$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b5791fc-d3ba-408c-8836-1a17336b2ea1.roa File: 9b5791fc-d3ba-408c-8836-1a17336b2ea1.roa (raw, json) Hash identifier: 6cgq6Y8wV1Ri69H2MiuR/q+9az2x3XqXvB3KXIv5gf0= Subject key identifier: 9A:70:E9:B3:6F:39:D1:D9:8C:B3:9F:B2:52:0C:09:29:71:0B:3F:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C14E9F99A9E7797937FD70D2FF34324EBD1BCE2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b5791fc-d3ba-408c-8836-1a17336b2ea1.roa Signing time: Thu 18 Sep 2025 20:07:10 +0000 ROA not before: Thu 18 Sep 2025 20:07:10 +0000 ROA not after: Thu 23 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f01:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:14:e9:f9:9a:9e:77:97:93:7f:d7:0d:2f:f3:43:24:eb:d1:bc:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 18 20:07:10 2025 GMT Not After : Oct 23 23:59:59 2025 GMT Subject: serialNumber=ed73b0a0175393f7735a57fdee7343dcd74eb65c230a9e1ab1d0b46ff8e16385, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:b8:31:d2:8b:24:fb:60:6c:b0:11:7b:1c: cd:4a:85:7e:0c:a0:ff:00:a0:c9:67:22:d7:7a:b6: 62:69:51:ca:00:1d:c0:36:b0:b8:6c:9f:72:60:2c: ff:64:fc:88:24:21:5f:aa:15:b4:d4:3b:76:d7:b5: ec:56:56:f4:8d:aa:6b:e0:52:8b:82:4a:fd:e5:cf: c0:0f:67:de:7c:19:45:6a:3d:9c:51:8b:e0:23:b7: b4:8e:3a:7b:24:e9:c6:f8:e8:2e:8c:fb:53:be:78: e1:b3:05:51:a7:54:de:5c:c9:f9:a1:03:d6:b0:24: 71:db:ee:a3:ea:17:b2:e5:04:ee:71:1c:ab:74:64: e1:52:18:b5:e3:84:c1:3b:73:78:4e:14:b6:d1:7f: 97:11:c5:04:f1:d7:7b:f6:35:0e:e9:bf:8b:d0:ef: af:53:6a:db:49:a7:d1:27:4a:34:59:a1:93:aa:ce: be:7f:9a:12:fc:d6:1b:4c:26:76:8b:ec:d2:61:0b: c8:21:61:02:d2:0e:90:40:c4:c0:7a:3d:55:90:49: 68:c9:d6:51:57:76:55:b5:e8:74:8b:40:4b:6b:1b: 2e:04:90:7b:3e:1a:5f:c3:8c:33:2d:b7:bc:c5:1b: 4b:3e:fd:a9:e9:42:37:a5:15:1e:fc:a0:7f:5b:e0: da:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:70:E9:B3:6F:39:D1:D9:8C:B3:9F:B2:52:0C:09:29:71:0B:3F:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b5791fc-d3ba-408c-8836-1a17336b2ea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:4080::/48 Signature Algorithm: sha256WithRSAEncryption 05:11:b2:de:d2:ea:0f:01:24:ca:92:66:b7:0f:01:ca:90:e7: 95:4f:d0:52:93:3b:9b:89:6e:01:a5:13:d0:c0:30:41:d7:32: 3d:ed:7f:fc:ad:22:4f:4f:b0:1f:56:72:ef:f6:62:e3:b4:61: 04:1d:39:60:fb:ba:fa:71:e7:2b:d5:fa:23:c8:80:51:bb:86: b7:29:bf:3b:bf:b9:2e:49:f8:d6:5c:96:60:ea:d8:79:b9:bf: 6e:63:01:39:e2:19:f2:51:a1:12:76:b3:a7:90:e4:62:88:e5: 68:18:14:ef:32:4e:94:4d:8a:83:a5:24:3a:8a:a6:8c:4f:ae: fd:52:dd:40:00:fb:93:78:d5:9c:de:4e:66:60:93:8b:74:ef: 7a:6b:f3:33:b4:49:4f:44:11:18:02:b7:97:fb:c5:98:48:77: 09:42:72:8c:4b:0a:52:5e:12:69:95:6b:84:d3:61:d0:15:39: 94:d7:85:4d:b9:03:d8:a4:6b:d0:2b:36:c0:fc:0a:d4:1f:a3: 8f:d8:6d:45:e8:2b:e7:fd:d0:a8:a5:82:c9:a5:5e:46:9e:16: 16:c7:74:f9:02:7d:8c:98:da:b1:75:db:fa:16:39:5c:8d:e9: 3e:18:6e:a9:df:21:64:53:d8:dc:8e:ca:ca:59:39:36:58:1e: c5:8e:0b:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPBTp+Zqed5eTf9cNL/NDJOvRvOIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTE4MjAwNzEwWhcNMjUxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDczYjBhMDE3NTM5M2Y3NzM1YTU3ZmRlZTczNDNkY2Q3 NGViNjVjMjMwYTllMWFiMWQwYjQ2ZmY4ZTE2Mzg1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7Krgx0osk+2BssBF7HM1KhX4MoP8AoMlnItd6tmJpUcoA HcA2sLhsn3JgLP9k/IgkIV+qFbTUO3bXtexWVvSNqmvgUouCSv3lz8APZ958GUVq PZxRi+Ajt7SOOnsk6cb46C6M+1O+eOGzBVGnVN5cyfmhA9awJHHb7qPqF7LlBO5x HKt0ZOFSGLXjhME7c3hOFLbRf5cRxQTx13v2NQ7pv4vQ769TattJp9EnSjRZoZOq zr5/mhL81htMJnaL7NJhC8ghYQLSDpBAxMB6PVWQSWjJ1lFXdlW16HSLQEtrGy4E kHs+Gl/DjDMtt7zFG0s+/anpQjelFR78oH9b4NpTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmnDps2850dmMs5+yUgwJKXELP+MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliNTc5MWZjLWQzYmEtNDA4Yy04ODM2LTFhMTczMzZiMmVhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8BQIAwDQYJKoZIhvcNAQELBQADggEBAAURst7S6g8BJMqSZrcPAcqQ 55VP0FKTO5uJbgGlE9DAMEHXMj3tf/ytIk9PsB9Wcu/2YuO0YQQdOWD7uvpx5yvV +iPIgFG7hrcpvzu/uS5J+NZclmDq2Hm5v25jATniGfJRoRJ2s6eQ5GKI5WgYFO8y TpRNioOlJDqKpoxPrv1S3UAA+5N41ZzeTmZgk4t073pr8zO0SU9EERgCt5f7xZhI dwlCcoxLClJeEmmVa4TTYdAVOZTXhU25A9ika9ArNsD8CtQfo4/YbUXoK+f90Kil gsmlXkaeFhbHdPkCfYyY2rF12/oWOVyN6T4YbqnfIWRT2NyOyspZOTZYHsWOC/Q= -----END CERTIFICATE-----Generated at Fri Sep 19 03:17:37 2025 by rpki-client