$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f60828-42c6-42a0-b210-4f859b5cc846.roa File: 06f60828-42c6-42a0-b210-4f859b5cc846.roa (raw, json) Hash identifier: Jd+vSpBY9eYfdOWYc1/Mfxl/NiNNqOFJdje9E1Bfnao= Subject key identifier: 1F:7E:A0:90:C5:9C:41:64:3C:1D:62:21:BD:AF:DF:A5:DF:EB:A4:49 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E01FA097499526382AF2C91916016D57B10D19D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f60828-42c6-42a0-b210-4f859b5cc846.roa Signing time: Sat 06 Sep 2025 00:01:13 +0000 ROA not before: Sat 06 Sep 2025 00:01:13 +0000 ROA not after: Sat 11 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.86.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:01:fa:09:74:99:52:63:82:af:2c:91:91:60:16:d5:7b:10:d1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 6 00:01:13 2025 GMT Not After : Oct 11 23:59:59 2025 GMT Subject: serialNumber=9551d5bc3e92c1fea11e9f618175f64d8359e3faf2b0341ce3f6f35dfd4067e4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f6:28:61:27:b5:9a:e1:fc:75:97:fe:b6:a6: 54:a7:4d:62:f0:bf:b9:fb:a1:05:73:10:88:92:2b: 1d:62:89:72:0c:47:e3:de:d7:87:f3:0e:58:fe:3f: 1e:ce:96:3b:4a:4f:45:78:d1:36:45:0a:e2:86:53: 4a:e1:3d:f0:1a:92:05:57:72:16:25:d7:e8:a6:20: e5:99:b1:ca:63:92:ca:66:2c:20:31:54:75:fe:49: 6f:e2:50:7a:92:5f:b0:97:05:d2:76:d2:df:67:62: 3f:06:b3:6c:40:b0:b7:f4:c6:ac:cb:8d:96:2b:a7: d7:7d:dc:af:35:ce:98:e7:09:c1:34:24:cb:15:05: bc:09:2a:ce:3e:34:19:11:43:b7:2b:b7:0a:8b:d7: be:27:20:41:a4:70:b5:5d:e0:03:b5:7f:8b:95:fb: b1:70:a5:bd:e7:f8:19:9b:6c:1c:51:5a:32:20:61: 72:fc:be:28:b4:d6:be:14:ad:74:e6:b2:a5:17:3f: 1c:95:e7:5e:d7:d3:29:f3:9e:64:1e:d5:8f:a3:54: d3:6c:e2:f4:8a:59:97:13:f5:d4:a1:da:36:28:be: 6d:03:34:d1:e5:8b:07:36:81:a0:65:ee:5a:9b:2e: 9a:33:df:45:13:2f:6f:0c:e2:4a:be:9b:bb:bc:a6: 1c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7E:A0:90:C5:9C:41:64:3C:1D:62:21:BD:AF:DF:A5:DF:EB:A4:49 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f60828-42c6-42a0-b210-4f859b5cc846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption c6:97:b0:30:39:a4:96:91:2a:d4:c5:23:13:bc:f3:e0:88:01: 33:62:51:a2:4f:e1:d5:37:05:a0:65:2f:46:94:89:cb:96:2f: 55:ea:0c:cf:ec:8c:c3:81:89:ca:31:a8:00:58:7b:8f:ed:40: fc:b7:32:e0:4a:b5:57:dd:26:0e:3b:9b:c1:04:86:65:ef:1a: 03:94:5c:7f:63:42:23:bc:16:f1:b8:50:c5:ba:2a:03:b2:e7: 65:2e:4e:3b:57:7e:b3:9e:a5:61:18:2f:39:5a:f5:61:38:50: f9:17:ac:b8:62:f2:22:f2:51:cb:a7:c2:de:3f:6a:df:97:be: 0b:6d:9b:61:ca:4d:6d:ba:af:e7:35:97:d7:62:9d:a1:f7:d1: 50:3c:fe:62:0f:76:46:c1:11:e6:b2:27:69:31:68:d1:0f:37: e8:2b:f1:f7:5b:21:0f:50:88:12:70:69:9e:b4:e1:99:10:00: b9:ad:1d:07:4c:11:4d:03:5c:82:9f:53:13:e1:f8:b6:8c:c4: 88:2d:3e:ba:6b:bb:f1:08:07:e2:b5:bb:f2:4e:9f:d1:e4:63: ec:ed:f9:66:67:f7:6c:b5:d9:34:dd:73:c9:78:ac:05:a7:67: 1e:18:7b:b2:16:f3:17:fb:34:d1:f9:70:83:93:b0:7c:0c:af: f5:4d:c9:79 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHgH6CXSZUmOCryyRkWAW1XsQ0Z0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA2MDAwMTEzWhcNMjUxMDExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTUxZDViYzNlOTJjMWZlYTExZTlmNjE4MTc1ZjY0ZDgz NTllM2ZhZjJiMDM0MWNlM2Y2ZjM1ZGZkNDA2N2U0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY9ihhJ7Wa4fx1l/62plSnTWLwv7n7oQVzEIiSKx1iiXIM R+Pe14fzDlj+Px7OljtKT0V40TZFCuKGU0rhPfAakgVXchYl1+imIOWZscpjkspm LCAxVHX+SW/iUHqSX7CXBdJ20t9nYj8Gs2xAsLf0xqzLjZYrp9d93K81zpjnCcE0 JMsVBbwJKs4+NBkRQ7crtwqL174nIEGkcLVd4AO1f4uV+7Fwpb3n+BmbbBxRWjIg YXL8vii01r4UrXTmsqUXPxyV517X0ynznmQe1Y+jVNNs4vSKWZcT9dSh2jYovm0D NNHliwc2gaBl7lqbLpoz30UTL28M4kq+m7u8phxPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUH36gkMWcQWQ8HWIhva/fpd/rpEkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2ZjYwODI4LTQyYzYtNDJhMC1iMjEwLTRmODU5YjVjYzg0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQVjANBgkqhkiG9w0BAQsFAAOCAQEAxpewMDmklpEq1MUjE7zz4IgBM2JR ok/h1TcFoGUvRpSJy5YvVeoMz+yMw4GJyjGoAFh7j+1A/Lcy4Eq1V90mDjubwQSG Ze8aA5Rcf2NCI7wW8bhQxboqA7LnZS5OO1d+s56lYRgvOVr1YThQ+ResuGLyIvJR y6fC3j9q35e+C22bYcpNbbqv5zWX12KdoffRUDz+Yg92RsER5rInaTFo0Q836Cvx 91shD1CIEnBpnrThmRAAua0dB0wRTQNcgp9TE+H4tozEiC0+umu78QgH4rW78k6f 0eRj7O35Zmf3bLXZNN1zyXisBadnHhh7shbzF/s00flwg5OwfAyv9U3JeQ== -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:58 2025 by rpki-client