0:23:69:39:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:41:19 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=b683293838e0f758d8fabfeca4f54db33d7e624c4f2e93a29e71e8356e2a7baf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:40:b3:21:a9:e5:04:bd:ac:f5:14:01:86:45: 93:cd:f3:2e:fa:08:8a:59:73:3c:40:32:98:c8:a2: df:df:c0:d4:e4:d1:3d:1e:21:ad:45:40:31:a9:33: 18:f9:a2:63:91:ce:1e:e6:de:6f:a1:fc:46:62:47: 0c:52:f9:7a:13:be:3d:25:13:c0:f7:0b:ba:1b:8b: db:7a:fd:09:a7:a0:7e:1a:1a:b5:11:81:4e:7a:70: 09:79:a1:67:10:43:ce:11:4c:4b:25:00:b8:bf:1c: 3d:a2:0e:03:44:3d:04:ab:5a:df:c7:f8:3e:a0:03: ce:6c:40:82:b4:87:91:3f:94:25:21:8b:88:1d:7f: 8f:c1:c2:03:70:da:c1:5c:13:20:f5:d4:61:5f:e7: 6b:d1:f3:65:b5:ea:ca:8b:8e:99:d2:f6:44:53:fe: ad:2c:4d:a5:67:0b:50:22:e0:52:a0:25:fc:1a:54: ad:b7:2d:84:4c:c2:e2:01:9c:f6:32:89:2e:c8:9a: 39:d7:22:80:34:3f:bf:8d:98:e5:d5:c9:01:26:b2: 14:a9:da:9c:02:91:0e:73:c4:c9:40:c1:bd:0d:3a: a3:b2:38:dc:64:99:a5:cf:a3:26:f9:e1:7e:0f:29: 41:87:ec:7b:61:50:83:d3:ec:56:f0:71:03:7f:c6: 57:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B1:16:59:A4:48:2D:0B:35:42:A3:5B:2A:19:7C:E8:0E:78:36:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c9c8d48-3a30-4979-99b2-fb0eb9b1c404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb9:2000::/40 Signature Algorithm: sha256WithRSAEncryption 94:9e:29:fb:a8:44:7b:e0:1e:c4:79:9c:c5:35:98:f3:8e:f4: 69:a7:97:d1:e9:9e:2a:fc:53:b5:19:94:08:06:f4:8d:46:c8: 87:ef:75:5f:ed:97:8b:9b:44:d6:db:68:f4:ef:34:95:fb:3d: 68:78:67:c4:41:ce:9a:30:ed:e2:95:05:59:2c:de:ae:81:b9: 5f:5f:b9:80:33:02:43:f1:ef:7c:1e:de:a5:fc:25:e6:bd:76: 3e:71:62:7c:ea:ba:55:b1:5c:85:fc:14:e5:f2:4f:00:10:58: 27:aa:05:5e:53:b2:1a:b4:09:af:ce:fb:b9:a1:66:50:2c:1e: 1e:c2:0a:77:d8:b7:f2:a5:f3:69:bc:07:16:42:0c:ab:36:5e: 9d:aa:11:10:0f:67:ee:52:7d:2c:49:63:3c:2c:d4:60:e4:0b: 73:ec:25:c7:eb:13:42:10:c4:f0:9f:8d:0a:9c:ae:53:a3:27: 28:5a:b7:01:23:6c:46:43:73:f8:08:c7:bb:18:bc:1a:b9:b7: d8:fd:e0:a7:b3:39:82:24:b7:f8:99:9b:3d:fa:00:14:57:fc: 7f:bd:dd:3d:ff:7b:b4:a6:fd:5e:6a:93:4d:ca:3d:66:44:78: b9:3b:23:01:62:8f:c2:fe:3e:2d:2a:14:51:50:21:93:5b:05: 28:d1:e3:6a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUc1deOzqWOBrRsWz5qBDU4CNpOcEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTU0MTE5WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjgzMjkzODM4ZTBmNzU4ZDhmYWJmZWNhNGY1NGRiMzNk N2U2MjRjNGYyZTkzYTI5ZTcxZTgzNTZlMmE3YmFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZQLMhqeUEvaz1FAGGRZPN8y76CIpZczxAMpjIot/fwNTk 0T0eIa1FQDGpMxj5omORzh7m3m+h/EZiRwxS+XoTvj0lE8D3C7obi9t6/QmnoH4a GrURgU56cAl5oWcQQ84RTEslALi/HD2iDgNEPQSrWt/H+D6gA85sQIK0h5E/lCUh i4gdf4/BwgNw2sFcEyD11GFf52vR82W16sqLjpnS9kRT/q0sTaVnC1Ai4FKgJfwa VK23LYRMwuIBnPYyiS7ImjnXIoA0P7+NmOXVyQEmshSp2pwCkQ5zxMlAwb0NOqOy ONxkmaXPoyb54X4PKUGH7HthUIPT7FbwcQN/xldhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUCrEWWaRILQs1QqNbKhl86A54NoswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjOWM4ZDQ4LTNhMzAtNDk3OS05OWIyLWZiMGViOWIxYzQwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+5IDANBgkqhkiG9w0BAQsFAAOCAQEAlJ4p+6hEe+AexHmcxTWY8470 aaeX0emeKvxTtRmUCAb0jUbIh+91X+2Xi5tE1tto9O80lfs9aHhnxEHOmjDt4pUF WSzeroG5X1+5gDMCQ/HvfB7epfwl5r12PnFifOq6VbFchfwU5fJPABBYJ6oFXlOy GrQJr877uaFmUCweHsIKd9i38qXzabwHFkIMqzZenaoREA9n7lJ9LEljPCzUYOQL c+wlx+sTQhDE8J+NCpyuU6MnKFq3ASNsRkNz+AjHuxi8Grm32P3gp7M5giS3+Jmb PfoAFFf8f73dPf97tKb9XmqTTco9ZkR4uTsjAWKPwv4+LSoUUVAhk1sFKNHjag== -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:50 2025 by rpki-client