$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/145e8ade-e53b-4822-ba58-859cb08b66f9.roa File: 145e8ade-e53b-4822-ba58-859cb08b66f9.roa (raw, json) Hash identifier: m5QJaz6uZNnmcoPVR4GN4juZUj1qm2JXL7EsKE38Hz0= Subject key identifier: 27:E9:C2:51:40:E1:72:9D:C7:D6:B3:47:6F:47:A4:12:F9:10:32:1A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78448863E215CF4A1576F62A0F5802A839568629 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/145e8ade-e53b-4822-ba58-859cb08b66f9.roa Signing time: Mon 25 Aug 2025 16:52:05 +0000 ROA not before: Mon 25 Aug 2025 16:52:05 +0000 ROA not after: Mon 29 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffc:2c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:44:88:63:e2:15:cf:4a:15:76:f6:2a:0f:58:02:a8:39:56:86:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 16:52:05 2025 GMT Not After : Sep 29 23:59:59 2025 GMT Subject: serialNumber=7c45833ce657406082f114bfb20efc1b0a918f0acb41757945a648314b6de06c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:44:8c:32:c7:eb:9d:81:a6:a9:dd:9f:b5:b8: 77:f3:5c:9a:ee:49:f0:8a:4a:53:f3:6b:a1:28:5a: 32:fc:88:b3:c4:99:4a:18:46:f8:e3:8c:77:72:9e: 86:fd:1f:4b:8d:52:ec:34:6e:1b:ef:57:c9:ae:a5: d9:58:45:3a:b7:65:c2:16:9f:fb:8c:7a:b1:4e:55: 20:95:13:6f:3e:45:13:92:4d:73:e2:87:00:ce:3c: 43:61:55:1a:c3:c8:45:f3:c3:8e:6e:c3:7e:50:e9: 69:df:c6:ec:53:49:19:62:04:89:2f:ee:14:f7:6d: a0:9e:5f:dd:60:ec:6e:8d:44:e4:ed:8a:51:3e:2a: 0a:c5:b6:3c:ee:3f:26:a4:b2:e5:23:a9:ce:14:70: d9:3b:f1:8b:a4:c0:90:68:52:ad:0a:62:6d:ee:fb: c2:40:90:c0:87:3f:f5:09:17:f2:be:a1:21:67:2c: 3c:76:ff:ad:8c:44:7e:00:4e:9f:3c:eb:17:80:98: a8:c3:88:87:a5:94:c1:e8:28:82:38:ed:ed:d2:45: 0a:79:f7:b0:3e:cb:52:90:c5:8a:21:f0:ee:a2:27: 2a:b0:65:d6:27:04:d2:85:2c:29:a2:0a:ef:88:51: 1c:c4:61:19:ee:17:02:2c:aa:f4:2b:91:e3:6d:a2: 04:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E9:C2:51:40:E1:72:9D:C7:D6:B3:47:6F:47:A4:12:F9:10:32:1A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/145e8ade-e53b-4822-ba58-859cb08b66f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffc:2c00::/40 Signature Algorithm: sha256WithRSAEncryption 20:b8:5f:ea:24:51:21:c3:80:e6:9a:cb:77:ef:b9:a5:99:fd: 95:c7:04:6e:ac:8c:7c:44:ad:91:f5:a5:e0:b9:72:9d:fe:d7: 7d:da:3e:af:6c:3b:e8:17:d8:5b:73:45:2f:81:36:93:54:7b: 92:5b:89:85:60:bd:8f:b0:d2:eb:38:ac:f8:e0:2e:42:70:aa: cc:9b:5a:45:8d:43:38:bc:47:13:af:17:f0:aa:15:18:c2:5d: a6:70:00:ba:c2:70:d9:5c:57:b2:71:24:03:1a:3c:74:e5:47: 0a:82:d4:c6:9a:31:c3:c4:92:05:75:9e:ba:1d:92:a8:c6:7a: e8:0b:69:20:3e:79:72:b5:3a:cb:b5:e7:b1:8e:31:13:c0:cc: 2e:50:1f:6b:01:1e:97:43:08:89:08:5b:24:f0:7c:2f:3c:e9: 1c:2e:14:b0:0e:07:4e:4d:59:fa:80:0f:a3:b7:18:be:7a:26: e7:d5:e3:5a:02:28:cd:eb:f3:68:53:ea:41:f3:58:22:09:c8: c4:81:3e:95:c5:c7:92:47:42:d0:c2:2d:01:ff:d3:3b:d8:fb: 31:74:d2:95:b9:17:ef:ca:01:ed:d3:46:9d:4d:24:41:70:c7: 09:83:af:c2:08:6b:cc:0a:91:00:a4:ae:86:77:ed:07:54:48: fb:b5:f1:d1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUeESIY+IVz0oVdvYqD1gCqDlWhikwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI1MTY1MjA1WhcNMjUwOTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzQ1ODMzY2U2NTc0MDYwODJmMTE0YmZiMjBlZmMxYjBh OTE4ZjBhY2I0MTc1Nzk0NWE2NDgzMTRiNmRlMDZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrRIwyx+udgaap3Z+1uHfzXJruSfCKSlPza6EoWjL8iLPE mUoYRvjjjHdynob9H0uNUuw0bhvvV8mupdlYRTq3ZcIWn/uMerFOVSCVE28+RROS TXPihwDOPENhVRrDyEXzw45uw35Q6WnfxuxTSRliBIkv7hT3baCeX91g7G6NROTt ilE+KgrFtjzuPyaksuUjqc4UcNk78YukwJBoUq0KYm3u+8JAkMCHP/UJF/K+oSFn LDx2/62MRH4ATp886xeAmKjDiIellMHoKII47e3SRQp597A+y1KQxYoh8O6iJyqw ZdYnBNKFLCmiCu+IURzEYRnuFwIsqvQrkeNtogSNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUJ+nCUUDhcp3H1rNHb0ekEvkQMhowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE0NWU4YWRlLWU1M2ItNDgyMi1iYTU4LTg1OWNiMDhiNjZmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/8LDANBgkqhkiG9w0BAQsFAAOCAQEAILhf6iRRIcOA5prLd++5pZn9 lccEbqyMfEStkfWl4Llynf7Xfdo+r2w76BfYW3NFL4E2k1R7kluJhWC9j7DS6zis +OAuQnCqzJtaRY1DOLxHE68X8KoVGMJdpnAAusJw2VxXsnEkAxo8dOVHCoLUxpox w8SSBXWeuh2SqMZ66AtpID55crU6y7XnsY4xE8DMLlAfawEel0MIiQhbJPB8Lzzp HC4UsA4HTk1Z+oAPo7cYvnom59XjWgIozevzaFPqQfNYIgnIxIE+lcXHkkdC0MIt Af/TO9j7MXTSlbkX78oB7dNGnU0kQXDHCYOvwghrzAqRAKSuhnftB1RI+7Xx0Q== -----END CERTIFICATE-----Generated at Sat Sep 6 14:14:37 2025 by rpki-client