$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10eee66f-24d2-4d20-b7f1-d2d46838c237.roa File: 10eee66f-24d2-4d20-b7f1-d2d46838c237.roa (raw, json) Hash identifier: 9kxmMudoD+2GxqeySEIOjg9Xm02mkPj3mvG0tyAIP80= Subject key identifier: A5:1C:F4:3D:15:92:EF:FF:67:E4:E6:18:82:24:1E:FA:6C:26:56:87 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FCA612E8DC898AA59A2ADA03CEF5AFD0D1C1DA6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10eee66f-24d2-4d20-b7f1-d2d46838c237.roa Signing time: Mon 01 Sep 2025 15:21:17 +0000 ROA not before: Mon 01 Sep 2025 15:21:17 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fef:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ca:61:2e:8d:c8:98:aa:59:a2:ad:a0:3c:ef:5a:fd:0d:1c:1d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:21:17 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=25c1a554bb513ac62870a357f318dac321af2ed9d5fe17e91e7c9efb01f44000, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:e9:f3:7a:f7:5e:94:f6:3b:7f:bf:33:87: 48:c7:f3:4a:23:a5:00:9d:4c:a4:20:c6:c3:88:5c: de:28:4c:9e:aa:a9:d1:d8:e6:23:fc:fb:ea:e7:92: b5:3d:18:d0:d3:4e:4d:b0:65:76:4c:79:2f:b4:9a: 0c:8b:11:74:8c:d9:12:ad:71:05:c9:5d:15:30:24: 0d:bf:29:48:40:23:49:6d:33:77:1a:7d:75:4f:c0: 68:02:57:65:0b:9c:6f:98:28:e3:bb:b3:07:d8:0f: 46:d3:ea:0f:1e:ab:39:47:56:3d:05:49:e0:cd:e8: 3b:e9:eb:ee:c0:3d:e7:81:b7:bf:b7:83:ca:98:f0: 15:c9:54:3f:8d:32:f9:c8:7a:19:90:a6:c9:03:f8: 93:46:fc:11:db:a5:7e:53:38:cd:d7:96:b2:d4:62: d5:18:42:b4:fa:42:82:94:36:bb:9a:28:b6:de:3f: 82:95:a0:0d:f4:dc:16:a5:ed:6c:0a:59:5c:32:a3: 89:de:39:f9:92:57:fd:bb:50:d3:97:36:0a:18:94: 98:42:17:5f:c8:2f:b7:d4:5b:29:23:b6:9a:fe:4d: 5a:5f:98:b7:67:8b:92:60:6f:77:f4:78:c7:b0:d7: 03:16:74:4e:21:3c:8e:9f:a8:65:86:85:68:bd:1d: f9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1C:F4:3D:15:92:EF:FF:67:E4:E6:18:82:24:1E:FA:6C:26:56:87 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10eee66f-24d2-4d20-b7f1-d2d46838c237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:2000::/40 Signature Algorithm: sha256WithRSAEncryption c9:38:bb:0c:a3:07:be:0c:3d:a6:1c:28:73:6d:f9:6c:a5:a5: 93:ed:04:e3:b7:e9:f5:45:14:cf:c8:a7:d5:35:13:fd:6f:4d: 8b:a1:4d:f2:3b:99:db:1e:15:1a:62:16:99:c2:83:38:62:0d: dc:67:b1:0e:ff:eb:13:5b:15:99:8f:06:cf:58:7d:47:98:36: 35:3c:5c:33:9d:14:22:9b:a9:af:e5:07:9b:10:2d:d7:b7:50: e9:42:cd:33:2b:0b:49:f8:84:78:da:5f:97:a9:c8:0e:3c:16: b8:45:e6:b7:e8:d8:4c:78:fb:ec:ba:3b:33:90:74:95:e5:5e: f4:e7:b8:84:2e:1f:9a:68:87:9c:e1:ce:dd:d4:8d:a9:cc:17: 2c:f8:10:8c:26:e9:c9:19:a0:ac:7e:ff:89:1f:25:53:11:5e: 85:2f:14:60:29:48:b9:1b:51:57:b1:1f:d5:d0:d6:d7:9b:cb: ea:03:42:96:87:64:5d:ae:90:8a:63:85:d8:72:18:cd:2c:1b: 1d:f6:eb:6a:9c:c9:e2:4e:fe:bc:2a:37:04:5d:a4:76:3b:f3: 1e:61:3a:25:54:dc:78:22:c2:b3:61:2f:e9:44:c1:ee:8b:2a: 04:81:5e:83:35:0c:e1:7c:18:f8:c6:de:f7:87:98:03:5e:dc: c9:c7:b1:07 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUb8phLo3ImKpZoq2gPO9a/Q0cHaYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTUyMTE3WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWMxYTU1NGJiNTEzYWM2Mjg3MGEzNTdmMzE4ZGFjMzIx YWYyZWQ5ZDVmZTE3ZTkxZTdjOWVmYjAxZjQ0MDAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv6unzevdelPY7f78zh0jH80ojpQCdTKQgxsOIXN4oTJ6q qdHY5iP8++rnkrU9GNDTTk2wZXZMeS+0mgyLEXSM2RKtcQXJXRUwJA2/KUhAI0lt M3cafXVPwGgCV2ULnG+YKOO7swfYD0bT6g8eqzlHVj0FSeDN6Dvp6+7APeeBt7+3 g8qY8BXJVD+NMvnIehmQpskD+JNG/BHbpX5TOM3XlrLUYtUYQrT6QoKUNruaKLbe P4KVoA303Bal7WwKWVwyo4neOfmSV/27UNOXNgoYlJhCF1/IL7fUWykjtpr+TVpf mLdni5Jgb3f0eMew1wMWdE4hPI6fqGWGhWi9HfmlAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUpRz0PRWS7/9n5OYYgiQe+mwmVocwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEwZWVlNjZmLTI0ZDItNGQyMC1iN2YxLWQyZDQ2ODM4YzIzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vIDANBgkqhkiG9w0BAQsFAAOCAQEAyTi7DKMHvgw9phwoc235bKWl k+0E47fp9UUUz8in1TUT/W9Ni6FN8juZ2x4VGmIWmcKDOGIN3GexDv/rE1sVmY8G z1h9R5g2NTxcM50UIpupr+UHmxAt17dQ6ULNMysLSfiEeNpfl6nIDjwWuEXmt+jY THj77Lo7M5B0leVe9Oe4hC4fmmiHnOHO3dSNqcwXLPgQjCbpyRmgrH7/iR8lUxFe hS8UYClIuRtRV7Ef1dDW15vL6gNClodkXa6QimOF2HIYzSwbHfbrapzJ4k7+vCo3 BF2kdjvzHmE6JVTceCLCs2Ev6UTB7osqBIFegzUM4XwY+Mbe94eYA17cycexBw== -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:15 2025 by rpki-client