$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c093ef63-1ae0-4709-b889-7e4442755d95.roa File: c093ef63-1ae0-4709-b889-7e4442755d95.roa (raw, json) Hash identifier: HDuxMor/Jn6CwUV1oejwms81ZyHUV92s15nY8v/xWzU= Subject key identifier: B0:85:46:EA:2C:5F:60:86:1E:DF:03:45:F2:BB:6A:19:A7:6E:8C:21 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 09545AE365285A1D29A3D88EBDC9A94D1F47C96E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c093ef63-1ae0-4709-b889-7e4442755d95.roa Signing time: Tue 05 Aug 2025 00:21:31 +0000 ROA not before: Tue 05 Aug 2025 00:21:31 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:4000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:54:5a:e3:65:28:5a:1d:29:a3:d8:8e:bd:c9:a9:4d:1f:47:c9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:21:31 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=4a63100f4995b87fd238e001cee1a0f164ff08df620c586106c29b401694c0af, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7c:a5:b3:aa:29:ee:95:7d:b2:fd:4a:0e:1f: 51:e0:e5:a1:cb:38:a5:8c:6e:b0:4b:a6:8c:54:41: 68:2d:14:57:d5:c3:e9:15:27:50:3a:98:fd:8c:2b: fe:f9:44:c3:f9:00:d9:3d:6c:7c:e2:c5:05:fb:3a: be:37:5c:6f:f6:ea:3e:eb:3d:31:fd:74:b3:ce:10: 3b:2c:ca:5e:d6:12:3a:28:a7:8c:b5:1b:a1:d6:1b: 6d:77:0a:49:a1:37:f1:7c:c1:2c:96:b4:51:ad:56: f2:22:25:12:cd:49:23:09:b5:a5:50:02:56:f4:55: 84:61:a4:f9:3e:dd:84:41:c4:ee:fe:8a:f1:d8:bc: 79:03:6b:93:de:12:51:d2:29:e4:a8:a9:e6:0a:62: 40:06:c7:88:b0:35:da:21:44:ec:96:4c:7a:b9:b0: a1:e3:27:d0:02:df:a6:0d:ff:90:8e:6e:f5:75:b5: da:98:23:fe:71:3c:9c:35:5c:d1:39:75:4b:87:07: fc:ce:15:c2:62:23:b0:99:30:e5:75:ad:31:78:35: 26:91:cd:09:44:9d:3b:58:b2:eb:19:74:b6:b4:36: 13:1f:e8:40:22:a9:16:d5:af:ab:d3:84:73:a9:97: 49:10:8f:f9:4f:4c:c5:9d:06:a8:5b:28:14:4b:ef: c4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:85:46:EA:2C:5F:60:86:1E:DF:03:45:F2:BB:6A:19:A7:6E:8C:21 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c093ef63-1ae0-4709-b889-7e4442755d95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:4000::/39 Signature Algorithm: sha256WithRSAEncryption 2f:81:35:4a:69:11:2c:f0:5e:91:ec:6b:ff:99:57:1d:f4:d7: 71:61:fb:17:63:a3:27:bf:39:67:2c:a9:7b:0a:b9:c1:27:8e: ae:c6:cd:93:7f:9f:f3:5c:11:70:44:19:7c:15:79:d6:a3:79: 41:4c:5a:e2:18:14:bc:16:e9:7a:1d:a9:61:37:d5:3d:b0:5d: 00:7d:6a:c3:f6:35:7a:20:dd:f8:ca:52:2c:45:1a:a9:56:75: 8b:75:2c:5d:5b:69:7c:e4:1c:a2:85:cd:8f:a2:1d:f3:42:9c: 89:01:9d:a6:e7:0b:2f:8f:0c:26:08:e8:f7:69:4d:6c:1c:72: b4:32:3b:e3:ee:50:5a:20:86:aa:40:4e:8d:59:f0:6c:ea:a9: 2b:79:a7:86:8e:9a:58:42:7d:37:f6:11:be:83:4e:3a:b6:ee: 25:3a:f2:79:06:6d:06:f1:0f:c8:91:ce:a4:ec:e4:6e:09:3e: 47:69:08:5d:9c:0e:1a:37:44:13:09:cf:0c:07:5f:26:9c:c0: cf:ab:dc:07:63:a8:0f:bf:4b:32:5c:f0:dc:b1:d9:50:61:c1: ed:99:e0:96:77:a5:4c:ad:2d:42:6b:90:b4:f3:9e:f7:08:f6: 56:29:c0:27:d2:80:16:50:38:6b:1a:6d:31:a1:77:79:ca:b4: bc:16:dd:6e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCVRa42UoWh0po9iOvcmpTR9HyW4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAyMTMxWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTYzMTAwZjQ5OTViODdmZDIzOGUwMDFjZWUxYTBmMTY0 ZmYwOGRmNjIwYzU4NjEwNmMyOWI0MDE2OTRjMGFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPfKWzqinulX2y/UoOH1Hg5aHLOKWMbrBLpoxUQWgtFFfV w+kVJ1A6mP2MK/75RMP5ANk9bHzixQX7Or43XG/26j7rPTH9dLPOEDssyl7WEjoo p4y1G6HWG213CkmhN/F8wSyWtFGtVvIiJRLNSSMJtaVQAlb0VYRhpPk+3YRBxO7+ ivHYvHkDa5PeElHSKeSoqeYKYkAGx4iwNdohROyWTHq5sKHjJ9AC36YN/5CObvV1 tdqYI/5xPJw1XNE5dUuHB/zOFcJiI7CZMOV1rTF4NSaRzQlEnTtYsusZdLa0NhMf 6EAiqRbVr6vThHOpl0kQj/lPTMWdBqhbKBRL78Q5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUsIVG6ixfYIYe3wNF8rtqGadujCEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwOTNlZjYzLTFhZTAtNDcwOS1iODg5LTdlNDQ0Mjc1NWQ5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB+gQDANBgkqhkiG9w0BAQsFAAOCAQEAL4E1SmkRLPBekexr/5lXHfTX cWH7F2OjJ785Zyypewq5wSeOrsbNk3+f81wRcEQZfBV51qN5QUxa4hgUvBbpeh2p YTfVPbBdAH1qw/Y1eiDd+MpSLEUaqVZ1i3UsXVtpfOQcooXNj6Id80KciQGdpucL L48MJgjo92lNbBxytDI74+5QWiCGqkBOjVnwbOqpK3mnho6aWEJ9N/YRvoNOOrbu JTryeQZtBvEPyJHOpOzkbgk+R2kIXZwOGjdEEwnPDAdfJpzAz6vcB2OoD79LMlzw 3LHZUGHB7ZnglnelTK0tQmuQtPOe9wj2VinAJ9KAFlA4axptMaF3ecq0vBbdbg== -----END CERTIFICATE-----Generated at Sat Aug 9 15:13:24 2025 by rpki-client