$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa File: 09200eb5-786c-452c-91b5-6e7b43daf2f1.roa (raw, json) Hash identifier: /e0yHCQzqQVgvaXNbqw5CTWzI6d0f25Iyfi00MiHnLE= Subject key identifier: 41:51:C9:C5:FB:F7:50:48:51:77:43:2E:E4:26:56:8B:0C:99:5E:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BF1BCB9BC02F5698ED04EB325BAF8052BB3D8A3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa Signing time: Sat 06 Sep 2025 00:20:30 +0000 ROA not before: Sat 06 Sep 2025 00:20:30 +0000 ROA not after: Sat 11 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f1:bc:b9:bc:02:f5:69:8e:d0:4e:b3:25:ba:f8:05:2b:b3:d8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 6 00:20:30 2025 GMT Not After : Oct 11 23:59:59 2025 GMT Subject: serialNumber=3c1b53610e2f8106432ee8a86b9139d6f8de5700b4e5e912854b01f607002353, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7d:f4:74:1e:be:7c:52:20:54:86:2a:91:74: de:35:16:30:1c:fd:79:77:fe:e8:b7:6c:ea:2f:91: ca:b8:ac:53:ab:fb:ef:59:78:70:fc:b6:5a:92:ce: 06:52:2a:3b:a1:8e:d9:c8:ce:1f:39:52:81:ed:2f: b2:3b:86:54:6f:fb:41:43:61:53:3c:16:7f:f7:55: 4a:88:c0:6e:9b:a3:14:b0:e8:7a:15:c7:49:3f:ae: c5:be:a4:06:4b:5b:f0:40:d6:fd:a0:5e:dd:53:ac: 66:3d:04:6b:de:4b:7d:d3:75:b1:11:4b:8c:57:18: d1:d2:ef:3a:48:e4:3d:40:a7:95:c9:5f:5b:64:72: 88:a5:96:de:38:01:04:f3:44:b8:cd:41:95:0f:f2: b3:9d:00:31:00:54:e1:0e:25:a2:d3:3f:b5:c2:50: 0f:47:3f:d8:75:94:a6:7a:95:8f:2d:0f:be:cb:23: 0b:46:53:1d:73:07:54:32:7e:c1:34:47:c3:47:b4: 3e:6f:ac:f9:82:27:3b:62:f8:61:7b:f0:a5:3d:22: 28:7e:73:66:22:df:ec:05:b0:af:66:d3:35:b6:1d: c5:11:08:0e:90:bf:f1:77:56:46:d2:04:73:47:b1: d6:55:9c:f1:dd:09:5b:6d:a6:a7:aa:6d:7a:6e:4a: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:51:C9:C5:FB:F7:50:48:51:77:43:2E:E4:26:56:8B:0C:99:5E:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2e::/36 Signature Algorithm: sha256WithRSAEncryption 43:dc:4b:30:26:ff:d5:eb:09:3b:d6:9b:bd:5a:54:24:35:6d: 2e:42:5d:da:64:48:a8:e0:eb:c7:82:85:44:4d:f8:6b:80:95: 55:ee:f0:55:00:8c:33:20:8e:5e:fc:83:0f:f4:47:fd:d7:19: b3:c6:89:25:ed:e7:78:ea:b4:16:51:b1:08:a6:e6:7c:ef:31: aa:8c:6d:7f:fa:7d:93:55:80:57:8a:86:d2:41:60:d7:39:53: 79:5c:ad:80:2e:b1:e1:dd:1d:30:87:ef:6d:cb:39:3d:35:88: ea:0e:62:e0:85:16:82:34:0b:52:82:36:ae:db:a4:c2:16:23: 87:9e:6c:e5:b1:9d:bd:4d:0e:04:ae:0b:66:26:2e:e0:70:f1: 0c:c9:96:6f:16:51:aa:c7:0b:31:e1:e1:7e:f2:37:41:6b:5e: 11:be:f5:e4:af:31:c7:08:d7:cf:74:a1:fe:78:8d:2c:bb:0f: d7:6f:69:12:7e:de:20:a2:20:40:00:ba:d6:0b:1f:33:08:17: 0e:ed:4b:bd:74:f9:e4:af:0c:6e:62:f4:f8:fc:46:19:96:ab: 4d:9a:f5:b8:82:90:86:0d:c3:e9:d6:91:00:d2:a9:dd:ec:d8: d6:e5:28:d5:e0:f5:0a:ea:1c:e4:d6:7e:53:c2:36:b2:4d:cf: 98:ef:77:89 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUC/G8ubwC9WmO0E6zJbr4BSuz2KMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA2MDAyMDMwWhcNMjUxMDExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzFiNTM2MTBlMmY4MTA2NDMyZWU4YTg2YjkxMzlkNmY4 ZGU1NzAwYjRlNWU5MTI4NTRiMDFmNjA3MDAyMzUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLffR0Hr58UiBUhiqRdN41FjAc/Xl3/ui3bOovkcq4rFOr ++9ZeHD8tlqSzgZSKjuhjtnIzh85UoHtL7I7hlRv+0FDYVM8Fn/3VUqIwG6boxSw 6HoVx0k/rsW+pAZLW/BA1v2gXt1TrGY9BGveS33TdbERS4xXGNHS7zpI5D1Ap5XJ X1tkcoillt44AQTzRLjNQZUP8rOdADEAVOEOJaLTP7XCUA9HP9h1lKZ6lY8tD77L IwtGUx1zB1QyfsE0R8NHtD5vrPmCJzti+GF78KU9Iih+c2Yi3+wFsK9m0zW2HcUR CA6Qv/F3VkbSBHNHsdZVnPHdCVttpqeqbXpuSkCtAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQVHJxfv3UEhRd0Mu5CZWiwyZXu4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA5MjAwZWI1LTc4NmMtNDUyYy05MWI1LTZlN2I0M2RhZjJmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8uADANBgkqhkiG9w0BAQsFAAOCAQEAQ9xLMCb/1esJO9abvVpUJDVt LkJd2mRIqODrx4KFRE34a4CVVe7wVQCMMyCOXvyDD/RH/dcZs8aJJe3neOq0FlGx CKbmfO8xqoxtf/p9k1WAV4qG0kFg1zlTeVytgC6x4d0dMIfvbcs5PTWI6g5i4IUW gjQLUoI2rtukwhYjh55s5bGdvU0OBK4LZiYu4HDxDMmWbxZRqscLMeHhfvI3QWte Eb715K8xxwjXz3Sh/niNLLsP129pEn7eIKIgQAC61gsfMwgXDu1LvXT55K8MbmL0 +PxGGZarTZr1uIKQhg3D6daRANKp3ezY1uUo1eD1Cuoc5NZ+U8I2sk3PmO93iQ== -----END CERTIFICATE-----Generated at Fri Sep 19 00:34:22 2025 by rpki-client