$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89de9e52-4387-4a27-8ef0-f21212663bb4.roa File: 89de9e52-4387-4a27-8ef0-f21212663bb4.roa (raw, json) Hash identifier: VEsqxrmUoKhrQpHHELyZikW1fXoPkKnVJgclcSGECXI= Subject key identifier: F3:CF:8A:81:31:E6:A9:99:17:A4:18:F8:1F:2D:2A:AA:0C:A1:E3:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 393610CEB75B0753CDD44D60C990652AB015B5A9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89de9e52-4387-4a27-8ef0-f21212663bb4.roa Signing time: Mon 04 Aug 2025 16:32:14 +0000 ROA not before: Mon 04 Aug 2025 16:32:14 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f15::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:36:10:ce:b7:5b:07:53:cd:d4:4d:60:c9:90:65:2a:b0:15:b5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:32:14 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=3dcfe3468e4239f6cc7be3b5c87b63e5eaefcd070eff77605966f09a44a14157, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:61:9d:28:59:a1:86:33:96:23:ac:61:ed: 72:f6:5f:22:7a:27:68:11:e2:09:2b:8d:cf:65:97: 7d:cc:f8:99:f8:e9:8f:37:04:d6:2e:f7:72:7f:ac: e8:0b:b0:f6:24:ef:a2:85:fb:5d:43:8e:c8:b7:b2: e9:6e:a8:e7:7d:d9:b0:b8:b2:37:ae:ab:7d:d4:53: d3:99:33:ff:75:7f:df:91:0e:4c:cd:01:26:8c:91: f2:86:6f:61:9a:0c:5c:7b:86:52:fe:2c:de:b2:dd: d6:1a:51:4c:ca:e3:af:78:be:72:94:66:f2:0b:da: 32:be:9f:9b:15:1a:9d:e3:1e:df:8f:fc:91:ee:0d: b1:b9:9d:9b:f2:a6:f9:69:27:34:69:00:bb:e1:fb: c2:a0:5a:fe:3a:17:ec:fa:6f:6e:4c:e6:b4:33:86: df:8f:e6:c8:1f:16:ca:87:e1:30:eb:61:24:45:ba: 10:a8:cd:6f:63:36:d0:0c:aa:e0:30:3b:4a:65:60: d2:34:03:36:1a:a7:62:73:45:84:12:7d:d5:8c:a0: 73:7d:22:99:ce:13:7b:9a:8b:39:86:9c:b6:8f:93: da:15:bd:da:5c:70:ee:d8:b2:ae:f4:44:50:e9:58: 71:cd:83:50:fb:63:b5:01:fa:0d:bc:d0:2b:95:6c: fc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CF:8A:81:31:E6:A9:99:17:A4:18:F8:1F:2D:2A:AA:0C:A1:E3:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89de9e52-4387-4a27-8ef0-f21212663bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f15::/36 Signature Algorithm: sha256WithRSAEncryption 8d:71:f7:a5:d5:7c:90:c9:3d:74:53:73:e5:0d:03:e5:75:73: 67:ee:33:d2:b8:2a:da:c2:c5:11:ca:1a:50:0d:81:84:a9:73: a4:99:86:04:9c:70:75:37:ac:cc:29:1f:eb:82:f6:18:37:83: 01:4a:0f:12:53:05:21:b5:bc:0a:3c:c3:9e:af:6f:54:91:63: 51:c5:00:ed:59:2c:48:29:6a:9e:85:32:d1:f6:d5:5c:8e:32: c5:62:51:25:8e:a1:3b:2b:15:8a:8c:99:13:63:41:56:28:04: 0e:59:b9:1d:9e:fe:86:82:8c:a1:83:e7:c3:21:07:1c:02:58: 63:ed:23:18:61:8e:5f:71:8f:17:f8:a7:a0:d7:5c:85:53:8f: 73:3f:19:fb:5c:f7:65:63:79:b8:dc:2c:f7:b6:ff:de:e5:a7: 3b:e1:df:3f:a6:80:4e:09:f9:47:d0:b5:45:6e:7c:42:72:f7: fd:b8:82:d4:ca:a8:aa:f8:dc:b4:ca:58:5a:85:3e:c4:81:95: 4e:ed:af:67:ba:21:d0:72:ce:21:52:cf:26:68:44:30:e0:93: fd:1f:1f:09:ab:57:5c:1b:d5:f3:e0:00:3e:6d:67:3d:a9:f3: be:c8:e9:a6:67:b2:04:16:44:e9:54:24:70:5b:4e:db:17:ab: 68:84:15:ba -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOTYQzrdbB1PN1E1gyZBlKrAVtakwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTYzMjE0WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZGNmZTM0NjhlNDIzOWY2Y2M3YmUzYjVjODdiNjNlNWVh ZWZjZDA3MGVmZjc3NjA1OTY2ZjA5YTQ0YTE0MTU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3uWGdKFmhhjOWI6xh7XL2XyJ6J2gR4gkrjc9ll33M+Jn4 6Y83BNYu93J/rOgLsPYk76KF+11Djsi3suluqOd92bC4sjeuq33UU9OZM/91f9+R DkzNASaMkfKGb2GaDFx7hlL+LN6y3dYaUUzK4694vnKUZvIL2jK+n5sVGp3jHt+P /JHuDbG5nZvypvlpJzRpALvh+8KgWv46F+z6b25M5rQzht+P5sgfFsqH4TDrYSRF uhCozW9jNtAMquAwO0plYNI0AzYap2JzRYQSfdWMoHN9IpnOE3uaizmGnLaPk9oV vdpccO7Ysq70RFDpWHHNg1D7Y7UB+g280CuVbPzDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU88+KgTHmqZkXpBj4Hy0qqgyh43YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5ZGU5ZTUyLTQzODctNGEyNy04ZWYwLWYyMTIxMjY2M2JiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8VADANBgkqhkiG9w0BAQsFAAOCAQEAjXH3pdV8kMk9dFNz5Q0D5XVz Z+4z0rgq2sLFEcoaUA2BhKlzpJmGBJxwdTeszCkf64L2GDeDAUoPElMFIbW8CjzD nq9vVJFjUcUA7VksSClqnoUy0fbVXI4yxWJRJY6hOysVioyZE2NBVigEDlm5HZ7+ hoKMoYPnwyEHHAJYY+0jGGGOX3GPF/inoNdchVOPcz8Z+1z3ZWN5uNws97b/3uWn O+HfP6aATgn5R9C1RW58QnL3/biC1MqoqvjctMpYWoU+xIGVTu2vZ7oh0HLOIVLP JmhEMOCT/R8fCatXXBvV8+AAPm1nPanzvsjppmeyBBZE6VQkcFtO2xeraIQVug== -----END CERTIFICATE-----Generated at Sat Aug 23 22:35:14 2025 by rpki-client