$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c982345-873a-4f63-97fb-df62a9a8f1ea.roa File: 0c982345-873a-4f63-97fb-df62a9a8f1ea.roa (raw, json) Hash identifier: Vn8hc9riKNW0b3sogMEnh8Rdx+O6Z2dEVW6jFO/LW1Y= Subject key identifier: 15:A9:5B:0A:B8:64:02:81:59:8C:30:46:39:13:81:46:5C:CD:8C:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3A5F4214CF0DB5DA7EA096892F6F3AF11E3E2850 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c982345-873a-4f63-97fb-df62a9a8f1ea.roa Signing time: Mon 25 Aug 2025 16:54:08 +0000 ROA not before: Mon 25 Aug 2025 16:54:08 +0000 ROA not after: Mon 29 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5f:42:14:cf:0d:b5:da:7e:a0:96:89:2f:6f:3a:f1:1e:3e:28:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 16:54:08 2025 GMT Not After : Sep 29 23:59:59 2025 GMT Subject: serialNumber=8f67a6538a7ffaf74eab6930fb641cc049d4f188d7a752e7f7612f7cca88779d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d6:83:87:4a:c8:1a:a6:16:3b:c1:0e:8d:d3: 90:0c:16:15:49:c5:94:0c:1f:40:bd:6a:9a:d6:de: ca:cd:98:28:93:e6:66:c3:26:b0:ed:1c:a6:a0:64: 08:b8:56:4c:76:71:bb:df:26:7b:f5:43:4d:80:06: 04:f8:88:75:44:e7:d8:1e:82:e8:43:65:89:fe:70: c4:11:6a:55:c1:4c:c3:5d:49:ba:da:cb:28:5c:7e: 36:b0:5f:44:60:76:7a:b7:b2:cf:2a:e7:bc:bc:e9: 59:f3:f4:6c:a4:c1:c1:bc:1b:d1:be:7e:a2:de:ed: e0:4e:53:4a:4e:67:b8:a1:15:6d:41:62:50:ed:2d: 2f:c8:9a:10:71:f3:55:20:8f:57:00:51:df:41:bd: 13:f6:dd:b8:1d:c3:89:5a:b0:af:76:69:0d:92:18: 77:71:09:f4:80:8a:b0:2b:08:6a:a0:3f:03:09:02: cd:15:74:76:b1:e7:aa:38:f0:1f:30:2f:3e:19:79: 64:ad:cb:66:cf:c9:c8:58:36:47:a1:fe:df:0c:17: fb:4c:06:02:c8:9a:06:eb:26:9e:78:3f:56:dd:be: ea:91:6a:d0:8c:e4:48:c4:94:6f:0d:d5:2a:50:2a: 6b:d2:7b:d7:79:3d:54:bb:e9:d2:7f:d4:37:05:95: 66:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A9:5B:0A:B8:64:02:81:59:8C:30:46:39:13:81:46:5C:CD:8C:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c982345-873a-4f63-97fb-df62a9a8f1ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:c00::/48 Signature Algorithm: sha256WithRSAEncryption 59:f5:78:f5:c8:dc:de:ee:b7:a9:dd:40:2c:e4:90:b1:da:e3: 49:18:af:f8:ba:91:0b:0d:db:8b:80:9d:fe:c6:99:b2:58:08: e6:a1:c1:c9:4e:72:09:08:a3:5b:07:37:c7:bc:82:9d:8c:59: 2f:76:6e:07:78:32:79:53:43:14:66:99:02:11:24:a6:e7:70: 5f:cc:5a:4b:41:9d:74:50:41:c3:fe:6a:30:8b:1f:17:98:6f: f6:e8:74:8a:07:e6:77:a4:e9:b8:2e:05:63:83:a5:32:6f:1c: 71:74:90:a5:fa:03:8a:6e:0e:f3:52:bc:e3:43:12:fd:46:00: 77:83:0e:32:61:d9:6a:00:cf:81:10:9c:74:61:00:e0:d4:63: ca:9d:88:a6:aa:8f:ce:45:2a:09:af:05:0f:ef:56:7b:31:7d: c0:1d:3a:fb:4c:16:61:ec:97:3a:11:da:05:2e:16:1a:4f:3e: fb:02:cd:45:55:80:f6:2b:d7:56:aa:cc:48:fa:88:6d:a7:5d: 29:f6:d6:85:18:7d:ae:83:c0:21:9d:9d:f2:1a:3b:2c:4e:aa: 2e:b7:f4:9b:da:e0:e9:03:16:bf:af:2a:5d:7b:2b:78:9d:bd: 67:bc:b7:29:69:14:e0:d7:be:ef:25:3b:c5:f2:cc:2e:93:ed: 28:d9:4b:c3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOl9CFM8Ntdp+oJaJL2868R4+KFAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI1MTY1NDA4WhcNMjUwOTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjY3YTY1MzhhN2ZmYWY3NGVhYjY5MzBmYjY0MWNjMDQ5 ZDRmMTg4ZDdhNzUyZTdmNzYxMmY3Y2NhODg3NzlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQ1oOHSsgaphY7wQ6N05AMFhVJxZQMH0C9aprW3srNmCiT 5mbDJrDtHKagZAi4Vkx2cbvfJnv1Q02ABgT4iHVE59geguhDZYn+cMQRalXBTMNd SbrayyhcfjawX0Rgdnq3ss8q57y86Vnz9GykwcG8G9G+fqLe7eBOU0pOZ7ihFW1B YlDtLS/ImhBx81Ugj1cAUd9BvRP23bgdw4lasK92aQ2SGHdxCfSAirArCGqgPwMJ As0VdHax56o48B8wLz4ZeWSty2bPychYNkeh/t8MF/tMBgLImgbrJp54P1bdvuqR atCM5EjElG8N1SpQKmvSe9d5PVS76dJ/1DcFlWb9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFalbCrhkAoFZjDBGOROBRlzNjGkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjOTgyMzQ1LTg3M2EtNGY2My05N2ZiLWRmNjJhOWE4ZjFlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sDAAwDQYJKoZIhvcNAQELBQADggEBAFn1ePXI3N7ut6ndQCzkkLHa 40kYr/i6kQsN24uAnf7GmbJYCOahwclOcgkIo1sHN8e8gp2MWS92bgd4MnlTQxRm mQIRJKbncF/MWktBnXRQQcP+ajCLHxeYb/bodIoH5nek6bguBWODpTJvHHF0kKX6 A4puDvNSvONDEv1GAHeDDjJh2WoAz4EQnHRhAODUY8qdiKaqj85FKgmvBQ/vVnsx fcAdOvtMFmHslzoR2gUuFhpPPvsCzUVVgPYr11aqzEj6iG2nXSn21oUYfa6DwCGd nfIaOyxOqi639Jva4OkDFr+vKl17K3idvWe8tylpFODXvu8lO8XyzC6T7SjZS8M= -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:52 2025 by rpki-client